$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft File: _h1b-QL6kS1-C16YDPkdvf0rtk8.mft (raw, json) Hash identifier: PHQWt1xPphofOrz+kSHnMPU12a/lu8bJ2IMABuAaAM4= Subject key identifier: DA:D1:05:5C:FC:F2:FD:36:AA:D1:F8:7A:4E:FC:1F:E5:EC:56:94:21 Authority key identifier: FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F Certificate issuer: /CN=A91F8534/serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F Certificate serial: 2130 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft Manifest number: 211E Signing time: Sat 18 Oct 2025 16:12:08 +0000 Manifest this update: Sat 18 Oct 2025 16:12:08 +0000 Manifest next update: Sat 25 Oct 2025 16:12:08 +0000 Files and hashes: 1: _h1b-QL6kS1-C16YDPkdvf0rtk8.crl (hash: JqdpW4tw8fxRFbJ46PiAxvGkQ3r1UlTicrLYUbQu5+w=) 2: 173CA1AABCA011ED914D176DC4F9AE02.roa (hash: hUdH/uVzYkF0LtRZr5OEyKuVBZZQ6yEh3YtiBoLV0Iw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8496 (0x2130) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8534, serialNumber=FE1D5BF902FA912D7E0B5E980CF91DBDFD2BB64F Validity Not Before: Oct 18 16:12:08 2025 GMT Not After : Oct 25 16:12:08 2025 GMT Subject: CN=68f3bc58-5061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6a:61:7a:33:fd:ea:fe:8f:f5:92:ca:2c:74: fc:26:fe:5a:9c:7c:e2:4e:4c:de:d1:ff:8a:fa:59: d9:c2:7d:ae:9d:6c:71:db:6e:a3:b2:4b:fa:12:f9: 49:d3:fa:28:a2:73:2c:b5:bc:38:67:03:ec:9d:44: 33:a4:12:8e:6f:5b:0e:d3:9a:30:36:94:69:d2:a7: 9a:5b:79:62:26:21:06:c6:34:c0:b4:6d:c4:c1:41: 24:e4:9e:4f:0b:d7:4f:fa:33:75:13:d8:ab:d4:d2: e7:4e:65:20:54:97:f8:01:75:d8:33:72:7f:0b:07: 38:e1:c7:eb:2c:87:07:0e:74:f4:57:1e:c9:a5:d9: ad:a9:90:f7:1a:9a:aa:2c:06:53:8c:5a:74:0d:b5: 34:33:eb:15:cc:17:93:51:8a:9f:0c:88:f7:f2:33: 5d:c1:7b:17:a4:e8:ac:bb:4e:eb:12:ac:72:3a:06: e0:1e:61:c4:49:6c:96:ca:77:09:35:9a:cc:d2:cb: db:1f:6e:1e:d0:ea:66:fb:f5:e9:16:05:bb:93:d6: f0:02:04:5a:9e:0b:f4:cb:b5:d2:5e:7b:f6:b1:bf: c2:71:75:61:64:57:e8:ed:86:66:45:13:05:90:28: fe:f0:0d:95:5a:28:2e:c6:1c:dc:dd:ab:4e:1c:8e: 20:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D1:05:5C:FC:F2:FD:36:AA:D1:F8:7A:4E:FC:1F:E5:EC:56:94:21 X509v3 Authority Key Identifier: keyid:FE:1D:5B:F9:02:FA:91:2D:7E:0B:5E:98:0C:F9:1D:BD:FD:2B:B6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_h1b-QL6kS1-C16YDPkdvf0rtk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8534/6E6A462CFEDD11E5B4905D7CC4F9AE02/_h1b-QL6kS1-C16YDPkdvf0rtk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:33:42:65:40:c9:e2:e9:0e:58:42:dc:77:7d:1d:80:29:e4: f4:05:fe:0e:66:af:77:dc:26:1f:48:9e:f0:64:c9:40:9a:20: 29:e2:72:71:3a:de:56:50:69:aa:21:24:5d:71:4d:a5:e3:54: f3:04:3d:57:4f:b8:ae:f0:91:2b:61:94:4c:86:29:e8:56:ab: a3:7a:99:01:22:87:9a:f3:7c:32:9f:ea:24:6d:97:bf:ff:88: b3:0c:e2:9e:5a:c3:d8:b1:c1:84:86:3c:ec:9b:d5:e8:68:64: 2a:55:2d:cd:fb:03:a5:cd:ae:55:e0:95:9f:6f:61:8c:d8:0a: d7:33:e6:a0:c5:4f:e5:d6:51:93:16:2a:cd:3a:46:31:c1:20: d3:3a:e0:36:d1:47:4a:f7:91:e7:55:c4:39:46:60:a0:0e:97: 9f:4b:49:7e:92:b4:88:01:d6:09:76:a4:46:80:56:82:05:bf: 71:8d:cd:a3:8e:25:a1:81:05:b0:71:29:d0:b7:63:17:d0:bb: 14:52:03:4c:0c:19:de:67:79:7e:4d:13:4b:9d:3d:2d:aa:ff: 5e:ca:89:fd:ba:a7:a0:39:b3:c2:f5:bb:6f:13:26:db:98:51: 3c:37:e8:2c:17:94:89:e6:93:85:90:9e:34:89:62:a1:dd:35: f7:ef:51:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICITAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg1MzQxMTAvBgNVBAUTKEZFMUQ1QkY5MDJGQTkxMkQ3RTBCNUU5ODBDRjkxREJE RkQyQkI2NEYwHhcNMjUxMDE4MTYxMjA4WhcNMjUxMDI1MTYxMjA4WjAYMRYwFAYD VQQDEw02OGYzYmM1OC01MDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2phejP96v6P9ZLKLHT8Jv5anHziTkze0f+K+lnZwn2unWxx226jskv6EvlJ 0/ooonMstbw4ZwPsnUQzpBKOb1sO05owNpRp0qeaW3liJiEGxjTAtG3EwUEk5J5P C9dP+jN1E9ir1NLnTmUgVJf4AXXYM3J/Cwc44cfrLIcHDnT0Vx7JpdmtqZD3Gpqq LAZTjFp0DbU0M+sVzBeTUYqfDIj38jNdwXsXpOisu07rEqxyOgbgHmHESWyWyncJ NZrM0svbH24e0Opm+/XpFgW7k9bwAgRangv0y7XSXnv2sb/CcXVhZFfo7YZmRRMF kCj+8A2VWiguxhzc3atOHI4gzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNrRBVz8 8v02qtH4ek78H+XsVpQhMB8GA1UdIwQYMBaAFP4dW/kC+pEtfgtemAz5Hb39K7ZP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODUzNC82RTZBNDYyQ0ZF REQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtTMS1DMTZZRFBrZHZmMHJ0 azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19oMWItUUw2a1MxLUMxNllEUGtkdmYwcnRrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODUzNC82RTZBNDYyQ0ZFREQxMUU1QjQ5MDVEN0NDNEY5QUUwMi9faDFiLVFMNmtT MS1DMTZZRFBrZHZmMHJ0azgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwM0JlQMni6Q5YQtx3fR2AKeT0Bf4OZq933CYfSJ7wZMlAmiAp4nJx Ot5WUGmqISRdcU2l41TzBD1XT7iu8JErYZRMhinoVqujepkBIoea83wyn+okbZe/ /4izDOKeWsPYscGEhjzsm9XoaGQqVS3N+wOlza5V4JWfb2GM2ArXM+agxU/l1lGT FirNOkYxwSDTOuA20UdK95HnVcQ5RmCgDpefS0l+krSIAdYJdqRGgFaCBb9xjc2j jiWhgQWwcSnQt2MX0LsUUgNMDBneZ3l+TRNLnT0tqv9eyon9uqegObPC9btvEybb mFE8N+gsF5SJ5pOFkJ40iWKh3TX371EA -----END CERTIFICATE-----Generated at Sun Oct 19 23:30:52 2025 by rpki-client