$ rpki-client -vvf rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft File: Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft (raw, json) Hash identifier: nUrI9vK3FCdLW+SXyD6rGgFpG1FKIdN/HkOerBzPD3A= Subject key identifier: D7:9B:B7:05:C6:A3:40:89:5A:0A:33:8A:AB:8C:1B:6A:12:78:16:DB Authority key identifier: 1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 Certificate issuer: /CN=A912F17E/serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Certificate serial: 34D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft Manifest number: 34CE Signing time: Sat 18 Oct 2025 15:17:24 +0000 Manifest this update: Sat 18 Oct 2025 15:17:23 +0000 Manifest next update: Sat 25 Oct 2025 15:17:23 +0000 Files and hashes: 1: Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl (hash: F3Jm6wl7wzsCA10lv3ut8JChXJUP2SAxORx6N7Caypc=) 2: FFCDED80FFE111EFB1C18E52C4F9AE02.roa (hash: mU82c9UsN7aMzC4DMeuqqygQy0O+yLmNqhxj9poHsyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:17:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13525 (0x34d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F17E, serialNumber=1F3E8B01D841CBE6220D02D2CD111354F19C47B2 Validity Not Before: Oct 18 15:17:23 2025 GMT Not After : Oct 25 15:17:23 2025 GMT Subject: CN=68f3af84-f3c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d1:95:c1:98:d8:94:11:3b:c9:60:44:c3:cf: f0:93:23:cf:3f:9e:61:ab:ec:46:1c:a6:cd:ae:dc: 88:40:58:12:8f:7c:7a:2f:3d:f3:b3:80:35:f7:a9: de:77:94:7e:c0:3c:68:73:ea:37:85:d0:21:de:68: ef:b1:a2:5b:6d:69:c4:69:34:de:d4:dc:7c:74:73: e2:81:b5:69:99:bf:05:11:14:95:da:97:5b:84:8c: fc:7f:bc:fb:55:da:7f:5f:1e:20:30:3f:b4:49:1a: c9:08:ad:b5:66:2c:6a:f0:b3:ac:57:01:30:3b:3c: 0b:c0:21:db:8d:08:bb:ba:5f:9b:e8:cc:d3:6a:d4: 16:85:dd:82:f8:26:dc:3f:0c:51:ad:14:65:27:3c: 79:1d:3c:dd:e9:a7:c5:91:72:08:8a:ff:9c:c0:90: fe:6d:f4:ea:4a:10:da:f5:dd:f0:93:4e:fe:cd:c5: 88:0e:c9:a1:3c:bb:e8:99:c9:c2:c1:02:9c:75:51: 9c:c1:57:87:6a:14:9e:db:6e:1a:1d:4c:c8:6a:61: fa:74:3c:e4:f1:88:9c:0c:5e:25:3b:14:cf:af:ee: bb:cd:ca:16:5f:8c:69:19:fb:1e:77:44:94:ac:96: 04:be:9b:e8:b8:d9:da:56:89:26:c9:09:f0:06:b9: c3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9B:B7:05:C6:A3:40:89:5A:0A:33:8A:AB:8C:1B:6A:12:78:16:DB X509v3 Authority Key Identifier: keyid:1F:3E:8B:01:D8:41:CB:E6:22:0D:02:D2:CD:11:13:54:F1:9C:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F17E/FCFF84661DA311E281EAAF9908B02CD2/Hz6LAdhBy-YiDQLSzRETVPGcR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:c1:0a:38:d7:3a:b3:95:84:3d:f1:90:bc:a1:7e:54:6e:c0: 2a:15:a0:29:c6:65:1e:06:9e:85:55:9a:3c:73:16:5c:3f:9b: f7:98:a0:a5:24:c1:df:2d:30:3a:d8:f3:4a:b7:d2:6d:7a:22: ca:12:ee:17:ad:de:d8:a0:ec:b4:d6:4a:78:ba:a8:59:f9:9b: fc:32:d0:b2:30:35:cb:9d:2f:9d:ff:e7:fb:53:44:63:e6:ee: 22:ba:d4:ea:d3:e0:b4:bf:65:44:a2:26:a0:c7:c2:cd:7b:49: 76:05:4c:d3:ba:a2:be:42:1a:3f:1a:0c:a5:52:27:06:e4:df: 76:15:06:80:f3:26:20:63:4f:e7:fa:49:d6:53:9a:18:64:61: 78:c7:f7:41:6f:b9:e3:db:45:42:55:a5:61:ba:ec:96:08:17: 01:d1:a8:c2:29:c3:86:6b:8f:3f:b4:af:59:56:0f:a0:1b:6b: 20:0f:3b:59:17:19:76:fc:18:d3:05:9e:9a:0f:96:1a:f6:c3: 75:26:54:03:b6:ff:51:a0:f0:5b:69:a2:f3:6e:f0:e3:29:d0: 60:09:95:6a:50:cd:57:2e:b1:f2:0d:46:86:fa:2e:43:c0:9e: 41:5f:1c:04:9e:e6:21:cd:47:43:63:a3:24:a2:66:db:0f:57: 43:22:64:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYxN0UxMTAvBgNVBAUTKDFGM0U4QjAxRDg0MUNCRTYyMjBEMDJEMkNEMTExMzU0 RjE5QzQ3QjIwHhcNMjUxMDE4MTUxNzIzWhcNMjUxMDI1MTUxNzIzWjAYMRYwFAYD VQQDEw02OGYzYWY4NC1mM2M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tGVwZjYlBE7yWBEw8/wkyPPP55hq+xGHKbNrtyIQFgSj3x6Lz3zs4A196ne d5R+wDxoc+o3hdAh3mjvsaJbbWnEaTTe1Nx8dHPigbVpmb8FERSV2pdbhIz8f7z7 Vdp/Xx4gMD+0SRrJCK21Zixq8LOsVwEwOzwLwCHbjQi7ul+b6MzTatQWhd2C+Cbc PwxRrRRlJzx5HTzd6afFkXIIiv+cwJD+bfTqShDa9d3wk07+zcWIDsmhPLvomcnC wQKcdVGcwVeHahSe224aHUzIamH6dDzk8YicDF4lOxTPr+67zcoWX4xpGfsed0SU rJYEvpvouNnaVokmyQnwBrnDwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNebtwXG o0CJWgoziquMG2oSeBbbMB8GA1UdIwQYMBaAFB8+iwHYQcvmIg0C0s0RE1TxnEey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjE3RS9GQ0ZGODQ2NjFE QTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnktWWlEUUxTelJFVFZQR2NS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h6NkxBZGhCeS1ZaURRTFN6UkVUVlBHY1I3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjE3RS9GQ0ZGODQ2NjFEQTMxMUUyODFFQUFGOTkwOEIwMkNEMi9IejZMQWRoQnkt WWlEUUxTelJFVFZQR2NSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxwQo41zqzlYQ98ZC8oX5UbsAqFaApxmUeBp6FVZo8cxZcP5v3mKCl JMHfLTA62PNKt9JteiLKEu4Xrd7YoOy01kp4uqhZ+Zv8MtCyMDXLnS+d/+f7U0Rj 5u4iutTq0+C0v2VEoiagx8LNe0l2BUzTuqK+Qho/GgylUicG5N92FQaA8yYgY0/n +knWU5oYZGF4x/dBb7nj20VCVaVhuuyWCBcB0ajCKcOGa48/tK9ZVg+gG2sgDztZ Fxl2/BjTBZ6aD5Ya9sN1JlQDtv9RoPBbaaLzbvDjKdBgCZVqUM1XLrHyDUaG+i5D wJ5BXxwEnuYhzUdDY6MkombbD1dDImQr -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:16 2025 by rpki-client