$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft File: HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json) Hash identifier: Y6Rvx9YYmkJL7Q97tYFAoNJpFTEaVOG/+mNlW8e9NMM= Subject key identifier: 51:F7:1B:13:38:26:F9:65:DD:9C:54:FA:50:71:90:BB:E2:19:BB:36 Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Certificate serial: 1995 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft Manifest number: 197F Signing time: Sat 18 Oct 2025 16:46:01 +0000 Manifest this update: Sat 18 Oct 2025 16:46:00 +0000 Manifest next update: Sat 25 Oct 2025 16:46:00 +0000 Files and hashes: 1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: tPn5wQF1iGr90TYiwIHC3KzFXqcYlTo5JxpHHVksA5Y=) 2: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: 3hzCzmgLP0OteAC7KDBKKCAso9LvkCWYyHJfJCTMisY=) 3: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: NzsKwICfagzX9T3AahXgeWsHOEBVdu2eB1iizPCz1SA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6549 (0x1995) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Validity Not Before: Oct 18 16:46:00 2025 GMT Not After : Oct 25 16:46:00 2025 GMT Subject: CN=68f3c449-5dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f5:4e:26:cf:a0:32:d0:41:14:a3:77:fd:e3: 78:46:1e:56:45:59:23:e7:a4:72:c4:c4:c4:42:e0: 9c:85:90:a4:63:4d:5e:2a:e5:70:2c:85:3d:7b:f8: 40:d6:89:94:40:b2:cd:2e:53:70:bb:6b:b3:c9:92: 39:f7:45:54:ee:36:9d:44:ae:8c:0f:a4:c4:5a:1f: f2:3e:e2:43:a2:03:25:4f:2d:06:90:3c:b9:64:15: 0b:ca:1f:a3:73:86:a3:69:c7:c3:9c:bd:61:b3:74: ea:f7:c3:9e:82:a0:ee:e9:ca:3f:b9:9a:91:e5:a2: 98:be:88:4e:07:9c:2a:98:d5:75:7a:c2:e7:6e:7f: 83:a3:32:1c:2f:8b:b6:6c:8b:2e:51:fa:f5:c2:44: fb:67:a9:0b:ab:6d:ee:26:eb:ad:c2:a1:23:29:56: 3a:71:6c:3e:cd:0f:9a:6f:10:8f:98:da:41:d4:8f: eb:23:ff:d5:84:7c:d3:11:7a:2c:a7:cf:ad:ef:10: a2:87:f6:17:4d:5e:68:96:43:4e:16:c6:f7:e5:74: 5c:00:a0:0e:cd:e9:a3:74:be:ca:e7:ba:55:4c:86: b9:e5:55:34:e4:e2:e3:e1:a7:9e:30:0d:f8:13:f9: 6d:56:a4:cb:50:7e:cc:87:12:04:66:db:4d:d2:87: 07:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F7:1B:13:38:26:F9:65:DD:9C:54:FA:50:71:90:BB:E2:19:BB:36 X509v3 Authority Key Identifier: keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:54:36:7a:e2:cc:d3:5a:8e:3a:f1:ac:9a:02:7a:9a:cc:55: 76:36:4c:22:ba:6f:9d:5c:53:78:bd:de:22:22:c0:2c:ed:2b: 15:17:70:6d:d3:37:c0:52:72:fd:52:73:03:e1:35:67:57:6c: f7:d7:6d:19:c0:b9:f6:38:65:f5:91:ee:55:65:d7:f2:f4:d5: fd:7e:93:f5:3a:cc:41:23:a9:7d:97:ab:3d:b2:5b:66:37:0a: fd:70:c0:e5:c7:b4:dd:ea:fa:f8:cc:b7:82:0f:40:7d:75:15: d5:4a:60:c0:22:9b:25:e2:7b:9d:11:6d:45:b8:82:0d:d3:8c: 2d:84:7e:96:a1:aa:22:22:48:6a:80:c6:07:b6:5d:b8:67:c6: 3c:54:cb:9a:05:93:3d:af:10:53:f5:e8:3f:ec:ba:81:d3:8a: 2e:96:c2:32:6d:68:66:2e:9a:92:21:d4:1d:2b:15:a4:b5:5a: 7e:40:8b:22:17:21:af:c6:ab:17:80:88:38:de:86:59:df:d6: 81:30:40:06:e2:7d:5e:41:7a:83:25:74:3b:ae:ae:d0:ad:bb: 92:8c:a5:ca:50:7e:1b:80:55:12:0f:62:23:ef:d6:36:81:0e: 81:13:67:d9:bf:c6:6d:f6:1f:72:87:ed:64:bb:19:d6:0f:fe: 6b:9a:26:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGZUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDFDNjJEQzFEODBDQkFCMDMwMzUzRTFGNTc0QjM2MDAx OThGQjZCNzEwHhcNMjUxMDE4MTY0NjAwWhcNMjUxMDI1MTY0NjAwWjAYMRYwFAYD VQQDEw02OGYzYzQ0OS01ZGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8PVOJs+gMtBBFKN3/eN4Rh5WRVkj56RyxMTEQuCchZCkY01eKuVwLIU9e/hA 1omUQLLNLlNwu2uzyZI590VU7jadRK6MD6TEWh/yPuJDogMlTy0GkDy5ZBULyh+j c4ajacfDnL1hs3Tq98OegqDu6co/uZqR5aKYvohOB5wqmNV1esLnbn+DozIcL4u2 bIsuUfr1wkT7Z6kLq23uJuutwqEjKVY6cWw+zQ+abxCPmNpB1I/rI//VhHzTEXos p8+t7xCih/YXTV5olkNOFsb35XRcAKAOzemjdL7K57pVTIa55VU05OLj4aeeMA34 E/ltVqTLUH7MhxIEZttN0ocHowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFH3GxM4 Jvll3ZxU+lBxkLviGbs2MB8GA1UdIwQYMBaAFBxi3B2Ay6sDA1Ph9XSzYAGY+2tx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GRkZFQzExQTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3TURVLUgxZExOZ0Faajdh M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hHTGNIWURMcXdNRFUtSDFkTE5nQVpqN2EzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GRkZFQzExQTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3 TURVLUgxZExOZ0FaajdhM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7VDZ64szTWo468ayaAnqazFV2Nkwium+dXFN4vd4iIsAs7SsVF3Bt 0zfAUnL9UnMD4TVnV2z3120ZwLn2OGX1ke5VZdfy9NX9fpP1OsxBI6l9l6s9sltm Nwr9cMDlx7Td6vr4zLeCD0B9dRXVSmDAIpsl4nudEW1FuIIN04wthH6WoaoiIkhq gMYHtl24Z8Y8VMuaBZM9rxBT9eg/7LqB04oulsIybWhmLpqSIdQdKxWktVp+QIsi FyGvxqsXgIg43oZZ39aBMEAG4n1eQXqDJXQ7rq7QrbuSjKXKUH4bgFUSD2Ij79Y2 gQ6BE2fZv8Zt9h9yh+1kuxnWD/5rmibY -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:40 2025 by rpki-client