$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: gHALGSULXGZk1z6q8FFad+ErCZC6adqhgcEMlmNfBF8= Subject key identifier: F7:F8:CA:CB:37:3C:E9:3E:90:63:14:95:86:C7:C4:52:A7:D3:7A:D1 Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: 0174 Signing time: Sun 19 Oct 2025 06:35:32 +0000 Manifest this update: Sun 19 Oct 2025 06:35:31 +0000 Manifest next update: Sun 26 Oct 2025 06:35:31 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: r862MErThleBXKikFV/AcWIMG97lt00+UPr/dsHptA8=) 2: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: RLnLzyrrcNZhWSbOgsksg70plHnwm/0y4IiOT7XePHI=) 3: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: g3qVGTL6N3Bx7PoU5ChuYFlVdWGCksOpw5qXnk0J/9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: Oct 19 06:35:31 2025 GMT Not After : Oct 26 06:35:31 2025 GMT Subject: CN=68f486b3-a37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:bf:1d:8f:48:69:e0:9d:db:89:33:46:7c:dd: a6:10:b8:bf:49:35:0e:89:5c:de:c2:1c:0b:f0:cf: ba:95:ef:82:25:a0:e7:c2:bb:d9:e4:ff:99:08:97: ab:68:67:cb:64:8f:4f:4d:99:89:55:3e:94:36:1b: 03:13:92:48:0e:ae:69:c8:02:be:14:49:59:e0:61: 23:1c:b0:1b:c8:a3:94:97:1c:41:aa:ce:4f:66:c6: 0b:db:b2:44:0e:ca:03:8a:cd:f1:a5:f8:5d:26:7e: 01:63:04:b5:50:6c:c9:95:96:df:80:b7:84:61:88: cf:7e:54:e5:f9:02:3e:8d:1c:7d:29:a1:7b:67:cd: 80:8a:a9:e2:0b:a4:49:8c:3b:73:c1:35:9d:ca:86: fd:4b:0d:51:99:13:f1:48:20:d5:42:59:c2:68:45: 78:74:be:9c:b4:50:7e:61:65:79:a6:bf:a5:de:04: 9a:18:c5:af:82:91:e2:86:39:f3:bd:9f:c1:34:23: 40:2c:38:08:5e:d5:8d:52:70:9f:3e:8c:64:61:17: a9:61:a9:b6:22:5d:5f:ac:92:76:39:b6:c2:47:0b: d0:bf:e1:ba:0d:59:3b:eb:d8:65:1f:5c:59:b3:26: 15:8f:25:86:e7:65:c1:1d:d5:c6:ec:12:2c:bd:1c: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F8:CA:CB:37:3C:E9:3E:90:63:14:95:86:C7:C4:52:A7:D3:7A:D1 X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d6:7f:7b:be:09:41:a2:72:43:96:dc:09:11:c0:19:a6:ad: 63:b1:78:02:3d:c6:2f:6c:fa:d5:8e:30:eb:d5:62:77:26:73: 18:1a:c2:c4:b4:bd:9c:1f:19:8a:72:8d:df:d8:c3:6d:3f:bc: 66:43:a8:9e:de:50:02:6f:6f:98:ac:31:06:81:81:79:d9:df: fb:69:12:c4:a8:a1:df:01:6c:61:e8:ba:99:dd:57:63:49:b9: 0c:e7:7b:9a:54:2e:af:24:51:89:56:ae:12:a5:e0:a7:22:c3: 2c:76:fa:56:64:b6:ba:50:d1:7e:bd:7f:5b:1b:7b:62:a2:a5: 7f:d2:d0:33:09:ec:ed:68:9f:97:7d:1c:ff:e1:39:40:aa:6f: ca:d6:02:fd:eb:8d:4e:10:7d:18:d5:ce:89:da:f5:da:7b:2c: bc:4e:05:89:fb:42:7c:75:f9:e9:27:ea:36:41:bf:32:e3:0a: 2a:80:ed:ee:5a:90:10:44:9f:6e:49:79:f3:f8:2f:e6:f1:40: 64:6c:00:2b:82:e9:7e:1a:e3:ec:19:df:09:24:1a:30:47:d4: b9:f4:e6:47:b9:b7:88:82:1b:ba:8a:8e:ce:d1:67:ec:27:3f: 8f:0a:01:6c:c8:a4:39:d5:a8:24:a1:e1:0b:15:c6:21:51:b2: 9a:5d:cf:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx Q0Q0NEZCQTcwHhcNMjUxMDE5MDYzNTMxWhcNMjUxMDI2MDYzNTMxWjAYMRYwFAYD VQQDEw02OGY0ODZiMy1hMzdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7r8dj0hp4J3biTNGfN2mELi/STUOiVzewhwL8M+6le+CJaDnwrvZ5P+ZCJer aGfLZI9PTZmJVT6UNhsDE5JIDq5pyAK+FElZ4GEjHLAbyKOUlxxBqs5PZsYL27JE DsoDis3xpfhdJn4BYwS1UGzJlZbfgLeEYYjPflTl+QI+jRx9KaF7Z82AiqniC6RJ jDtzwTWdyob9Sw1RmRPxSCDVQlnCaEV4dL6ctFB+YWV5pr+l3gSaGMWvgpHihjnz vZ/BNCNALDgIXtWNUnCfPoxkYRepYam2Il1frJJ2ObbCRwvQv+G6DVk769hlH1xZ syYVjyWG52XBHdXG7BIsvRxHkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPf4yss3 POk+kGMUlYbHxFKn03rRMB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6 ekVOeG9xT0UxaXNjMUUtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP1n97vglBonJDltwJEcAZpq1jsXgCPcYvbPrVjjDr1WJ3JnMYGsLE tL2cHxmKco3f2MNtP7xmQ6ie3lACb2+YrDEGgYF52d/7aRLEqKHfAWxh6LqZ3Vdj SbkM53uaVC6vJFGJVq4SpeCnIsMsdvpWZLa6UNF+vX9bG3tioqV/0tAzCeztaJ+X fRz/4TlAqm/K1gL9641OEH0Y1c6J2vXaeyy8TgWJ+0J8dfnpJ+o2Qb8y4woqgO3u WpAQRJ9uSXnz+C/m8UBkbAArgul+GuPsGd8JJBowR9S59OZHubeIghu6io7O0Wfs Jz+PCgFsyKQ51agkoeELFcYhUbKaXc8s -----END CERTIFICATE-----Generated at Mon Oct 20 01:47:22 2025 by rpki-client