$ rpki-client -vvf rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft File: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft (raw, json) Hash identifier: zjr46uzORBex5kyXWeEIBkr8RCBe4MhzAmISS8jnel8= Subject key identifier: FD:52:15:1E:7F:9B:67:73:F6:75:D0:00:EC:94:AB:A5:78:84:C5:7B Authority key identifier: 1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 Certificate issuer: /CN=A9178C1E/serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft Manifest number: 0142 Signing time: Sun 19 Oct 2025 07:11:57 +0000 Manifest this update: Sun 19 Oct 2025 07:11:57 +0000 Manifest next update: Sun 26 Oct 2025 07:11:57 +0000 Files and hashes: 1: HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl (hash: ORMO/2MreC/qpjFOfIWDEq482Z7iKrcI9J9QgvxxATs=) 2: 4AFD4994CDD011EEA5534481C4F9AE02.roa (hash: 5W+7nQ6sUflibilCBlXCdge8iT2G6A6aLqY201MPVEY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178C1E, serialNumber=1DF9C0CEF9A77DCD15BB51F93FD342999BE11658 Validity Not Before: Oct 19 07:11:57 2025 GMT Not After : Oct 26 07:11:57 2025 GMT Subject: CN=68f48f3d-64ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:3b:84:50:00:73:89:34:9f:1d:8d:c2:19:04: 5d:03:51:ab:0b:ef:d9:7b:9e:ed:17:09:bf:6f:4a: 03:ad:4e:12:75:8e:41:ba:dc:b8:f5:9c:df:c2:a2: 17:98:09:59:f9:61:70:c1:27:ec:a8:f5:7b:c5:88: cd:95:67:45:ef:c3:5d:62:81:92:7e:eb:3e:56:ad: b8:38:b0:fa:d4:dd:86:9f:27:ba:68:25:07:66:56: 62:b3:20:c6:ed:97:f2:c1:67:f7:f3:e9:29:e8:6e: 5d:28:4a:ce:b8:33:b5:18:3f:84:28:fc:93:87:fb: 68:00:eb:b3:73:67:46:36:ae:58:14:ca:b3:e1:08: 26:ad:94:80:dd:f7:bb:21:a7:3b:35:5c:28:d6:1f: 15:16:7f:5d:a4:05:4c:1b:aa:88:65:98:74:45:b7: cc:03:80:f2:32:c7:95:d4:ae:87:e9:56:72:e6:5b: 7e:b2:78:94:d6:6c:16:ab:2e:28:7c:b9:b3:98:39: 43:4b:f2:ec:fa:d8:d8:c9:82:f0:84:24:d2:69:e3: a2:7c:06:1f:1b:a1:51:91:f4:58:df:07:be:78:e1: b9:be:58:78:5f:bb:a4:59:a5:a8:c7:9d:b2:ac:a9: b7:62:6d:d9:ff:00:43:7d:9e:89:66:57:3f:1c:a6: 94:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:52:15:1E:7F:9B:67:73:F6:75:D0:00:EC:94:AB:A5:78:84:C5:7B X509v3 Authority Key Identifier: keyid:1D:F9:C0:CE:F9:A7:7D:CD:15:BB:51:F9:3F:D3:42:99:9B:E1:16:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178C1E/C286032EC64711EE9D68EB7FC4F9AE02/HfnAzvmnfc0Vu1H5P9NCmZvhFlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:b9:2f:18:3c:f6:3b:54:cf:d2:c2:e6:50:12:87:2b:a8:31: 8c:20:3b:dd:b1:7b:a7:27:da:6f:54:70:10:b6:27:6b:75:57: c9:78:39:fe:91:ba:b6:17:7b:74:59:c4:59:e6:c1:b5:a7:2c: e5:59:18:b1:6e:33:5d:ba:8d:10:97:00:39:e8:08:e9:3e:2c: 3e:2d:42:6f:d6:3e:ae:3d:af:ac:24:c0:53:a8:87:c7:72:b5: 30:cf:7f:48:18:ac:b1:c2:e5:89:c7:88:c9:ae:15:85:63:1a: 87:6e:97:f0:f9:ac:0d:7f:8b:72:b1:6a:59:c9:67:a9:59:c7: 4d:1c:8c:33:dd:48:dd:bb:fb:e6:28:15:50:a3:ea:4d:29:b7: f4:e1:7a:63:ce:e5:fd:5e:07:cd:73:ed:45:ae:f4:e2:0c:06: 6a:69:9d:af:6a:59:a8:82:62:c3:3e:6d:3b:1d:8d:25:6c:70: 69:b4:a2:74:84:bd:7b:3c:ee:ef:fc:05:c3:c4:28:32:13:3e: 07:ed:e4:c2:4b:3d:3f:6d:e0:e9:ac:60:24:a7:ad:9e:73:d5: 1c:d4:6d:dd:a3:d0:5e:a4:8d:9c:41:8d:d7:18:ba:e8:f2:8e: ee:5a:74:e6:80:04:2d:d4:a9:18:78:e1:9e:a8:b8:21:7d:a2: ae:f6:05:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhDMUUxMTAvBgNVBAUTKDFERjlDMENFRjlBNzdEQ0QxNUJCNTFGOTNGRDM0Mjk5 OUJFMTE2NTgwHhcNMjUxMDE5MDcxMTU3WhcNMjUxMDI2MDcxMTU3WjAYMRYwFAYD VQQDEw02OGY0OGYzZC02NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2zuEUABziTSfHY3CGQRdA1GrC+/Ze57tFwm/b0oDrU4SdY5Buty49ZzfwqIX mAlZ+WFwwSfsqPV7xYjNlWdF78NdYoGSfus+Vq24OLD61N2Gnye6aCUHZlZisyDG 7ZfywWf38+kp6G5dKErOuDO1GD+EKPyTh/toAOuzc2dGNq5YFMqz4QgmrZSA3fe7 Iac7NVwo1h8VFn9dpAVMG6qIZZh0RbfMA4DyMseV1K6H6VZy5lt+sniU1mwWqy4o fLmzmDlDS/Ls+tjYyYLwhCTSaeOifAYfG6FRkfRY3we+eOG5vlh4X7ukWaWox52y rKm3Ym3Z/wBDfZ6JZlc/HKaUhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1SFR5/ m2dz9nXQAOyUq6V4hMV7MB8GA1UdIwQYMBaAFB35wM75p33NFbtR+T/TQpmb4RZY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEMxRS9DMjg2MDMyRUM2 NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZjMFZ1MUg1UDlOQ21admhG bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hmbkF6dm1uZmMwVnUxSDVQOU5DbVp2aEZsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEMxRS9DMjg2MDMyRUM2NDcxMUVFOUQ2OEVCN0ZDNEY5QUUwMi9IZm5BenZtbmZj MFZ1MUg1UDlOQ21admhGbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXuS8YPPY7VM/SwuZQEocrqDGMIDvdsXunJ9pvVHAQtidrdVfJeDn+ kbq2F3t0WcRZ5sG1pyzlWRixbjNduo0QlwA56AjpPiw+LUJv1j6uPa+sJMBTqIfH crUwz39IGKyxwuWJx4jJrhWFYxqHbpfw+awNf4tysWpZyWepWcdNHIwz3Ujdu/vm KBVQo+pNKbf04XpjzuX9XgfNc+1FrvTiDAZqaZ2valmogmLDPm07HY0lbHBptKJ0 hL17PO7v/AXDxCgyEz4H7eTCSz0/beDprGAkp62ec9Uc1G3do9BepI2cQY3XGLro 8o7uWnTmgAQt1KkYeOGeqLghfaKu9gWG -----END CERTIFICATE-----Generated at Mon Oct 20 05:34:02 2025 by rpki-client