$ rpki-client -vvf rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft File: h57Jr836J6POe11DeHoviQOFWG4.mft (raw, json) Hash identifier: 2aKC/jn9d1pQVqvy9JZZT50hSQOMqwUVSqMNse6xe8c= Subject key identifier: 8A:A5:75:DA:A1:0E:11:74:71:B2:27:80:72:88:C2:2C:EA:F9:2E:B0 Authority key identifier: 87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E Certificate issuer: /CN=A914E556/serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E Certificate serial: 07E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft Manifest number: 07DA Signing time: Sat 18 Oct 2025 22:25:38 +0000 Manifest this update: Sat 18 Oct 2025 22:25:38 +0000 Manifest next update: Sat 25 Oct 2025 22:25:38 +0000 Files and hashes: 1: h57Jr836J6POe11DeHoviQOFWG4.crl (hash: 6T/oa3+6oCN+yDByIi4bYdNcKQ3Hf4L6Brv6TiXihRs=) 2: 375F7DAA0C3911EB828BDC25C4F9AE02.roa (hash: BK8JW2Wj4etRuysdxWiOktynoZCEWJ2xeDWHB4Oo8iI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:25:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2018 (0x7e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E556, serialNumber=879EC9AFCDFA27A3CE7B5D43787A2F890385586E Validity Not Before: Oct 18 22:25:38 2025 GMT Not After : Oct 25 22:25:38 2025 GMT Subject: CN=68f413e2-b7a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bb:43:7c:b7:24:88:25:fc:30:66:0a:a2:95: 20:44:ea:b0:63:ea:77:9a:65:4c:5f:a0:5c:32:55: 2f:cd:b1:cd:1f:96:be:08:18:96:a1:c9:ce:ef:48: 2c:84:0e:d6:26:d0:f5:00:62:ae:5f:cf:fa:1a:bd: 05:2f:aa:d5:b3:05:05:65:e6:22:5e:e6:0a:7c:60: 18:83:8d:cb:75:2f:65:e4:35:16:22:21:2b:9c:05: f5:62:b9:ad:6f:4f:dc:4b:91:3f:58:6e:22:5a:cc: 01:d8:8c:89:f2:49:4f:fc:19:ec:9d:07:74:a8:64: 16:ad:6c:52:67:d2:3b:8c:0b:e8:fe:6c:9d:33:64: 20:73:a8:65:47:ee:af:8d:cb:6f:08:47:3b:fa:b8: 8b:60:7e:18:ad:78:c3:c5:c7:ea:3a:11:5f:68:2d: 4c:12:14:f2:cb:70:42:53:fd:c1:e8:da:e4:1e:dc: 44:5b:2d:b9:4e:e7:84:5e:f7:a1:9c:92:6c:90:2f: 75:57:cd:d2:f1:01:f9:34:50:f5:54:7f:e9:5d:d8: 57:54:9e:8d:c8:e4:66:e0:20:36:a7:a0:6a:0e:d3: d4:67:8e:72:0d:a0:1b:41:10:55:20:6f:ed:95:b9: 10:57:8e:07:82:0c:0d:e8:22:88:0c:b4:95:49:0f: f8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A5:75:DA:A1:0E:11:74:71:B2:27:80:72:88:C2:2C:EA:F9:2E:B0 X509v3 Authority Key Identifier: keyid:87:9E:C9:AF:CD:FA:27:A3:CE:7B:5D:43:78:7A:2F:89:03:85:58:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h57Jr836J6POe11DeHoviQOFWG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E556/2EAAFECA0C3711EBA8AA8222C4F9AE02/h57Jr836J6POe11DeHoviQOFWG4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:a9:cf:3c:8a:e7:63:c1:98:48:c0:20:8d:b2:55:93:05:ca: 69:29:d9:b4:2f:2e:9e:70:83:17:e8:77:b7:bf:30:b7:7b:50: 7c:0d:27:98:d9:6f:56:79:0e:20:c1:87:13:95:7a:dc:32:43: 3c:d2:d8:0b:1d:0f:13:7c:47:33:52:05:3a:b2:a9:de:a7:31: f9:da:5d:f7:8b:f2:2c:ce:9a:8a:8f:d8:f9:47:27:b5:95:f7: 41:8e:32:e2:b6:e8:ee:26:b6:10:b7:75:c1:31:f2:ad:c1:0f: f7:7e:25:6e:ff:03:8a:27:a4:ed:2f:c1:aa:12:50:cb:bf:b8: 8e:b0:f2:c1:b5:ca:7f:f7:1c:40:86:82:fe:eb:1d:c9:52:44: 5a:24:aa:66:07:79:98:db:11:81:2c:47:f7:b3:b6:75:0f:9c: 9f:72:d7:75:da:d6:32:f8:c5:1f:dd:76:d9:30:cb:78:63:20: a4:2a:90:31:44:90:92:3a:6b:cd:9f:7d:5c:9b:b7:9d:3f:ab: 1f:24:ec:f9:9e:51:c5:06:96:3f:f1:81:1c:ef:2e:ea:e4:37: 60:23:7c:e8:97:30:62:15:f5:0f:59:c8:5a:db:00:55:ea:e3: 8c:d1:8f:5b:25:6a:0f:04:3b:66:2b:ad:25:7c:29:ff:ae:af: 61:0b:29:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEU1NTYxMTAvBgNVBAUTKDg3OUVDOUFGQ0RGQTI3QTNDRTdCNUQ0Mzc4N0EyRjg5 MDM4NTU4NkUwHhcNMjUxMDE4MjIyNTM4WhcNMjUxMDI1MjIyNTM4WjAYMRYwFAYD VQQDEw02OGY0MTNlMi1iN2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LtDfLckiCX8MGYKopUgROqwY+p3mmVMX6BcMlUvzbHNH5a+CBiWocnO70gs hA7WJtD1AGKuX8/6Gr0FL6rVswUFZeYiXuYKfGAYg43LdS9l5DUWIiErnAX1Yrmt b0/cS5E/WG4iWswB2IyJ8klP/BnsnQd0qGQWrWxSZ9I7jAvo/mydM2Qgc6hlR+6v jctvCEc7+riLYH4YrXjDxcfqOhFfaC1MEhTyy3BCU/3B6NrkHtxEWy25TueEXveh nJJskC91V83S8QH5NFD1VH/pXdhXVJ6NyORm4CA2p6BqDtPUZ45yDaAbQRBVIG/t lbkQV44HggwN6CKIDLSVSQ/4HwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqlddqh DhF0cbIngHKIwizq+S6wMB8GA1UdIwQYMBaAFIeeya/N+iejzntdQ3h6L4kDhVhu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTU1Ni8yRUFBRkVDQTBD MzcxMUVCQThBQTgyMjJDNEY5QUUwMi9oNTdKcjgzNko2UE9lMTFEZUhvdmlRT0ZX RzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g1N0pyODM2SjZQT2UxMURlSG92aVFPRldHNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTU1Ni8yRUFBRkVDQTBDMzcxMUVCQThBQTgyMjJDNEY5QUUwMi9oNTdKcjgzNko2 UE9lMTFEZUhvdmlRT0ZXRzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnqc88iudjwZhIwCCNslWTBcppKdm0Ly6ecIMX6He3vzC3e1B8DSeY 2W9WeQ4gwYcTlXrcMkM80tgLHQ8TfEczUgU6sqnepzH52l33i/IszpqKj9j5Rye1 lfdBjjLitujuJrYQt3XBMfKtwQ/3fiVu/wOKJ6TtL8GqElDLv7iOsPLBtcp/9xxA hoL+6x3JUkRaJKpmB3mY2xGBLEf3s7Z1D5yfctd12tYy+MUf3XbZMMt4YyCkKpAx RJCSOmvNn31cm7edP6sfJOz5nlHFBpY/8YEc7y7q5DdgI3zolzBiFfUPWcha2wBV 6uOM0Y9bJWoPBDtmK60lfCn/rq9hCymI -----END CERTIFICATE-----Generated at Mon Oct 20 12:42:20 2025 by rpki-client