$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft File: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft (raw, json) Hash identifier: ZWaL/ekFuJ5kCdoeJdt4TD0OW4s48KoNPMiD+dC8kP4= Subject key identifier: D4:82:12:0B:2E:3D:E5:DB:A0:87:D4:D4:01:17:B5:D8:B6:2A:D8:74 Authority key identifier: 1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 Certificate issuer: /CN=A91FDD2C/serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Certificate serial: 07A7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft Manifest number: 079F Signing time: Sat 18 Oct 2025 22:45:46 +0000 Manifest this update: Sat 18 Oct 2025 22:45:45 +0000 Manifest next update: Sat 25 Oct 2025 22:45:45 +0000 Files and hashes: 1: HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl (hash: PcwoFGvPrn3zlU98dEl93sbN4i7MwUsTrGuimT+F+uM=) 2: D9BD904224B611EBAE734152C4F9AE02.roa (hash: KZro3pgOeUHIq7UlI8pVpaWLtUDP+zywuDR46T5LBrU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:45:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1959 (0x7a7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD2C, serialNumber=1F12EC2D4395F95AACC60C62ECDD82857ED30412 Validity Not Before: Oct 18 22:45:45 2025 GMT Not After : Oct 25 22:45:45 2025 GMT Subject: CN=68f4189a-6abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3d:ed:da:71:f5:71:8c:93:f3:6d:54:7f:8f: 4f:67:e4:ff:fd:ba:5d:b3:d4:01:e0:f9:ff:94:65: 8e:db:c5:4a:e5:7c:b3:52:22:6b:45:45:15:fa:e5: 48:db:be:94:9f:70:4e:26:7a:f0:26:72:f5:88:64: dd:5b:d7:6a:79:11:86:69:de:f7:ca:81:0d:72:7e: bd:1d:95:a4:29:f9:e4:dd:9f:5f:9c:34:03:99:7a: 96:89:46:32:84:d3:11:d3:61:8a:62:8f:5e:13:15: 0e:0e:36:5e:99:41:a3:60:3e:eb:0e:ba:4e:de:2e: 51:59:ea:97:00:3e:38:51:21:62:31:d8:d6:39:12: b2:66:97:c4:3a:40:27:75:ae:54:5d:ab:a6:24:c5: 30:ae:f1:48:c8:81:e7:55:ed:c8:62:d0:4b:7b:fb: e2:f7:b2:61:2c:08:91:0c:08:e3:3b:15:16:52:69: 72:d8:3e:cb:1d:ba:de:b0:f4:0a:03:76:87:f0:e4: 77:d6:00:4a:91:9a:c3:56:31:83:dd:09:38:d0:37: c5:6d:64:2b:71:90:86:09:c4:e4:d7:ed:35:80:1a: a4:82:02:63:c4:08:2f:cd:ef:ea:4a:65:6b:f7:64: a8:cf:4a:f8:de:75:0a:0b:77:c4:03:fb:8e:79:47: 11:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:82:12:0B:2E:3D:E5:DB:A0:87:D4:D4:01:17:B5:D8:B6:2A:D8:74 X509v3 Authority Key Identifier: keyid:1F:12:EC:2D:43:95:F9:5A:AC:C6:0C:62:EC:DD:82:85:7E:D3:04:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD2C/48CE516224B511EBA2878F50C4F9AE02/HxLsLUOV-Vqsxgxi7N2ChX7TBBI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ed:eb:ba:39:5c:04:4a:b7:a1:b1:5b:bd:ab:96:49:fc:cf: 1b:ea:59:c3:a9:60:4d:2f:e9:9b:9a:28:4a:2c:30:f3:43:6d: 74:01:b1:ac:0d:61:f5:ce:4e:67:6e:fa:51:7d:b0:ae:ed:d2: 41:33:d3:4c:c7:d3:50:7a:0e:a2:c1:5b:b2:da:5b:19:65:7f: f9:84:d1:fc:90:87:8a:b3:af:20:fe:80:75:6d:47:f0:16:85: 5c:4b:16:cf:85:23:be:d7:37:c6:b6:1d:ec:ee:53:86:7e:27: 9d:17:3f:c3:f4:f9:73:96:cc:b0:02:12:fd:7c:e0:9b:bb:92: 8a:d1:19:3a:8b:4a:3f:f1:4c:46:3f:87:5b:17:a6:ab:95:a4: b4:ad:73:26:d6:38:e1:29:59:99:84:cc:bc:9b:db:ff:72:3a: d2:56:a5:93:87:fc:21:21:69:e9:d7:7e:d5:28:1e:79:cd:5c: 81:bf:28:f9:dd:41:ea:9d:1a:90:78:67:4d:c5:64:45:f6:4d: db:f6:57:0d:7b:a5:c3:22:88:fe:60:1d:f0:18:eb:65:9e:35: c6:0d:a7:af:30:3b:aa:0e:ef:b4:62:17:69:b8:cd:e6:ac:58: 9c:65:8a:e7:05:68:93:d9:dc:91:8d:e0:a2:46:f6:1e:3a:ae: be:94:47:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkREMkMxMTAvBgNVBAUTKDFGMTJFQzJENDM5NUY5NUFBQ0M2MEM2MkVDREQ4Mjg1 N0VEMzA0MTIwHhcNMjUxMDE4MjI0NTQ1WhcNMjUxMDI1MjI0NTQ1WjAYMRYwFAYD VQQDEw02OGY0MTg5YS02YWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzj3t2nH1cYyT821Uf49PZ+T//bpds9QB4Pn/lGWO28VK5XyzUiJrRUUV+uVI 276Un3BOJnrwJnL1iGTdW9dqeRGGad73yoENcn69HZWkKfnk3Z9fnDQDmXqWiUYy hNMR02GKYo9eExUODjZemUGjYD7rDrpO3i5RWeqXAD44USFiMdjWORKyZpfEOkAn da5UXaumJMUwrvFIyIHnVe3IYtBLe/vi97JhLAiRDAjjOxUWUmly2D7LHbresPQK A3aH8OR31gBKkZrDVjGD3Qk40DfFbWQrcZCGCcTk1+01gBqkggJjxAgvze/qSmVr 92Soz0r43nUKC3fEA/uOeUcRDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSCEgsu PeXboIfU1AEXtdi2Kth0MB8GA1UdIwQYMBaAFB8S7C1DlflarMYMYuzdgoV+0wQS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQyQy80OENFNTE2MjI0 QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1WcXN4Z3hpN04yQ2hYN1RC QkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h4THNMVU9WLVZxc3hneGk3TjJDaFg3VEJCSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG REQyQy80OENFNTE2MjI0QjUxMUVCQTI4NzhGNTBDNEY5QUUwMi9IeExzTFVPVi1W cXN4Z3hpN04yQ2hYN1RCQkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh7eu6OVwESrehsVu9q5ZJ/M8b6lnDqWBNL+mbmihKLDDzQ210AbGs DWH1zk5nbvpRfbCu7dJBM9NMx9NQeg6iwVuy2lsZZX/5hNH8kIeKs68g/oB1bUfw FoVcSxbPhSO+1zfGth3s7lOGfiedFz/D9PlzlsywAhL9fOCbu5KK0Rk6i0o/8UxG P4dbF6arlaS0rXMm1jjhKVmZhMy8m9v/cjrSVqWTh/whIWnp137VKB55zVyBvyj5 3UHqnRqQeGdNxWRF9k3b9lcNe6XDIoj+YB3wGOtlnjXGDaevMDuqDu+0YhdpuM3m rFicZYrnBWiT2dyRjeCiRvYeOq6+lEdT -----END CERTIFICATE-----Generated at Mon Oct 20 05:40:17 2025 by rpki-client