$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft File: hctAGQp33J5olNhX9zu3qQ4JdOQ.mft (raw, json) Hash identifier: pUmS0+TkwDrWzY4FSzY7ieV6Wwr3kFLCcsei5JFcV7g= Subject key identifier: 0D:07:2C:38:EB:B0:14:ED:5B:4E:F0:41:5B:C4:57:A1:24:3C:85:C5 Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4 Certificate issuer: /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4 Certificate serial: 05BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft Manifest number: 05B0 Signing time: Sun 19 Oct 2025 00:48:39 +0000 Manifest this update: Sun 19 Oct 2025 00:48:38 +0000 Manifest next update: Sun 26 Oct 2025 00:48:38 +0000 Files and hashes: 1: hctAGQp33J5olNhX9zu3qQ4JdOQ.crl (hash: EM84kiMgRSKhrnvgAy9F+x8L0IRl1Ef/E259zjS8RLM=) 2: 7FCFB4745E8411EE89DF693EC4F9AE02.roa (hash: AcP4+2aIj47AkfHQ0Si3gKCupjSk93I6lVYcHLmJ46k=) 3: FD9A4AA0E53111EBAB62446EC4F9AE02.roa (hash: zDAY/JgF04rYgWurZj2nx6aFtMaDIFUtTRAO3VpvWV4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1468 (0x5bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169BB4, serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4 Validity Not Before: Oct 19 00:48:38 2025 GMT Not After : Oct 26 00:48:38 2025 GMT Subject: CN=68f43567-dd42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:80:9a:6a:d4:2a:21:0f:80:bf:de:79:54: 22:61:ca:a1:ce:67:ff:0f:bf:4f:b5:87:11:fa:77: 5a:83:ae:8a:6e:ed:28:14:d9:eb:0a:e2:0c:fa:6e: d6:fd:38:44:f8:1a:2c:93:fb:b2:3f:bd:52:9d:3f: cb:8f:ae:95:a2:5b:9b:bf:d1:e4:fe:81:4b:50:bd: 97:54:8a:90:9b:6d:ae:b4:f6:b6:55:ab:25:63:f9: fe:19:85:c1:2b:26:72:16:60:36:5d:29:f7:bd:8a: a1:56:64:2a:16:42:5b:58:07:d5:43:cd:cb:65:31: d9:3c:8b:c0:1f:54:46:02:a6:11:4a:54:ba:ee:fd: 2d:1d:72:9a:b5:bf:33:78:e8:96:16:21:37:52:e3: a1:b9:38:34:2d:03:4a:aa:08:70:9a:ac:d3:b1:cf: e3:e7:16:4b:51:4f:07:24:d2:8c:28:4e:e1:eb:8c: 5f:99:46:47:8a:72:27:36:57:be:7f:4c:5d:a1:b5: 5a:0f:a2:78:c9:5d:a0:f3:54:54:33:20:aa:1a:01: a2:89:db:47:f5:24:20:ac:09:43:7d:6a:22:18:fc: 80:33:ab:9e:42:ce:5f:7c:1e:bc:f7:8f:bd:a2:e4: 3e:37:05:15:85:fc:1c:2a:f2:5e:bf:00:8c:33:08: 29:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:07:2C:38:EB:B0:14:ED:5B:4E:F0:41:5B:C4:57:A1:24:3C:85:C5 X509v3 Authority Key Identifier: keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:83:f5:92:f9:23:bc:cd:3b:93:54:75:3e:d9:98:9c:0f:f9: 0f:4b:dc:9d:1a:41:4e:23:f3:bc:dc:a6:f3:80:4b:07:9f:9f: a7:83:70:1d:78:5c:9a:fb:6d:a7:79:64:df:6e:16:5c:87:8a: 48:ae:c2:93:ef:a4:a7:4b:4d:9d:5c:9b:ea:eb:d5:cc:7b:0b: c1:cc:f7:33:57:38:86:5b:5c:07:22:db:31:16:a5:61:9c:91: c1:fc:82:37:91:06:bf:d3:6a:76:5b:b3:d4:70:e9:26:99:87: c6:96:71:7c:6a:ad:4f:19:fa:88:45:c9:b0:10:a5:d0:07:0f: 91:b4:3c:2f:2f:fa:15:d7:9a:14:d9:2d:c0:a0:4b:7f:4e:1b: 53:a3:1e:9d:c9:ac:aa:2a:e9:aa:66:d4:6e:62:71:d3:9c:7e: 63:f9:d3:dc:e8:98:ae:83:ee:3d:d6:fe:55:7e:1a:db:af:66: 61:f0:a0:f9:ea:f0:b3:d0:aa:d5:ca:1f:0e:dc:39:57:bf:56: fb:94:f8:fb:94:11:4d:a3:07:e6:f4:fc:44:91:a1:3d:5a:24: aa:e2:ab:8f:7c:be:e1:d4:1d:ef:e0:57:19:04:85:b8:dc:47: fb:8d:d8:45:cb:2f:03:5f:9b:04:f4:df:96:f3:19:a8:90:48: 62:60:a9:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjlCQjQxMTAvBgNVBAUTKDg1Q0I0MDE5MEE3N0RDOUU2ODk0RDg1N0Y3M0JCN0E5 MEUwOTc0RTQwHhcNMjUxMDE5MDA0ODM4WhcNMjUxMDI2MDA0ODM4WjAYMRYwFAYD VQQDEw02OGY0MzU2Ny1kZDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsWAmmrUKiEPgL/eeVQiYcqhzmf/D79PtYcR+ndag66Kbu0oFNnrCuIM+m7W /ThE+Bosk/uyP71SnT/Lj66Volubv9Hk/oFLUL2XVIqQm22utPa2VaslY/n+GYXB KyZyFmA2XSn3vYqhVmQqFkJbWAfVQ83LZTHZPIvAH1RGAqYRSlS67v0tHXKatb8z eOiWFiE3UuOhuTg0LQNKqghwmqzTsc/j5xZLUU8HJNKMKE7h64xfmUZHinInNle+ f0xdobVaD6J4yV2g81RUMyCqGgGiidtH9SQgrAlDfWoiGPyAM6ueQs5ffB6894+9 ouQ+NwUVhfwcKvJevwCMMwgpVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0HLDjr sBTtW07wQVvEV6EkPIXFMB8GA1UdIwQYMBaAFIXLQBkKd9yeaJTYV/c7t6kOCXTk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJCNC9CM0U3MzA5Q0U1 MkUxMUVCOUVCMUZENjlDNEY5QUUwMi9oY3RBR1FwMzNKNW9sTmhYOXp1M3FRNEpk T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hjdEFHUXAzM0o1b2xOaFg5enUzcVE0SmRPUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 OUJCNC9CM0U3MzA5Q0U1MkUxMUVCOUVCMUZENjlDNEY5QUUwMi9oY3RBR1FwMzNK NW9sTmhYOXp1M3FRNEpkT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhg/WS+SO8zTuTVHU+2ZicD/kPS9ydGkFOI/O83KbzgEsHn5+ng3Ad eFya+22neWTfbhZch4pIrsKT76SnS02dXJvq69XMewvBzPczVziGW1wHItsxFqVh nJHB/II3kQa/02p2W7PUcOkmmYfGlnF8aq1PGfqIRcmwEKXQBw+RtDwvL/oV15oU 2S3AoEt/ThtTox6dyayqKumqZtRuYnHTnH5j+dPc6Jiug+491v5Vfhrbr2Zh8KD5 6vCz0KrVyh8O3DlXv1b7lPj7lBFNowfm9PxEkaE9WiSq4quPfL7h1B3v4FcZBIW4 3Ef7jdhFyy8DX5sE9N+W8xmokEhiYKkY -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:51 2025 by rpki-client