$ rpki-client -vvf rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft File: h7LA6ClUHS71JmOF6zlGuNUpBgg.mft (raw, json) Hash identifier: lH/ArNEFmvX095tWzGdUHoLWIVKfqP/YTPtIJ+rmbZQ= Subject key identifier: FF:2D:64:3C:97:A6:37:A3:E5:70:18:F7:C0:48:3D:D9:0B:AD:95:CE Authority key identifier: 87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08 Certificate issuer: /CN=A911B5B0/serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608 Certificate serial: 089B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft Manifest number: 0875 Signing time: Sat 18 Oct 2025 21:52:42 +0000 Manifest this update: Sat 18 Oct 2025 21:52:42 +0000 Manifest next update: Sat 25 Oct 2025 21:52:42 +0000 Files and hashes: 1: h7LA6ClUHS71JmOF6zlGuNUpBgg.crl (hash: PdHh9yYPg+iBuJx6QU/5vEoBtqvV+fnBRurTwaOSzSM=) 2: 3619A9DA67B411F097A2770AC4F9AE02.roa (hash: NovEF3NdDvqF9F8b0/ZT82vbbHXVaw622xvGyH6ZWPU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2203 (0x89b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911B5B0, serialNumber=87B2C0E829541D2EF5266385EB3946B8D5290608 Validity Not Before: Oct 18 21:52:42 2025 GMT Not After : Oct 25 21:52:42 2025 GMT Subject: CN=68f40c2a-f8bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:07:81:da:98:d6:ab:e7:62:66:f3:e2:41:04: e5:c6:f4:af:b3:c8:ac:c7:58:2f:e7:32:fa:d1:45: 9d:18:3a:8c:5d:35:cb:49:a5:85:30:9e:8f:64:a3: b7:02:f5:f3:29:14:44:5e:7f:c3:bd:22:b2:80:a4: 52:d8:7c:81:57:cc:bd:52:f7:be:5a:37:20:4b:dc: 6d:8a:8b:87:49:3b:7d:55:6f:18:4c:4a:79:7f:ca: 35:33:fe:5c:ed:2b:38:73:8d:05:6b:de:38:b5:90: 63:2b:bd:86:0b:ab:0f:49:3b:eb:04:d2:96:27:6f: 26:88:d6:a8:c0:04:43:ca:38:14:36:34:41:a5:ca: b0:b2:15:f8:a4:65:bd:c1:82:4c:d6:f5:e7:fa:e4: ff:5f:ce:1e:78:9f:c7:df:8c:83:74:56:f9:30:f4: b0:31:fe:31:eb:4b:df:f7:7a:eb:f5:3e:e1:76:be: 7d:d3:41:24:c1:03:6a:70:59:8b:ce:ee:dc:f4:58: ec:36:50:0e:58:93:60:2b:a2:96:0f:00:06:67:12: be:7d:b4:0d:f4:b4:34:66:12:92:c1:bc:57:5c:85: b6:48:3c:84:24:1d:7b:ac:8f:d6:76:da:a2:ef:5b: 78:b7:6e:82:5b:20:89:4b:b5:15:29:ee:c8:97:03: 96:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2D:64:3C:97:A6:37:A3:E5:70:18:F7:C0:48:3D:D9:0B:AD:95:CE X509v3 Authority Key Identifier: keyid:87:B2:C0:E8:29:54:1D:2E:F5:26:63:85:EB:39:46:B8:D5:29:06:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7LA6ClUHS71JmOF6zlGuNUpBgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B5B0/A2DF4CECDD4D11EABB76967BC4F9AE02/h7LA6ClUHS71JmOF6zlGuNUpBgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:1a:9b:99:6e:f1:71:75:d3:4a:d0:5b:9f:32:5e:c0:15:ef: 01:3c:82:16:d3:30:38:05:7b:67:ab:b4:e2:be:78:ac:61:5f: 79:22:88:eb:db:25:3d:7c:6f:e4:23:2f:e6:24:7e:9e:8b:a3: 07:32:dc:de:81:7b:13:69:2a:5d:75:ee:77:27:2e:d7:13:71: 68:c7:01:87:be:f5:e5:60:8e:8e:1f:3e:9e:7f:44:1b:99:d0: 8a:b4:8b:1e:47:9e:d7:40:b8:67:ca:62:8b:17:37:b7:f0:fd: 2c:cd:ce:b1:2a:00:e7:03:12:c8:c9:26:e1:30:1e:61:1f:8a: c4:76:39:c5:ee:14:00:7b:16:2f:b0:da:8d:15:de:2b:0a:8e: 82:b5:d5:b4:fa:c6:37:1b:89:89:43:73:a3:35:4c:55:9c:44: 36:b1:ad:9f:b4:61:9b:03:4c:c1:3b:72:d2:55:d9:6d:95:c5: dd:77:9e:7c:b6:6e:0d:cd:55:40:2e:92:8b:8e:cd:59:26:2f: b5:3b:c3:52:72:99:bb:3d:88:f4:c1:2f:9a:33:9b:02:cd:de: da:6d:52:33:3d:14:92:3f:3a:0e:e8:4c:9d:1a:36:a0:46:66: ca:0f:c1:4c:bc:fc:e6:a0:55:c6:1d:bb:10:5a:e7:fd:26:50: 92:85:cf:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUI1QjAxMTAvBgNVBAUTKDg3QjJDMEU4Mjk1NDFEMkVGNTI2NjM4NUVCMzk0NkI4 RDUyOTA2MDgwHhcNMjUxMDE4MjE1MjQyWhcNMjUxMDI1MjE1MjQyWjAYMRYwFAYD VQQDEw02OGY0MGMyYS1mOGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlgeB2pjWq+diZvPiQQTlxvSvs8isx1gv5zL60UWdGDqMXTXLSaWFMJ6PZKO3 AvXzKRREXn/DvSKygKRS2HyBV8y9Uve+WjcgS9xtiouHSTt9VW8YTEp5f8o1M/5c 7Ss4c40Fa944tZBjK72GC6sPSTvrBNKWJ28miNaowARDyjgUNjRBpcqwshX4pGW9 wYJM1vXn+uT/X84eeJ/H34yDdFb5MPSwMf4x60vf93rr9T7hdr5900EkwQNqcFmL zu7c9FjsNlAOWJNgK6KWDwAGZxK+fbQN9LQ0ZhKSwbxXXIW2SDyEJB17rI/Wdtqi 71t4t26CWyCJS7UVKe7IlwOW8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8tZDyX pjej5XAY98BIPdkLrZXOMB8GA1UdIwQYMBaAFIeywOgpVB0u9SZjhes5RrjVKQYI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjVCMC9BMkRGNENFQ0RE NEQxMUVBQkI3Njk2N0JDNEY5QUUwMi9oN0xBNkNsVUhTNzFKbU9GNnpsR3VOVXBC Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3TEE2Q2xVSFM3MUptT0Y2emxHdU5VcEJnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QjVCMC9BMkRGNENFQ0RENEQxMUVBQkI3Njk2N0JDNEY5QUUwMi9oN0xBNkNsVUhT NzFKbU9GNnpsR3VOVXBCZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQGpuZbvFxddNK0FufMl7AFe8BPIIW0zA4BXtnq7TivnisYV95Iojr 2yU9fG/kIy/mJH6ei6MHMtzegXsTaSpdde53Jy7XE3FoxwGHvvXlYI6OHz6ef0Qb mdCKtIseR57XQLhnymKLFze38P0szc6xKgDnAxLIySbhMB5hH4rEdjnF7hQAexYv sNqNFd4rCo6CtdW0+sY3G4mJQ3OjNUxVnEQ2sa2ftGGbA0zBO3LSVdltlcXdd558 tm4NzVVALpKLjs1ZJi+1O8NScpm7PYj0wS+aM5sCzd7abVIzPRSSPzoO6EydGjag RmbKD8FMvPzmoFXGHbsQWuf9JlCShc+N -----END CERTIFICATE-----Generated at Mon Oct 20 12:10:52 2025 by rpki-client