$ rpki-client -vvf rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft File: cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft (raw, json) Hash identifier: IKYotDb8qTwHLcB/fOTG1oL9TGr3HDqklra7vbs1AQg= Subject key identifier: E3:69:D2:8A:67:66:64:56:45:E8:A1:E0:16:A1:3A:42:55:93:43:BA Authority key identifier: 70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C Certificate issuer: /CN=A917B540/serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Certificate serial: 01CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft Manifest number: 01C9 Signing time: Sun 19 Oct 2025 05:24:42 +0000 Manifest this update: Sun 19 Oct 2025 05:24:41 +0000 Manifest next update: Sun 26 Oct 2025 05:24:41 +0000 Files and hashes: 1: cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl (hash: gjHQ4d9d2mThoc1a8qtigDh+d4g+w1pEDhYJwAgbpRs=) 2: 1966C856FB9E11ED8309FC1DC4F9AE02.roa (hash: UaxkzwEU7Uh70PtMMkf/dHGEWq655rIu4QsEPhurB3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 462 (0x1ce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B540, serialNumber=702FA1AE9682B2B22ECDD9A53012F0E6F1BA1B9C Validity Not Before: Oct 19 05:24:41 2025 GMT Not After : Oct 26 05:24:41 2025 GMT Subject: CN=68f47619-dbcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:35:97:45:12:e9:e5:07:c8:eb:a2:c8:38: 2e:a7:cd:af:f4:ae:78:c1:d7:5d:c9:85:0b:f3:7e: 63:3f:ee:1d:98:ed:10:0d:df:1c:f9:6b:1b:c9:0b: 87:0b:70:60:35:c4:19:af:31:4c:10:e7:79:da:b9: ab:82:8a:ad:53:c4:75:f8:3a:7b:50:4d:f8:15:4f: 6d:9d:22:fe:83:d6:7f:06:5e:51:df:3b:0c:24:e6: 45:ae:bf:50:70:52:48:55:29:29:9f:a5:82:fc:32: ba:68:4a:53:cb:80:7c:3c:6d:ce:ac:6e:fa:d0:8b: 43:1e:5f:cc:40:94:c9:cc:bc:3b:6e:c4:d9:52:9c: d8:90:23:42:3a:16:91:b6:b5:ce:f4:80:11:9e:b5: 95:64:48:53:4d:bf:4b:43:b9:3d:a2:07:c2:79:2a: a9:78:7a:20:b1:98:02:38:01:a9:65:d4:95:ef:2f: 6e:e7:4f:dd:4f:06:93:a5:59:07:c7:36:8e:7c:09: d3:6c:a1:16:f2:ae:84:08:14:e3:92:f7:e7:ee:41: 35:1e:ac:41:61:d7:a5:6b:7a:58:5e:5f:b8:be:d7: b2:28:aa:09:40:d7:e7:83:fc:db:27:6c:56:56:fd: ad:0b:6d:fb:d8:b7:79:7a:ce:bb:7f:ef:ac:26:8b: 29:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:69:D2:8A:67:66:64:56:45:E8:A1:E0:16:A1:3A:42:55:93:43:BA X509v3 Authority Key Identifier: keyid:70:2F:A1:AE:96:82:B2:B2:2E:CD:D9:A5:30:12:F0:E6:F1:BA:1B:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cC-hrpaCsrIuzdmlMBLw5vG6G5w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B540/D97A95BCF88011EDB9ABFC56C4F9AE02/cC-hrpaCsrIuzdmlMBLw5vG6G5w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:61:00:12:42:9a:88:69:19:49:10:4f:0b:26:52:8e:e3:c1: df:f4:56:94:92:b8:9f:e4:84:fa:08:b8:97:37:ea:00:48:d1: 10:2f:33:be:dc:df:84:d5:9f:33:82:f2:5c:f4:d0:aa:df:4f: 2f:cd:84:be:b4:68:d6:47:04:4f:1d:ea:cc:9b:90:3a:97:5c: 38:9f:18:28:2f:b6:f9:d6:b1:bd:b0:23:7f:cd:64:ac:af:67: c7:e7:d8:e1:f3:70:32:0c:c9:31:c4:ad:88:78:4b:ea:21:4f: 47:60:8f:8a:40:a6:ec:43:4b:80:1b:31:df:54:06:d8:ac:9f: dd:62:11:c1:c2:5b:63:d3:7b:a3:49:42:42:d1:90:33:26:f3: 7c:89:ce:3f:b7:bd:cc:d2:37:6a:7e:35:06:e8:45:2d:06:a5: 14:83:69:09:16:9b:c5:ff:a9:3b:65:b3:11:33:bb:c5:27:b2: e2:84:61:76:fa:06:40:47:47:68:ab:29:e2:ad:15:a8:1c:18: da:9b:11:10:d7:6d:28:c0:8f:26:a3:c0:a6:c8:b5:26:b9:28: 9d:ab:19:67:04:37:8d:27:a2:79:d8:27:e8:e4:c0:b5:76:2e: e6:ba:19:57:bd:31:d2:b1:e9:c2:58:77:c7:0b:70:3f:a2:91: 6d:df:b0:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I1NDAxMTAvBgNVBAUTKDcwMkZBMUFFOTY4MkIyQjIyRUNERDlBNTMwMTJGMEU2 RjFCQTFCOUMwHhcNMjUxMDE5MDUyNDQxWhcNMjUxMDI2MDUyNDQxWjAYMRYwFAYD VQQDEw02OGY0NzYxOS1kYmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+o1l0US6eUHyOuiyDgup82v9K54wdddyYUL835jP+4dmO0QDd8c+WsbyQuH C3BgNcQZrzFMEOd52rmrgoqtU8R1+Dp7UE34FU9tnSL+g9Z/Bl5R3zsMJOZFrr9Q cFJIVSkpn6WC/DK6aEpTy4B8PG3OrG760ItDHl/MQJTJzLw7bsTZUpzYkCNCOhaR trXO9IARnrWVZEhTTb9LQ7k9ogfCeSqpeHogsZgCOAGpZdSV7y9u50/dTwaTpVkH xzaOfAnTbKEW8q6ECBTjkvfn7kE1HqxBYdela3pYXl+4vteyKKoJQNfng/zbJ2xW Vv2tC2372Ld5es67f++sJospLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONp0opn ZmRWReih4BahOkJVk0O6MB8GA1UdIwQYMBaAFHAvoa6WgrKyLs3ZpTAS8Obxuhuc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjU0MC9EOTdBOTVCQ0Y4 ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3NySXV6ZG1sTUJMdzV2RzZH NXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NDLWhycGFDc3JJdXpkbWxNQkx3NXZHNkc1dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjU0MC9EOTdBOTVCQ0Y4ODAxMUVEQjlBQkZDNTZDNEY5QUUwMi9jQy1ocnBhQ3Ny SXV6ZG1sTUJMdzV2RzZHNXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1YQASQpqIaRlJEE8LJlKO48Hf9FaUkrif5IT6CLiXN+oASNEQLzO+ 3N+E1Z8zgvJc9NCq308vzYS+tGjWRwRPHerMm5A6l1w4nxgoL7b51rG9sCN/zWSs r2fH59jh83AyDMkxxK2IeEvqIU9HYI+KQKbsQ0uAGzHfVAbYrJ/dYhHBwltj03uj SUJC0ZAzJvN8ic4/t73M0jdqfjUG6EUtBqUUg2kJFpvF/6k7ZbMRM7vFJ7LihGF2 +gZAR0doqynirRWoHBjamxEQ120owI8mo8CmyLUmuSidqxlnBDeNJ6J52Cfo5MC1 di7muhlXvTHSsenCWHfHC3A/opFt37C+ -----END CERTIFICATE-----Generated at Sun Oct 19 23:27:03 2025 by rpki-client