$ rpki-client -vvf rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft File: hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft (raw, json) Hash identifier: n3IZnul80Z6V0wSXr8O23lfBiavA/2i+0+Axbl9h0j8= Subject key identifier: EC:B1:94:AA:21:10:93:49:72:33:AD:FD:32:F8:0E:BE:01:6C:71:89 Authority key identifier: 84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 Certificate issuer: /CN=A913345B/serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Certificate serial: 0ACD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft Manifest number: 0AC0 Signing time: Sat 18 Oct 2025 20:25:45 +0000 Manifest this update: Sat 18 Oct 2025 20:25:44 +0000 Manifest next update: Sat 25 Oct 2025 20:25:44 +0000 Files and hashes: 1: hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl (hash: Ma5M22P/Mi9/WyC6tP0/cmwzyUsrcQURvAyCCLeDN98=) 2: 885DAE383B1C11EEA6DF117AC4F9AE02.roa (hash: t6+QHhHKWbDZoxFsvhT+y8k66KeW3LrS7MegiCYm79I=) 3: B394CFAA3B1C11EE9AEE717AC4F9AE02.roa (hash: itui9dWg0G04SAz0tNGsUM1LVCVeybo3ZddvvnrIfd8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2765 (0xacd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913345B, serialNumber=846AC847DAC6B04209C72ACF464EBEEA16522052 Validity Not Before: Oct 18 20:25:44 2025 GMT Not After : Oct 25 20:25:44 2025 GMT Subject: CN=68f3f7c8-7710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:13:78:84:4a:c7:f4:58:b1:70:3c:64:36:40: f4:01:07:ca:cd:87:6f:ab:f6:ed:0b:cd:0b:67:21: 55:57:15:f2:e5:b4:4f:bb:a0:86:5b:d6:fc:6c:1a: 58:92:a2:18:87:6f:1a:75:16:39:dc:7f:5b:2d:7a: 87:42:c8:ab:38:f1:57:b4:b0:bc:c3:f9:6f:0a:68: e9:b4:f9:a4:3d:22:ed:be:a0:40:86:c0:3d:6e:44: 89:33:e7:5d:55:d9:dc:0e:23:83:ca:f0:1a:b2:7f: 53:bb:57:23:f9:b7:fb:94:06:9d:ba:e8:ac:34:73: a2:09:0f:e3:d6:58:b3:d8:b9:28:4e:75:ad:7e:76: 96:62:28:53:d9:af:b1:fd:29:dd:ed:91:5e:4c:15: 6c:56:44:99:95:63:6e:44:a6:ff:d6:7d:74:4a:99: b1:e6:b1:c9:64:a2:e1:f4:e8:53:bb:dd:3c:2d:b5: b9:cd:56:d8:44:0f:69:bd:f3:fc:f8:bf:7c:c3:e3: e5:a8:1a:64:8c:79:35:9c:a7:d5:d4:fa:e4:8f:60: ed:60:d3:8d:11:24:bd:d7:b3:f0:e3:b9:15:4c:21: 15:09:44:7c:90:ec:65:c8:0b:16:24:b5:e7:e6:4a: be:b3:90:db:d6:27:3b:49:fd:46:03:80:44:e8:6d: 06:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B1:94:AA:21:10:93:49:72:33:AD:FD:32:F8:0E:BE:01:6C:71:89 X509v3 Authority Key Identifier: keyid:84:6A:C8:47:DA:C6:B0:42:09:C7:2A:CF:46:4E:BE:EA:16:52:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGrIR9rGsEIJxyrPRk6-6hZSIFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913345B/28D82C825F6E11EA924B9B80C4F9AE02/hGrIR9rGsEIJxyrPRk6-6hZSIFI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dc:72:e6:bd:cf:e7:ec:d2:7e:32:23:da:31:98:6e:04:ca:b2: d4:61:a7:ee:7a:7a:a2:76:03:59:a6:23:94:8e:e3:15:6d:f3: 8c:ae:58:9d:8b:ff:41:4e:e3:94:20:bc:c3:e6:65:f4:76:88: 72:a7:2b:43:ea:4c:6d:32:ec:d4:cd:10:39:1d:76:49:a5:43: f5:4e:79:b2:cc:43:82:f4:c1:bd:f3:b2:99:6a:dd:6f:94:87: 6a:c8:67:df:ce:8f:7c:a9:77:b8:be:3b:f3:bb:bc:cf:c2:53: 87:41:83:6b:23:9d:30:3d:d1:2d:84:97:db:b4:5c:06:19:ee: 6b:81:b4:5e:c3:b1:a4:32:ba:84:d5:0d:a4:26:32:fc:c6:45: 83:7a:e4:58:36:ca:d2:32:40:d3:ed:ce:b3:a3:b0:3a:e6:94: 2b:e0:34:bb:94:ce:99:f4:7b:cd:fc:9a:7c:92:46:fc:79:c1: e9:3f:c6:d1:4c:78:6e:61:70:a1:cf:e8:3e:a9:43:f9:a1:42: 9e:39:30:44:c0:4a:4c:05:85:8e:72:c5:d4:a7:79:8e:33:ff: f0:cf:21:75:f7:c0:72:88:37:de:ae:8b:37:88:87:14:fe:61: 1a:4f:82:a3:56:98:7a:75:07:19:72:2a:49:d1:65:45:b7:9a: 17:e4:d5:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCs0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzM0NUIxMTAvBgNVBAUTKDg0NkFDODQ3REFDNkIwNDIwOUM3MkFDRjQ2NEVCRUVB MTY1MjIwNTIwHhcNMjUxMDE4MjAyNTQ0WhcNMjUxMDI1MjAyNTQ0WjAYMRYwFAYD VQQDEw02OGYzZjdjOC03NzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnBN4hErH9FixcDxkNkD0AQfKzYdvq/btC80LZyFVVxXy5bRPu6CGW9b8bBpY kqIYh28adRY53H9bLXqHQsirOPFXtLC8w/lvCmjptPmkPSLtvqBAhsA9bkSJM+dd VdncDiODyvAasn9Tu1cj+bf7lAaduuisNHOiCQ/j1liz2LkoTnWtfnaWYihT2a+x /Snd7ZFeTBVsVkSZlWNuRKb/1n10Spmx5rHJZKLh9OhTu908LbW5zVbYRA9pvfP8 +L98w+PlqBpkjHk1nKfV1Prkj2DtYNONESS917Pw47kVTCEVCUR8kOxlyAsWJLXn 5kq+s5Db1ic7Sf1GA4BE6G0GMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOyxlKoh EJNJcjOt/TL4Dr4BbHGJMB8GA1UdIwQYMBaAFIRqyEfaxrBCCccqz0ZOvuoWUiBS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzQ1Qi8yOEQ4MkM4MjVG NkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NFSUp4eXJQUms2LTZoWlNJ RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hHcklSOXJHc0VJSnh5clBSazYtNmhaU0lGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzQ1Qi8yOEQ4MkM4MjVGNkUxMUVBOTI0QjlCODBDNEY5QUUwMi9oR3JJUjlyR3NF SUp4eXJQUms2LTZoWlNJRkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDccua9z+fs0n4yI9oxmG4EyrLUYafuenqidgNZpiOUjuMVbfOMrlid i/9BTuOUILzD5mX0dohypytD6kxtMuzUzRA5HXZJpUP1TnmyzEOC9MG987KZat1v lIdqyGffzo98qXe4vjvzu7zPwlOHQYNrI50wPdEthJfbtFwGGe5rgbRew7GkMrqE 1Q2kJjL8xkWDeuRYNsrSMkDT7c6zo7A65pQr4DS7lM6Z9HvN/Jp8kkb8ecHpP8bR THhuYXChz+g+qUP5oUKeOTBEwEpMBYWOcsXUp3mOM//wzyF198ByiDferos3iIcU /mEaT4KjVph6dQcZcipJ0WVFt5oX5NXG -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:53 2025 by rpki-client