$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft File: HHswV26xhQjvJ3nE71u1ckkt0pk.mft (raw, json) Hash identifier: inrIfOtCNNeMT47K1Ya/mevsvYO7qFIG+5FPTx72IEg= Subject key identifier: 68:BE:DB:59:8B:94:6B:57:2E:36:AA:5B:FD:7F:52:30:A8:F3:BB:BA Authority key identifier: 1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 Certificate issuer: /CN=A911F5CA/serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Certificate serial: 0129 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft Manifest number: 011F Signing time: Sun 19 Oct 2025 07:43:22 +0000 Manifest this update: Sun 19 Oct 2025 07:43:22 +0000 Manifest next update: Sun 26 Oct 2025 07:43:22 +0000 Files and hashes: 1: HHswV26xhQjvJ3nE71u1ckkt0pk.crl (hash: yPP4I+S9+tI/vIah93wgcA5gz0QpKFv09dNjnEv4LPA=) 2: E3A9EC4C025011EFB3CEFA09C4F9AE02.roa (hash: BWss25KwJ6L54iiEaPMsjplWvsMA0hnuvwGf8Bs1rfY=) 3: 7E933D0427B711EF8867AA49C4F9AE02.roa (hash: rMJAoxoS++kNzcCP2pW17iqc9CzolSJB2caGijczQIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:43:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 297 (0x129) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=1C7B30576EB18508EF2779C4EF5BB572492DD299 Validity Not Before: Oct 19 07:43:22 2025 GMT Not After : Oct 26 07:43:22 2025 GMT Subject: CN=68f4969a-4295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:bf:8a:42:2d:c5:91:8d:d0:53:ed:0d:c0: 9a:95:83:a8:0f:b2:8a:3a:ef:fe:42:5e:bb:9d:d0: eb:5c:2b:6c:7b:46:03:54:a8:6c:eb:c7:06:21:4b: bd:f6:b6:dd:25:0a:d6:ed:8b:c0:19:82:8d:83:3d: bf:55:75:0b:22:16:87:3a:18:b7:49:41:f8:80:d8: 91:70:f0:ea:a8:27:a9:10:6d:c7:47:72:be:3c:0e: 2b:bf:72:bc:cf:44:90:11:34:a4:70:d8:bb:85:77: ec:9c:ea:49:e5:0d:55:36:a4:51:5d:57:84:7c:dd: 87:c8:73:9c:18:6f:fa:c2:51:45:73:86:0f:c1:c4: 9a:a4:4c:26:64:fe:a7:18:37:6f:3a:89:7b:8c:71: 93:22:74:8f:8c:e6:79:90:d2:fd:7c:96:de:79:38: d5:a4:10:f8:27:4a:d9:22:4d:e5:2a:78:b0:ea:86: 0a:0e:8e:eb:ba:ac:ad:54:13:fb:6b:b0:dd:f4:3a: 13:d7:f5:a1:16:65:e8:9d:ea:62:3d:1b:21:6e:70: 45:73:b7:0a:03:c6:2c:10:5b:4d:9a:90:80:47:2b: ce:78:8b:05:e1:b7:9e:3c:c0:af:41:00:da:ba:d0: 41:43:d1:db:65:f7:50:ff:37:88:b5:e9:af:6a:0f: 5f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:BE:DB:59:8B:94:6B:57:2E:36:AA:5B:FD:7F:52:30:A8:F3:BB:BA X509v3 Authority Key Identifier: keyid:1C:7B:30:57:6E:B1:85:08:EF:27:79:C4:EF:5B:B5:72:49:2D:D2:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HHswV26xhQjvJ3nE71u1ckkt0pk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/A6915B34024F11EFAC65F577C4F9AE02/HHswV26xhQjvJ3nE71u1ckkt0pk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:16:7e:a6:4c:a5:4f:61:09:5b:c8:62:1d:bf:a6:75:86:e9: fe:0c:17:8b:f5:37:2e:be:98:af:5c:f4:89:00:a4:58:80:96: dd:0a:32:ce:44:be:96:4f:79:b4:34:0c:13:96:19:ad:55:98: 58:8b:a1:c6:1e:86:1d:28:52:4b:5a:ec:83:0e:3a:fc:d7:97: 1d:77:cb:14:10:47:88:33:29:d6:6e:a9:44:25:23:09:3f:0c: af:2b:98:64:ff:5a:c7:07:d9:42:74:a6:2f:cd:6f:4d:64:58: da:43:21:a5:59:46:1a:b8:e5:75:ad:16:9c:43:73:cf:f2:02: b5:1a:02:ec:f8:7e:63:38:89:e8:44:41:65:97:ba:eb:b1:c1: 26:44:3e:68:01:cd:72:66:c5:5d:f1:43:21:35:ae:81:c0:40: 1f:25:ac:e4:57:3b:da:df:21:f9:56:b6:8b:96:92:cf:9d:69: e2:35:99:23:94:eb:81:2f:1c:ff:2d:17:cd:01:b8:b3:db:a8: ec:ee:0d:58:29:fb:7d:6d:82:70:dd:47:4d:7d:d9:a8:da:41: 99:c1:09:84:34:b5:1f:d3:dc:b9:6b:90:96:1d:47:9c:98:27: 07:dd:89:a7:ac:74:36:19:74:14:54:e4:b8:9c:61:a4:81:94: 72:d8:73:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKDFDN0IzMDU3NkVCMTg1MDhFRjI3NzlDNEVGNUJCNTcy NDkyREQyOTkwHhcNMjUxMDE5MDc0MzIyWhcNMjUxMDI2MDc0MzIyWjAYMRYwFAYD VQQDEw02OGY0OTY5YS00Mjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUm/ikItxZGN0FPtDcCalYOoD7KKOu/+Ql67ndDrXCtse0YDVKhs68cGIUu9 9rbdJQrW7YvAGYKNgz2/VXULIhaHOhi3SUH4gNiRcPDqqCepEG3HR3K+PA4rv3K8 z0SQETSkcNi7hXfsnOpJ5Q1VNqRRXVeEfN2HyHOcGG/6wlFFc4YPwcSapEwmZP6n GDdvOol7jHGTInSPjOZ5kNL9fJbeeTjVpBD4J0rZIk3lKniw6oYKDo7ruqytVBP7 a7Dd9DoT1/WhFmXonepiPRshbnBFc7cKA8YsEFtNmpCARyvOeIsF4beePMCvQQDa utBBQ9HbZfdQ/zeItemvag9fAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGi+21mL lGtXLjaqW/1/UjCo87u6MB8GA1UdIwQYMBaAFBx7MFdusYUI7yd5xO9btXJJLdKZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS9BNjkxNUIzNDAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhRanZKM25FNzF1MWNra3Qw cGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hIc3dWMjZ4aFFqdkozbkU3MXUxY2trdDBway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjVDQS9BNjkxNUIzNDAyNEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9ISHN3VjI2eGhR anZKM25FNzF1MWNra3QwcGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOFn6mTKVPYQlbyGIdv6Z1hun+DBeL9TcuvpivXPSJAKRYgJbdCjLO RL6WT3m0NAwTlhmtVZhYi6HGHoYdKFJLWuyDDjr815cdd8sUEEeIMynWbqlEJSMJ PwyvK5hk/1rHB9lCdKYvzW9NZFjaQyGlWUYauOV1rRacQ3PP8gK1GgLs+H5jOIno REFll7rrscEmRD5oAc1yZsVd8UMhNa6BwEAfJazkVzva3yH5VraLlpLPnWniNZkj lOuBLxz/LRfNAbiz26js7g1YKft9bYJw3UdNfdmo2kGZwQmENLUf09y5a5CWHUec mCcH3YmnrHQ2GXQUVOS4nGGkgZRy2HMH -----END CERTIFICATE-----Generated at Mon Oct 20 14:07:23 2025 by rpki-client