$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft File: H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft (raw, json) Hash identifier: 8K/VYKF2EN5x5l4gqpzvAFrwIMSBkZwVkMD0SYAG7w4= Subject key identifier: 2D:35:D8:5F:04:0B:24:91:EC:CF:12:7E:2D:74:ED:B3:88:43:F2:52 Authority key identifier: 1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 Certificate issuer: /CN=A91C3ED8/serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft Manifest number: 0223 Signing time: Wed 05 Nov 2025 02:11:47 +0000 Manifest this update: Wed 05 Nov 2025 02:11:46 +0000 Manifest next update: Wed 12 Nov 2025 02:11:46 +0000 Files and hashes: 1: H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl (hash: XtE4XfTpJnvjxvux6hoy/00Ccv5MW1ghDm2SV6IVrt0=) 2: 51CC97DE72D711ED95179B5EC4F9AE02.roa (hash: k1Zwpv5X+PU26A87kFtIjFMNyUjqNWGBGW/MolkeBNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:11:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3ED8, serialNumber=1FDF88B359F448ED4C712F9F157D083CC2114C14 Validity Not Before: Nov 5 02:11:46 2025 GMT Not After : Nov 12 02:11:46 2025 GMT Subject: CN=690ab262-618c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e4:01:12:5c:e7:c3:3c:19:d5:99:3d:7e:03: e0:04:10:53:9d:41:85:55:22:8b:d5:f1:a1:8c:c5: 14:19:ef:e0:78:20:e4:f1:a2:07:eb:77:49:55:c1: e1:2f:6d:ef:27:fe:df:f9:3d:03:62:fa:e3:25:fb: a7:4a:2f:87:5e:37:04:1f:46:1a:81:07:bb:40:87: cc:ce:a1:e4:13:d9:47:d4:09:61:cc:c3:44:92:2f: cd:06:b1:6d:0f:fa:3d:6c:27:4c:b8:49:04:a4:c0: 60:f8:6d:6d:fe:68:3b:24:dc:95:f7:3c:3a:51:71: 78:16:33:e0:62:9d:dd:64:6d:59:dd:6d:08:d0:1c: 93:10:a4:eb:2d:27:da:e5:e7:8c:22:c3:e4:8e:81: e8:0a:89:f9:85:b1:73:1b:2c:4e:da:87:bf:6a:94: 91:71:51:5a:60:97:9b:9a:19:44:9d:b7:72:17:80: 35:93:d7:7a:b0:05:63:8f:2d:46:29:8d:2d:5b:d0: 2d:45:44:61:ab:e5:f7:ad:15:8b:27:97:43:06:5c: cf:57:f4:94:12:ac:88:8e:f6:83:33:58:94:fa:da: 1a:7e:ee:7f:ee:b7:22:04:53:b4:65:6c:d1:bf:ac: 60:e9:34:98:50:31:42:e2:49:a9:17:67:21:35:1d: a6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:35:D8:5F:04:0B:24:91:EC:CF:12:7E:2D:74:ED:B3:88:43:F2:52 X509v3 Authority Key Identifier: keyid:1F:DF:88:B3:59:F4:48:ED:4C:71:2F:9F:15:7D:08:3C:C2:11:4C:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9-Is1n0SO1McS-fFX0IPMIRTBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3ED8/3C5533AE72D511ED95F5595EC4F9AE02/H9-Is1n0SO1McS-fFX0IPMIRTBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:fd:7a:10:42:2f:e0:94:99:02:d5:b3:7a:50:58:4b:cd:05: c8:39:5f:86:10:1a:c9:c2:3d:ae:ad:aa:e2:fc:fa:26:f8:ee: 72:fd:2a:9f:1d:12:56:5b:b7:40:90:1d:c0:7b:f0:f0:aa:cd: 91:e8:f7:b3:7c:ef:fd:37:f6:e1:d2:55:73:a1:5d:a3:78:35: 3f:c3:90:26:5b:39:83:60:9d:47:63:84:68:5a:91:fc:f8:ee: a3:62:fc:03:bc:d9:27:ef:5d:4f:fd:d4:3e:26:35:fd:0e:4b: 5f:3c:23:90:59:ad:b6:af:07:b4:65:67:70:a1:29:a9:56:8d: 29:71:6b:70:25:1a:ff:31:d8:b2:42:38:06:e1:71:c7:4a:9e: e7:c8:3b:62:c5:e5:f0:f9:34:c6:fe:2a:20:d5:1c:aa:49:d9: fd:89:17:14:88:19:31:7c:64:60:2a:08:30:99:3e:91:24:9a: e6:cf:dd:9b:52:ff:e9:80:08:8a:06:e6:75:d0:b1:53:06:83: 20:b9:4c:e5:d1:3c:97:71:89:57:0c:51:a2:24:07:4d:b1:b0: 26:8f:0b:09:96:49:12:8c:e9:a8:40:05:f1:d8:1c:f8:02:84: e7:b9:37:fd:47:86:26:03:1d:4c:e9:76:36:d0:b0:95:bf:8b: d5:51:5f:eb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRDgxMTAvBgNVBAUTKDFGREY4OEIzNTlGNDQ4RUQ0QzcxMkY5RjE1N0QwODND QzIxMTRDMTQwHhcNMjUxMTA1MDIxMTQ2WhcNMjUxMTEyMDIxMTQ2WjAYMRYwFAYD VQQDEw02OTBhYjI2Mi02MThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuQBElznwzwZ1Zk9fgPgBBBTnUGFVSKL1fGhjMUUGe/geCDk8aIH63dJVcHh L23vJ/7f+T0DYvrjJfunSi+HXjcEH0YagQe7QIfMzqHkE9lH1AlhzMNEki/NBrFt D/o9bCdMuEkEpMBg+G1t/mg7JNyV9zw6UXF4FjPgYp3dZG1Z3W0I0ByTEKTrLSfa 5eeMIsPkjoHoCon5hbFzGyxO2oe/apSRcVFaYJebmhlEnbdyF4A1k9d6sAVjjy1G KY0tW9AtRURhq+X3rRWLJ5dDBlzPV/SUEqyIjvaDM1iU+toafu5/7rciBFO0ZWzR v6xg6TSYUDFC4kmpF2chNR2mMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC012F8E CySR7M8Sfi107bOIQ/JSMB8GA1UdIwQYMBaAFB/fiLNZ9EjtTHEvnxV9CDzCEUwU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VEOC8zQzU1MzNBRTcy RDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNPMU1jUy1mRlgwSVBNSVJU QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5LUlzMW4wU08xTWNTLWZGWDBJUE1JUlRCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VEOC8zQzU1MzNBRTcyRDUxMUVEOTVGNTU5NUVDNEY5QUUwMi9IOS1JczFuMFNP MU1jUy1mRlgwSVBNSVJUQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR/XoQQi/glJkC1bN6UFhLzQXIOV+GEBrJwj2urari/Pom+O5y/Sqf HRJWW7dAkB3Ae/Dwqs2R6PezfO/9N/bh0lVzoV2jeDU/w5AmWzmDYJ1HY4RoWpH8 +O6jYvwDvNkn711P/dQ+JjX9DktfPCOQWa22rwe0ZWdwoSmpVo0pcWtwJRr/Mdiy QjgG4XHHSp7nyDtixeXw+TTG/iog1RyqSdn9iRcUiBkxfGRgKggwmT6RJJrmz92b Uv/pgAiKBuZ10LFTBoMguUzl0TyXcYlXDFGiJAdNsbAmjwsJlkkSjOmoQAXx2Bz4 AoTnuTf9R4YmAx1M6XY20LCVv4vVUV/r -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:43 2025 by rpki-client