$ rpki-client -vvf rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft File: HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft (raw, json) Hash identifier: PRHeQiQyl2yKLu59t9P0Eb2PUV3MtYxx/pVLdxHL+H4= Subject key identifier: 04:FF:8F:83:13:03:36:C5:65:1C:33:6C:21:C5:59:CE:DC:D8:5B:90 Authority key identifier: 1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C Certificate issuer: /CN=A9163609/serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft Manifest number: 0207 Signing time: Sun 19 Oct 2025 04:39:36 +0000 Manifest this update: Sun 19 Oct 2025 04:39:35 +0000 Manifest next update: Sun 26 Oct 2025 04:39:35 +0000 Files and hashes: 1: HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl (hash: buIgjRc+d9mI59n/4pyf5zXeOy2yud9vpx3lScpwh+o=) 2: F2AB2F288FE011EDA9919C57C4F9AE02.roa (hash: Rf57xWILJOvL68EEABL6r6dfZw+gyCnJxd924tHN+AU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9163609, serialNumber=1C422BB1FC96FE60D4B2FF5F6C12450ECC9EE96C Validity Not Before: Oct 19 04:39:35 2025 GMT Not After : Oct 26 04:39:35 2025 GMT Subject: CN=68f46b88-4e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:33:ca:e5:66:38:2d:7a:98:63:5f:5d:a6: 61:ec:1c:2e:a7:a8:22:18:53:97:57:c0:b6:03:5a: f1:6b:fd:c2:ee:e3:46:c3:0c:19:79:44:35:16:32: 78:34:9a:03:11:06:e6:a6:f2:cb:d0:75:3c:2c:b9: a0:f2:af:33:c3:d7:97:17:cb:72:45:79:9d:31:b7: 80:51:70:74:d0:9e:ba:e7:d1:ad:be:fa:8a:fa:1c: ce:50:6a:86:84:3a:bb:8c:cb:1a:08:1d:a3:d2:7b: 13:b9:14:33:13:5c:05:22:ef:88:a0:80:05:9b:08: 5e:dc:27:cd:78:7f:e2:1f:d6:89:13:70:a7:e1:94: e1:34:d4:c3:90:92:40:fb:ae:b0:87:8e:12:ae:fc: 1c:57:ba:e9:e6:4d:3c:07:43:76:ec:c4:ba:cc:4d: 5e:df:c3:7d:f2:be:b8:52:c6:93:1b:6b:41:d2:f4: 06:5f:9a:34:89:da:71:78:65:fc:1a:a2:9c:bc:4f: 1b:f7:dd:99:66:88:b6:eb:7a:f4:f2:b1:08:2f:a8: 26:f7:0e:3b:11:aa:23:ce:b3:b9:8b:23:22:b2:86: f2:5e:03:a7:ba:3f:a9:14:ab:80:7e:72:a0:de:13: ff:90:ac:9c:a0:f2:21:1f:3e:26:bf:8a:68:af:d3: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FF:8F:83:13:03:36:C5:65:1C:33:6C:21:C5:59:CE:DC:D8:5B:90 X509v3 Authority Key Identifier: keyid:1C:42:2B:B1:FC:96:FE:60:D4:B2:FF:5F:6C:12:45:0E:CC:9E:E9:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HEIrsfyW_mDUsv9fbBJFDsye6Ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163609/23F9E8BA8FDE11EDAE369A53C4F9AE02/HEIrsfyW_mDUsv9fbBJFDsye6Ww.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:c1:27:56:e4:3f:30:ac:e1:a3:2d:ad:19:9f:9b:c9:e9:fe: 4b:97:09:d6:68:18:91:7f:2f:a3:54:4a:04:9c:6c:70:30:3b: 7a:06:49:25:81:93:35:e9:08:d1:f1:6e:a8:2e:d3:2c:25:d9: 72:31:56:28:53:93:87:00:b3:15:cf:39:14:40:65:0d:1c:e0: 7c:d5:95:48:7f:93:b6:e9:d1:6c:4d:9e:47:ef:88:b7:48:2e: 31:a7:55:61:40:23:42:07:98:97:e8:9e:69:32:33:c3:52:73: 24:56:d5:34:8d:00:24:c0:59:3b:0a:43:8b:cf:0d:58:62:c9: a1:19:18:b5:d9:55:33:7a:ad:8c:bb:0e:c3:2b:01:7e:3b:6c: 52:66:01:38:78:62:a6:e3:69:cb:95:de:6d:1b:c2:5d:44:76: 40:a0:4a:f6:5b:01:79:3b:f5:63:54:cd:6b:e1:47:82:a6:85: a0:3a:48:3c:e6:e7:ca:be:28:d8:10:6f:fd:6a:6f:27:92:97: 90:2e:f8:84:16:67:1a:45:67:ef:b7:ed:e4:c5:5a:d7:40:ec: c3:8e:86:c1:70:2a:e2:2e:44:7c:34:63:2e:b8:e4:68:cf:5b: ee:f4:b1:7b:eb:ff:44:b1:3d:12:d1:70:cd:15:49:81:b9:bd: 6b:69:a7:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjM2MDkxMTAvBgNVBAUTKDFDNDIyQkIxRkM5NkZFNjBENEIyRkY1RjZDMTI0NTBF Q0M5RUU5NkMwHhcNMjUxMDE5MDQzOTM1WhcNMjUxMDI2MDQzOTM1WjAYMRYwFAYD VQQDEw02OGY0NmI4OC00ZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9EzyuVmOC16mGNfXaZh7Bwup6giGFOXV8C2A1rxa/3C7uNGwwwZeUQ1FjJ4 NJoDEQbmpvLL0HU8LLmg8q8zw9eXF8tyRXmdMbeAUXB00J6659GtvvqK+hzOUGqG hDq7jMsaCB2j0nsTuRQzE1wFIu+IoIAFmwhe3CfNeH/iH9aJE3Cn4ZThNNTDkJJA +66wh44SrvwcV7rp5k08B0N27MS6zE1e38N98r64UsaTG2tB0vQGX5o0idpxeGX8 GqKcvE8b992ZZoi263r08rEIL6gm9w47EaojzrO5iyMisobyXgOnuj+pFKuAfnKg 3hP/kKycoPIhHz4mv4por9MmqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAT/j4MT AzbFZRwzbCHFWc7c2FuQMB8GA1UdIwQYMBaAFBxCK7H8lv5g1LL/X2wSRQ7Mnuls MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MzYwOS8yM0Y5RThCQThG REUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19tRFVzdjlmYkJKRkRzeWU2 V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hFSXJzZnlXX21EVXN2OWZiQkpGRHN5ZTZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MzYwOS8yM0Y5RThCQThGREUxMUVEQUUzNjlBNTNDNEY5QUUwMi9IRUlyc2Z5V19t RFVzdjlmYkJKRkRzeWU2V3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAewSdW5D8wrOGjLa0Zn5vJ6f5LlwnWaBiRfy+jVEoEnGxwMDt6Bkkl gZM16QjR8W6oLtMsJdlyMVYoU5OHALMVzzkUQGUNHOB81ZVIf5O26dFsTZ5H74i3 SC4xp1VhQCNCB5iX6J5pMjPDUnMkVtU0jQAkwFk7CkOLzw1YYsmhGRi12VUzeq2M uw7DKwF+O2xSZgE4eGKm42nLld5tG8JdRHZAoEr2WwF5O/VjVM1r4UeCpoWgOkg8 5ufKvijYEG/9am8nkpeQLviEFmcaRWfvt+3kxVrXQOzDjobBcCriLkR8NGMuuORo z1vu9LF76/9EsT0S0XDNFUmBub1raaeU -----END CERTIFICATE-----Generated at Mon Oct 20 16:17:32 2025 by rpki-client