$ rpki-client -vvf rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft File: hHItvUIme93Vm4hBUpklNTHgY2Q.mft (raw, json) Hash identifier: f9M91YyXyhHAoxOCFW2L/jJJ3gufs5I220utejOQYNg= Subject key identifier: 4B:F5:45:E8:BA:F7:8D:64:1E:3A:75:CE:2C:14:CB:B3:39:86:97:10 Authority key identifier: 84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64 Certificate issuer: /CN=A918FEF3/serialNumber=84722DBD42267BDDD59B88415299253531E06364 Certificate serial: 181F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft Manifest number: 181F Signing time: Sat 18 Oct 2025 16:54:55 +0000 Manifest this update: Sat 18 Oct 2025 16:54:55 +0000 Manifest next update: Sat 25 Oct 2025 16:54:55 +0000 Files and hashes: 1: hHItvUIme93Vm4hBUpklNTHgY2Q.crl (hash: po5wia6H6juKbe3tCknExpxmbEYyWgIgtfhaxds6Eyw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6175 (0x181f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FEF3, serialNumber=84722DBD42267BDDD59B88415299253531E06364 Validity Not Before: Oct 18 16:54:55 2025 GMT Not After : Oct 25 16:54:55 2025 GMT Subject: CN=68f3c65f-1d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:7d:eb:30:c8:4e:fa:47:3a:74:5e:0f:2f: 00:a8:7c:41:36:32:19:b0:f7:b6:c5:c1:fc:e7:6f: 18:a5:3f:3d:68:e7:ea:09:60:56:de:42:52:8e:ef: d4:10:fc:57:4f:55:bb:9b:d8:dd:5e:93:5e:72:9c: 2d:ac:51:d2:97:b4:ec:88:44:86:e9:d6:44:f3:d2: 89:ba:57:bf:61:5f:7f:3b:55:b1:d4:37:2c:e1:ba: 79:59:04:2d:2a:e5:48:98:6e:c3:42:a6:8d:b9:3d: 28:68:b2:08:e4:95:4e:a3:68:34:d2:6c:e0:25:2c: 49:db:d0:39:97:75:e2:4f:84:bb:47:8d:02:e2:70: 03:dd:54:aa:4e:31:98:a6:be:6f:05:9b:2b:e1:5d: 76:68:6a:44:77:2b:1d:7e:65:bf:66:5f:d7:27:2a: e5:c8:21:59:f0:9d:26:96:7a:b2:0c:39:29:de:e0: eb:21:51:5b:56:15:93:5f:49:d2:dd:16:64:21:68: 3a:22:a3:d4:0d:cd:d5:26:ed:60:f7:c4:69:6e:bc: 14:08:c3:1d:4b:a7:4d:1f:db:6a:ec:e8:6a:b7:6e: 0b:50:2a:1a:17:b3:23:a0:4b:1e:95:f8:b8:f4:b1: 98:d8:6b:94:b5:a6:e1:74:60:92:11:2a:3f:62:3b: fb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F5:45:E8:BA:F7:8D:64:1E:3A:75:CE:2C:14:CB:B3:39:86:97:10 X509v3 Authority Key Identifier: keyid:84:72:2D:BD:42:26:7B:DD:D5:9B:88:41:52:99:25:35:31:E0:63:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hHItvUIme93Vm4hBUpklNTHgY2Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FEF3/E6337D30BD3211E7A9C2C813C4F9AE02/hHItvUIme93Vm4hBUpklNTHgY2Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:04:a4:58:83:90:f6:fa:b5:78:58:c1:5b:09:98:c6:2a:6a: f8:59:7b:05:7f:d7:7f:1f:15:a8:fc:fc:24:65:73:3c:40:b3: 8f:e5:67:7e:ed:36:63:05:e0:e8:e4:73:67:97:e3:4b:f5:aa: ad:22:e5:d0:df:91:0b:57:fd:76:67:a7:b4:c1:0e:e3:1c:0a: a5:89:8a:69:3d:6d:eb:82:90:6d:bc:51:35:8c:af:38:c9:fb: 02:45:56:65:b9:03:79:fd:0b:08:e6:02:d5:2f:ae:57:ff:36: f7:d3:76:d2:89:a0:e6:76:0a:30:26:3e:41:10:d4:73:81:b9: b3:e8:da:43:26:f2:89:07:49:cf:12:a2:60:f2:c0:d7:37:d2: 27:49:cb:3b:19:92:1e:ea:e3:0c:64:1e:3d:0f:73:21:c2:13: 5d:b1:93:7f:e0:88:38:29:98:bb:41:ee:1e:dc:74:c7:06:4e: ae:0a:f5:4f:57:3d:11:72:2f:1a:90:b9:fd:05:df:3d:1e:75: 39:ef:9f:a0:ea:de:b1:75:59:82:5d:7d:50:94:b7:4a:8e:3a: c6:e8:18:a3:18:aa:d6:64:d3:c8:76:c2:55:79:58:20:be:cc: af:06:eb:61:fa:73:b8:4a:e7:09:d8:eb:e6:7e:5b:b4:a6:84: 14:23:7d:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGB8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZFRjMxMTAvBgNVBAUTKDg0NzIyREJENDIyNjdCRERENTlCODg0MTUyOTkyNTM1 MzFFMDYzNjQwHhcNMjUxMDE4MTY1NDU1WhcNMjUxMDI1MTY1NDU1WjAYMRYwFAYD VQQDEw02OGYzYzY1Zi0xZDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9596zDITvpHOnReDy8AqHxBNjIZsPe2xcH8528YpT89aOfqCWBW3kJSju/U EPxXT1W7m9jdXpNecpwtrFHSl7TsiESG6dZE89KJule/YV9/O1Wx1Dcs4bp5WQQt KuVImG7DQqaNuT0oaLII5JVOo2g00mzgJSxJ29A5l3XiT4S7R40C4nAD3VSqTjGY pr5vBZsr4V12aGpEdysdfmW/Zl/XJyrlyCFZ8J0mlnqyDDkp3uDrIVFbVhWTX0nS 3RZkIWg6IqPUDc3VJu1g98RpbrwUCMMdS6dNH9tq7Ohqt24LUCoaF7MjoEselfi4 9LGY2GuUtabhdGCSESo/Yjv7bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEv1Rei6 941kHjp1ziwUy7M5hpcQMB8GA1UdIwQYMBaAFIRyLb1CJnvd1ZuIQVKZJTUx4GNk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkVGMy9FNjMzN0QzMEJE MzIxMUU3QTlDMkM4MTNDNEY5QUUwMi9oSEl0dlVJbWU5M1ZtNGhCVXBrbE5USGdZ MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hISXR2VUltZTkzVm00aEJVcGtsTlRIZ1kyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkVGMy9FNjMzN0QzMEJEMzIxMUU3QTlDMkM4MTNDNEY5QUUwMi9oSEl0dlVJbWU5 M1ZtNGhCVXBrbE5USGdZMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiBKRYg5D2+rV4WMFbCZjGKmr4WXsFf9d/HxWo/PwkZXM8QLOP5Wd+ 7TZjBeDo5HNnl+NL9aqtIuXQ35ELV/12Z6e0wQ7jHAqliYppPW3rgpBtvFE1jK84 yfsCRVZluQN5/QsI5gLVL65X/zb303bSiaDmdgowJj5BENRzgbmz6NpDJvKJB0nP EqJg8sDXN9InScs7GZIe6uMMZB49D3MhwhNdsZN/4Ig4KZi7Qe4e3HTHBk6uCvVP Vz0Rci8akLn9Bd89HnU575+g6t6xdVmCXX1QlLdKjjrG6BijGKrWZNPIdsJVeVgg vsyvButh+nO4SucJ2Ovmflu0poQUI33s -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:21 2025 by rpki-client