$ rpki-client -vvf rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft File: hNqJJ83vUDOW9ScgGU65MSCdPzo.mft (raw, json) Hash identifier: 4rC+xoSDM4UG/V44EManOzT7gEgO9VE2KvHAKMLEcNg= Subject key identifier: B5:05:54:DA:23:B8:E8:16:F5:42:AD:DF:23:67:04:A2:55:94:B2:B1 Authority key identifier: 84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A Certificate issuer: /CN=A917F051/serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A Certificate serial: 0357 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft Manifest number: 034B Signing time: Sun 19 Oct 2025 03:04:10 +0000 Manifest this update: Sun 19 Oct 2025 03:04:10 +0000 Manifest next update: Sun 26 Oct 2025 03:04:10 +0000 Files and hashes: 1: hNqJJ83vUDOW9ScgGU65MSCdPzo.crl (hash: s4gSYAtmbP5Z7bIHoN4xsfudY42AquJUHk3tfqBMqGg=) 2: 3EABAF20D8E311EC8F274181C4F9AE02.roa (hash: D/07ECvWp7oQg2+1KPxjiVqoD+wojBNXOMz248kJJ/8=) 3: 6910E952A86A11EF89DA976DC4F9AE02.roa (hash: l1w8+0ex2ah/bqLhlgu70ROEZ3rYXLDAefLnWRzXKeM=) 4: 00F0B7EEA87411EF88F5C638C4F9AE02.roa (hash: jCGpkTOREB2CZphvzKOSraYTHWPq9LTO8zozaxcqQy8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 855 (0x357) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F051, serialNumber=84DA8927CDEF503396F52720194EB931209D3F3A Validity Not Before: Oct 19 03:04:10 2025 GMT Not After : Oct 26 03:04:10 2025 GMT Subject: CN=68f4552a-efed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bd:c4:01:62:e3:49:34:35:eb:56:77:d2:b0: be:87:c4:b4:47:bd:cf:1d:18:2b:0a:33:1e:77:ef: 2f:02:44:f3:39:e1:2b:32:9a:7e:23:d4:87:ea:34: 89:d2:25:43:44:57:53:c4:e7:a4:9d:a3:3a:b8:88: 03:92:47:51:d4:35:45:50:7a:c3:29:b8:e7:dc:1d: 7b:e3:98:ca:f9:eb:40:57:41:11:60:a8:07:8b:1e: c2:fa:41:b0:2b:6d:0e:f3:0f:87:91:82:5e:ac:85: e2:61:0f:d4:ab:39:3e:ea:a0:d8:d3:53:55:70:c8: 4c:8a:33:3f:ee:c7:e8:87:41:00:80:2a:16:12:97: a2:81:8e:68:8e:65:1f:6d:fb:77:51:83:9e:cb:e5: f6:7f:13:82:f8:99:e0:ed:9d:44:ea:7a:5e:d9:68: e7:aa:d8:9e:a9:c0:3d:b7:cc:57:19:fc:fb:c0:64: 67:a5:08:44:cd:36:88:f6:5c:5a:55:67:31:cb:8e: fe:75:37:b4:40:9d:b4:2c:b9:fa:69:ba:f2:fd:5a: 52:81:9a:68:a3:02:d6:0a:6a:9b:d1:ed:c8:0a:1c: 5f:ae:5e:28:c1:ef:a0:8c:9c:8b:92:2f:a0:12:a8: 84:51:e0:52:62:68:43:2c:b3:7b:f0:0d:1f:21:4e: bc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:05:54:DA:23:B8:E8:16:F5:42:AD:DF:23:67:04:A2:55:94:B2:B1 X509v3 Authority Key Identifier: keyid:84:DA:89:27:CD:EF:50:33:96:F5:27:20:19:4E:B9:31:20:9D:3F:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hNqJJ83vUDOW9ScgGU65MSCdPzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F051/5AAD9D7ED8DD11ECA5DD0C50C4F9AE02/hNqJJ83vUDOW9ScgGU65MSCdPzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:be:fd:c6:cc:2b:7e:ef:54:98:14:0a:96:57:e2:59:da:c4: d4:7f:ff:18:94:ec:31:60:ac:b8:69:55:b2:f4:33:2e:eb:2d: 45:3a:52:2a:03:97:00:11:bd:f5:09:51:b7:bd:e3:00:14:2c: a7:1f:d2:81:8f:6e:0d:c2:19:24:7b:51:0a:39:4e:47:03:ac: e8:84:74:49:0e:66:ab:10:78:5f:fd:5f:53:e9:ab:79:25:f3: c4:65:de:38:3f:7b:ff:87:91:ed:06:f6:40:15:b2:80:fc:ad: 0d:89:22:cf:1a:05:09:0d:e5:89:5d:5d:cf:a5:13:75:54:a0: 92:dd:16:1a:f3:8a:a2:7d:90:92:0c:3b:92:7e:4e:87:3f:4c: 76:d2:47:33:96:59:44:22:02:e9:f8:06:68:62:3d:d9:9e:90: 1b:f5:fe:db:cb:6a:55:24:c0:06:94:20:1a:bf:8f:36:a0:1d: dd:f1:17:63:f7:e8:cf:5d:07:25:fb:31:51:94:e2:4e:7e:91: 7b:25:6f:9c:f4:25:d0:d1:64:1f:58:38:62:9a:af:58:92:89: f3:88:50:27:91:9a:e6:87:10:0d:a8:84:0c:fc:f1:db:1f:0f: c1:8b:2c:df:c0:69:1a:ce:81:03:8e:eb:77:78:de:89:fb:46: b4:80:58:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YwNTExMTAvBgNVBAUTKDg0REE4OTI3Q0RFRjUwMzM5NkY1MjcyMDE5NEVCOTMx MjA5RDNGM0EwHhcNMjUxMDE5MDMwNDEwWhcNMjUxMDI2MDMwNDEwWjAYMRYwFAYD VQQDEw02OGY0NTUyYS1lZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt73EAWLjSTQ161Z30rC+h8S0R73PHRgrCjMed+8vAkTzOeErMpp+I9SH6jSJ 0iVDRFdTxOeknaM6uIgDkkdR1DVFUHrDKbjn3B1745jK+etAV0ERYKgHix7C+kGw K20O8w+HkYJerIXiYQ/Uqzk+6qDY01NVcMhMijM/7sfoh0EAgCoWEpeigY5ojmUf bft3UYOey+X2fxOC+Jng7Z1E6npe2WjnqtieqcA9t8xXGfz7wGRnpQhEzTaI9lxa VWcxy47+dTe0QJ20LLn6abry/VpSgZpoowLWCmqb0e3IChxfrl4owe+gjJyLki+g EqiEUeBSYmhDLLN78A0fIU68oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUFVNoj uOgW9UKt3yNnBKJVlLKxMB8GA1UdIwQYMBaAFITaiSfN71AzlvUnIBlOuTEgnT86 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjA1MS81QUFEOUQ3RUQ4 REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVET1c5U2NnR1U2NU1TQ2RQ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hOcUpKODN2VURPVzlTY2dHVTY1TVNDZFB6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjA1MS81QUFEOUQ3RUQ4REQxMUVDQTVERDBDNTBDNEY5QUUwMi9oTnFKSjgzdlVE T1c5U2NnR1U2NU1TQ2RQem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfvv3GzCt+71SYFAqWV+JZ2sTUf/8YlOwxYKy4aVWy9DMu6y1FOlIq A5cAEb31CVG3veMAFCynH9KBj24Nwhkke1EKOU5HA6zohHRJDmarEHhf/V9T6at5 JfPEZd44P3v/h5HtBvZAFbKA/K0NiSLPGgUJDeWJXV3PpRN1VKCS3RYa84qifZCS DDuSfk6HP0x20kczlllEIgLp+AZoYj3ZnpAb9f7by2pVJMAGlCAav482oB3d8Rdj 9+jPXQcl+zFRlOJOfpF7JW+c9CXQ0WQfWDhimq9YkonziFAnkZrmhxANqIQM/PHb Hw/BiyzfwGkazoEDjut3eN6J+0a0gFgx -----END CERTIFICATE-----Generated at Sun Oct 19 23:33:07 2025 by rpki-client