$ rpki-client -vvf rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft File: hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft (raw, json) Hash identifier: e0FUdruz4K+du4pcr4S39MmYPMtOzhQGDkmvonM6Pjg= Subject key identifier: A9:1D:8A:10:7A:46:02:0E:A0:39:E9:18:29:4B:0A:90:C2:86:DD:5D Authority key identifier: 86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 Certificate issuer: /CN=A9193F75/serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Certificate serial: 14DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft Manifest number: 14C5 Signing time: Sat 18 Oct 2025 17:20:32 +0000 Manifest this update: Sat 18 Oct 2025 17:20:31 +0000 Manifest next update: Sat 25 Oct 2025 17:20:31 +0000 Files and hashes: 1: hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl (hash: e23rrjS4t8HAn3gTWc7D/lwc4EUko6rNI1yY+e56RrI=) 2: B1851BC6B3D811EA9F8FCA0CC4F9AE02.roa (hash: sssgK3vIBFp/UdQrFapnnIl7ysOjPiidhJgxP2Ewfsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5341 (0x14dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193F75, serialNumber=867C951AA68CC187E426BD1F561C0C9DA9581D24 Validity Not Before: Oct 18 17:20:31 2025 GMT Not After : Oct 25 17:20:31 2025 GMT Subject: CN=68f3cc5f-7f15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:67:16:c2:fa:40:14:89:4e:74:3f:41:42:02: 34:51:27:8c:76:08:28:f5:22:91:42:90:2f:05:9a: 0a:72:9a:a2:9f:47:e4:4b:57:60:2d:dd:32:f2:ca: f9:0c:4a:1b:62:f9:57:8b:02:9b:a4:72:6c:51:cc: 4f:05:dc:12:c4:6d:0f:d7:34:3e:e3:7f:a4:a6:34: 88:76:36:9f:7a:72:a7:f6:f8:b0:9e:c2:23:c1:a1: c7:d0:b3:4e:89:3c:1a:80:6e:f4:13:20:a9:a4:33: 06:90:4a:36:73:16:ee:96:75:e1:65:73:93:cf:1d: 71:de:01:c5:43:26:78:8a:06:c5:a8:0c:81:e3:20: 4f:9a:d2:d0:a9:81:35:8e:6a:d4:67:03:49:7c:a7: 26:1a:cb:a8:cf:c6:3a:49:2f:aa:93:4e:b5:32:20: 47:de:75:a7:5b:9c:b2:ff:ef:13:66:0e:21:01:77: ef:8d:09:25:77:69:34:56:d5:fb:66:bb:08:23:a8: 6e:c9:5f:36:5f:66:51:c7:40:94:ec:ab:50:af:99: f4:ac:6f:07:dc:60:ae:53:57:e2:6c:e7:ea:66:e2: 1f:4e:45:6b:f3:c1:5a:f7:c6:75:9f:70:2a:f2:be: e9:ac:1a:a8:4c:36:5a:d2:bb:14:c8:57:d0:fc:05: 60:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1D:8A:10:7A:46:02:0E:A0:39:E9:18:29:4B:0A:90:C2:86:DD:5D X509v3 Authority Key Identifier: keyid:86:7C:95:1A:A6:8C:C1:87:E4:26:BD:1F:56:1C:0C:9D:A9:58:1D:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hnyVGqaMwYfkJr0fVhwMnalYHSQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193F75/7206D6F46C6F11E89F6E4E66C4F9AE02/hnyVGqaMwYfkJr0fVhwMnalYHSQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:86:3a:37:b7:71:09:ce:ca:62:18:a6:da:f3:82:10:5a:53: b4:69:9c:73:9f:a8:39:a5:87:78:b2:a7:48:c5:ed:d4:be:4f: 7a:f4:95:c7:2b:bd:c1:e8:1f:6c:76:91:e3:19:c1:95:5d:b3: 21:f9:42:89:fa:6d:bf:22:89:11:5a:10:f2:d0:e4:7f:ad:76: b5:78:29:86:00:63:7d:6e:9c:cd:9b:99:ef:af:fd:bf:cd:c9: c4:ac:9f:b9:59:e6:5a:61:10:4b:dd:70:94:1e:e8:3b:c7:9a: ad:34:de:e9:7f:56:d6:f4:4b:26:07:5b:83:c4:2d:53:e3:98: 53:33:c7:46:d7:fb:1b:5a:c6:25:68:b1:b0:d5:11:14:2c:c7: 28:a0:ee:16:2a:3b:b7:bf:ef:ad:ff:0c:11:9d:04:86:c9:f6: 18:c5:2e:2f:33:ed:1d:16:d1:eb:ee:f7:cb:0b:ca:66:e8:59: 07:84:48:ea:0f:04:89:49:de:fd:a2:87:da:a4:b6:20:d7:d7: 85:81:d8:00:84:5f:92:6c:42:26:43:59:5c:95:2f:a6:b0:4e: 6b:ff:26:ac:bb:26:3d:4f:0f:6d:6a:fb:50:24:77:a0:4b:fc: 09:f0:39:fa:76:11:eb:5d:f1:f1:16:7c:93:59:b7:94:3a:3a: a6:67:b2:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTNGNzUxMTAvBgNVBAUTKDg2N0M5NTFBQTY4Q0MxODdFNDI2QkQxRjU2MUMwQzlE QTk1ODFEMjQwHhcNMjUxMDE4MTcyMDMxWhcNMjUxMDI1MTcyMDMxWjAYMRYwFAYD VQQDEw02OGYzY2M1Zi03ZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtGcWwvpAFIlOdD9BQgI0USeMdggo9SKRQpAvBZoKcpqin0fkS1dgLd0y8sr5 DEobYvlXiwKbpHJsUcxPBdwSxG0P1zQ+43+kpjSIdjafenKn9viwnsIjwaHH0LNO iTwagG70EyCppDMGkEo2cxbulnXhZXOTzx1x3gHFQyZ4igbFqAyB4yBPmtLQqYE1 jmrUZwNJfKcmGsuoz8Y6SS+qk061MiBH3nWnW5yy/+8TZg4hAXfvjQkld2k0VtX7 ZrsII6huyV82X2ZRx0CU7KtQr5n0rG8H3GCuU1fibOfqZuIfTkVr88Fa98Z1n3Aq 8r7prBqoTDZa0rsUyFfQ/AVgzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKkdihB6 RgIOoDnpGClLCpDCht1dMB8GA1UdIwQYMBaAFIZ8lRqmjMGH5Ca9H1YcDJ2pWB0k MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5M0Y3NS83MjA2RDZGNDZD NkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZZmtKcjBmVmh3TW5hbFlI U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hueVZHcWFNd1lma0pyMGZWaHdNbmFsWUhTUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 M0Y3NS83MjA2RDZGNDZDNkYxMUU4OUY2RTRFNjZDNEY5QUUwMi9obnlWR3FhTXdZ ZmtKcjBmVmh3TW5hbFlIU1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIhjo3t3EJzspiGKba84IQWlO0aZxzn6g5pYd4sqdIxe3Uvk969JXH K73B6B9sdpHjGcGVXbMh+UKJ+m2/IokRWhDy0OR/rXa1eCmGAGN9bpzNm5nvr/2/ zcnErJ+5WeZaYRBL3XCUHug7x5qtNN7pf1bW9EsmB1uDxC1T45hTM8dG1/sbWsYl aLGw1REULMcooO4WKju3v++t/wwRnQSGyfYYxS4vM+0dFtHr7vfLC8pm6FkHhEjq DwSJSd79oofapLYg19eFgdgAhF+SbEImQ1lclS+msE5r/yasuyY9Tw9tavtQJHeg S/wJ8Dn6dhHrXfHxFnyTWbeUOjqmZ7KP -----END CERTIFICATE-----Generated at Mon Oct 20 16:04:21 2025 by rpki-client