$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft File: hUw8jb_u2qy7OypCS1iyWaFMnws.mft (raw, json) Hash identifier: 62+cmql7yoV3oC+duZ09IPeOLd9b+eb+P976x3BCpdc= Subject key identifier: 75:94:94:A7:56:2A:FA:9C:02:79:7C:8C:12:AB:57:38:5F:CB:1D:8A Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B Certificate issuer: /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B Certificate serial: 0216 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft Manifest number: 020B Signing time: Sun 19 Oct 2025 04:45:26 +0000 Manifest this update: Sun 19 Oct 2025 04:45:25 +0000 Manifest next update: Sun 26 Oct 2025 04:45:25 +0000 Files and hashes: 1: hUw8jb_u2qy7OypCS1iyWaFMnws.crl (hash: VUu38rGVQ7VreeQNrr9oZscxUni2Fx8icFyFWbkjas8=) 2: 86312104899311F0ACB13D20C4F9AE02.roa (hash: IeMc/sZZnrV1a/m8gaYSwC2jZsyT84H1D6+PvUGsie8=) 3: CF4B4BC61E6411EF8AA5A942C4F9AE02.roa (hash: kzhQlx9+qX+tcsUYqFntEgfacYCnpt0zMHVXOQLV78s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DBBF, serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B Validity Not Before: Oct 19 04:45:25 2025 GMT Not After : Oct 26 04:45:25 2025 GMT Subject: CN=68f46ce5-7b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a5:11:30:bf:ae:2a:8d:79:f1:fd:7a:d9:b7: 23:c5:be:dc:f2:2e:0e:88:a9:e9:38:d2:06:40:ed: 59:ed:52:bc:dc:91:b9:29:18:52:2e:a4:19:6b:35: 21:2a:86:fd:ed:e2:64:45:e6:77:ec:b2:1d:eb:1e: 3c:ad:02:c9:86:4f:9b:84:60:ae:b4:24:b6:a4:9a: 2f:45:0a:28:18:1b:14:e2:a6:99:85:79:83:42:22: 59:d7:fe:a2:37:7a:47:a3:78:4c:b0:a5:df:f0:b8: 09:93:f9:e3:13:2a:db:41:d4:18:b6:35:12:4e:a8: ea:3a:64:9f:aa:dc:73:bc:22:08:7d:37:df:26:41: 63:46:1e:48:1b:a0:16:71:6d:34:06:bc:73:1a:d0: 3d:a3:20:09:c7:02:97:17:f2:2d:76:bb:33:ed:02: ef:21:17:18:dc:2e:e1:0d:92:29:a1:4c:f6:68:82: d1:97:e1:22:e6:80:80:8d:e4:8d:21:78:eb:90:7c: fa:3e:c7:44:e6:1e:93:c3:1e:be:a2:ac:31:b5:d3: 95:8d:85:92:d5:fd:ed:1d:a7:96:19:c7:18:a8:f5: 28:f2:5d:9e:2c:a1:62:51:5d:31:c2:d2:39:2f:70: d0:b0:d9:fb:76:c7:2e:ae:60:7d:cf:a5:32:79:8a: b9:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:94:94:A7:56:2A:FA:9C:02:79:7C:8C:12:AB:57:38:5F:CB:1D:8A X509v3 Authority Key Identifier: keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f6:2d:7f:a8:5d:b4:95:0d:54:15:44:d7:0f:de:98:b7:bc: 8a:1a:6a:43:e6:d0:7d:da:7a:09:c2:fa:97:84:bf:49:42:55: 49:17:c8:62:72:31:be:6b:0e:e4:cc:12:42:4a:45:f8:8d:ba: 92:eb:07:77:2c:e3:fc:e0:1d:64:fd:90:55:44:02:d7:80:17: 85:6b:f3:c9:6c:66:8e:af:40:7b:a4:53:f3:b4:6b:ab:d7:89: 5b:ca:42:78:73:ae:47:64:59:13:cb:8b:19:b1:92:43:bd:59: 6c:16:bd:40:96:cb:9c:83:31:04:e3:b0:40:a5:a1:4d:a4:73: a0:bd:3c:17:06:fb:9d:a3:94:9f:16:b7:fb:5a:5c:26:22:b0: a6:67:98:2c:0b:33:20:53:7c:d8:3d:36:99:d3:62:fb:e5:06: b3:07:e4:70:22:2c:21:ff:6f:fd:6c:79:a4:15:fc:b1:c4:48: 37:c4:a0:f7:a4:f6:49:4e:62:6b:25:e3:0f:75:6b:90:47:1d: 23:32:a3:6e:bd:a4:64:a1:95:1d:a1:a4:e9:c3:da:54:98:01: e9:65:8c:47:6d:04:4d:a7:46:c1:56:d8:c9:71:5a:66:c7:18: fa:0a:56:fa:0f:32:b8:11:1f:da:c8:38:0b:95:bc:2e:84:1b: 49:f2:38:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCQkYxMTAvBgNVBAUTKDg1NEMzQzhEQkZFRURBQUNCQjNCMkE0MjRCNThCMjU5 QTE0QzlGMEIwHhcNMjUxMDE5MDQ0NTI1WhcNMjUxMDI2MDQ0NTI1WjAYMRYwFAYD VQQDEw02OGY0NmNlNS03YjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0KURML+uKo158f162bcjxb7c8i4OiKnpONIGQO1Z7VK83JG5KRhSLqQZazUh Kob97eJkReZ37LId6x48rQLJhk+bhGCutCS2pJovRQooGBsU4qaZhXmDQiJZ1/6i N3pHo3hMsKXf8LgJk/njEyrbQdQYtjUSTqjqOmSfqtxzvCIIfTffJkFjRh5IG6AW cW00BrxzGtA9oyAJxwKXF/Itdrsz7QLvIRcY3C7hDZIpoUz2aILRl+Ei5oCAjeSN IXjrkHz6PsdE5h6Twx6+oqwxtdOVjYWS1f3tHaeWGccYqPUo8l2eLKFiUV0xwtI5 L3DQsNn7dscurmB9z6UyeYq5dQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWUlKdW KvqcAnl8jBKrVzhfyx2KMB8GA1UdIwQYMBaAFIVMPI2/7tqsuzsqQktYslmhTJ8L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REJCRi9CNTk1QTY2ODlC RjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJxeTdPeXBDUzFpeVdhRk1u d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVdzhqYl91MnF5N095cENTMWl5V2FGTW53cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REJCRi9CNTk1QTY2ODlCRjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJx eTdPeXBDUzFpeVdhRk1ud3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAu9i1/qF20lQ1UFUTXD96Yt7yKGmpD5tB92noJwvqXhL9JQlVJF8hi cjG+aw7kzBJCSkX4jbqS6wd3LOP84B1k/ZBVRALXgBeFa/PJbGaOr0B7pFPztGur 14lbykJ4c65HZFkTy4sZsZJDvVlsFr1AlsucgzEE47BApaFNpHOgvTwXBvudo5Sf Frf7WlwmIrCmZ5gsCzMgU3zYPTaZ02L75QazB+RwIiwh/2/9bHmkFfyxxEg3xKD3 pPZJTmJrJeMPdWuQRx0jMqNuvaRkoZUdoaTpw9pUmAHpZYxHbQRNp0bBVtjJcVpm xxj6Clb6DzK4ER/ayDgLlbwuhBtJ8jjE -----END CERTIFICATE-----Generated at Mon Oct 20 22:42:35 2025 by rpki-client