$ rpki-client -vvf rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft File: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft (raw, json) Hash identifier: JnzlU7SEK2u4WVrdWml7ab1tODu0v5Sk9eU10oR5d2I= Subject key identifier: E4:E1:62:83:81:AC:2D:8C:41:98:8B:71:26:38:3F:AC:48:F3:B4:1A Authority key identifier: 87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9 Certificate issuer: /CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9 Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft Manifest number: 016E Signing time: Sun 19 Oct 2025 06:33:09 +0000 Manifest this update: Sun 19 Oct 2025 06:33:09 +0000 Manifest next update: Sun 26 Oct 2025 06:33:09 +0000 Files and hashes: 1: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl (hash: 6+pP/ncGRwyTBapC26/P2Lr1YmTdXfnliGagpLmOyhY=) 2: 27178D9E7FBC11EEAF80B825C4F9AE02.roa (hash: lQYmsDBc3UpFQI5bvRZLM1pLBA2w7erJcueIAfvmPc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 06:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B02F, serialNumber=87F31B201BDD187581540C5B8B864438C29990B9 Validity Not Before: Oct 19 06:33:09 2025 GMT Not After : Oct 26 06:33:09 2025 GMT Subject: CN=68f48625-8d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:99:ff:3f:73:01:1d:f6:33:28:7c:f6:c7:57: be:fe:36:c6:e5:3d:c1:c3:82:fa:8d:1c:8c:49:cb: 68:1b:eb:f9:a8:31:26:cb:fe:7e:27:55:4b:44:c1: 92:09:9f:b8:18:f9:f4:ba:8d:dd:5e:a4:f7:49:6b: 99:c6:32:d7:9c:76:6c:dc:96:9e:6a:ad:73:50:b9: 0b:e1:0d:ef:1c:a5:d1:00:f6:7b:c4:6d:b1:e9:75: cb:e0:42:f2:cc:34:77:00:a6:85:dd:44:0e:aa:5e: 5c:32:29:0d:53:06:bd:20:93:6a:f8:80:4f:84:16: 1c:c1:d3:e8:7a:2b:b5:f1:41:ea:66:b5:28:6b:4c: 5a:5d:95:f8:37:0b:b8:74:69:25:fc:49:27:08:cf: 09:2a:f5:c0:d5:33:c5:97:ad:d8:da:ea:bc:05:b5: 3d:24:a8:38:5c:1b:b2:66:15:18:a4:ca:77:f6:fb: 73:2c:88:48:93:77:9b:f9:03:b2:81:3f:b4:6c:25: b2:ac:e5:f8:e6:fb:ea:c5:48:7a:9f:96:32:7a:a7: 22:cf:b7:a2:79:3f:2a:71:2e:7f:e1:17:2c:8f:86: 04:9e:20:65:fe:48:71:03:62:26:46:bf:d5:19:57: d4:a0:4d:04:47:61:bd:23:2c:dd:18:23:17:3a:19: 34:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E1:62:83:81:AC:2D:8C:41:98:8B:71:26:38:3F:AC:48:F3:B4:1A X509v3 Authority Key Identifier: keyid:87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:06:75:d1:a5:43:c7:16:86:a6:f2:62:38:75:ee:42:e6:9f: 9e:f4:be:15:11:d7:2f:cd:f9:59:56:9f:6b:e7:6e:aa:47:1a: e1:98:43:0e:8b:52:7c:4d:09:10:77:11:5e:39:12:a9:08:28: 7f:16:d8:8a:d3:a8:d8:c4:77:f4:8d:25:15:31:b2:52:97:22: 3f:84:8f:b6:af:d0:d2:4b:96:35:85:59:3e:61:08:01:3f:12: 38:4a:cf:e1:9a:06:19:73:af:8f:7e:6b:4b:7b:7b:d9:ef:9a: 06:3f:df:d1:97:e6:19:b6:a8:2c:fa:28:6a:30:d0:51:4d:dd: 13:a9:fd:d8:3f:38:d3:e1:ad:90:df:f3:40:84:1d:1f:2b:08: 4b:70:ac:a0:b1:5a:85:b9:6d:e0:45:08:13:f3:18:2e:4f:78: aa:4f:62:9e:b8:03:ca:72:08:20:08:e1:c6:f1:5d:58:eb:7d: d8:c6:6d:10:c2:15:dd:65:b5:14:82:dd:8c:5e:1a:3c:e1:de: fc:f8:08:a5:79:9e:cb:d9:35:7d:d5:3a:8a:da:62:e7:85:f5: e4:f5:d8:0a:62:cb:ad:7a:b3:12:ab:02:80:4e:97:44:10:04: 1f:c3:3e:df:85:61:74:54:38:f3:d0:d8:59:15:4f:34:06:a3: dd:b4:7b:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwMkYxMTAvBgNVBAUTKDg3RjMxQjIwMUJERDE4NzU4MTU0MEM1QjhCODY0NDM4 QzI5OTkwQjkwHhcNMjUxMDE5MDYzMzA5WhcNMjUxMDI2MDYzMzA5WjAYMRYwFAYD VQQDEw02OGY0ODYyNS04ZDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApJn/P3MBHfYzKHz2x1e+/jbG5T3Bw4L6jRyMSctoG+v5qDEmy/5+J1VLRMGS CZ+4GPn0uo3dXqT3SWuZxjLXnHZs3Jaeaq1zULkL4Q3vHKXRAPZ7xG2x6XXL4ELy zDR3AKaF3UQOql5cMikNUwa9IJNq+IBPhBYcwdPoeiu18UHqZrUoa0xaXZX4Nwu4 dGkl/EknCM8JKvXA1TPFl63Y2uq8BbU9JKg4XBuyZhUYpMp39vtzLIhIk3eb+QOy gT+0bCWyrOX45vvqxUh6n5Yyeqciz7eieT8qcS5/4Rcsj4YEniBl/khxA2ImRr/V GVfUoE0ER2G9IyzdGCMXOhk01wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOThYoOB rC2MQZiLcSY4P6xI87QaMB8GA1UdIwQYMBaAFIfzGyAb3Rh1gVQMW4uGRDjCmZC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjAyRi9EN0MzM0FCODdG QkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdIV0JWQXhiaTRaRU9NS1pr TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfTWJJQnZkR0hXQlZBeGJpNFpFT01LWmtMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjAyRi9EN0MzM0FCODdGQkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdI V0JWQXhiaTRaRU9NS1prTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/BnXRpUPHFoam8mI4de5C5p+e9L4VEdcvzflZVp9r526qRxrhmEMO i1J8TQkQdxFeORKpCCh/FtiK06jYxHf0jSUVMbJSlyI/hI+2r9DSS5Y1hVk+YQgB PxI4Ss/hmgYZc6+PfmtLe3vZ75oGP9/Rl+YZtqgs+ihqMNBRTd0Tqf3YPzjT4a2Q 3/NAhB0fKwhLcKygsVqFuW3gRQgT8xguT3iqT2KeuAPKcgggCOHG8V1Y633Yxm0Q whXdZbUUgt2MXho84d78+AileZ7L2TV91TqK2mLnhfXk9dgKYsuterMSqwKATpdE EAQfwz7fhWF0VDjz0NhZFU80BqPdtHsf -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:03 2025 by rpki-client