$ rpki-client -vvf rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft File: HTaU7xQhyRhUqIesqWELxWCucIQ.mft (raw, json) Hash identifier: xg/gq0lzv36xJ9dI9dMoxuQpwzf+DOnbUvXQwB10On8= Subject key identifier: 45:8F:4C:5E:43:1D:B7:3E:7F:25:E3:32:C8:37:99:42:A7:32:BB:E9 Authority key identifier: 1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 Certificate issuer: /CN=A919EB4E/serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Certificate serial: 0EF8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft Manifest number: 0ED6 Signing time: Sat 18 Oct 2025 18:16:19 +0000 Manifest this update: Sat 18 Oct 2025 18:16:17 +0000 Manifest next update: Sat 25 Oct 2025 18:16:17 +0000 Files and hashes: 1: HTaU7xQhyRhUqIesqWELxWCucIQ.crl (hash: kS14BL0P1SIP1wmcCra4xgTHkNnepUDJCyWGjA3c9Sg=) 2: 89A93D5E971811E9AE51CA15C4F9AE02.roa (hash: 5Mh91OkrfeMvxN8zUlmhEA/cU28vfWanQEE4gEKGkZE=) 3: F73EFF46839211EEA1EC8A0EC4F9AE02.roa (hash: 2l3pLCgtvIHc/+HLPDdULsr+5gl+RLvHUNSD8p67gig=) 4: 7A40B730E2D811EBAB97665DC4F9AE02.roa (hash: nERwHYLrCQbTGbVdhkuVu4DLbRWJapvf+ehHeDcqXoI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:16:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3832 (0xef8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EB4E, serialNumber=1D3694EF1421C91854A887ACA9610BC560AE7084 Validity Not Before: Oct 18 18:16:17 2025 GMT Not After : Oct 25 18:16:17 2025 GMT Subject: CN=68f3d972-4ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:64:79:7b:89:85:d7:33:85:0a:0d:ab:29:cc: e5:75:a4:b6:c5:02:e5:cb:9d:4d:e7:ae:23:07:bc: e4:0b:bf:d8:df:09:fa:84:95:33:e6:9e:63:31:b2: 81:db:5f:87:7e:64:e8:75:62:c6:dd:f7:99:22:78: fc:ff:3f:52:78:e3:4f:f5:ee:05:d5:ee:cd:61:93: c4:45:ed:dc:26:72:34:47:57:08:1f:3d:0c:24:2c: f7:09:54:ff:14:d8:f6:07:e3:d9:4e:08:a5:4d:cf: b1:35:10:ff:4e:09:a9:37:70:dd:a5:7c:e8:85:b8: f1:06:4a:76:5d:c1:78:44:12:6d:ee:08:63:15:79: 2d:93:1b:07:6c:89:55:25:fa:53:be:73:7c:1f:cc: 49:39:2e:0f:67:fd:b0:65:7a:24:85:01:44:a9:2c: ee:0f:93:8b:5f:5b:f7:88:9a:a4:c1:b4:5d:66:8e: ed:1a:fe:20:13:99:cf:59:41:04:69:38:e0:bd:87: 6b:32:2a:f2:94:10:14:08:97:b5:03:29:3c:e8:33: 60:47:80:23:9d:af:eb:85:e4:29:87:d7:f5:42:4c: 0a:c0:4c:f0:cd:df:dc:84:61:26:a4:77:8a:78:0f: e6:f6:f9:64:89:65:62:06:97:1b:f9:31:cd:48:b2: 85:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8F:4C:5E:43:1D:B7:3E:7F:25:E3:32:C8:37:99:42:A7:32:BB:E9 X509v3 Authority Key Identifier: keyid:1D:36:94:EF:14:21:C9:18:54:A8:87:AC:A9:61:0B:C5:60:AE:70:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTaU7xQhyRhUqIesqWELxWCucIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EB4E/A2843C08971711E985FCAB14C4F9AE02/HTaU7xQhyRhUqIesqWELxWCucIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:cc:5e:01:dd:e0:20:46:9d:4d:a0:62:2a:11:a9:38:02:7c: a6:db:37:a1:89:78:4e:63:c2:6e:4f:65:49:68:6d:fd:66:33: 9c:97:a6:10:f7:4f:87:d4:01:55:60:02:fb:62:4b:9e:86:f0: f5:64:f2:d6:d4:61:ed:f2:40:9f:bd:73:e6:14:c8:d3:5f:a9: 53:8c:4c:40:4f:f0:06:da:8b:f8:16:07:a8:4b:ae:63:99:08: d2:94:f2:4e:3e:34:4c:fa:9e:6a:2a:ac:bb:1a:08:fe:0e:91: 4f:b6:66:2a:61:29:e9:cc:8a:cd:8f:55:a6:c9:d1:92:b2:6a: 88:0b:15:98:0f:79:fe:99:34:33:81:f1:36:29:22:57:98:24: 56:51:89:38:cc:3b:73:aa:ef:19:f5:b2:4a:da:a0:17:5b:5f: 3f:e5:78:e0:2e:2c:d1:07:24:77:74:26:18:86:2d:68:9f:1c: 83:de:28:9f:da:62:22:b8:37:71:1f:a1:a5:8a:5c:31:d3:98: 38:b9:4d:b2:e9:63:c6:1c:af:29:5c:08:06:83:b7:4d:5a:6f: 86:30:2c:87:0b:41:3a:50:43:5d:84:28:b2:f1:f4:f2:6b:14: 27:68:f9:ef:e3:dc:ab:1e:31:55:0a:ab:1e:76:80:cb:f7:f6: c7:43:ff:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDvgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVCNEUxMTAvBgNVBAUTKDFEMzY5NEVGMTQyMUM5MTg1NEE4ODdBQ0E5NjEwQkM1 NjBBRTcwODQwHhcNMjUxMDE4MTgxNjE3WhcNMjUxMDI1MTgxNjE3WjAYMRYwFAYD VQQDEw02OGYzZDk3Mi00ZWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GR5e4mF1zOFCg2rKczldaS2xQLly51N564jB7zkC7/Y3wn6hJUz5p5jMbKB 21+HfmTodWLG3feZInj8/z9SeONP9e4F1e7NYZPERe3cJnI0R1cIHz0MJCz3CVT/ FNj2B+PZTgilTc+xNRD/TgmpN3DdpXzohbjxBkp2XcF4RBJt7ghjFXktkxsHbIlV JfpTvnN8H8xJOS4PZ/2wZXokhQFEqSzuD5OLX1v3iJqkwbRdZo7tGv4gE5nPWUEE aTjgvYdrMirylBAUCJe1Ayk86DNgR4Ajna/rheQph9f1QkwKwEzwzd/chGEmpHeK eA/m9vlkiWViBpcb+THNSLKFwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWPTF5D Hbc+fyXjMsg3mUKnMrvpMB8GA1UdIwQYMBaAFB02lO8UIckYVKiHrKlhC8VgrnCE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUI0RS9BMjg0M0MwODk3 MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlSaFVxSWVzcVdFTHhXQ3Vj SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUYVU3eFFoeVJoVXFJZXNxV0VMeFdDdWNJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUI0RS9BMjg0M0MwODk3MTcxMUU5ODVGQ0FCMTRDNEY5QUUwMi9IVGFVN3hRaHlS aFVxSWVzcVdFTHhXQ3VjSVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRzF4B3eAgRp1NoGIqEak4Anym2zehiXhOY8JuT2VJaG39ZjOcl6YQ 90+H1AFVYAL7YkuehvD1ZPLW1GHt8kCfvXPmFMjTX6lTjExAT/AG2ov4FgeoS65j mQjSlPJOPjRM+p5qKqy7Ggj+DpFPtmYqYSnpzIrNj1WmydGSsmqICxWYD3n+mTQz gfE2KSJXmCRWUYk4zDtzqu8Z9bJK2qAXW18/5XjgLizRByR3dCYYhi1onxyD3iif 2mIiuDdxH6Glilwx05g4uU2y6WPGHK8pXAgGg7dNWm+GMCyHC0E6UENdhCiy8fTy axQnaPnv49yrHjFVCqsedoDL9/bHQ//L -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:06 2025 by rpki-client