$ rpki-client -vvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft File: hdbxhJPYoIzHKxsJHUr1T48KKLM.mft (raw, json) Hash identifier: orrZcHp/PsMIK0Vl7wfJJS8XQczzvgPdYexVfvV5DRY= Subject key identifier: 94:1A:E2:16:56:60:49:52:3C:49:FC:CC:CA:1E:CB:91:6E:FA:C3:1C Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 Certificate issuer: /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Certificate serial: 06A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft Manifest number: 069F Signing time: Sat 18 Oct 2025 23:50:10 +0000 Manifest this update: Sat 18 Oct 2025 23:50:09 +0000 Manifest next update: Sat 25 Oct 2025 23:50:09 +0000 Files and hashes: 1: hdbxhJPYoIzHKxsJHUr1T48KKLM.crl (hash: da/eTMqpZlgTK5gjahmABuradCNtFWxmot9TmadqvAc=) 2: F66F50628A9C11EB9B2E044BC4F9AE02.roa (hash: hWP/crnjmiKRkQxu0624FvYvc5uF2iF9vYd33TXrr/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125225, serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Validity Not Before: Oct 18 23:50:09 2025 GMT Not After : Oct 25 23:50:09 2025 GMT Subject: CN=68f427b1-7592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:bf:be:18:51:b4:b0:00:dd:81:ce:f0:55: 80:9b:71:f9:7b:7c:75:79:fe:fc:fb:bf:15:7e:fd: 3e:78:b6:83:62:82:e7:e5:f8:e4:01:5a:c5:1f:16: 28:17:9f:6e:5a:e9:eb:de:d6:90:b8:11:97:0b:91: 0e:61:dc:a8:a0:3d:6b:99:26:a5:9c:0a:58:9f:60: 11:9c:13:00:a3:f5:0f:cd:bb:cc:e9:e1:53:b8:15: c9:d2:ed:ab:47:1a:fa:da:fa:3d:0b:34:54:47:f4: d2:b9:9b:70:03:11:82:e5:08:c9:54:8a:ae:2d:74: a3:3e:53:7f:90:23:55:03:6b:0e:80:d8:a9:7b:b0: 07:12:0a:2b:19:6f:8a:c2:5b:ba:d2:3f:9b:4f:30: 6b:f9:ad:90:cb:34:de:d0:e5:85:90:0c:c7:82:92: 5f:b7:43:78:ea:ac:f9:15:5c:b8:8c:b5:7c:09:1f: 93:c6:53:66:ea:12:07:09:79:c9:1f:7b:07:9c:26: 89:b8:2b:55:1a:dc:80:17:4b:ae:10:97:15:b3:20: 8b:ef:3e:d3:0b:9f:41:79:6f:3a:a7:89:46:e3:7e: 0b:0a:f6:f9:54:f7:85:86:e8:fd:d8:0b:c9:1e:b6: 81:10:78:e4:57:3b:a2:fc:15:c0:23:e6:0f:ab:95: 7a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1A:E2:16:56:60:49:52:3C:49:FC:CC:CA:1E:CB:91:6E:FA:C3:1C X509v3 Authority Key Identifier: keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:4e:67:3b:a3:bb:00:be:fc:50:c6:ac:80:67:e0:b7:d1:d4: 8e:67:5d:6f:f8:b4:80:79:4e:8a:45:f0:ea:f4:ce:5b:22:37: 39:bb:73:28:b3:32:2f:b7:74:7a:de:d5:90:21:4b:65:bc:b3: f3:75:e9:a0:9f:8d:99:35:67:ce:85:15:8f:b8:4e:52:7d:08: 83:9e:b5:31:a3:50:d8:08:92:c4:7d:d8:e0:50:ca:f3:f0:01: 28:31:6d:cf:09:be:f4:4b:86:6c:94:12:1c:9a:21:f6:d8:7b: 9e:5b:b9:39:c7:c0:28:9f:a2:ff:3d:2a:42:6b:5c:d8:06:b1: b5:36:ac:92:8f:f2:c1:a3:be:84:9a:24:bc:ac:c0:54:02:50: 7a:0f:39:07:e4:1f:2f:69:33:78:49:9d:62:f0:c0:14:22:38: a9:09:d6:69:98:8e:1e:87:13:b5:78:fb:4e:a4:8d:f5:c8:86: 47:3c:dd:53:bf:c0:90:32:60:2a:bc:3f:2f:3e:d6:8b:4a:6b: 3b:35:f6:25:22:22:77:8e:b7:0e:16:f8:29:37:10:6a:fe:4f: c0:4a:6c:3c:f1:87:a2:aa:a1:99:1e:db:d3:9a:77:f6:9f:ba: 77:5d:51:d0:45:99:71:48:12:37:90:f2:29:79:37:d6:b7:8c: 48:14:4b:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyMjUxMTAvBgNVBAUTKDg1RDZGMTg0OTNEOEEwOENDNzJCMUIwOTFENEFGNTRG OEYwQTI4QjMwHhcNMjUxMDE4MjM1MDA5WhcNMjUxMDI1MjM1MDA5WjAYMRYwFAYD VQQDEw02OGY0MjdiMS03NTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs66/vhhRtLAA3YHO8FWAm3H5e3x1ef78+78Vfv0+eLaDYoLn5fjkAVrFHxYo F59uWunr3taQuBGXC5EOYdyooD1rmSalnApYn2ARnBMAo/UPzbvM6eFTuBXJ0u2r Rxr62vo9CzRUR/TSuZtwAxGC5QjJVIquLXSjPlN/kCNVA2sOgNipe7AHEgorGW+K wlu60j+bTzBr+a2QyzTe0OWFkAzHgpJft0N46qz5FVy4jLV8CR+TxlNm6hIHCXnJ H3sHnCaJuCtVGtyAF0uuEJcVsyCL7z7TC59BeW86p4lG434LCvb5VPeFhuj92AvJ HraBEHjkVzui/BXAI+YPq5V6OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQa4hZW YElSPEn8zMoey5Fu+sMcMB8GA1UdIwQYMBaAFIXW8YST2KCMxysbCR1K9U+PCiiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTIyNS9DQTY5MDQ0MjhB OUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9JekhLeHNKSFVyMVQ0OEtL TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hkYnhoSlBZb0l6SEt4c0pIVXIxVDQ4S0tMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTIyNS9DQTY5MDQ0MjhBOUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9J ekhLeHNKSFVyMVQ0OEtLTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeTmc7o7sAvvxQxqyAZ+C30dSOZ11v+LSAeU6KRfDq9M5bIjc5u3Mo szIvt3R63tWQIUtlvLPzdemgn42ZNWfOhRWPuE5SfQiDnrUxo1DYCJLEfdjgUMrz 8AEoMW3PCb70S4ZslBIcmiH22HueW7k5x8Aon6L/PSpCa1zYBrG1NqySj/LBo76E miS8rMBUAlB6DzkH5B8vaTN4SZ1i8MAUIjipCdZpmI4ehxO1ePtOpI31yIZHPN1T v8CQMmAqvD8vPtaLSms7NfYlIiJ3jrcOFvgpNxBq/k/ASmw88YeiqqGZHtvTmnf2 n7p3XVHQRZlxSBI3kPIpeTfWt4xIFEsF -----END CERTIFICATE-----Generated at Mon Oct 20 05:49:06 2025 by rpki-client