$ rpki-client -vvf rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft File: -HfnZ8AkHlKW_jMylZne-j0toUE.mft (raw, json) Hash identifier: 8UMPvzIqxfNyF5N2Jex1DTm5OdgrufDTl4VLywPxsJ4= Subject key identifier: 74:C2:0D:AD:A4:77:3B:74:5F:D3:D8:38:4B:AC:B5:29:55:3F:9D:C9 Authority key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 Certificate issuer: /CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Certificate serial: 0BCF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft Manifest number: 0BC9 Signing time: Sat 18 Oct 2025 19:44:27 +0000 Manifest this update: Sat 18 Oct 2025 19:44:27 +0000 Manifest next update: Sat 25 Oct 2025 19:44:27 +0000 Files and hashes: 1: -HfnZ8AkHlKW_jMylZne-j0toUE.crl (hash: ugF0J68fbbI56S5PTrBgFL7eBE5RzMqf5NL/wyr2GLM=) 2: 60875A5C2A3711EABEA9BF73C4F9AE02.roa (hash: FdLJ06PTZOyh+KSk/zuzof+cUbbR4MXj/mg8yL1Rn9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3023 (0xbcf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145515, serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Validity Not Before: Oct 18 19:44:27 2025 GMT Not After : Oct 25 19:44:27 2025 GMT Subject: CN=68f3ee1b-7fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:00:85:f0:d0:4f:e0:f4:2e:67:fe:e7:04:87: 4b:d6:da:22:f7:31:73:99:bb:27:b1:0f:fe:94:ba: 4b:11:63:db:30:83:7e:b3:38:97:8b:de:df:b9:08: f2:43:ff:c9:f8:ce:7a:b6:ae:48:be:d4:e0:e5:f4: 06:b7:df:ee:87:3d:81:36:df:a0:45:20:96:06:02: 81:57:60:16:5e:b6:26:ec:94:02:b8:bc:b0:be:82: 35:e9:64:8d:90:37:a4:66:bb:6b:03:e6:6e:9c:a8: e9:39:bf:a1:14:8f:b6:46:8b:bf:f9:b2:69:87:b9: 97:ed:9d:7e:7e:68:ab:a1:28:58:dd:dc:33:6b:5b: 23:61:e3:95:83:1c:fe:6f:94:1d:c1:2f:ab:0d:28: 79:7e:c3:7f:84:35:78:0b:25:23:73:2c:60:ea:e3: dd:5b:d5:1e:91:51:30:aa:89:b2:34:cf:ec:75:e6: be:d6:9a:f4:bd:67:f3:df:75:ab:15:3f:1e:ae:f7: b3:5c:84:07:b6:1a:74:9a:74:c9:05:25:6a:54:64: 95:91:99:a0:2c:e0:a4:b9:ee:a9:d2:3f:b7:24:c9: e9:ad:ce:17:2c:06:93:f5:e1:8e:fe:cc:28:cb:c0: 22:93:9c:8c:b4:29:0f:b7:9c:23:d7:41:84:c4:2f: 74:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C2:0D:AD:A4:77:3B:74:5F:D3:D8:38:4B:AC:B5:29:55:3F:9D:C9 X509v3 Authority Key Identifier: keyid:F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:8a:a1:21:3d:45:d3:ea:22:4d:b7:0e:17:47:b6:7f:2c:cc: 94:80:cb:32:1a:6c:c8:d2:8d:4c:ac:77:c1:cc:65:fa:8b:77: da:af:7a:88:a4:27:ea:5b:a1:ca:32:dc:b6:35:9b:4a:c9:d9: 5f:6e:dd:db:cb:a8:42:b5:0b:53:56:3b:91:47:7f:59:cc:56: 6b:bd:e7:e0:b2:3e:f8:9c:81:94:c3:38:d4:aa:13:7c:b4:c5: c9:85:ee:6a:56:91:86:82:53:b7:45:59:bb:79:83:53:4c:e3: e1:81:33:c1:cb:80:41:10:e9:e2:d1:66:ed:9a:8c:fc:e5:c7: b5:a7:c1:3f:c4:67:89:8a:9a:6e:37:fa:c4:ef:a1:f4:e0:d0: 88:e2:62:2c:0a:b3:6f:87:dc:95:01:43:88:6b:af:95:5f:7a: 7e:be:68:d9:c0:d6:bd:9d:37:68:37:81:6c:04:0c:a1:bc:4b: f9:40:73:a3:8a:50:c5:1c:fb:3d:2c:e1:2c:05:6e:23:d1:b4: c9:f5:db:14:17:3b:b6:33:43:fc:03:34:27:6c:08:35:dc:f3: 81:95:bd:e8:08:2b:65:bf:56:c4:2c:18:c8:cd:47:7b:75:47: 09:f6:db:4c:4e:32:bf:33:10:f4:72:6f:08:6d:42:f9:10:67: 41:68:3f:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTUxMTAvBgNVBAUTKEY4NzdFNzY3QzAyNDFFNTI5NkZFMzMzMjk1OTlERUZB M0QyREExNDEwHhcNMjUxMDE4MTk0NDI3WhcNMjUxMDI1MTk0NDI3WjAYMRYwFAYD VQQDEw02OGYzZWUxYi03ZmI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQCF8NBP4PQuZ/7nBIdL1toi9zFzmbsnsQ/+lLpLEWPbMIN+sziXi97fuQjy Q//J+M56tq5IvtTg5fQGt9/uhz2BNt+gRSCWBgKBV2AWXrYm7JQCuLywvoI16WSN kDekZrtrA+ZunKjpOb+hFI+2Rou/+bJph7mX7Z1+fmiroShY3dwza1sjYeOVgxz+ b5QdwS+rDSh5fsN/hDV4CyUjcyxg6uPdW9UekVEwqomyNM/sdea+1pr0vWfz33Wr FT8ervezXIQHthp0mnTJBSVqVGSVkZmgLOCkue6p0j+3JMnprc4XLAaT9eGO/swo y8Aik5yMtCkPt5wj10GExC90JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTCDa2k dzt0X9PYOEustSlVP53JMB8GA1UdIwQYMBaAFPh352fAJB5Slv4zMpWZ3vo9LaFB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxNS85NDJGQzNCODJB MzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hsS1dfak15bFpuZS1qMHRv VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1IZm5aOEFrSGxLV19qTXlsWm5lLWowdG9VRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxNS85NDJGQzNCODJBMzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hs S1dfak15bFpuZS1qMHRvVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFiqEhPUXT6iJNtw4XR7Z/LMyUgMsyGmzI0o1MrHfBzGX6i3far3qI pCfqW6HKMty2NZtKydlfbt3by6hCtQtTVjuRR39ZzFZrvefgsj74nIGUwzjUqhN8 tMXJhe5qVpGGglO3RVm7eYNTTOPhgTPBy4BBEOni0Wbtmoz85ce1p8E/xGeJippu N/rE76H04NCI4mIsCrNvh9yVAUOIa6+VX3p+vmjZwNa9nTdoN4FsBAyhvEv5QHOj ilDFHPs9LOEsBW4j0bTJ9dsUFzu2M0P8AzQnbAg13POBlb3oCCtlv1bELBjIzUd7 dUcJ9ttMTjK/MxD0cm8IbUL5EGdBaD9o -----END CERTIFICATE-----Generated at Mon Oct 20 16:32:18 2025 by rpki-client