$ rpki-client -vvf rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft File: Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft (raw, json) Hash identifier: i2K5YPoGCp8APHi6QMd/H9RVcJkc6G162Fzpwe+k4Nw= Subject key identifier: FB:27:E2:97:0F:A7:D8:07:9C:7F:99:39:99:6C:35:17:19:0A:F2:C6 Authority key identifier: 1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 Certificate issuer: /CN=A911112F/serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft Manifest number: 0153 Signing time: Sun 19 Oct 2025 07:05:10 +0000 Manifest this update: Sun 19 Oct 2025 07:05:10 +0000 Manifest next update: Sun 26 Oct 2025 07:05:10 +0000 Files and hashes: 1: Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl (hash: gTbc0OVqVSaw9PkqBXmG9Una82NSAEc68EMXiAiEpYM=) 2: 1CD34B6CEDFC11EE880F6F58C4F9AE02.roa (hash: z1tB95lFpcoG7gufS1WVI98iQupCm/LxCrECBfeoY8E=) 3: E4BA0144BA8E11EE91E3AF15C4F9AE02.roa (hash: j/V4XNGNwoAwBD2fM6BAWHsPlbD9xKq2cTFKjMRTC08=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:05:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911112F, serialNumber=1E57B43F044D4ABA8222A409786614280AA739A1 Validity Not Before: Oct 19 07:05:10 2025 GMT Not After : Oct 26 07:05:10 2025 GMT Subject: CN=68f48da6-c70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:fe:74:c9:f1:04:2d:db:59:da:c5:3f:69: d0:40:d7:68:dc:d8:7e:6a:86:f3:2d:cf:8a:39:f8: 98:59:e2:aa:2c:5c:20:76:fb:81:97:3f:c1:22:20: 1a:07:de:69:ad:57:8c:ba:97:83:3f:32:ca:c0:10: 9a:25:91:0a:ef:f6:4e:eb:df:ba:3e:9c:e1:00:11: b3:c5:0f:eb:6f:2d:7f:5c:42:12:da:c9:15:0f:83: a1:9e:ce:16:88:8d:9a:9f:88:2a:24:f7:29:a2:3e: f4:6a:a3:ae:9e:38:b4:3b:23:53:74:10:0e:2c:07: c4:67:d7:e5:6e:4c:e0:59:85:e8:62:e1:74:59:33: 33:f7:63:46:45:55:3c:dc:a0:0e:98:e1:76:ec:69: 85:c3:2d:17:53:38:79:bc:6c:bd:fe:d6:c8:b2:40: 7d:26:bb:6a:58:a6:36:63:ad:2c:8f:45:4b:40:50: 01:6a:b4:e2:2c:d2:76:93:85:a2:99:a8:c0:2e:3b: 72:ff:27:c6:3f:05:c7:f1:6c:6a:2e:6a:36:61:59: 6f:2b:34:ff:67:0a:51:6c:b8:8d:66:73:30:3f:da: c2:e4:64:08:20:9d:e5:0f:d7:2e:19:8d:88:69:d2: db:c5:3c:93:36:78:f0:55:47:b1:db:06:b2:70:6d: fb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:27:E2:97:0F:A7:D8:07:9C:7F:99:39:99:6C:35:17:19:0A:F2:C6 X509v3 Authority Key Identifier: keyid:1E:57:B4:3F:04:4D:4A:BA:82:22:A4:09:78:66:14:28:0A:A7:39:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hle0PwRNSrqCIqQJeGYUKAqnOaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911112F/964DC69ABA8D11EE828A8946C4F9AE02/Hle0PwRNSrqCIqQJeGYUKAqnOaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:67:11:a7:81:32:f9:83:78:c0:91:8b:5f:85:74:79:3a:81: ce:d9:55:ea:c2:a5:ca:16:bc:88:6d:cc:6c:9e:88:45:00:63: 15:20:33:85:a0:45:66:cb:a5:93:70:af:e4:41:42:75:32:10: 85:48:2a:19:1a:b6:7a:d9:9c:5a:c0:55:0f:9d:91:7f:6a:71: e8:bc:57:9c:46:b7:3e:c2:75:36:ff:e7:9d:12:a0:6c:34:6f: ca:f9:40:6b:f9:cb:96:10:7f:54:bf:b1:ee:24:c5:4b:19:be: e4:1b:da:e2:b8:04:56:32:b3:74:5f:d2:c6:67:52:5a:53:e1: 7f:12:a8:5f:dd:24:ba:4f:20:bd:dd:e6:42:60:ea:77:1c:9b: 82:e2:9a:f5:1d:ea:1e:8d:bb:ba:68:9e:7d:0b:6e:b7:08:40: 81:fa:d4:ec:df:5a:e1:9d:6c:1d:b8:0b:94:e2:3e:e7:e6:f6: cd:95:ac:b5:d0:57:c1:48:1a:6c:b9:d0:5d:00:d6:b6:05:e6: 1c:81:99:53:7f:4f:c3:3d:d2:7a:23:03:a7:2e:27:bc:50:5c: 8d:64:9e:7b:4a:ad:66:5b:a5:a3:f5:5a:53:47:de:55:97:1c: c3:73:68:5e:91:10:c2:e6:47:0e:9e:d2:4c:44:84:a3:03:8d: 23:23:45:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTExMkYxMTAvBgNVBAUTKDFFNTdCNDNGMDQ0RDRBQkE4MjIyQTQwOTc4NjYxNDI4 MEFBNzM5QTEwHhcNMjUxMDE5MDcwNTEwWhcNMjUxMDI2MDcwNTEwWjAYMRYwFAYD VQQDEw02OGY0OGRhNi1jNzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwb+dMnxBC3bWdrFP2nQQNdo3Nh+aobzLc+KOfiYWeKqLFwgdvuBlz/BIiAa B95prVeMupeDPzLKwBCaJZEK7/ZO69+6PpzhABGzxQ/rby1/XEIS2skVD4Ohns4W iI2an4gqJPcpoj70aqOunji0OyNTdBAOLAfEZ9flbkzgWYXoYuF0WTMz92NGRVU8 3KAOmOF27GmFwy0XUzh5vGy9/tbIskB9JrtqWKY2Y60sj0VLQFABarTiLNJ2k4Wi majALjty/yfGPwXH8WxqLmo2YVlvKzT/ZwpRbLiNZnMwP9rC5GQIIJ3lD9cuGY2I adLbxTyTNnjwVUex2waycG37bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsn4pcP p9gHnH+ZOZlsNRcZCvLGMB8GA1UdIwQYMBaAFB5XtD8ETUq6giKkCXhmFCgKpzmh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTEyRi85NjREQzY5QUJB OEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNycUNJcVFKZUdZVUtBcW5P YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hsZTBQd1JOU3JxQ0lxUUplR1lVS0Fxbk9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MTEyRi85NjREQzY5QUJBOEQxMUVFODI4QTg5NDZDNEY5QUUwMi9IbGUwUHdSTlNy cUNJcVFKZUdZVUtBcW5PYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfZxGngTL5g3jAkYtfhXR5OoHO2VXqwqXKFryIbcxsnohFAGMVIDOF oEVmy6WTcK/kQUJ1MhCFSCoZGrZ62ZxawFUPnZF/anHovFecRrc+wnU2/+edEqBs NG/K+UBr+cuWEH9Uv7HuJMVLGb7kG9riuARWMrN0X9LGZ1JaU+F/Eqhf3SS6TyC9 3eZCYOp3HJuC4pr1Heoejbu6aJ59C263CECB+tTs31rhnWwduAuU4j7n5vbNlay1 0FfBSBpsudBdANa2BeYcgZlTf0/DPdJ6IwOnLie8UFyNZJ57Sq1mW6Wj9VpTR95V lxzDc2hekRDC5kcOntJMRISjA40jI0Wl -----END CERTIFICATE-----Generated at Mon Oct 20 08:56:16 2025 by rpki-client