$ rpki-client -vvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft File: hhe5_iqn_uIl8uDS3IdkCYE33m0.mft (raw, json) Hash identifier: 1cvSZ/4xr7l6gY63aXTo4iByfUR2VJtF3TaRZAUV9m0= Subject key identifier: 6B:84:58:C7:48:04:80:DB:CD:85:4A:F3:F2:25:85:CB:68:A9:4A:85 Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D Certificate issuer: /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Certificate serial: 0A2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft Manifest number: 0A23 Signing time: Sat 18 Oct 2025 20:45:57 +0000 Manifest this update: Sat 18 Oct 2025 20:45:56 +0000 Manifest next update: Sat 25 Oct 2025 20:45:56 +0000 Files and hashes: 1: hhe5_iqn_uIl8uDS3IdkCYE33m0.crl (hash: fdqIqh8yWztwxwPXbDQy1Rjd9D6tRtBtA3HUx5Hpibc=) 2: E118A9DA7CB911EABD07CE5EC4F9AE02.roa (hash: 3BzJCKxq6lxeVjXVlpYVRMXqU7zHik0ruN2Ba5iWxOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2602 (0xa2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D Validity Not Before: Oct 18 20:45:56 2025 GMT Not After : Oct 25 20:45:56 2025 GMT Subject: CN=68f3fc85-9e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ea:56:6a:27:f7:71:12:b1:2d:2a:64:7a:6a: 91:bf:87:bf:69:a8:5c:84:36:59:c5:9c:1a:48:b5: 8f:51:5c:a8:41:9d:2b:ab:90:b9:b0:d3:f0:52:92: 68:ec:b0:9b:dc:1d:0f:45:76:01:7b:60:cc:08:df: eb:f7:0c:d0:0e:3c:ad:7a:1f:64:e6:a8:68:ea:55: 87:67:97:11:0f:d1:8a:4e:1f:7e:cb:49:76:96:1b: 85:b8:4a:96:c7:ab:07:25:d6:6a:62:87:f8:46:87: 06:17:68:ef:ce:bc:2c:e5:72:89:37:61:6e:00:12: 60:cd:02:2c:18:69:f1:bf:ef:7b:64:7a:5d:a6:6c: 2f:14:dc:50:d2:4e:2c:15:2f:46:63:9e:63:c5:e5: a7:d2:70:e4:19:3a:4d:95:22:ad:6f:b5:84:24:81: 43:5c:a8:ce:ba:f9:b4:df:44:75:47:57:1d:2f:63: b6:4c:47:5c:eb:aa:93:a1:0d:09:ca:b0:f8:62:cb: a6:2e:63:22:14:56:e1:a0:27:f0:83:17:98:02:1c: 29:0c:4b:92:1b:5b:bd:8b:fb:a5:35:dd:e6:06:94: d8:09:44:fb:4c:c6:f3:c5:39:58:26:1a:31:00:cc: f0:5b:0c:05:00:70:e1:57:c3:e7:de:28:57:99:64: 4b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:84:58:C7:48:04:80:DB:CD:85:4A:F3:F2:25:85:CB:68:A9:4A:85 X509v3 Authority Key Identifier: keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:43:93:fb:cd:53:17:29:69:5f:d1:a1:e9:58:d1:99:04:9d: e4:a0:1b:2e:55:30:19:13:b3:98:90:5d:9f:76:09:92:1d:4d: e2:c0:68:27:77:ba:c5:f3:0a:92:48:5e:d1:51:76:ef:f3:78: 52:23:ef:37:61:3d:6a:c9:2e:b6:9c:cf:73:3c:84:ad:a6:c0: 31:64:c3:d6:4d:fb:de:69:ba:09:94:a1:73:76:09:38:43:92: e8:36:b2:89:b9:76:59:5f:36:50:0e:07:ec:94:f6:da:98:d8: a0:34:8e:1b:b9:34:3f:62:fc:4d:03:0b:f4:57:d9:01:2c:c1: bf:50:ca:25:08:6f:7c:16:88:41:e0:17:98:ae:ce:b0:b9:00: f6:8e:da:07:24:1e:af:65:15:d1:c5:85:36:ee:b8:75:e5:df: 2f:f1:05:ea:0f:b7:8f:5b:a9:b1:94:bb:aa:80:d1:73:4d:fe: 49:bb:59:6a:c0:7d:1e:50:42:ee:77:fe:d9:6a:ca:51:fd:59: ea:f6:50:fe:a4:e6:f7:f4:a5:60:9d:4f:82:42:7a:1a:61:4c: 51:49:97:31:c1:9b:bd:c7:24:2e:28:45:67:cf:a1:a3:78:c2: dc:5d:96:0f:16:6d:ba:e4:a0:49:57:31:13:c7:a1:78:d7:b6: cf:fb:34:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc3MTUxMTAvBgNVBAUTKDg2MTdCOUZFMkFBN0ZFRTIyNUYyRTBEMkRDODc2NDA5 ODEzN0RFNkQwHhcNMjUxMDE4MjA0NTU2WhcNMjUxMDI1MjA0NTU2WjAYMRYwFAYD VQQDEw02OGYzZmM4NS05ZTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOpWaif3cRKxLSpkemqRv4e/aahchDZZxZwaSLWPUVyoQZ0rq5C5sNPwUpJo 7LCb3B0PRXYBe2DMCN/r9wzQDjyteh9k5qho6lWHZ5cRD9GKTh9+y0l2lhuFuEqW x6sHJdZqYof4RocGF2jvzrws5XKJN2FuABJgzQIsGGnxv+97ZHpdpmwvFNxQ0k4s FS9GY55jxeWn0nDkGTpNlSKtb7WEJIFDXKjOuvm030R1R1cdL2O2TEdc66qToQ0J yrD4YsumLmMiFFbhoCfwgxeYAhwpDEuSG1u9i/ulNd3mBpTYCUT7TMbzxTlYJhox AMzwWwwFAHDhV8Pn3ihXmWRLVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGuEWMdI BIDbzYVK8/IlhctoqUqFMB8GA1UdIwQYMBaAFIYXuf4qp/7iJfLg0tyHZAmBN95t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzcxNS9CQzFDNUYxMDdD QjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91SWw4dURTM0lka0NZRTMz bTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hoZTVfaXFuX3VJbDh1RFMzSWRrQ1lFMzNtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzcxNS9CQzFDNUYxMDdDQjgxMUVBQjBGNjQ3NURDNEY5QUUwMi9oaGU1X2lxbl91 SWw4dURTM0lka0NZRTMzbTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCQ5P7zVMXKWlf0aHpWNGZBJ3koBsuVTAZE7OYkF2fdgmSHU3iwGgn d7rF8wqSSF7RUXbv83hSI+83YT1qyS62nM9zPIStpsAxZMPWTfveaboJlKFzdgk4 Q5LoNrKJuXZZXzZQDgfslPbamNigNI4buTQ/YvxNAwv0V9kBLMG/UMolCG98FohB 4BeYrs6wuQD2jtoHJB6vZRXRxYU27rh15d8v8QXqD7ePW6mxlLuqgNFzTf5Ju1lq wH0eUELud/7ZaspR/Vnq9lD+pOb39KVgnU+CQnoaYUxRSZcxwZu9xyQuKEVnz6Gj eMLcXZYPFm265KBJVzETx6F417bP+zRB -----END CERTIFICATE-----Generated at Mon Oct 20 12:51:29 2025 by rpki-client