$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft File: H9I4pw6sem_8a5CrMM77dzkhb0o.mft (raw, json) Hash identifier: gCwm3MNAyHoCwOJAm21pws3t4ZGB+2GdVncOS0Bzpfw= Subject key identifier: 9D:87:1D:49:85:76:EA:AA:A2:F4:F1:58:6B:0E:98:45:69:8B:4C:2F Authority key identifier: 1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A Certificate issuer: /CN=A913DD09/serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft Manifest number: 33 Signing time: Sun 19 Oct 2025 11:07:55 +0000 Manifest this update: Sun 19 Oct 2025 11:07:54 +0000 Manifest next update: Sun 26 Oct 2025 11:07:54 +0000 Files and hashes: 1: H9I4pw6sem_8a5CrMM77dzkhb0o.crl (hash: 7nlooNXsewM/QBJY9BNxnXeYSmKO3z/O7IQmmRxJMbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD09, serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A Validity Not Before: Oct 19 11:07:54 2025 GMT Not After : Oct 26 11:07:54 2025 GMT Subject: CN=68f4c68b-9087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e1:f2:dd:5e:69:78:f5:4c:1c:8b:09:7e:b2: 7a:ff:28:19:66:fd:a0:af:b8:1c:73:e9:19:1f:96: fd:62:80:f9:5c:f2:03:82:91:2d:5e:2a:a3:ea:37: 2f:18:03:79:b4:19:d3:03:52:16:6d:cd:10:d1:5d: 46:5d:07:d1:f7:dd:da:02:25:59:9a:c3:77:ae:47: 56:f6:3c:cd:26:18:21:b5:99:82:1a:5c:ef:c4:74: 31:52:f9:d9:2d:77:31:f9:12:c9:aa:75:52:3f:c3: 90:aa:18:30:d9:2b:e1:5c:09:cd:e0:ae:01:95:06: b1:9f:75:88:a6:82:a2:50:30:e7:a7:10:81:9b:29: 40:fd:fe:03:5d:cd:61:53:e5:03:04:ed:70:ca:5e: d5:57:e5:c9:fc:75:36:b0:09:7d:04:14:b9:3e:f0: b5:96:d8:ea:84:36:63:42:5f:6a:20:27:3a:da:53: 86:8a:6c:70:6e:a8:32:54:3e:61:35:0b:0d:e1:5c: c0:94:ec:db:75:3b:d1:1b:cb:c5:3e:6c:3c:82:60: 4a:4d:ae:61:92:ae:b2:a5:c1:d2:1e:72:ac:ed:fc: 5f:91:a4:e3:52:74:9c:7d:41:ab:9e:c9:ef:70:00: f3:ca:b2:3a:a2:e9:09:6d:37:0f:c4:ca:b0:c7:5b: d9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:87:1D:49:85:76:EA:AA:A2:F4:F1:58:6B:0E:98:45:69:8B:4C:2F X509v3 Authority Key Identifier: keyid:1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:37:e8:08:94:1f:5c:80:00:a0:c5:c1:6e:20:84:5e:40:4d: a1:06:6d:cd:ca:48:6a:62:2c:1a:16:12:9b:51:e7:42:b7:71: b5:3c:8a:58:9f:f5:94:f7:0d:76:71:d3:6d:18:82:8b:f3:22: c6:07:29:e8:69:d6:84:a7:cc:0e:6b:b6:27:69:6f:de:8f:21: ff:76:8a:1f:ec:33:ed:50:85:e7:ce:66:34:f6:44:5a:46:25: c5:8b:68:9b:21:f0:9e:0f:aa:99:00:3c:62:ac:bd:cf:58:52: 0a:8a:61:c6:73:1a:8c:90:8f:ae:86:92:8c:7c:07:7b:4c:9f: 45:ca:87:df:a0:3c:14:67:ad:f9:a4:78:1b:7c:af:6f:20:0e: b8:e3:8d:d0:b0:ec:86:21:16:b0:48:de:b2:47:f0:92:39:76: 82:6e:c7:6b:f5:6d:08:fc:7d:07:3e:70:ef:ad:3e:c6:54:26: a2:a5:ef:11:27:31:2e:41:3a:a7:c8:14:5a:61:5b:fc:ef:59: 6d:03:32:e8:df:47:4b:a4:b8:68:32:b1:95:66:b6:d9:51:d9: 4e:02:67:43:8d:86:45:9f:85:ce:a5:dd:6b:b2:75:4a:88:3b: bb:d0:e0:36:78:c6:60:dd:58:51:81:ea:e7:a3:be:61:56:49: 1f:38:04:c3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REQwOTExMC8GA1UEBRMoMUZEMjM4QTcwRUFDN0E2RkZDNkI5MEFCMzBDRUZCNzcz OTIxNkY0QTAeFw0yNTEwMTkxMTA3NTRaFw0yNTEwMjYxMTA3NTRaMBgxFjAUBgNV BAMTDTY4ZjRjNjhiLTkwODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDF4fLdXml49Uwciwl+snr/KBlm/aCvuBxz6Rkflv1igPlc8gOCkS1eKqPqNy8Y A3m0GdMDUhZtzRDRXUZdB9H33doCJVmaw3euR1b2PM0mGCG1mYIaXO/EdDFS+dkt dzH5EsmqdVI/w5CqGDDZK+FcCc3grgGVBrGfdYimgqJQMOenEIGbKUD9/gNdzWFT 5QME7XDKXtVX5cn8dTawCX0EFLk+8LWW2OqENmNCX2ogJzraU4aKbHBuqDJUPmE1 Cw3hXMCU7Nt1O9Eby8U+bDyCYEpNrmGSrrKlwdIecqzt/F+RpONSdJx9Qaueye9w APPKsjqi6QltNw/EyrDHW9krAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnYcdSYV2 6qqi9PFYaw6YRWmLTC8wHwYDVR0jBBgwFoAUH9I4pw6sem/8a5CrMM77dzkhb0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNERDA5LzcwQzEwNzYwNjIy QjExRjBCRTUyOEIxRkM0RjlBRTAyL0g5STRwdzZzZW1fOGE1Q3JNTTc3ZHpraGIw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSDlJNHB3NnNlbV84YTVDck1NNzdkemtoYjBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE RDA5LzcwQzEwNzYwNjIyQjExRjBCRTUyOEIxRkM0RjlBRTAyL0g5STRwdzZzZW1f OGE1Q3JNTTc3ZHpraGIwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF436AiUH1yAAKDFwW4ghF5ATaEGbc3KSGpiLBoWEptR50K3cbU8ilif 9ZT3DXZx020YgovzIsYHKehp1oSnzA5rtidpb96PIf92ih/sM+1QhefOZjT2RFpG JcWLaJsh8J4PqpkAPGKsvc9YUgqKYcZzGoyQj66Gkox8B3tMn0XKh9+gPBRnrfmk eBt8r28gDrjjjdCw7IYhFrBI3rJH8JI5doJux2v1bQj8fQc+cO+tPsZUJqKl7xEn MS5BOqfIFFphW/zvWW0DMujfR0ukuGgysZVmttlR2U4CZ0ONhkWfhc6l3WuydUqI O7vQ4DZ4xmDdWFGB6uejvmFWSR84BMM= -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:33 2025 by rpki-client