$ rpki-client -vvf rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft File: _HkvHWLyld9EH6IejzvPJ8phBjA.mft (raw, json) Hash identifier: FYt5JnvqhYZe20qpX/iBdMhpSUx/D9dBEqhlwjnj5/M= Subject key identifier: 69:78:6F:E6:DA:39:79:DD:E0:3E:E6:D1:85:D2:BD:76:8F:CA:D6:08 Authority key identifier: FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30 Certificate issuer: /CN=A913DAC6/serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630 Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft Manifest number: DC Signing time: Sun 19 Oct 2025 08:34:57 +0000 Manifest this update: Sun 19 Oct 2025 08:34:56 +0000 Manifest next update: Sun 26 Oct 2025 08:34:56 +0000 Files and hashes: 1: _HkvHWLyld9EH6IejzvPJ8phBjA.crl (hash: Hq2roYQS2ND9vtdpWpd1jhGYqES8Jwf9pV8jCduhK9c=) 2: B01E86045EC511EFA4479F42C4F9AE02.roa (hash: PY7lM6CHVV+AnVQlApq2F15tXj0v5hwGoyhPHySPg1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DAC6, serialNumber=FC792F1D62F295DF441FA21E8F3BCF27CA610630 Validity Not Before: Oct 19 08:34:56 2025 GMT Not After : Oct 26 08:34:56 2025 GMT Subject: CN=68f4a2b0-5547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:24:d3:47:a8:ea:55:b7:b2:f2:72:6a:33:4f: 93:b3:a9:ca:17:a1:ee:21:4d:1a:c5:16:e0:fe:8c: 34:cd:64:c6:77:ad:d7:3a:21:b0:bd:c7:4b:e7:f3: 55:26:53:86:73:87:eb:de:3d:5f:4b:3d:4f:37:8f: 9f:8a:d8:b9:0e:e0:92:23:50:cd:d6:d7:1a:fc:8c: af:c5:10:ba:01:dd:69:7b:b7:75:cd:e8:29:4b:cf: 0f:61:85:92:bb:ed:56:99:8c:02:31:f7:3a:2a:5c: 19:61:95:60:af:05:27:ea:4f:05:88:79:09:d6:6c: 41:d4:4e:c5:53:41:2e:d4:b1:6a:71:61:22:eb:4a: 9a:3f:40:a2:fe:4c:b3:38:1c:40:f8:ea:70:80:02: 21:9b:7f:a5:83:0e:d3:50:2b:fe:14:05:48:e5:5f: c8:25:a0:fe:9c:c4:79:b2:a4:06:a3:e5:22:d1:d8: 75:1a:b5:36:59:d2:f0:15:7d:24:e0:1a:5e:39:bd: 77:e9:01:5a:7d:c1:18:1a:b7:e7:c9:eb:1a:53:9c: 92:14:ab:39:74:3a:86:4f:0b:a7:42:4a:43:46:62: 1d:e2:87:7a:a6:95:e6:7d:9c:c8:8e:f9:a2:9c:14: 0c:ae:c5:e7:8d:e3:56:60:eb:2d:22:06:d1:4d:1d: 77:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:78:6F:E6:DA:39:79:DD:E0:3E:E6:D1:85:D2:BD:76:8F:CA:D6:08 X509v3 Authority Key Identifier: keyid:FC:79:2F:1D:62:F2:95:DF:44:1F:A2:1E:8F:3B:CF:27:CA:61:06:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HkvHWLyld9EH6IejzvPJ8phBjA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DAC6/59EBE2AE5EC511EFB43A1842C4F9AE02/_HkvHWLyld9EH6IejzvPJ8phBjA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:24:fb:91:f8:26:04:fa:e5:2d:0e:9c:9d:4b:df:25:f6:50: 33:76:9f:e1:e4:57:04:87:c8:9f:b6:34:37:7d:59:9b:4c:21: 3f:38:e6:b5:ba:2b:5d:a8:a1:88:87:90:6d:e4:e2:06:f2:b0: be:bd:c2:d8:6e:b0:ab:29:90:3e:e6:65:ae:83:c4:0d:28:b5: 7e:f1:8a:b1:ba:4e:89:83:a8:b9:ae:e7:d5:0b:a4:20:82:39: 3c:18:ec:dd:79:22:0a:0c:5d:9c:2b:91:27:ee:ac:e5:db:fb: 97:f5:00:fe:0f:4c:37:e1:32:95:bc:f2:9b:7c:b6:86:d7:2c: 89:01:9e:2d:13:0b:3e:95:26:83:6f:4f:6c:16:93:8a:66:79: bb:83:3a:4d:4f:41:13:a2:d0:1f:6e:2b:3f:d9:9b:01:01:5b: d3:20:57:e5:91:a0:93:a9:11:ee:a0:f4:17:db:17:eb:9e:b9: b6:49:15:bb:f4:d1:c1:59:e2:d2:8c:63:8d:c1:ec:7e:60:50: 81:d3:9f:99:b3:cc:e6:c0:6a:32:2b:0a:da:60:23:b6:cc:e9: b9:9e:38:82:18:1b:ab:77:c8:b6:69:49:12:22:2b:f1:87:e1: ff:0d:07:54:c0:24:8b:4d:48:9f:ce:75:cb:ac:82:ae:c3:76: da:17:79:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RBQzYxMTAvBgNVBAUTKEZDNzkyRjFENjJGMjk1REY0NDFGQTIxRThGM0JDRjI3 Q0E2MTA2MzAwHhcNMjUxMDE5MDgzNDU2WhcNMjUxMDI2MDgzNDU2WjAYMRYwFAYD VQQDEw02OGY0YTJiMC01NTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4iTTR6jqVbey8nJqM0+Ts6nKF6HuIU0axRbg/ow0zWTGd63XOiGwvcdL5/NV JlOGc4fr3j1fSz1PN4+fiti5DuCSI1DN1tca/IyvxRC6Ad1pe7d1zegpS88PYYWS u+1WmYwCMfc6KlwZYZVgrwUn6k8FiHkJ1mxB1E7FU0Eu1LFqcWEi60qaP0Ci/kyz OBxA+OpwgAIhm3+lgw7TUCv+FAVI5V/IJaD+nMR5sqQGo+Ui0dh1GrU2WdLwFX0k 4BpeOb136QFafcEYGrfnyesaU5ySFKs5dDqGTwunQkpDRmId4od6ppXmfZzIjvmi nBQMrsXnjeNWYOstIgbRTR13ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGl4b+ba OXnd4D7m0YXSvXaPytYIMB8GA1UdIwQYMBaAFPx5Lx1i8pXfRB+iHo87zyfKYQYw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREFDNi81OUVCRTJBRTVF QzUxMUVGQjQzQTE4NDJDNEY5QUUwMi9fSGt2SFdMeWxkOUVINkllanp2UEo4cGhC akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19Ia3ZIV0x5bGQ5RUg2SWVqenZQSjhwaEJqQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REFDNi81OUVCRTJBRTVFQzUxMUVGQjQzQTE4NDJDNEY5QUUwMi9fSGt2SFdMeWxk OUVINkllanp2UEo4cGhCakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4JPuR+CYE+uUtDpydS98l9lAzdp/h5FcEh8iftjQ3fVmbTCE/OOa1 uitdqKGIh5Bt5OIG8rC+vcLYbrCrKZA+5mWug8QNKLV+8Yqxuk6Jg6i5rufVC6Qg gjk8GOzdeSIKDF2cK5En7qzl2/uX9QD+D0w34TKVvPKbfLaG1yyJAZ4tEws+lSaD b09sFpOKZnm7gzpNT0ETotAfbis/2ZsBAVvTIFflkaCTqRHuoPQX2xfrnrm2SRW7 9NHBWeLSjGONwex+YFCB05+Zs8zmwGoyKwraYCO2zOm5njiCGBurd8i2aUkSIivx h+H/DQdUwCSLTUifznXLrIKuw3baF3nj -----END CERTIFICATE-----Generated at Mon Oct 20 14:02:11 2025 by rpki-client