$ rpki-client -vvf rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft File: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft (raw, json) Hash identifier: O7TS0tg/jWEssfPyGYqP0rpeI7zV10fMqMhBSkInyRw= Subject key identifier: EE:B1:17:CB:93:99:F8:16:DA:1B:01:9A:DD:61:9F:DF:37:29:11:A0 Authority key identifier: 1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 Certificate issuer: /CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Certificate serial: 0706 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft Manifest number: 0705 Signing time: Sat 18 Oct 2025 23:17:55 +0000 Manifest this update: Sat 18 Oct 2025 23:17:55 +0000 Manifest next update: Sat 25 Oct 2025 23:17:55 +0000 Files and hashes: 1: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl (hash: dJd8CTMxoxRb6ec3sQXss+c2fcF14CLvqpjYIPxiWk4=) 2: FCF8B992679111F09C8F057DC4F9AE02.roa (hash: kwKEGvjPSYWkocb09ei383ShnOWyBUUVEonrFFSPNGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 23:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1798 (0x706) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C52D, serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Validity Not Before: Oct 18 23:17:55 2025 GMT Not After : Oct 25 23:17:55 2025 GMT Subject: CN=68f42023-4bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e0:b0:70:d2:45:93:1d:bd:52:aa:49:80:00: ad:4f:8c:7a:f4:1a:ab:31:ed:3e:b9:7e:8a:09:78: 74:fa:be:b6:c2:db:58:dc:68:86:39:9f:85:7d:aa: 57:d6:5e:10:6d:93:c8:c1:a7:08:21:c6:08:28:31: 63:f3:8f:09:97:98:76:fa:70:34:71:c7:19:b2:47: f5:71:5c:cd:9a:87:84:ce:a1:a4:67:c2:87:58:1e: 48:83:af:ee:c7:40:99:7f:4b:2a:03:75:1f:94:63: dd:8e:53:9b:99:f9:83:fb:66:1f:95:de:11:a7:58: bb:5b:c6:64:bc:dd:b3:ae:f1:6b:f5:be:58:79:ba: 0d:56:7c:c7:d7:ad:32:94:ea:c2:28:4a:15:4e:9c: e2:2b:73:ee:54:a1:23:9e:e0:2d:7a:45:50:69:5a: c6:17:f3:d8:8d:9b:ee:7e:fe:0a:d6:3e:c8:69:3c: f5:c8:5d:27:6b:a8:0f:ab:46:09:91:de:30:e3:06: 25:12:fd:de:ff:f1:7f:a2:7f:37:a8:37:7e:16:b6: 5b:61:44:15:06:77:bb:50:47:95:02:95:ba:9d:38: 88:cf:03:3b:5a:73:80:3b:cc:4d:be:06:4b:2c:94: ed:f8:4c:ee:e7:67:1b:f6:b1:e1:7c:7f:05:fc:44: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:B1:17:CB:93:99:F8:16:DA:1B:01:9A:DD:61:9F:DF:37:29:11:A0 X509v3 Authority Key Identifier: keyid:1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:7b:04:2c:42:44:64:61:1e:89:f8:56:08:3c:15:91:1f:4d: 95:1b:6e:9f:ae:44:0d:62:5e:29:c5:1d:c7:1c:b0:65:80:99: c1:86:59:b4:31:cf:65:13:96:22:8f:20:bf:33:29:7f:13:8d: 5b:3d:ce:bf:8e:6b:8f:80:bd:55:ee:fc:13:87:8b:88:a8:0d: c1:e3:95:7b:49:7e:29:ab:f6:4e:2d:92:33:7f:b1:2f:9b:32: 0f:25:81:7b:41:d9:00:e5:11:03:09:d8:ac:71:d3:43:83:2b: 37:34:ac:50:c0:23:8b:1a:e6:95:b9:93:64:ca:cf:71:94:62: ce:1c:f6:22:5f:2b:0b:81:5f:20:9b:78:63:7b:54:c1:3a:b2: b2:e5:91:5c:f9:98:80:91:0b:2e:d5:2c:82:79:64:d8:69:1f: 16:87:7d:af:1c:d0:e7:b3:14:59:d4:cb:7f:b1:63:4a:e3:9a: 0c:36:53:c3:93:14:32:a3:19:58:67:00:9c:97:57:b1:28:7b: 18:5f:2f:84:5e:41:e7:7e:45:0e:0f:11:68:53:9c:45:86:cd: a1:e7:1a:bd:cf:f8:4b:5e:3f:b3:82:0f:5d:c5:d8:bc:0b:0e: b6:0e:39:9c:39:8c:30:5f:bb:df:7f:42:44:59:3a:1c:d6:73: 1e:30:37:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M1MkQxMTAvBgNVBAUTKDFEM0E5QThGQzk3Q0ZDRDdBRTg0RkZEQzVBQTBCQkZC OTY5M0RDOTcwHhcNMjUxMDE4MjMxNzU1WhcNMjUxMDI1MjMxNzU1WjAYMRYwFAYD VQQDEw02OGY0MjAyMy00YmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAteCwcNJFkx29UqpJgACtT4x69BqrMe0+uX6KCXh0+r62wttY3GiGOZ+FfapX 1l4QbZPIwacIIcYIKDFj848Jl5h2+nA0cccZskf1cVzNmoeEzqGkZ8KHWB5Ig6/u x0CZf0sqA3UflGPdjlObmfmD+2Yfld4Rp1i7W8ZkvN2zrvFr9b5YeboNVnzH160y lOrCKEoVTpziK3PuVKEjnuAtekVQaVrGF/PYjZvufv4K1j7IaTz1yF0na6gPq0YJ kd4w4wYlEv3e//F/on83qDd+FrZbYUQVBne7UEeVApW6nTiIzwM7WnOAO8xNvgZL LJTt+Ezu52cb9rHhfH8F/ETSOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6xF8uT mfgW2hsBmt1hn983KRGgMB8GA1UdIwQYMBaAFB06mo/JfPzXroT/3Fqgu/uWk9yX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzUyRC84RkE5NzZCRTVC QjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9OZXVoUF9jV3FDNy01YVQz SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUcWFqOGw4X05ldWhQX2NXcUM3LTVhVDNKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzUyRC84RkE5NzZCRTVCQjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9O ZXVoUF9jV3FDNy01YVQzSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEewQsQkRkYR6J+FYIPBWRH02VG26frkQNYl4pxR3HHLBlgJnBhlm0 Mc9lE5YijyC/Myl/E41bPc6/jmuPgL1V7vwTh4uIqA3B45V7SX4pq/ZOLZIzf7Ev mzIPJYF7QdkA5REDCdiscdNDgys3NKxQwCOLGuaVuZNkys9xlGLOHPYiXysLgV8g m3hje1TBOrKy5ZFc+ZiAkQsu1SyCeWTYaR8Wh32vHNDnsxRZ1Mt/sWNK45oMNlPD kxQyoxlYZwCcl1exKHsYXy+EXkHnfkUODxFoU5xFhs2h5xq9z/hLXj+zgg9dxdi8 Cw62DjmcOYwwX7vff0JEWToc1nMeMDc9 -----END CERTIFICATE-----Generated at Mon Oct 20 16:19:17 2025 by rpki-client