$ rpki-client -vvf rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft File: HC-QzT9RuKzQAhDjV96agctF0XE.mft (raw, json) Hash identifier: lJy7xqhh6DcGpoivGXq3/vqP6GErLEqlcqS7HSUI054= Subject key identifier: 5C:87:1E:3B:F4:8C:B3:3A:BD:72:EB:EF:2D:2D:00:11:4B:3C:00:B6 Authority key identifier: 1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 Certificate issuer: /CN=A915B01D/serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Certificate serial: 1E1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft Manifest number: 1E0E Signing time: Sat 18 Oct 2025 16:23:48 +0000 Manifest this update: Sat 18 Oct 2025 16:23:48 +0000 Manifest next update: Sat 25 Oct 2025 16:23:48 +0000 Files and hashes: 1: HC-QzT9RuKzQAhDjV96agctF0XE.crl (hash: 0aCbS5lPHSDX/6qGgeR9ySkE1Y5KL/WlbvdfC1+J4nE=) 2: DE95A942581611EE878B2E54C4F9AE02.roa (hash: WtW7MaINV2ct1TbshV/6OrkYfiug7pmKoz4c9cKXHaQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7709 (0x1e1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B01D, serialNumber=1C2F90CD3F51B8ACD00210E357DE9A81CB45D171 Validity Not Before: Oct 18 16:23:48 2025 GMT Not After : Oct 25 16:23:48 2025 GMT Subject: CN=68f3bf14-1813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:84:05:19:be:af:7e:d1:3a:88:f2:7b:d0: ec:f5:a4:08:11:14:d7:77:ef:46:dc:28:b2:4d:7c: 0a:3f:bc:c2:88:0f:9d:ee:99:ef:65:55:55:35:6f: ef:a7:06:51:26:64:e5:0b:1c:35:ce:d2:fe:9e:d5: 84:87:66:0a:de:76:de:4b:a9:e8:24:df:11:10:ae: 7e:61:26:96:db:dc:61:83:27:6f:31:a3:3f:79:9c: c2:f6:88:43:b0:56:3d:f5:8d:7f:ec:64:e5:4c:fd: d8:08:81:66:85:e1:07:1f:56:da:81:ce:b2:1d:78: 3d:42:2f:c1:60:9c:0e:9e:6e:49:c6:56:6b:05:79: be:72:9d:c6:59:54:7c:c3:18:a9:27:76:4d:7b:8e: 14:42:cf:cd:d4:b8:03:82:e2:eb:d2:8f:fc:1e:89: 62:8c:38:85:96:0c:26:75:20:3a:94:07:c4:3a:09: 59:ff:e6:35:06:80:9e:62:af:30:b7:b4:e0:f5:5f: f4:0d:25:af:d1:bc:26:4e:7a:62:7f:cb:15:04:48: 29:b9:c4:de:6f:26:92:a1:b4:6f:e7:7d:51:79:4a: 83:0b:f1:3e:d3:9b:1a:e5:e4:e5:03:18:97:18:77: 55:85:73:1c:b1:96:0f:88:7f:4d:08:f2:0d:1b:e2: b2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:87:1E:3B:F4:8C:B3:3A:BD:72:EB:EF:2D:2D:00:11:4B:3C:00:B6 X509v3 Authority Key Identifier: keyid:1C:2F:90:CD:3F:51:B8:AC:D0:02:10:E3:57:DE:9A:81:CB:45:D1:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HC-QzT9RuKzQAhDjV96agctF0XE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B01D/2192951695C311E6855A3E1CC4F9AE02/HC-QzT9RuKzQAhDjV96agctF0XE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:77:6a:e2:e0:dd:72:78:42:cd:c5:a0:33:5a:e0:0f:f4:43: 50:49:76:5a:1c:8d:0a:b2:ca:b0:1e:56:37:73:ee:63:27:11: 4c:f8:9d:02:a5:a8:31:5d:ba:e1:63:2c:b8:77:64:0b:c8:c2: 66:ac:bd:1e:50:25:4b:18:ca:00:f7:50:08:b9:5d:2b:bc:cb: 1e:a4:7e:2a:73:85:1b:58:b3:a0:74:38:ce:7a:d5:b3:97:02: ce:39:e9:a1:53:89:98:2d:33:50:4e:aa:c8:41:93:50:ca:fe: 29:b3:99:57:e2:59:47:9c:e0:e8:d1:4b:77:20:d3:a3:ee:fa: 66:30:ce:92:18:7d:bf:3d:04:3a:13:19:ed:09:02:23:81:0c: 28:93:ed:55:32:97:ac:68:69:1a:40:64:b3:c9:77:38:1d:4f: d8:f7:3a:62:33:ed:2b:fb:b4:00:c7:67:f3:91:f8:a2:41:e2: c8:63:15:ab:aa:60:a5:e7:70:c9:c0:11:58:90:74:5c:5b:59: 54:38:10:66:4e:95:d4:05:6a:c0:f2:99:a4:e6:5c:24:10:ed: fe:26:54:64:1f:ff:54:99:fa:fe:5d:40:32:04:41:4d:da:5b: 9c:80:4c:fb:29:59:d1:7d:75:38:41:46:f4:1c:49:2a:d6:5b: d7:a2:71:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwMUQxMTAvBgNVBAUTKDFDMkY5MENEM0Y1MUI4QUNEMDAyMTBFMzU3REU5QTgx Q0I0NUQxNzEwHhcNMjUxMDE4MTYyMzQ4WhcNMjUxMDI1MTYyMzQ4WjAYMRYwFAYD VQQDEw02OGYzYmYxNC0xODEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7+EBRm+r37ROojye9Ds9aQIERTXd+9G3CiyTXwKP7zCiA+d7pnvZVVVNW/v pwZRJmTlCxw1ztL+ntWEh2YK3nbeS6noJN8REK5+YSaW29xhgydvMaM/eZzC9ohD sFY99Y1/7GTlTP3YCIFmheEHH1bagc6yHXg9Qi/BYJwOnm5JxlZrBXm+cp3GWVR8 wxipJ3ZNe44UQs/N1LgDguLr0o/8HolijDiFlgwmdSA6lAfEOglZ/+Y1BoCeYq8w t7Tg9V/0DSWv0bwmTnpif8sVBEgpucTebyaSobRv531ReUqDC/E+05sa5eTlAxiX GHdVhXMcsZYPiH9NCPING+Ky5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyHHjv0 jLM6vXLr7y0tABFLPAC2MB8GA1UdIwQYMBaAFBwvkM0/Ubis0AIQ41femoHLRdFx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjAxRC8yMTkyOTUxNjk1 QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVLelFBaERqVjk2YWdjdEYw WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hDLVF6VDlSdUt6UUFoRGpWOTZhZ2N0RjBYRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjAxRC8yMTkyOTUxNjk1QzMxMUU2ODU1QTNFMUNDNEY5QUUwMi9IQy1RelQ5UnVL elFBaERqVjk2YWdjdEYwWEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkd2ri4N1yeELNxaAzWuAP9ENQSXZaHI0KssqwHlY3c+5jJxFM+J0C pagxXbrhYyy4d2QLyMJmrL0eUCVLGMoA91AIuV0rvMsepH4qc4UbWLOgdDjOetWz lwLOOemhU4mYLTNQTqrIQZNQyv4ps5lX4llHnODo0Ut3INOj7vpmMM6SGH2/PQQ6 ExntCQIjgQwok+1VMpesaGkaQGSzyXc4HU/Y9zpiM+0r+7QAx2fzkfiiQeLIYxWr qmCl53DJwBFYkHRcW1lUOBBmTpXUBWrA8pmk5lwkEO3+JlRkH/9Umfr+XUAyBEFN 2lucgEz7KVnRfXU4QUb0HEkq1lvXonEO -----END CERTIFICATE-----Generated at Sun Oct 19 23:32:30 2025 by rpki-client