$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft File: h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft (raw, json) Hash identifier: oby7dwS1j/tHUod/Eeq50agt4q77xo1VlSHMCLDYSQA= Subject key identifier: 65:92:B0:A4:9A:53:08:F3:8C:09:E2:55:02:F6:5E:4B:92:00:88:68 Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: 014C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft Manifest number: 013A Signing time: Sun 19 Oct 2025 07:31:33 +0000 Manifest this update: Sun 19 Oct 2025 07:31:33 +0000 Manifest next update: Sun 26 Oct 2025 07:31:33 +0000 Files and hashes: 1: h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl (hash: RBI1pc9oIXDALG2G0RXDKlFsQhKhgzg6HA/4xN/6K30=) 2: F2D5C21216F511F086107D74C4F9AE02.roa (hash: 1JT4JL5zieWvYxgXcbCI6LK5Unc1DnkiTfLB/8ABEcM=) 3: 9E54710E16D511F09EF28A4EC4F9AE02.roa (hash: Zgo+bSd3ddxUsWa4WgDo/fUl+UPnYadDGveXRl2dsm4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:31:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 332 (0x14c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Oct 19 07:31:33 2025 GMT Not After : Oct 26 07:31:33 2025 GMT Subject: CN=68f493d5-e20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:97:f8:cd:2e:e2:4f:9e:2e:6b:40:54:65:26: 16:f3:af:7b:87:98:ec:2f:cc:1d:60:74:f2:eb:af: e4:ce:6e:90:31:ec:1c:67:a2:db:2a:7a:f7:b7:ac: 55:8a:40:d6:6b:d1:c0:1b:9f:cd:29:62:40:6f:50: 7f:00:4e:1b:e7:50:c3:35:5c:e7:1b:43:0a:1f:b5: 25:22:55:24:bc:f0:8f:92:da:9e:d5:ee:8d:f9:25: 48:5c:d7:db:e3:29:e9:49:51:5a:27:3d:7d:d4:08: 14:37:54:0e:7c:51:d3:f8:fc:3f:75:7f:ea:5e:9c: b8:4e:b8:0d:3b:4a:d8:2b:7b:f2:bc:32:76:43:c4: d3:38:61:0e:26:3b:5a:c4:5f:c4:4c:2f:79:a0:50: 66:2d:7b:aa:ea:74:55:98:31:00:e7:ed:a4:6f:56: 0e:26:15:dd:b9:a2:64:16:98:58:83:63:c2:83:11: dc:e5:86:85:bc:f7:60:1e:ec:a5:5f:13:99:4c:22: 38:91:54:b9:cb:b7:38:6d:63:9f:57:2d:bd:2b:c3: f5:76:a3:18:19:b0:db:ad:47:21:f8:eb:77:8a:69: e5:9d:76:ff:b6:4a:0b:de:28:18:9f:1a:db:6d:f0: a7:c9:89:d0:01:2b:f4:42:0a:51:b4:49:f8:b2:67: 51:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:92:B0:A4:9A:53:08:F3:8C:09:E2:55:02:F6:5E:4B:92:00:88:68 X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:23:c5:62:2f:a0:d6:34:ab:41:30:13:eb:e3:93:66:1c:48: 19:ba:58:9a:75:ed:18:15:39:7c:87:9c:b4:bd:84:0f:9d:8a: eb:b0:35:78:87:c5:d1:4a:9d:cc:3d:68:cf:38:f6:08:52:5a: 36:b1:0e:69:9d:e3:9e:22:b1:e9:f5:59:9a:a0:bd:fc:dc:0a: ad:07:3f:20:6e:86:82:7a:27:b4:1d:b6:96:9e:f4:27:ad:c4: d5:8a:9c:8c:92:8e:0a:d8:e6:42:eb:d8:39:ff:13:db:02:a4: 32:32:37:8c:ed:3c:ea:47:b2:27:e3:a7:1f:6e:46:63:9e:75: 0d:f7:dd:e1:ab:e1:93:65:e9:25:d4:bf:64:9c:b8:03:41:90: c9:b1:93:93:98:88:94:3e:5b:42:b1:00:5f:be:7b:fa:94:47: 02:dc:7e:45:a1:90:56:bc:c4:34:b4:18:f5:01:75:b9:d2:05: 52:21:3f:38:4a:07:7a:2f:ab:28:18:f1:5b:57:41:d6:5e:a9: ff:59:bc:77:a8:3a:eb:2e:3b:61:de:91:ca:b5:9f:9c:2f:04: da:bc:c8:df:f3:fd:e2:48:aa:ea:ef:c0:85:68:a5:09:74:f2: d9:88:63:97:32:15:51:fc:da:64:4c:20:85:f7:dc:53:c5:12: ce:39:9c:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjUxMDE5MDczMTMzWhcNMjUxMDI2MDczMTMzWjAYMRYwFAYD VQQDEw02OGY0OTNkNS1lMjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyZf4zS7iT54ua0BUZSYW8697h5jsL8wdYHTy66/kzm6QMewcZ6LbKnr3t6xV ikDWa9HAG5/NKWJAb1B/AE4b51DDNVznG0MKH7UlIlUkvPCPktqe1e6N+SVIXNfb 4ynpSVFaJz191AgUN1QOfFHT+Pw/dX/qXpy4TrgNO0rYK3vyvDJ2Q8TTOGEOJjta xF/ETC95oFBmLXuq6nRVmDEA5+2kb1YOJhXduaJkFphYg2PCgxHc5YaFvPdgHuyl XxOZTCI4kVS5y7c4bWOfVy29K8P1dqMYGbDbrUch+Ot3imnlnXb/tkoL3igYnxrb bfCnyYnQASv0QgpRtEn4smdRjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGWSsKSa UwjzjAniVQL2XkuSAIhoMB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjlBOC9COTIzMDZGRUVCNkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hV QWpqQTlyM3BFVmJsMEdwRXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrI8ViL6DWNKtBMBPr45NmHEgZuliade0YFTl8h5y0vYQPnYrrsDV4 h8XRSp3MPWjPOPYIUlo2sQ5pneOeIrHp9VmaoL383AqtBz8gboaCeie0HbaWnvQn rcTVipyMko4K2OZC69g5/xPbAqQyMjeM7TzqR7In46cfbkZjnnUN993hq+GTZekl 1L9knLgDQZDJsZOTmIiUPltCsQBfvnv6lEcC3H5FoZBWvMQ0tBj1AXW50gVSIT84 Sgd6L6soGPFbV0HWXqn/Wbx3qDrrLjth3pHKtZ+cLwTavMjf8/3iSKrq78CFaKUJ dPLZiGOXMhVR/NpkTCCF99xTxRLOOZyM -----END CERTIFICATE-----Generated at Mon Oct 20 11:36:19 2025 by rpki-client