$ rpki-client -vvf rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft File: he6Mb5WNbzwfFdLBq8T-m75s7tc.mft (raw, json) Hash identifier: GAf2DQcPCfF3deH+PMhkE2e4Hwbs6NDtQYMuM1dFd/g= Subject key identifier: 76:DF:38:9D:AA:3B:F0:7C:5A:C0:3C:87:CE:BD:68:14:B2:CB:6F:24 Authority key identifier: 85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 Certificate issuer: /CN=A9175165/serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Certificate serial: 1173 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft Manifest number: 116B Signing time: Sat 18 Oct 2025 17:45:57 +0000 Manifest this update: Sat 18 Oct 2025 17:45:57 +0000 Manifest next update: Sat 25 Oct 2025 17:45:57 +0000 Files and hashes: 1: he6Mb5WNbzwfFdLBq8T-m75s7tc.crl (hash: kq+qDFD/LoxCWl9ktCJqCIArfihXEuS3+312RDAciFU=) 2: 8B8DEE220F0911E9A8CC815EC4F9AE02.roa (hash: gteMkfVnVg4ffsJGo4gzYRn2LBvsScWGIppneQ2BQXI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:45:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4467 (0x1173) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175165, serialNumber=85EE8C6F958D6F3C1F15D2C1ABC4FE9BBE6CEED7 Validity Not Before: Oct 18 17:45:57 2025 GMT Not After : Oct 25 17:45:57 2025 GMT Subject: CN=68f3d255-5b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3c:69:b7:51:34:2c:ca:34:ed:a7:a8:f5:00: 45:8f:e1:f6:80:3a:4a:d3:94:59:f2:2c:86:78:4f: 5b:eb:45:b6:5f:92:e8:72:34:4e:de:ca:e4:55:f9: 7c:4d:8a:9c:09:8b:fd:5d:4d:4b:5d:ea:02:4c:fb: 36:ad:6c:7f:16:9e:42:51:f9:09:79:fe:36:b4:2e: ee:56:34:81:06:8e:81:45:c2:cc:b2:0a:e8:69:3f: 7e:e3:3b:a0:9b:dd:44:d0:76:b7:e7:a2:66:5e:3b: ec:2c:d2:be:50:ae:2c:15:52:26:b0:c0:9e:09:6a: 8e:68:ab:2e:ab:b7:90:42:db:35:96:75:13:1a:54: 54:08:c0:c3:a3:a4:3b:6c:81:8b:59:1d:d1:17:c1: 4b:f2:fe:5a:22:df:92:c0:aa:50:8d:91:24:39:9b: ff:ab:8a:a1:4c:a8:90:99:e3:cb:0f:ce:8c:c2:a6: 6c:6c:91:da:f9:33:48:4f:eb:a1:22:33:dc:7f:9f: cf:d0:6a:bd:10:63:87:1a:b2:f0:92:05:e5:4c:79: f6:b6:51:cd:0b:28:67:0a:17:25:bf:e1:57:55:01: 1c:e1:79:ce:9a:a2:29:3c:84:af:6e:99:9d:dd:e8: 76:cf:13:ad:03:67:fe:aa:6d:5e:28:2c:a0:29:14: 4c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DF:38:9D:AA:3B:F0:7C:5A:C0:3C:87:CE:BD:68:14:B2:CB:6F:24 X509v3 Authority Key Identifier: keyid:85:EE:8C:6F:95:8D:6F:3C:1F:15:D2:C1:AB:C4:FE:9B:BE:6C:EE:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he6Mb5WNbzwfFdLBq8T-m75s7tc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175165/90F0FFAE0F0811E98680E85CC4F9AE02/he6Mb5WNbzwfFdLBq8T-m75s7tc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:32:b0:c8:81:d5:ae:07:5a:61:d2:57:df:bb:b3:aa:45:bf: 3c:9c:2f:07:0b:e7:5f:70:3c:d7:8b:71:20:d7:c0:46:01:48: 1d:51:25:b4:db:0a:21:83:41:33:c8:31:68:91:78:fc:fb:b6: 64:79:20:b0:b7:3b:40:81:b0:07:53:0e:84:a2:7b:ee:d7:c6: 03:c4:2d:c6:a5:13:a0:a1:6d:fd:a9:18:3a:34:9d:bc:00:d2: c7:d9:0c:3d:02:ca:d2:c2:83:d5:65:fc:f3:3c:33:02:5d:fd: 15:de:23:76:9f:9d:49:af:3f:96:cf:56:6e:8d:64:26:64:27: 49:84:3d:3f:18:1f:eb:96:59:c2:8f:7a:5d:7b:4c:70:46:00: d1:35:05:66:52:e4:5f:5b:56:4d:9c:5f:7c:87:2d:dd:0f:46: 1b:3c:0b:a1:39:df:ff:1c:38:92:4d:d2:dc:80:df:8a:5e:53: 1a:1c:ef:6a:9e:dc:b9:62:91:bb:37:62:31:41:aa:18:50:a7: ab:8c:98:e2:4d:ce:21:47:f7:49:86:96:cb:09:03:a4:42:21: 74:72:c2:f3:0e:e2:69:f0:51:a2:7e:37:d0:42:95:49:6f:65: 66:67:1f:2d:6e:92:d3:de:a7:55:de:2c:c1:cd:a1:36:d9:a5: d1:75:d2:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEXMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUxNjUxMTAvBgNVBAUTKDg1RUU4QzZGOTU4RDZGM0MxRjE1RDJDMUFCQzRGRTlC QkU2Q0VFRDcwHhcNMjUxMDE4MTc0NTU3WhcNMjUxMDI1MTc0NTU3WjAYMRYwFAYD VQQDEw02OGYzZDI1NS01YjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTxpt1E0LMo07aeo9QBFj+H2gDpK05RZ8iyGeE9b60W2X5LocjRO3srkVfl8 TYqcCYv9XU1LXeoCTPs2rWx/Fp5CUfkJef42tC7uVjSBBo6BRcLMsgroaT9+4zug m91E0Ha356JmXjvsLNK+UK4sFVImsMCeCWqOaKsuq7eQQts1lnUTGlRUCMDDo6Q7 bIGLWR3RF8FL8v5aIt+SwKpQjZEkOZv/q4qhTKiQmePLD86MwqZsbJHa+TNIT+uh IjPcf5/P0Gq9EGOHGrLwkgXlTHn2tlHNCyhnChclv+FXVQEc4XnOmqIpPISvbpmd 3eh2zxOtA2f+qm1eKCygKRRMIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbfOJ2q O/B8WsA8h869aBSyy28kMB8GA1UdIwQYMBaAFIXujG+VjW88HxXSwavE/pu+bO7X MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTE2NS85MEYwRkZBRTBG MDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6d2ZGZExCcThULW03NXM3 dGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlNk1iNVdOYnp3ZkZkTEJxOFQtbTc1czd0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTE2NS85MEYwRkZBRTBGMDgxMUU5ODY4MEU4NUNDNEY5QUUwMi9oZTZNYjVXTmJ6 d2ZGZExCcThULW03NXM3dGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLMrDIgdWuB1ph0lffu7OqRb88nC8HC+dfcDzXi3Eg18BGAUgdUSW0 2wohg0EzyDFokXj8+7ZkeSCwtztAgbAHUw6Eonvu18YDxC3GpROgoW39qRg6NJ28 ANLH2Qw9AsrSwoPVZfzzPDMCXf0V3iN2n51Jrz+Wz1ZujWQmZCdJhD0/GB/rllnC j3pde0xwRgDRNQVmUuRfW1ZNnF98hy3dD0YbPAuhOd//HDiSTdLcgN+KXlMaHO9q nty5YpG7N2IxQaoYUKerjJjiTc4hR/dJhpbLCQOkQiF0csLzDuJp8FGifjfQQpVJ b2VmZx8tbpLT3qdV3izBzaE22aXRddL0 -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:29 2025 by rpki-client