$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft File: hEvW0alyz9K2C4TeDLY-XVSvqM8.mft (raw, json) Hash identifier: pKpx5QRQEmrurPSKZOtZ6O8l6udM2gA7GIFToLV5rxo= Subject key identifier: 44:82:4D:9D:71:51:B2:5B:ED:C6:26:E7:FB:C4:45:8E:38:4F:3E:EE Authority key identifier: 84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF Certificate issuer: /CN=A9161CEF/serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Certificate serial: 30 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft Manifest number: 0B7A Signing time: Sat 18 Oct 2025 20:07:15 +0000 Manifest this update: Sat 18 Oct 2025 20:07:14 +0000 Manifest next update: Sat 25 Oct 2025 20:07:14 +0000 Files and hashes: 1: hEvW0alyz9K2C4TeDLY-XVSvqM8.crl (hash: hcjDi0nQn9yFnxz4iv6UYs+D2XspSZ735zZPRnaangw=) 2: 42B2A584790C11F0BFDABE73C4F9AE02.roa (hash: rsXupeO8EVGQ/M7qesQZfS0Ho6k/jy/+B1i/0dc3Rfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Validity Not Before: Oct 18 20:07:14 2025 GMT Not After : Oct 25 20:07:14 2025 GMT Subject: CN=68f3f373-990e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a8:00:4d:9c:89:e5:72:e6:d2:d3:f3:98:50: 92:25:37:2d:50:8a:c8:34:5b:0e:95:3c:65:10:97: 9e:08:09:a5:74:b4:8b:80:9e:43:0b:c6:45:e0:6b: 2a:17:33:69:28:44:8c:6f:2b:4b:98:d0:87:3d:30: 38:fc:c2:54:83:db:51:9d:0d:93:bc:ee:83:51:43: 74:bb:32:6a:c4:24:ec:79:47:6e:33:e8:fd:be:95: 71:aa:aa:c6:5a:39:c6:93:1c:fd:95:be:f0:e7:f6: 03:5a:3f:8a:80:70:5a:56:7e:47:d2:6f:0c:ba:55: e2:d7:05:10:ef:0f:4c:8b:5d:f5:86:a4:64:7a:c1: 72:67:e1:87:43:6d:10:ea:31:81:b4:75:99:d6:c6: b0:e7:9c:25:68:a4:7a:b3:fb:f0:fe:a7:3c:77:76: 1e:20:62:d4:68:f8:b1:1c:0d:7d:79:7d:82:a8:3c: e6:2b:2f:5c:57:71:bc:ba:8c:6c:45:d0:70:46:23: 76:20:ec:45:d4:30:be:37:f6:ac:dc:d0:d0:aa:fe: fa:6e:18:bf:2d:de:36:84:90:19:2d:a1:42:e2:10: ef:80:d2:25:0e:27:10:2f:de:71:84:6d:3d:ef:b9: 06:12:af:a0:16:c3:55:52:45:d4:fb:36:b9:bc:df: a0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:82:4D:9D:71:51:B2:5B:ED:C6:26:E7:FB:C4:45:8E:38:4F:3E:EE X509v3 Authority Key Identifier: keyid:84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:fd:78:39:ee:b6:b5:ef:d0:2c:12:98:ef:97:75:9f:93:c8: 5d:a8:24:e1:69:47:d1:3d:ec:06:eb:46:b7:2e:6c:3e:42:17: 12:11:be:06:a7:da:85:40:9c:b2:60:98:dd:e6:f3:9e:f7:cf: 46:ad:c4:9d:9b:d5:fc:62:b6:83:80:b1:64:eb:b1:ac:0a:de: eb:9b:c3:6f:24:3a:6d:51:57:b8:63:68:9d:12:85:6c:cc:4f: 25:eb:57:12:d0:cd:75:9b:b6:9e:05:59:e0:bb:64:63:19:58: 54:eb:1c:57:e7:14:85:51:c3:43:b3:fa:7d:4b:7d:77:43:33: 4a:5f:21:34:94:9d:3c:a0:fc:87:aa:3e:ac:c7:57:c8:71:a1: 35:8a:2c:be:1e:71:04:ff:ec:ba:0c:07:07:d8:df:ae:70:4f: e8:8a:ff:e9:76:98:27:ea:80:f1:78:1a:9e:16:0b:22:72:00: bb:26:7e:e9:c4:5e:07:89:92:15:ce:19:3a:13:a4:ea:7e:70: 35:a0:eb:71:fa:53:0b:66:7a:c5:07:c5:43:2f:fd:41:cb:fe: bf:5a:b5:c2:77:5e:52:55:b8:99:54:e0:80:54:e9:2d:8a:52: 90:6d:5e:1c:5c:f0:3d:47:65:2b:cc:95:f4:a5:0a:99:38:cf: 36:d8:0a:34 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUNFRjExMC8GA1UEBRMoODQ0QkQ2RDFBOTcyQ0ZEMkI2MEI4NERFMENCNjNFNUQ1 NEFGQThDRjAeFw0yNTEwMTgyMDA3MTRaFw0yNTEwMjUyMDA3MTRaMBgxFjAUBgNV BAMTDTY4ZjNmMzczLTk5MGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdqABNnInlcubS0/OYUJIlNy1Qisg0Ww6VPGUQl54ICaV0tIuAnkMLxkXgayoX M2koRIxvK0uY0Ic9MDj8wlSD21GdDZO87oNRQ3S7MmrEJOx5R24z6P2+lXGqqsZa OcaTHP2VvvDn9gNaP4qAcFpWfkfSbwy6VeLXBRDvD0yLXfWGpGR6wXJn4YdDbRDq MYG0dZnWxrDnnCVopHqz+/D+pzx3dh4gYtRo+LEcDX15fYKoPOYrL1xXcby6jGxF 0HBGI3Yg7EXUML439qzc0NCq/vpuGL8t3jaEkBktoULiEO+A0iUOJxAv3nGEbT3v uQYSr6AWw1VSRdT7Nrm836CLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQURIJNnXFR slvtxibn+8RFjjhPPu4wHwYDVR0jBBgwFoAUhEvW0alyz9K2C4TeDLY+XVSvqM8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQ0VGLzlDRTUxMjU4NDU5 MTExRUFCRTZCOTMxQkM0RjlBRTAyL2hFdlcwYWx5ejlLMkM0VGVETFktWFZTdnFN OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEV2VzBhbHl6OUsyQzRUZURMWS1YVlN2cU04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx Q0VGLzlDRTUxMjU4NDU5MTExRUFCRTZCOTMxQkM0RjlBRTAyL2hFdlcwYWx5ejlL MkM0VGVETFktWFZTdnFNOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACD9eDnutrXv0CwSmO+XdZ+TyF2oJOFpR9E97AbrRrcubD5CFxIRvgan 2oVAnLJgmN3m8573z0atxJ2b1fxitoOAsWTrsawK3uubw28kOm1RV7hjaJ0ShWzM TyXrVxLQzXWbtp4FWeC7ZGMZWFTrHFfnFIVRw0Oz+n1LfXdDM0pfITSUnTyg/Ieq PqzHV8hxoTWKLL4ecQT/7LoMBwfY365wT+iK/+l2mCfqgPF4Gp4WCyJyALsmfunE XgeJkhXOGToTpOp+cDWg63H6UwtmesUHxUMv/UHL/r9atcJ3XlJVuJlU4IBU6S2K UpBtXhxc8D1HZSvMlfSlCpk4zzbYCjQ= -----END CERTIFICATE-----Generated at Mon Oct 20 19:25:05 2025 by rpki-client