$ rpki-client -vvf rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft File: hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft (raw, json) Hash identifier: 9/Tp1y4h+44PwEz698lCNpX413gxVmZNnob6+9TbDtg= Subject key identifier: 46:72:C1:71:73:45:16:9C:2F:8D:BE:56:10:79:73:7D:46:0E:FB:33 Authority key identifier: 86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65 Certificate issuer: /CN=A919A8BE/serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565 Certificate serial: 0FE8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft Manifest number: 0FD2 Signing time: Sun 02 Nov 2025 17:31:04 +0000 Manifest this update: Sun 02 Nov 2025 17:31:04 +0000 Manifest next update: Sun 09 Nov 2025 17:31:04 +0000 Files and hashes: 1: hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl (hash: TQheIcHwa3D5woVms5ry09iXGfi97GysGvQ7BriHUg4=) 2: 28DA447C289B11EAA1EA9B53C4F9AE02.roa (hash: xqp4ztY1055hAOWGxzBB8IclFQx9Z0YAGfkQm9qw9nQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4072 (0xfe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A8BE, serialNumber=86F2EBB4C1E2E90AD9007C42036766258D548565 Validity Not Before: Nov 2 17:31:04 2025 GMT Not After : Nov 9 17:31:04 2025 GMT Subject: CN=69079558-e6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:97:fc:53:d4:ab:a5:a2:1a:dc:20:8c:29:50: f0:ae:df:4b:30:96:b8:72:e7:b8:a5:0c:c5:ec:d2: 62:a1:f4:31:9b:a7:eb:c2:db:c2:c7:c7:96:61:a1: 8b:dd:f6:6e:84:a0:20:61:d2:90:fd:f4:ca:fc:1a: ff:1f:9d:ca:95:3b:1d:d8:d1:49:4c:6c:02:f9:a5: f1:16:f8:71:fb:ab:b7:66:9f:a9:12:4e:22:69:86: 3f:d2:fa:e7:a5:20:0f:15:dd:ae:d2:d3:c0:b4:8d: 1a:78:c8:cd:a5:59:18:7e:49:57:cb:13:e4:6f:57: a9:15:1c:89:05:b5:47:67:4b:c7:51:a0:f4:62:87: 6d:4d:6f:45:13:35:83:13:33:20:37:d8:d8:83:42: 68:8c:ce:5a:b2:3e:ce:ce:ce:ea:98:c6:3f:64:e9: 60:f6:32:ea:0c:69:ac:51:de:bb:26:d0:b2:66:51: e1:ae:45:98:c9:1b:69:c7:e1:f7:66:ca:7c:ba:da: 60:55:a7:aa:51:42:0d:c3:26:2a:62:12:32:2d:2b: 55:9f:9a:f5:17:8e:e3:31:d1:b3:43:ec:4f:c4:42: e6:de:83:be:e1:40:9f:d1:5d:f4:0f:95:6b:b7:95: f3:1c:2d:cd:cc:96:31:1f:cb:8f:c3:5a:f5:8a:48: 37:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:72:C1:71:73:45:16:9C:2F:8D:BE:56:10:79:73:7D:46:0E:FB:33 X509v3 Authority Key Identifier: keyid:86:F2:EB:B4:C1:E2:E9:0A:D9:00:7C:42:03:67:66:25:8D:54:85:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hvLrtMHi6QrZAHxCA2dmJY1UhWU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A8BE/9019D120640111E98EF6DC6FC4F9AE02/hvLrtMHi6QrZAHxCA2dmJY1UhWU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6c:33:25:d5:38:38:ab:ec:b4:bd:46:dd:79:db:b4:1a:02: 28:07:14:d4:2e:c4:8f:d9:f9:ac:71:69:14:86:46:89:9e:0c: 87:a3:3d:9a:be:73:02:4c:f8:72:98:ad:17:95:83:fa:49:c5: 6a:d5:c0:42:6e:4d:85:90:b3:0b:7c:6b:87:60:4a:30:2a:41: 18:0a:a3:c7:a9:9e:2f:3f:20:c1:4f:20:71:dd:72:57:17:a7: a9:55:8f:e3:ea:1f:a4:96:7c:4b:83:5f:87:d4:b3:0f:cf:17: b1:cc:b9:08:30:41:d7:99:5d:74:93:24:b3:b7:3c:60:09:e6: 1c:bf:1b:df:82:9e:c0:5d:98:29:e4:1e:da:55:11:1b:8c:4b: 2d:84:4d:88:11:0d:33:29:2e:d8:57:42:6b:9b:af:88:0b:f5: 51:13:3f:d5:00:32:86:ac:fe:71:23:50:1e:d0:2a:51:cf:36: 03:9a:3c:ba:7f:77:20:63:f1:ab:e1:02:5f:7d:d1:61:ba:aa: f4:01:c3:b2:9e:88:1b:4f:21:95:77:57:e1:0c:e6:1a:11:bf: 77:5e:89:7c:a2:65:ee:0d:e8:17:21:c0:e1:c6:56:72:f0:05: a1:b0:4c:89:32:2f:83:eb:0d:99:ac:af:98:f7:92:7e:e6:f2: c5:4e:64:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE4QkUxMTAvBgNVBAUTKDg2RjJFQkI0QzFFMkU5MEFEOTAwN0M0MjAzNjc2NjI1 OEQ1NDg1NjUwHhcNMjUxMTAyMTczMTA0WhcNMjUxMTA5MTczMTA0WjAYMRYwFAYD VQQDEw02OTA3OTU1OC1lNmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Jf8U9SrpaIa3CCMKVDwrt9LMJa4cue4pQzF7NJiofQxm6frwtvCx8eWYaGL 3fZuhKAgYdKQ/fTK/Br/H53KlTsd2NFJTGwC+aXxFvhx+6u3Zp+pEk4iaYY/0vrn pSAPFd2u0tPAtI0aeMjNpVkYfklXyxPkb1epFRyJBbVHZ0vHUaD0YodtTW9FEzWD EzMgN9jYg0JojM5asj7Ozs7qmMY/ZOlg9jLqDGmsUd67JtCyZlHhrkWYyRtpx+H3 Zsp8utpgVaeqUUINwyYqYhIyLStVn5r1F47jMdGzQ+xPxELm3oO+4UCf0V30D5Vr t5XzHC3NzJYxH8uPw1r1ikg3XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZywXFz RRacL42+VhB5c31GDvszMB8GA1UdIwQYMBaAFIby67TB4ukK2QB8QgNnZiWNVIVl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QThCRS85MDE5RDEyMDY0 MDExMUU5OEVGNkRDNkZDNEY5QUUwMi9odkxydE1IaTZRclpBSHhDQTJkbUpZMVVo V1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2h2THJ0TUhpNlFyWkFIeENBMmRtSlkxVWhXVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QThCRS85MDE5RDEyMDY0MDExMUU5OEVGNkRDNkZDNEY5QUUwMi9odkxydE1IaTZR clpBSHhDQTJkbUpZMVVoV1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbbDMl1Tg4q+y0vUbdedu0GgIoBxTULsSP2fmscWkUhkaJngyHoz2a vnMCTPhymK0XlYP6ScVq1cBCbk2FkLMLfGuHYEowKkEYCqPHqZ4vPyDBTyBx3XJX F6epVY/j6h+klnxLg1+H1LMPzxexzLkIMEHXmV10kySztzxgCeYcvxvfgp7AXZgp 5B7aVREbjEsthE2IEQ0zKS7YV0Jrm6+IC/VREz/VADKGrP5xI1Ae0CpRzzYDmjy6 f3cgY/Gr4QJffdFhuqr0AcOynogbTyGVd1fhDOYaEb93Xol8omXuDegXIcDhxlZy 8AWhsEyJMi+D6w2ZrK+Y95J+5vLFTmQd -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:03 2025 by rpki-client