$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json) Hash identifier: k4gteWFkBZ+y1rKLLFwfYtaGMeasbJjXUD4rPHn09FI= Subject key identifier: A2:BD:08:D0:4C:CB:DB:28:AD:91:3A:D4:AC:5D:4E:50:54:31:18:F0 Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 03A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft Manifest number: 0354 Signing time: Sun 19 Oct 2025 03:12:09 +0000 Manifest this update: Sun 19 Oct 2025 03:12:08 +0000 Manifest next update: Sun 26 Oct 2025 03:12:08 +0000 Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: YNd1JCrS251lqj5tePTBCAW4o0wzungGCvillkwmNO8=) 2: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: ZQ/fU5d1evPPnYD3iA98SPz8Kp3nQtzF91XOnGRTmko=) 3: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: c8x4WauwQnDwDqZuEAJ4h64A3YhZdzAuusRUf8JYYN8=) 4: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: itBUJ/NWTISnHVYwiSk058o8wCPmgPPTXD1wCEm1HPU=) 5: 72D237AEEBA011EC87608210C4F9AE02.roa (hash: iSdaxxqgc4SH7DXdUJ6oZreikaVBPpaQcLPWc3b7FIc=) 6: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: go1KQLAsWSMcDFpFZPzbcCoYXA902eWujQs5DRA5NuQ=) 7: BE4B3228691411EFB573C120C4F9AE02.roa (hash: FluzuCEVsK4WA6irM+7AYglOFW70dV1BU5TUHFD621E=) 8: 19EC493AE32111ED9B98B683C4F9AE02.roa (hash: t9M7T3kGK/bHK5ZGPmj0eAYe1o0Vh2EqcoFWaTSjMIE=) 9: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: 5R/vByP+bLJ/gauluwV0ijjw0b2SOL4DSiyRAY6Etqs=) 10: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: m1fb1egRrU9+d8hQvMjnw8fgUgdDVqcZIQ0pMpm6ljc=) 11: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: E+BZL/7QU8UpRIJdbcW9rfaR46I2sLpkyfwtpdJN/VI=) 12: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: cN/u2ghL7Ty5H0rMkH3B9dtMoGNw2oNZ5rkn/Hb9xkU=) 13: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: 7Kj+4WHxVaVF82sSnOwl9LxBArA7W70r8lzjmBc5kVs=) 14: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: H7xrZOzZPQxCuJob9N/j2hDDJP833H9T1/f50kmyI3U=) 15: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: be0pdzXjf+dpXeRPaIldstiNx4QzCRK3M1bauqjIvLs=) 16: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: 9FLrfM7I4+bVcqyGWmEPmZO9HbNgyq3TURv3crH+HFI=) 17: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: zucr8aDjnFPBdo+ifl5g81+ainFQhQ/ksa8y2tjbLS4=) 18: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: kogXUDWKK78CAHTJtbOeSXgRNGSuMbtJtIHaw+cqK8c=) 19: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: cAER3YKLvVpIlFa2HmbUxYe1iz95sgNYpvM/4V9O1FM=) 20: EA792108690E11EF9396CC48C4F9AE02.roa (hash: umWQN4kGqAHPIk4w+IQl09gKoDRTIfMgnHpo1DCC4Pw=) 21: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: eF1xrltNfnruVqxNMjD44+JutJBXSUDGILKtju+n9dE=) 22: B35D540E68F611EFB785D145C4F9AE02.roa (hash: oyIjz/XYfgr26Spk6RY9XOtfUIT6X7uMOPMW03yZfAM=) 23: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: v2vRc6B+gwZg5NOfzaQPP6ML2YBJcqr080DwDx1pUOg=) 24: 218211CA68F911EF986C8281C4F9AE02.roa (hash: pHoz/kBOmkd5VG3teXH7pPsGNOOVgbbDMsd3VhHUAEo=) 25: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: Y3bQNy1ojyOB4N21qfu+0X9uUvLU+z0WanHBys0zBlU=) 26: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: HQ71fsK6HJEx6JB43+BRDscF/a1IXcYLFxyQuU5FBnw=) 27: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: kqYwhkwqrnPwUBbzCMbRJ6+BU/s1Jp8YtMASUL3cC6Y=) 28: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: d/aMw06UKvCrIDovTtwhw18Yfx0jjxX2eyRA38OLxcQ=) 29: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: +1sHzrOMqBbheGIlr1WPdNiSvR59VAOdWWIJJa+mgHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 937 (0x3a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Oct 19 03:12:08 2025 GMT Not After : Oct 26 03:12:08 2025 GMT Subject: CN=68f45709-2f2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cc:a2:1f:4e:ff:a9:9c:98:86:51:f7:52:0f: 79:74:b4:bd:55:e0:50:5d:aa:fd:f1:75:25:24:1e: 97:c2:7a:2a:3d:40:fa:89:dc:8b:4f:81:79:77:1c: a0:31:ff:49:7d:52:17:d3:be:5e:1a:1a:cf:ee:8e: 13:5e:83:4e:32:57:50:fc:fb:8c:e0:42:c0:a4:17: 9f:8d:74:80:2f:b2:81:13:05:46:8c:cc:b4:78:93: fb:9f:ed:27:98:01:ed:bf:fc:61:8a:c8:6d:20:96: f7:9a:18:94:ba:90:68:69:d0:70:86:93:81:d5:ec: cb:f1:c3:ff:4e:fa:3f:cb:af:f7:42:32:86:6e:68: aa:2f:8c:e6:89:37:cd:7e:23:b9:19:84:09:28:97: f6:be:3f:9e:c5:d0:76:c3:8e:70:a4:b1:5c:c0:bd: 78:81:5b:19:d9:dc:38:9a:3e:11:8e:46:2e:2c:20: 22:bb:c8:c3:56:84:4f:12:2b:24:49:0d:93:a5:50: 83:ba:fa:77:ef:fb:43:72:ce:d9:7c:da:12:20:53: ed:f8:1a:99:d2:e4:9b:0d:21:c3:26:58:db:5b:3b: 9c:2a:fd:10:52:bc:df:0c:ba:7c:c3:f2:2a:86:28: f6:4c:73:99:fd:1c:e0:a1:a4:48:28:5a:35:3e:4e: 98:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BD:08:D0:4C:CB:DB:28:AD:91:3A:D4:AC:5D:4E:50:54:31:18:F0 X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:11:c1:93:7d:fb:cd:03:f7:80:81:e9:64:49:bf:72:c5:59: ea:a0:6f:e9:41:61:a4:95:3b:9d:73:59:79:dc:7e:25:0c:e2: e9:00:a1:d0:23:6d:86:f6:b4:70:f7:f1:bd:9d:8c:5e:6a:71: f1:37:07:05:9f:4a:b1:fe:20:78:4f:ac:20:cb:e1:66:00:24: aa:a7:61:5c:8a:01:a2:04:dc:d4:24:ca:e0:f3:83:61:79:ec: 46:eb:12:b1:c3:69:b8:e9:85:7a:2a:6d:87:89:1e:a0:b7:37: 8e:a7:a4:3d:a7:3a:fd:28:18:d6:7a:b1:e2:60:b2:d6:7c:ea: db:93:14:ed:c7:a4:3e:42:65:8d:66:37:5b:84:41:0d:d8:76: 37:5c:10:93:7d:c9:8b:eb:91:67:d4:1e:47:dc:a4:cf:63:a5: 4f:45:c9:1e:47:a9:58:33:14:e0:c8:1e:20:e6:4b:81:58:8a: 68:16:27:ce:9d:6f:df:96:7c:f1:ab:a7:b5:58:fa:d1:a8:9b: 30:af:1a:3d:87:08:7a:ae:02:75:34:a4:e3:40:98:fa:69:9d: 47:b1:f2:ee:f2:fa:a0:b8:5f:2c:66:55:73:ee:8a:da:c5:02: b7:e4:b8:f7:49:ec:29:76:ad:fc:b6:f7:16:2a:41:f7:53:1e: cf:b3:33:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUxMDE5MDMxMjA4WhcNMjUxMDI2MDMxMjA4WjAYMRYwFAYD VQQDEw02OGY0NTcwOS0yZjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqsyiH07/qZyYhlH3Ug95dLS9VeBQXar98XUlJB6XwnoqPUD6idyLT4F5dxyg Mf9JfVIX075eGhrP7o4TXoNOMldQ/PuM4ELApBefjXSAL7KBEwVGjMy0eJP7n+0n mAHtv/xhishtIJb3mhiUupBoadBwhpOB1ezL8cP/Tvo/y6/3QjKGbmiqL4zmiTfN fiO5GYQJKJf2vj+exdB2w45wpLFcwL14gVsZ2dw4mj4RjkYuLCAiu8jDVoRPEisk SQ2TpVCDuvp37/tDcs7ZfNoSIFPt+BqZ0uSbDSHDJljbWzucKv0QUrzfDLp8w/Iq hij2THOZ/RzgoaRIKFo1Pk6YnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKK9CNBM y9sorZE61KxdTlBUMRjwMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDQyQS8yMEYyQ0IwMEVCOUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklT anQ5UG1iTENxQkgxd2dGWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFEcGTffvNA/eAgelkSb9yxVnqoG/pQWGklTudc1l53H4lDOLpAKHQ I22G9rRw9/G9nYxeanHxNwcFn0qx/iB4T6wgy+FmACSqp2FcigGiBNzUJMrg84Nh eexG6xKxw2m46YV6Km2HiR6gtzeOp6Q9pzr9KBjWerHiYLLWfOrbkxTtx6Q+QmWN ZjdbhEEN2HY3XBCTfcmL65Fn1B5H3KTPY6VPRckeR6lYMxTgyB4g5kuBWIpoFifO nW/flnzxq6e1WPrRqJswrxo9hwh6rgJ1NKTjQJj6aZ1HsfLu8vqguF8sZlVz7ora xQK35Lj3Sewpdq38tvcWKkH3Ux7PszNM -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:16 2025 by rpki-client