$ rpki-client -vvf rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft File: H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft (raw, json) Hash identifier: 1JSN+IpYF/hpi8Vg+AO/DPmNb3ajpo3ni8Z31w3+WC0= Subject key identifier: EE:C4:33:C4:47:32:81:00:F5:2A:41:56:2C:3F:68:FA:09:EB:69:1E Authority key identifier: 1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB Certificate issuer: /CN=A912708C/serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB Certificate serial: 0608 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft Manifest number: 0602 Signing time: Sun 19 Oct 2025 00:30:47 +0000 Manifest this update: Sun 19 Oct 2025 00:30:46 +0000 Manifest next update: Sun 26 Oct 2025 00:30:46 +0000 Files and hashes: 1: H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl (hash: OFGvY6sxJOBNbPoO7okIBzVBVga9M/kPevhSBovogBg=) 2: 8AA59866C55511EBA7DB557EC4F9AE02.roa (hash: Vhi1JgNRZObirmNIX1fnf2q21PbGnP/JOntHIC3xnJI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:30:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1544 (0x608) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912708C, serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB Validity Not Before: Oct 19 00:30:46 2025 GMT Not After : Oct 26 00:30:46 2025 GMT Subject: CN=68f43137-c357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:13:4e:24:cb:f2:31:03:a7:4e:07:9b:fb:8e: 10:27:c1:cd:f3:9a:35:5d:20:19:20:9c:70:60:e0: ce:8b:c4:08:e8:b4:dd:34:98:ba:ad:1a:33:ce:ab: 40:a8:f7:36:1b:b7:12:48:5e:e7:97:1e:06:b7:95: 16:e4:d3:df:c7:db:68:b8:31:fb:e1:e2:da:c4:ac: 5b:af:e6:92:95:6c:d2:c3:91:96:bc:a5:15:88:3c: c3:4d:2f:67:c6:65:db:83:4f:85:96:14:53:a2:91: d3:be:15:24:da:88:a3:75:48:ce:77:6a:70:2e:8a: d3:95:cb:be:06:f2:fe:15:54:f3:7a:48:e3:0d:dd: f6:e6:6b:fa:d8:a1:f2:15:3d:80:1c:9d:f5:5b:60: b8:16:5e:99:ae:c6:90:e1:f1:9c:eb:37:46:95:ac: a7:e2:41:74:41:8a:2a:a5:27:53:c8:b3:ef:15:ae: 2a:3b:c0:90:b6:90:37:0a:7c:48:cb:18:ec:c2:8a: 73:43:a1:ca:53:12:63:39:23:1e:d5:5d:d6:ca:e8: 47:35:3c:10:09:9d:76:24:f2:43:e9:80:ec:1f:04: a3:d5:29:38:dc:86:f0:6b:e7:27:82:2d:f1:10:82: ed:73:c6:1e:df:bf:4d:39:50:03:ef:eb:8c:d1:9a: fc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C4:33:C4:47:32:81:00:F5:2A:41:56:2C:3F:68:FA:09:EB:69:1E X509v3 Authority Key Identifier: keyid:1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:09:a4:fc:56:4d:02:cf:c6:12:d0:b6:69:dd:95:63:0f:d2: 84:01:0b:cb:fc:47:56:f1:26:e2:8f:1a:d3:65:d3:81:a7:e9: 24:1f:f9:da:e1:04:c5:3a:ca:95:15:12:0c:d8:a3:68:cd:f1: 8d:48:07:4e:58:1b:cb:cd:5d:d4:57:75:c8:3b:80:e2:6d:67: 55:b2:9d:67:89:b3:50:c9:32:42:98:7b:a1:7b:1b:ce:17:0b: 8a:64:b3:b3:6d:38:dd:6d:b1:2c:a5:2e:b3:b2:42:4c:05:ff: c9:8e:c5:8a:3c:8e:4f:17:e9:c5:71:d6:6a:0b:fc:9c:a0:3d: 25:6a:53:e3:04:51:08:d5:ec:67:2e:d4:73:f5:b2:c8:59:ed: d4:19:15:11:1c:82:d0:15:82:71:84:ed:02:e7:5e:55:f2:57: 5e:59:82:84:11:6e:c5:b9:c4:15:70:7f:de:25:5f:13:90:f8: 21:24:c5:40:5d:0b:1b:60:83:03:80:a5:b5:68:14:32:f5:01: 58:e4:be:d9:ba:05:f9:b2:f6:d1:c7:33:05:15:b5:c0:54:d1: 04:2b:44:1a:3f:1a:a2:28:f3:94:f0:ee:31:7c:2f:8d:26:3a: 89:ab:37:4b:db:bc:6e:11:d0:ae:26:76:91:45:90:0a:3b:b5: 3b:ac:f6:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjcwOEMxMTAvBgNVBAUTKDFGRDVBMTgyRDU5MzM0NzU3MEYyRDkxODZEMjQ4NEM5 MDk1QzVGRkIwHhcNMjUxMDE5MDAzMDQ2WhcNMjUxMDI2MDAzMDQ2WjAYMRYwFAYD VQQDEw02OGY0MzEzNy1jMzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohNOJMvyMQOnTgeb+44QJ8HN85o1XSAZIJxwYODOi8QI6LTdNJi6rRozzqtA qPc2G7cSSF7nlx4Gt5UW5NPfx9touDH74eLaxKxbr+aSlWzSw5GWvKUViDzDTS9n xmXbg0+FlhRTopHTvhUk2oijdUjOd2pwLorTlcu+BvL+FVTzekjjDd325mv62KHy FT2AHJ31W2C4Fl6ZrsaQ4fGc6zdGlayn4kF0QYoqpSdTyLPvFa4qO8CQtpA3CnxI yxjswopzQ6HKUxJjOSMe1V3WyuhHNTwQCZ12JPJD6YDsHwSj1Sk43Ibwa+cngi3x EILtc8Ye379NOVAD7+uM0Zr86QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7EM8RH MoEA9SpBViw/aPoJ62keMB8GA1UdIwQYMBaAFB/VoYLVkzR1cPLZGG0khMkJXF/7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzA4Qy8xNjgwMzRGRUM1 NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5IVnc4dGtZYlNTRXlRbGNY X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g5V2hndFdUTkhWdzh0a1liU1NFeVFsY1hfcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzA4Qy8xNjgwMzRGRUM1NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5I Vnc4dGtZYlNTRXlRbGNYX3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKCaT8Vk0Cz8YS0LZp3ZVjD9KEAQvL/EdW8SbijxrTZdOBp+kkH/na 4QTFOsqVFRIM2KNozfGNSAdOWBvLzV3UV3XIO4DibWdVsp1nibNQyTJCmHuhexvO FwuKZLOzbTjdbbEspS6zskJMBf/JjsWKPI5PF+nFcdZqC/ycoD0lalPjBFEI1exn LtRz9bLIWe3UGRURHILQFYJxhO0C515V8ldeWYKEEW7FucQVcH/eJV8TkPghJMVA XQsbYIMDgKW1aBQy9QFY5L7ZugX5svbRxzMFFbXAVNEEK0QaPxqiKPOU8O4xfC+N JjqJqzdL27xuEdCuJnaRRZAKO7U7rPZx -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:28 2025 by rpki-client