$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft File: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json) Hash identifier: jGcz1QvUNlu/k3geVLR2Zpd0l9GxwAmqWCR3niZEUAI= Subject key identifier: 34:7E:7B:18:0D:63:26:49:C0:EE:7C:FF:DE:F9:C1:6F:0B:87:E5:FD Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 Certificate issuer: /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Certificate serial: 1BA2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft Manifest number: 1B60 Signing time: Sat 18 Oct 2025 16:36:55 +0000 Manifest this update: Sat 18 Oct 2025 16:36:55 +0000 Manifest next update: Sat 25 Oct 2025 16:36:55 +0000 Files and hashes: 1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: 4RO0KEzddBUdURhrHkh1a1ceIN/NUZIsVOKS4ixu7/o=) 2: 65486DA81F8411E79BCB6D54C4F9AE02.roa (hash: 4xV+J3CmmdCpDaEFPGjRsDGwUIL2Vy4kSy5m15MGfXg=) 3: 634556A61F8411E79BCB6D54C4F9AE02.roa (hash: 4IDng3Lrs8lhaOUdN7yvdIjmCJWMny3fPwZTXINqHBU=) 4: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: UVvEuCytrfCrphts5UpSNqcuRE3wm/rQR1W1CXxy/Rw=) 5: A842EEAA880E11ED9BE52B17C4F9AE02.roa (hash: 4Q6EmcPQKZH/+9z09btDyZRmVTuV1a4n3djNOV7Om64=) 6: A93E93C2880E11ED9BE52B17C4F9AE02.roa (hash: KB78mB/+BtWr5xn0d2YgdyzOTI8fLFM20j2nckGLtwU=) 7: 66914122CEAB11E796AC671AC4F9AE02.roa (hash: 9nJsdnxbQLzrLx2EZCka7q5S0FAqMVpfxB+cnZiwYyk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7074 (0x1ba2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Validity Not Before: Oct 18 16:36:55 2025 GMT Not After : Oct 25 16:36:55 2025 GMT Subject: CN=68f3c227-1b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a9:cf:4e:92:4c:01:2d:d7:2f:8a:ee:f4:ad: 0b:fe:06:1a:bf:85:c4:d4:1a:3c:26:d0:e4:f8:15: 7b:a5:25:d4:48:29:83:e2:3f:6c:8d:df:a8:e9:72: e0:bd:e0:74:04:74:5a:59:b0:20:cc:c8:c2:ff:e0: 1a:a0:54:ed:84:5c:10:e1:ff:d9:62:31:6f:10:d1: 24:ff:a1:d9:76:86:b2:23:17:18:80:4b:27:75:8e: ea:7d:5f:44:97:75:90:a7:02:e1:c9:68:7c:cb:f0: 88:7e:54:f6:79:fb:7b:05:bb:84:af:fc:9f:bc:01: 64:b3:c2:72:bb:2f:ac:23:06:16:ed:af:c7:cf:e5: 43:60:69:f9:ac:8d:ea:79:59:7c:0e:2e:25:c4:1e: c0:c7:55:e6:9e:06:a6:44:01:b3:cd:d7:c6:56:1c: 89:f0:71:b0:70:90:72:8b:4d:8d:b9:10:9d:6f:3b: 01:2e:ea:46:63:ae:e0:15:f7:53:41:c0:2c:73:21: 0f:83:d1:d7:8f:97:d5:73:ed:d1:73:f5:ec:77:85: 47:f9:fd:52:39:6d:12:93:ed:00:e7:a7:8c:a1:b6: 60:5a:e9:b1:a8:32:dc:ec:23:2c:de:96:52:62:1e: fb:e7:56:5c:b6:c7:c3:78:ba:11:17:0b:94:d7:c5: e1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7E:7B:18:0D:63:26:49:C0:EE:7C:FF:DE:F9:C1:6F:0B:87:E5:FD X509v3 Authority Key Identifier: keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:cf:69:53:fa:f5:39:13:82:21:f2:c4:fe:e6:c8:31:f3:52: 47:b2:fc:04:d2:03:bb:77:0e:96:22:32:98:11:a4:54:cc:d0: cb:59:36:4c:2e:ac:64:e4:be:0a:c8:46:77:96:d3:5c:71:54: be:0b:2d:b1:0e:f0:a5:6b:04:60:77:ed:f4:ff:d3:24:4d:cf: 1d:d9:a8:b4:aa:98:dd:ad:90:0e:2b:0c:f0:10:b5:66:4d:b0: 30:01:de:e7:a6:31:83:1e:2b:82:25:35:27:25:cc:19:1b:c0: 35:ac:55:97:e4:2f:21:c3:b5:2e:e5:b9:e4:b2:28:da:0a:91: 5a:d5:64:5c:84:9e:d5:c7:e5:df:50:25:23:a7:9e:63:b6:7b: 64:71:16:cc:e8:26:43:82:0d:02:80:a5:82:66:75:1d:25:1e: 4c:33:4d:8e:ea:03:c8:e8:a0:d7:25:5a:25:ef:6f:27:04:48: 8d:cd:01:02:78:7f:79:1b:a3:36:75:6c:45:9a:85:66:58:34: 22:16:b1:0b:d6:53:aa:a2:45:16:6b:17:47:c4:80:ee:96:38: 5b:c1:94:64:0a:99:8c:1d:da:cf:c6:59:93:f6:49:81:0a:69: 92:53:8a:fc:00:dc:32:c0:d0:b3:8a:a4:a9:ca:98:b9:2d:3b: e4:20:fb:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFREIxMTAvBgNVBAUTKDFFREU1QzZFMDA4MDI4QkNEMkFFMzM2NTEzODFCREUx RkQwN0M1RDQwHhcNMjUxMDE4MTYzNjU1WhcNMjUxMDI1MTYzNjU1WjAYMRYwFAYD VQQDEw02OGYzYzIyNy0xYjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyqnPTpJMAS3XL4ru9K0L/gYav4XE1Bo8JtDk+BV7pSXUSCmD4j9sjd+o6XLg veB0BHRaWbAgzMjC/+AaoFTthFwQ4f/ZYjFvENEk/6HZdoayIxcYgEsndY7qfV9E l3WQpwLhyWh8y/CIflT2eft7BbuEr/yfvAFks8Jyuy+sIwYW7a/Hz+VDYGn5rI3q eVl8Di4lxB7Ax1XmngamRAGzzdfGVhyJ8HGwcJByi02NuRCdbzsBLupGY67gFfdT QcAscyEPg9HXj5fVc+3Rc/Xsd4VH+f1SOW0Sk+0A56eMobZgWumxqDLc7CMs3pZS Yh7751ZctsfDeLoRFwuU18Xh2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDR+exgN YyZJwO58/975wW8Lh+X9MB8GA1UdIwQYMBaAFB7eXG4AgCi80q4zZROBveH9B8XU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkVEQi81RDg2N0VCQzFG ODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtMelNyak5sRTRHOTRmMEh4 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0NWNiZ0NBS0x6U3JqTmxFNEc5NGYwSHhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkVEQi81RDg2N0VCQzFGODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtM elNyak5sRTRHOTRmMEh4ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIz2lT+vU5E4Ih8sT+5sgx81JHsvwE0gO7dw6WIjKYEaRUzNDLWTZM Lqxk5L4KyEZ3ltNccVS+Cy2xDvClawRgd+30/9MkTc8d2ai0qpjdrZAOKwzwELVm TbAwAd7npjGDHiuCJTUnJcwZG8A1rFWX5C8hw7Uu5bnksijaCpFa1WRchJ7Vx+Xf UCUjp55jtntkcRbM6CZDgg0CgKWCZnUdJR5MM02O6gPI6KDXJVol728nBEiNzQEC eH95G6M2dWxFmoVmWDQiFrEL1lOqokUWaxdHxIDuljhbwZRkCpmMHdrPxlmT9kmB CmmSU4r8ANwywNCziqSpypi5LTvkIPsJ -----END CERTIFICATE-----Generated at Mon Oct 20 12:43:45 2025 by rpki-client