$ rpki-client -vvf rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft File: hPqw1oT6rxaVCqyjjm1lOszyWLw.mft (raw, json) Hash identifier: cAq5mJ+u0jxZqbJpnBWl4/gCkFvwGOBfufNbnbtFFJs= Subject key identifier: 68:52:6B:AC:05:E5:1F:79:CF:87:0F:BA:25:77:22:92:3A:79:15:16 Authority key identifier: 84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC Certificate issuer: /CN=A914247C/serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Certificate serial: 0B53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft Manifest number: 0B4C Signing time: Sat 18 Oct 2025 20:05:12 +0000 Manifest this update: Sat 18 Oct 2025 20:05:11 +0000 Manifest next update: Sat 25 Oct 2025 20:05:11 +0000 Files and hashes: 1: hPqw1oT6rxaVCqyjjm1lOszyWLw.crl (hash: fq/FuSHiwFAGcN3izkPV+jrNefc64aFBQ8OUNUoeY1k=) 2: E1AB1F92430F11EAA60DB885C4F9AE02.roa (hash: 0AMWGP+6uBhgSLnnmyVJPmvq5N7a9ynJhnv9JCsPnVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2899 (0xb53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914247C, serialNumber=84FAB0D684FAAF16950AACA38E6D653ACCF258BC Validity Not Before: Oct 18 20:05:11 2025 GMT Not After : Oct 25 20:05:11 2025 GMT Subject: CN=68f3f2f8-e314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:d2:15:69:6e:ba:b8:9f:59:3c:0b:6a:97: 65:97:9d:b9:6d:cb:4c:ff:ae:c9:bd:6d:04:54:24: cc:ea:6b:9e:72:f9:cb:c7:ac:f2:bb:7e:4a:34:2d: 2b:74:31:bf:79:00:83:23:d2:7f:cf:59:be:de:28: 1c:6f:8a:d5:33:0f:53:f1:c7:57:88:97:d9:f8:aa: d7:28:93:84:be:f0:d9:f0:f1:29:e9:ae:63:67:c2: a1:c2:1d:76:ec:23:db:21:2e:ba:62:f1:d6:35:59: bc:a8:40:86:b5:01:88:dc:4d:67:d1:de:d9:fc:ff: 67:07:57:39:94:76:83:00:8e:b7:70:48:f1:d5:bd: 4f:dc:ad:62:f3:8d:24:48:8d:8d:b7:c9:47:e5:5b: bb:71:3e:f4:d3:68:60:14:53:80:f8:81:eb:1e:12: 86:a1:aa:27:e1:54:38:61:c3:22:59:9c:22:fd:cb: d8:7a:7d:2f:a7:13:86:07:27:97:d0:ac:52:b8:32: 93:d7:9c:3b:45:e3:61:74:a0:c7:4f:f8:45:a5:74: 97:3e:a2:bc:7d:18:d8:6f:68:f7:c5:de:da:61:c5: f0:f3:9c:9c:92:36:a3:b1:de:bf:51:da:2a:dc:38: 2f:de:67:14:4d:75:d6:5a:9c:10:26:95:b5:cb:9e: 00:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:52:6B:AC:05:E5:1F:79:CF:87:0F:BA:25:77:22:92:3A:79:15:16 X509v3 Authority Key Identifier: keyid:84:FA:B0:D6:84:FA:AF:16:95:0A:AC:A3:8E:6D:65:3A:CC:F2:58:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hPqw1oT6rxaVCqyjjm1lOszyWLw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914247C/90F632DA430A11EA858CDC76C4F9AE02/hPqw1oT6rxaVCqyjjm1lOszyWLw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:e1:df:20:83:4c:6e:14:62:2e:8c:cb:7a:ef:6d:48:54:33: da:e3:7d:7e:4c:a9:84:8c:9a:87:81:c3:6d:0d:aa:7f:8b:62: f1:5a:0b:48:24:b2:26:c1:c1:2d:45:b5:3a:a3:8d:e3:9c:64: d3:4e:a0:52:33:d9:d7:c0:ea:ce:ab:9f:37:23:50:d0:66:d7: 9f:02:8a:23:61:f8:8d:2a:64:24:75:c6:70:03:83:02:d8:0d: 9b:1d:8b:bc:ae:36:83:3a:cf:99:c4:56:64:27:bc:83:61:b0: 7b:9f:86:c9:b4:81:46:69:dc:17:42:54:bf:b3:2b:27:65:9d: f8:fe:45:51:70:de:c4:34:11:d8:9b:69:05:45:a1:68:c2:09: c7:46:c3:8c:35:56:df:1b:f8:28:fb:87:2e:03:a7:1f:df:e8: 4c:77:c1:1b:35:f2:82:1a:41:4a:98:4d:21:ec:2c:5f:3a:c2: 1f:65:55:21:8a:af:1b:b0:01:a4:3e:d2:8e:b8:39:f2:e4:80: a6:a2:a0:29:0c:f6:a9:2a:19:5f:87:9b:de:1a:10:e0:4f:bc: 56:ea:73:46:72:ff:2a:42:2d:ca:ff:f2:2f:39:c2:84:c4:49: 05:8f:11:9e:b5:f9:6f:cf:13:6b:70:07:be:d1:9a:2a:74:46: 63:08:ec:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDI0N0MxMTAvBgNVBAUTKDg0RkFCMEQ2ODRGQUFGMTY5NTBBQUNBMzhFNkQ2NTNB Q0NGMjU4QkMwHhcNMjUxMDE4MjAwNTExWhcNMjUxMDI1MjAwNTExWjAYMRYwFAYD VQQDEw02OGYzZjJmOC1lMzE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArrfSFWluurifWTwLapdll525bctM/67JvW0EVCTM6muecvnLx6zyu35KNC0r dDG/eQCDI9J/z1m+3igcb4rVMw9T8cdXiJfZ+KrXKJOEvvDZ8PEp6a5jZ8Khwh12 7CPbIS66YvHWNVm8qECGtQGI3E1n0d7Z/P9nB1c5lHaDAI63cEjx1b1P3K1i840k SI2Nt8lH5Vu7cT7002hgFFOA+IHrHhKGoaon4VQ4YcMiWZwi/cvYen0vpxOGByeX 0KxSuDKT15w7ReNhdKDHT/hFpXSXPqK8fRjYb2j3xd7aYcXw85yckjajsd6/Udoq 3Dgv3mcUTXXWWpwQJpW1y54AgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGhSa6wF 5R95z4cPuiV3IpI6eRUWMB8GA1UdIwQYMBaAFIT6sNaE+q8WlQqso45tZTrM8li8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjQ3Qy85MEY2MzJEQTQz MEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4YVZDcXlqam0xbE9zenlX THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hQcXcxb1Q2cnhhVkNxeWpqbTFsT3N6eVdMdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjQ3Qy85MEY2MzJEQTQzMEExMUVBODU4Q0RDNzZDNEY5QUUwMi9oUHF3MW9UNnJ4 YVZDcXlqam0xbE9zenlXTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAR4d8gg0xuFGIujMt6721IVDPa431+TKmEjJqHgcNtDap/i2LxWgtI JLImwcEtRbU6o43jnGTTTqBSM9nXwOrOq583I1DQZtefAoojYfiNKmQkdcZwA4MC 2A2bHYu8rjaDOs+ZxFZkJ7yDYbB7n4bJtIFGadwXQlS/sysnZZ34/kVRcN7ENBHY m2kFRaFowgnHRsOMNVbfG/go+4cuA6cf3+hMd8EbNfKCGkFKmE0h7CxfOsIfZVUh iq8bsAGkPtKOuDny5ICmoqApDPapKhlfh5veGhDgT7xW6nNGcv8qQi3K//IvOcKE xEkFjxGetflvzxNrcAe+0ZoqdEZjCOxC -----END CERTIFICATE-----Generated at Mon Oct 20 04:25:33 2025 by rpki-client