$ rpki-client -vvf rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft File: 1Hn1NF93o5en0pzMzvEk3B3_cro.mft (raw, json) Hash identifier: 5eTve7h3boJRRDKijoqrp3IrhdbJ1acRzoFfB+DTZbA= Subject key identifier: C3:78:43:43:38:50:0B:BF:FD:55:4A:83:7E:69:D5:7A:A9:2B:BD:99 Authority key identifier: D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA Certificate issuer: /CN=A9199A70/serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Certificate serial: 034C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft Manifest number: 0348 Signing time: Sun 19 Oct 2025 03:03:43 +0000 Manifest this update: Sun 19 Oct 2025 03:03:43 +0000 Manifest next update: Sun 26 Oct 2025 03:03:43 +0000 Files and hashes: 1: 1Hn1NF93o5en0pzMzvEk3B3_cro.crl (hash: sZoTKmrGV7kufDSVGZ8Ti0Bcd9kGRgITljV1yvIQCqQ=) 2: 6EEE50F2D7DF11EC8B75845EC4F9AE02.roa (hash: zu5oRyk1NPaUfD9YXaOvCAscocOyxXYA/oQQ8fmWjig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 844 (0x34c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199A70, serialNumber=D479F5345F77A397A7D29CCCCEF124DC1DFF72BA Validity Not Before: Oct 19 03:03:43 2025 GMT Not After : Oct 26 03:03:43 2025 GMT Subject: CN=68f4550f-d9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3d:72:6d:55:fe:5c:a7:0f:80:ab:f0:f7:79: dd:d5:45:3b:35:61:fd:78:20:17:de:38:6b:80:3c: 28:9b:cd:06:bb:c1:9c:12:8c:3f:2e:72:40:86:b9: 5b:11:ef:2b:71:aa:10:74:d5:8e:6a:99:4b:6b:58: 71:51:08:c6:fc:2a:1f:80:88:ff:b4:21:48:ce:c4: f2:83:90:36:ec:d1:18:44:82:2d:3e:b6:2a:f7:49: 5f:de:1a:a1:cf:95:c6:2a:d9:39:36:0e:92:ac:69: f3:5e:cf:b8:14:72:fb:c0:b3:af:1e:84:b9:0a:ee: b8:7a:90:b1:a5:78:e2:e5:c2:86:1c:fa:d1:dd:a8: 2e:7b:91:2b:d3:21:9e:f5:71:8d:bb:f9:f6:c4:aa: 32:e3:16:e5:1d:73:93:96:fb:14:a7:5e:2f:ca:f3: 5e:48:66:30:fa:02:c8:ec:ed:36:db:0a:c5:37:a7: 52:0b:cf:94:f2:e6:a6:02:ce:38:f8:fa:ce:d0:7d: c1:d8:b7:bd:57:73:1d:40:b3:9b:0a:5a:66:b2:5e: 70:36:b6:4e:1a:74:92:49:85:dd:1b:0f:e3:40:0e: 6d:03:9e:ae:59:62:43:92:6a:db:35:a0:76:06:e8: 1f:c9:9f:fe:04:31:2d:46:52:e8:f7:51:a2:96:3e: 52:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:78:43:43:38:50:0B:BF:FD:55:4A:83:7E:69:D5:7A:A9:2B:BD:99 X509v3 Authority Key Identifier: keyid:D4:79:F5:34:5F:77:A3:97:A7:D2:9C:CC:CE:F1:24:DC:1D:FF:72:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Hn1NF93o5en0pzMzvEk3B3_cro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199A70/CDBB1896D7D911EC9C265754C4F9AE02/1Hn1NF93o5en0pzMzvEk3B3_cro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:d9:9d:03:a7:f9:ca:13:c4:88:fe:93:ac:4f:ff:6b:15:75: 40:33:29:84:15:ea:5e:7c:b5:d2:d8:93:35:46:d6:71:5f:a5: c7:7e:56:f9:37:75:8e:a5:30:fc:f0:22:39:54:be:2a:e3:d5: 46:15:2d:e9:a4:f2:fe:13:d0:c9:33:d8:e2:1e:00:93:11:45: 52:8f:f3:b4:b2:13:95:e2:a2:bc:a4:ee:14:08:ce:02:ae:16: 74:95:3c:4c:4f:ac:5a:2e:bb:d0:18:6c:cd:59:1c:0a:f1:47: 5c:55:21:30:a0:e0:13:fb:11:91:b4:77:da:c9:46:7a:62:ad: ce:be:5e:bc:ce:f2:8b:44:16:01:30:fb:d4:a2:cb:a4:57:6a: 02:d1:b0:c8:e5:19:a4:56:d8:ee:5a:fb:b2:41:2a:99:9c:89: d8:8d:03:8c:ab:a8:27:a3:f9:20:17:b7:f3:eb:8a:ba:a5:83: 34:07:ea:74:c5:87:01:b1:50:f7:8d:5f:d3:b3:64:2c:b8:f5: bd:51:0d:69:f9:8f:4f:14:19:b0:38:5f:02:d0:e7:65:a6:1a: e6:ef:d5:1f:f8:8b:22:4e:f6:b9:d4:b4:93:0a:20:24:df:41: e9:29:88:87:7b:8f:09:5a:9b:04:7c:24:b9:79:f9:e7:97:ba: 30:ca:ae:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTlBNzAxMTAvBgNVBAUTKEQ0NzlGNTM0NUY3N0EzOTdBN0QyOUNDQ0NFRjEyNERD MURGRjcyQkEwHhcNMjUxMDE5MDMwMzQzWhcNMjUxMDI2MDMwMzQzWjAYMRYwFAYD VQQDEw02OGY0NTUwZi1kOWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4z1ybVX+XKcPgKvw93nd1UU7NWH9eCAX3jhrgDwom80Gu8GcEow/LnJAhrlb Ee8rcaoQdNWOaplLa1hxUQjG/CofgIj/tCFIzsTyg5A27NEYRIItPrYq90lf3hqh z5XGKtk5Ng6SrGnzXs+4FHL7wLOvHoS5Cu64epCxpXji5cKGHPrR3ague5Er0yGe 9XGNu/n2xKoy4xblHXOTlvsUp14vyvNeSGYw+gLI7O022wrFN6dSC8+U8uamAs44 +PrO0H3B2Le9V3MdQLObClpmsl5wNrZOGnSSSYXdGw/jQA5tA56uWWJDkmrbNaB2 BugfyZ/+BDEtRlLo91Gilj5SXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMN4Q0M4 UAu//VVKg35p1XqpK72ZMB8GA1UdIwQYMBaAFNR59TRfd6OXp9KczM7xJNwd/3K6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OUE3MC9DREJCMTg5NkQ3 RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281ZW4wcHpNenZFazNCM19j cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFIbjFORjkzbzVlbjBwek16dkVrM0IzX2Nyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OUE3MC9DREJCMTg5NkQ3RDkxMUVDOUMyNjU3NTRDNEY5QUUwMi8xSG4xTkY5M281 ZW4wcHpNenZFazNCM19jcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCG2Z0Dp/nKE8SI/pOsT/9rFXVAMymEFepefLXS2JM1RtZxX6XHflb5 N3WOpTD88CI5VL4q49VGFS3ppPL+E9DJM9jiHgCTEUVSj/O0shOV4qK8pO4UCM4C rhZ0lTxMT6xaLrvQGGzNWRwK8UdcVSEwoOAT+xGRtHfayUZ6Yq3Ovl68zvKLRBYB MPvUosukV2oC0bDI5RmkVtjuWvuyQSqZnInYjQOMq6gno/kgF7fz64q6pYM0B+p0 xYcBsVD3jV/Ts2QsuPW9UQ1p+Y9PFBmwOF8C0Odlphrm79Uf+IsiTva51LSTCiAk 30HpKYiHe48JWpsEfCS5efnnl7owyq72 -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:28 2025 by rpki-client