$ rpki-client -vvf rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft File: fHxDqtDIa183jl18MzKgXeRhJ1A.mft (raw, json) Hash identifier: qOBevhFYd8Zvv5GBp/pTy/jNyW1EnZM8vOu2W4uG/PU= Subject key identifier: 7C:B4:60:77:35:02:DC:C5:22:7B:8C:45:D0:CA:12:99:C6:2F:C2:72 Authority key identifier: 7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 Certificate issuer: /CN=A912CA50/serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Certificate serial: 0833 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft Manifest number: 0812 Signing time: Sat 18 Oct 2025 22:10:53 +0000 Manifest this update: Sat 18 Oct 2025 22:10:52 +0000 Manifest next update: Sat 25 Oct 2025 22:10:52 +0000 Files and hashes: 1: fHxDqtDIa183jl18MzKgXeRhJ1A.crl (hash: dwmam/stHLQNPfBKT0HigvZjDohzV8If5GFCqkRTcZs=) 2: E7EBC9003EE411ED905A3415C4F9AE02.roa (hash: BwA8MEhqgGbAzSbHdeQ+BFQnrqqSo7A794PhNnAq0qA=) 3: E897EA5A3EE411ED905A3415C4F9AE02.roa (hash: TWoh7LVQqQmuW9GpZzIh16PRVa2OB94FLWBuSV7i0+8=) 4: 5035F194413211EDAAFCC96EC4F9AE02.roa (hash: F8etYfliydabteMfbSSAIkH2xX9USHfIQD7d5Y84ryM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:10:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2099 (0x833) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CA50, serialNumber=7C7C43AAD0C86B5F378E5D7C3332A05DE4612750 Validity Not Before: Oct 18 22:10:52 2025 GMT Not After : Oct 25 22:10:52 2025 GMT Subject: CN=68f4106c-fff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:42:bb:56:ca:19:a5:17:e5:92:a2:58:d6:e1: 48:8c:34:e1:b9:11:ff:8e:31:65:76:da:77:bb:c9: df:5f:4b:8c:63:f3:8f:aa:06:e0:86:d9:aa:64:df: ff:f2:97:ef:bd:86:17:58:45:b0:aa:55:ed:e2:65: 1e:32:19:5f:74:bb:51:bc:0a:62:2c:f5:b1:13:19: 55:ac:82:2e:0a:6f:a2:8e:ee:3f:66:51:fd:d3:4f: 9f:71:f7:ac:f3:9c:d6:23:63:99:5a:b7:62:9a:40: ff:16:cc:01:9b:9e:f4:2f:21:5c:42:6f:04:45:48: 29:ab:9e:da:cf:1e:c8:75:a6:71:f0:11:ea:60:4c: e1:e0:c3:c4:ea:ea:9c:20:98:1e:63:d4:a6:3f:64: 1f:01:69:e3:f5:fc:00:91:6f:46:bc:e1:27:36:40: bf:53:1e:f2:bc:c9:41:c9:05:74:78:9d:b3:ab:22: ed:b3:99:e9:fb:3f:01:ca:cc:bc:62:42:76:3d:10: 37:81:fe:9c:2b:5f:be:f7:a0:54:e6:21:2a:40:b7: c5:26:93:2a:0c:35:4a:9d:e4:09:be:aa:d6:5a:bf: 80:00:a0:e7:68:1a:b5:5b:39:d8:d1:b8:7f:ce:93: 1d:7c:0c:3a:ee:8c:2d:fa:a8:df:4a:b2:11:da:f9: bb:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B4:60:77:35:02:DC:C5:22:7B:8C:45:D0:CA:12:99:C6:2F:C2:72 X509v3 Authority Key Identifier: keyid:7C:7C:43:AA:D0:C8:6B:5F:37:8E:5D:7C:33:32:A0:5D:E4:61:27:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fHxDqtDIa183jl18MzKgXeRhJ1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CA50/381C1716FBA511EABBAEB363C4F9AE02/fHxDqtDIa183jl18MzKgXeRhJ1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:d2:47:42:0d:3d:c9:21:d8:2a:71:6e:3c:e4:fa:cf:ef:26: d9:9b:55:df:d9:3e:c0:55:0d:65:c4:f6:db:e7:8e:55:59:c3: 60:10:86:75:98:b0:a8:31:b4:0f:99:e4:d5:5f:a4:05:65:5c: 79:4a:ae:cf:88:ad:0b:c5:13:7e:75:da:3e:9f:5a:2a:bd:92: 79:e2:ce:11:61:fd:3a:74:de:a5:96:85:7f:d6:81:e9:74:9f: 7f:de:e9:6d:41:58:6e:dc:bf:2c:00:29:eb:04:03:b8:b8:f4: 0a:47:fa:8a:a8:0f:63:85:e3:34:24:2f:04:03:4e:0e:a2:3e: 9e:1a:64:97:d8:7e:95:df:e5:84:34:96:db:5e:b7:84:38:ba: d0:b6:2e:01:2c:7c:11:c0:4d:77:5d:2b:81:0d:87:32:b0:5a: 15:f5:61:03:90:26:05:6b:b0:9b:6b:5d:ad:65:69:4f:c5:37: 57:ef:a3:e4:7d:87:94:c2:33:0c:ba:23:7a:85:70:16:02:9e: b3:db:e7:ce:18:a9:f3:1f:74:f2:76:1e:f3:dd:4a:df:af:5e: 4b:52:4f:05:04:40:c2:a2:28:a4:8a:ac:51:ad:9d:d5:d3:cf: b8:f3:c0:37:95:eb:e3:82:60:84:df:23:20:81:89:80:3f:09: f1:45:cd:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNBNTAxMTAvBgNVBAUTKDdDN0M0M0FBRDBDODZCNUYzNzhFNUQ3QzMzMzJBMDVE RTQ2MTI3NTAwHhcNMjUxMDE4MjIxMDUyWhcNMjUxMDI1MjIxMDUyWjAYMRYwFAYD VQQDEw02OGY0MTA2Yy1mZmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUK7VsoZpRflkqJY1uFIjDThuRH/jjFldtp3u8nfX0uMY/OPqgbghtmqZN// 8pfvvYYXWEWwqlXt4mUeMhlfdLtRvApiLPWxExlVrIIuCm+iju4/ZlH900+fcfes 85zWI2OZWrdimkD/FswBm570LyFcQm8ERUgpq57azx7IdaZx8BHqYEzh4MPE6uqc IJgeY9SmP2QfAWnj9fwAkW9GvOEnNkC/Ux7yvMlByQV0eJ2zqyLts5np+z8Bysy8 YkJ2PRA3gf6cK1++96BU5iEqQLfFJpMqDDVKneQJvqrWWr+AAKDnaBq1WznY0bh/ zpMdfAw67owt+qjfSrIR2vm7DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHy0YHc1 AtzFInuMRdDKEpnGL8JyMB8GA1UdIwQYMBaAFHx8Q6rQyGtfN45dfDMyoF3kYSdQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0E1MC8zODFDMTcxNkZC QTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWExODNqbDE4TXpLZ1hlUmhK MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIeERxdERJYTE4M2psMThNektnWGVSaEoxQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0E1MC8zODFDMTcxNkZCQTUxMUVBQkJBRUIzNjNDNEY5QUUwMi9mSHhEcXRESWEx ODNqbDE4TXpLZ1hlUmhKMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr0kdCDT3JIdgqcW485PrP7ybZm1Xf2T7AVQ1lxPbb545VWcNgEIZ1 mLCoMbQPmeTVX6QFZVx5Sq7PiK0LxRN+ddo+n1oqvZJ54s4RYf06dN6lloV/1oHp dJ9/3ultQVhu3L8sACnrBAO4uPQKR/qKqA9jheM0JC8EA04Ooj6eGmSX2H6V3+WE NJbbXreEOLrQti4BLHwRwE13XSuBDYcysFoV9WEDkCYFa7Cba12tZWlPxTdX76Pk fYeUwjMMuiN6hXAWAp6z2+fOGKnzH3Tydh7z3Urfr15LUk8FBEDCoiikiqxRrZ3V 08+488A3levjgmCE3yMggYmAPwnxRc0B -----END CERTIFICATE-----Generated at Mon Oct 20 13:34:28 2025 by rpki-client