$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft File: H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json) Hash identifier: DV4FJaZPWuv3GfnmBGU6hCkK2eyCnb5hTnT0+Yc3OtQ= Subject key identifier: CB:EF:05:4D:6E:CF:1D:DF:61:E2:62:AA:EF:25:A1:97:2C:72:C1:7C Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 Certificate issuer: /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Certificate serial: 0449 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft Manifest number: 0443 Signing time: Sun 19 Oct 2025 02:08:14 +0000 Manifest this update: Sun 19 Oct 2025 02:08:13 +0000 Manifest next update: Sun 26 Oct 2025 02:08:13 +0000 Files and hashes: 1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: z9NHizKmb5e+Dd3cGJ5bcWU/mcKFDsya4VLNdyW890A=) 2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: 3YCl3ruDz9pGROpd+e7K4Njtxira0+jtHnGSU4G+bG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1097 (0x449) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Validity Not Before: Oct 19 02:08:13 2025 GMT Not After : Oct 26 02:08:13 2025 GMT Subject: CN=68f4480e-c323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:ba:e5:82:4b:b9:19:b3:d9:3e:df:e8:f6:3b: 99:03:87:0f:b2:c6:f9:dc:c0:0f:dd:31:9b:c0:7b: 53:5f:16:c7:41:49:dd:59:fd:67:43:e2:34:58:95: 4c:5e:84:c8:aa:a3:22:06:97:ed:98:e0:37:86:17: 3e:d7:f6:81:6f:52:4b:6f:cb:f1:b0:08:07:cc:81: 07:d4:c1:8b:01:43:17:af:c4:e2:72:0c:9c:e9:1d: cf:f8:eb:97:2d:e7:14:b7:02:15:6f:e5:f9:0f:44: 7f:64:9f:4a:3a:8c:5a:8a:53:ed:24:23:21:a4:3e: 15:71:b0:78:bc:b9:7e:b3:fd:e0:4f:38:f1:51:f5: 77:83:02:e3:5e:72:c4:f9:f2:c6:2a:85:f1:11:3a: bb:29:74:99:fe:a2:b4:53:59:27:b1:ef:35:16:d3: b3:fc:82:aa:04:10:df:26:af:18:ee:14:f4:76:ed: dc:a8:c6:5b:6b:6c:5d:b3:61:ba:e1:5c:75:c2:8a: 9b:c0:2b:b9:8d:1d:0e:3e:df:b5:6b:8d:aa:48:22: 10:82:2f:42:ca:5e:35:b4:0a:80:ba:99:56:ad:a4: 25:91:ab:29:07:00:0b:14:ef:2b:ad:d7:ae:37:bd: 1d:cb:ca:c8:3e:eb:13:c5:16:95:fd:bd:d5:8b:18: 5c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:EF:05:4D:6E:CF:1D:DF:61:E2:62:AA:EF:25:A1:97:2C:72:C1:7C X509v3 Authority Key Identifier: keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:c7:1f:26:db:e9:0d:c4:2a:ed:8d:1c:5c:66:d0:6c:d1:52: 14:1b:74:f5:86:75:fb:ec:6f:ed:2c:32:d1:df:b9:8f:f6:8e: 06:61:44:80:34:4e:51:1e:32:33:03:b0:31:48:14:97:b4:16: 0e:e8:0e:cb:9f:d7:11:e3:00:a5:0d:a3:80:70:6a:0d:5e:14: 50:2a:8c:f4:e3:70:1b:a2:96:d7:67:ed:a2:53:ac:bb:f6:a7: b0:de:31:55:9e:3d:29:b8:45:b2:22:74:b1:90:32:69:54:3d: 37:93:35:46:d5:5d:ab:bd:30:0e:de:2d:37:da:b5:7d:37:8c: 48:f1:c1:ee:f3:5c:34:da:e3:44:f1:72:ed:dc:d1:c4:90:7a: d7:b5:7e:1a:15:83:cf:9c:33:b9:45:22:4c:a5:95:67:72:0f: b8:50:98:df:d0:cb:0f:79:d2:dc:a0:1e:9d:dd:35:80:86:47: 26:fb:43:6c:f1:0c:cd:a4:c1:b6:50:16:70:e2:4e:a2:fa:d6: c7:54:0e:59:51:b7:d8:11:2a:d6:7e:d6:be:2b:0c:f4:92:38: 63:3f:ed:c6:3b:7d:13:03:86:45:09:e8:44:2d:4e:50:71:31: 3a:16:53:1c:85:5f:30:07:f1:c1:6a:5e:d3:88:9d:62:3c:4d: 26:6d:86:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM3MkYxMTAvBgNVBAUTKDFGQzc1QUFEQTBBNTFCRUUxQUJFNkY3MzM1OUY3OUI2 QTM0NkY2QTQwHhcNMjUxMDE5MDIwODEzWhcNMjUxMDI2MDIwODEzWjAYMRYwFAYD VQQDEw02OGY0NDgwZS1jMzIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Lrlgku5GbPZPt/o9juZA4cPssb53MAP3TGbwHtTXxbHQUndWf1nQ+I0WJVM XoTIqqMiBpftmOA3hhc+1/aBb1JLb8vxsAgHzIEH1MGLAUMXr8Ticgyc6R3P+OuX LecUtwIVb+X5D0R/ZJ9KOoxailPtJCMhpD4VcbB4vLl+s/3gTzjxUfV3gwLjXnLE +fLGKoXxETq7KXSZ/qK0U1knse81FtOz/IKqBBDfJq8Y7hT0du3cqMZba2xds2G6 4Vx1woqbwCu5jR0OPt+1a42qSCIQgi9Cyl41tAqAuplWraQlkaspBwALFO8rrdeu N70dy8rIPusTxRaV/b3Vixhc5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvvBU1u zx3fYeJiqu8loZcscsF8MB8GA1UdIwQYMBaAFB/HWq2gpRvuGr5vczWfebajRvak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzcyRi85MzI2Qzc5MDc3 NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEctNGF2bTl6Tlo5NXRxTkc5 cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4ZGFyYUNsRy00YXZtOXpOWjk1dHFORzlxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzcyRi85MzI2Qzc5MDc3NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEct NGF2bTl6Tlo5NXRxTkc5cVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFxx8m2+kNxCrtjRxcZtBs0VIUG3T1hnX77G/tLDLR37mP9o4GYUSA NE5RHjIzA7AxSBSXtBYO6A7Ln9cR4wClDaOAcGoNXhRQKoz043AbopbXZ+2iU6y7 9qew3jFVnj0puEWyInSxkDJpVD03kzVG1V2rvTAO3i032rV9N4xI8cHu81w02uNE 8XLt3NHEkHrXtX4aFYPPnDO5RSJMpZVncg+4UJjf0MsPedLcoB6d3TWAhkcm+0Ns 8QzNpMG2UBZw4k6i+tbHVA5ZUbfYESrWfta+Kwz0kjhjP+3GO30TA4ZFCehELU5Q cTE6FlMchV8wB/HBal7TiJ1iPE0mbYZj -----END CERTIFICATE-----Generated at Mon Oct 20 05:45:06 2025 by rpki-client