$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft File: hIWjnta2ISjt9PmbLCqBH1wgFXA.mft (raw, json) Hash identifier: htrL+afYdV5q7PhJ2Qlv1UBXqEc+XJXaWKlUuUgesNE= Subject key identifier: B8:33:4E:F4:B1:E8:F3:70:47:66:56:C2:FF:57:C2:04:BB:75:89:8C Authority key identifier: 84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 Certificate issuer: /CN=A912442A/serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft Manifest number: 0355 Signing time: Thu 23 Oct 2025 02:28:39 +0000 Manifest this update: Thu 23 Oct 2025 02:28:38 +0000 Manifest next update: Thu 30 Oct 2025 02:28:38 +0000 Files and hashes: 1: hIWjnta2ISjt9PmbLCqBH1wgFXA.crl (hash: qqvkmTBzjZQQlQmxHVCy4tY66Z0CqICIQ6yP8qfBiV4=) 2: DFB7A1FE68FA11EFB2CB6E60C4F9AE02.roa (hash: ZQ/fU5d1evPPnYD3iA98SPz8Kp3nQtzF91XOnGRTmko=) 3: AC9577F068F611EFBDC1C345C4F9AE02.roa (hash: c8x4WauwQnDwDqZuEAJ4h64A3YhZdzAuusRUf8JYYN8=) 4: EAEC9066690E11EF9396CC48C4F9AE02.roa (hash: itBUJ/NWTISnHVYwiSk058o8wCPmgPPTXD1wCEm1HPU=) 5: 72D237AEEBA011EC87608210C4F9AE02.roa (hash: iSdaxxqgc4SH7DXdUJ6oZreikaVBPpaQcLPWc3b7FIc=) 6: 36E3B902FE4E11EF9F12441CC4F9AE02.roa (hash: go1KQLAsWSMcDFpFZPzbcCoYXA902eWujQs5DRA5NuQ=) 7: BE4B3228691411EFB573C120C4F9AE02.roa (hash: FluzuCEVsK4WA6irM+7AYglOFW70dV1BU5TUHFD621E=) 8: 19EC493AE32111ED9B98B683C4F9AE02.roa (hash: t9M7T3kGK/bHK5ZGPmj0eAYe1o0Vh2EqcoFWaTSjMIE=) 9: 211E0AC268F911EF986C8281C4F9AE02.roa (hash: 5R/vByP+bLJ/gauluwV0ijjw0b2SOL4DSiyRAY6Etqs=) 10: EB6B9956690E11EF9396CC48C4F9AE02.roa (hash: m1fb1egRrU9+d8hQvMjnw8fgUgdDVqcZIQ0pMpm6ljc=) 11: DD84920268FA11EFB2CB6E60C4F9AE02.roa (hash: E+BZL/7QU8UpRIJdbcW9rfaR46I2sLpkyfwtpdJN/VI=) 12: DDFED4E068FA11EFB2CB6E60C4F9AE02.roa (hash: cN/u2ghL7Ty5H0rMkH3B9dtMoGNw2oNZ5rkn/Hb9xkU=) 13: F53FF9E668F411EFA1530C36C4F9AE02.roa (hash: 7Kj+4WHxVaVF82sSnOwl9LxBArA7W70r8lzjmBc5kVs=) 14: AC3A00D268F611EFBDC1C345C4F9AE02.roa (hash: H7xrZOzZPQxCuJob9N/j2hDDJP833H9T1/f50kmyI3U=) 15: 21FE5D3468F911EF986C8281C4F9AE02.roa (hash: be0pdzXjf+dpXeRPaIldstiNx4QzCRK3M1bauqjIvLs=) 16: 1F49DF36691311EF82B0FC62C4F9AE02.roa (hash: 9FLrfM7I4+bVcqyGWmEPmZO9HbNgyq3TURv3crH+HFI=) 17: DF4500C268FA11EFB2CB6E60C4F9AE02.roa (hash: zucr8aDjnFPBdo+ifl5g81+ainFQhQ/ksa8y2tjbLS4=) 18: 2A9845DE691411EF8D868864C4F9AE02.roa (hash: kogXUDWKK78CAHTJtbOeSXgRNGSuMbtJtIHaw+cqK8c=) 19: ABC651E668F611EFBDC1C345C4F9AE02.roa (hash: cAER3YKLvVpIlFa2HmbUxYe1iz95sgNYpvM/4V9O1FM=) 20: EA792108690E11EF9396CC48C4F9AE02.roa (hash: umWQN4kGqAHPIk4w+IQl09gKoDRTIfMgnHpo1DCC4Pw=) 21: 869FE0CC69B311EF9E81312BC4F9AE02.roa (hash: eF1xrltNfnruVqxNMjD44+JutJBXSUDGILKtju+n9dE=) 22: B35D540E68F611EFB785D145C4F9AE02.roa (hash: oyIjz/XYfgr26Spk6RY9XOtfUIT6X7uMOPMW03yZfAM=) 23: 1519FB12F8B611EF91DD795BC4F9AE02.roa (hash: v2vRc6B+gwZg5NOfzaQPP6ML2YBJcqr080DwDx1pUOg=) 24: 218211CA68F911EF986C8281C4F9AE02.roa (hash: pHoz/kBOmkd5VG3teXH7pPsGNOOVgbbDMsd3VhHUAEo=) 25: 2072597E691311EF82B0FC62C4F9AE02.roa (hash: Y3bQNy1ojyOB4N21qfu+0X9uUvLU+z0WanHBys0zBlU=) 26: 29C3BF9E691411EF8D868864C4F9AE02.roa (hash: HQ71fsK6HJEx6JB43+BRDscF/a1IXcYLFxyQuU5FBnw=) 27: 4A93DB1068F511EF8E131B43C4F9AE02.roa (hash: kqYwhkwqrnPwUBbzCMbRJ6+BU/s1Jp8YtMASUL3cC6Y=) 28: 200F7106691311EF82B0FC62C4F9AE02.roa (hash: d/aMw06UKvCrIDovTtwhw18Yfx0jjxX2eyRA38OLxcQ=) 29: DEA0D1E668FA11EFB2CB6E60C4F9AE02.roa (hash: +1sHzrOMqBbheGIlr1WPdNiSvR59VAOdWWIJJa+mgHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 02:28:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912442A, serialNumber=8485A39ED6B62128EDF4F99B2C2A811F5C201570 Validity Not Before: Oct 23 02:28:38 2025 GMT Not After : Oct 30 02:28:38 2025 GMT Subject: CN=68f992d7-413e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8c:32:45:6b:84:14:f7:6a:da:c7:37:bf:39: 0b:d6:11:77:3d:e2:27:d2:f3:89:cf:16:1a:db:e9: f1:39:3d:60:16:68:09:6d:3e:be:53:98:50:32:54: 8f:45:31:49:a1:c3:01:eb:c3:de:d9:0f:64:4b:98: f4:b4:c5:9b:83:a8:45:e0:cc:7a:97:f5:0a:63:bd: 16:68:df:98:9c:a5:11:78:99:4f:fe:f4:90:b8:2e: 75:e3:2f:18:32:7d:b6:d1:bd:9f:c0:70:f3:c1:11: 95:b7:a9:bc:5d:2e:1d:3f:20:19:a5:14:00:22:9d: bf:6a:01:c0:7c:a2:1d:c5:1f:eb:91:58:ae:43:06: 8f:88:9c:29:9b:86:a5:a9:e6:51:35:eb:84:b8:cf: b1:87:bd:73:1e:2c:24:28:e9:5a:5f:f2:d7:4b:ea: 8f:c8:42:51:8b:36:06:ed:30:0c:df:11:f2:68:8d: 8a:72:53:c5:92:8a:18:18:95:96:32:b1:32:57:5a: 2c:75:ad:c4:77:dd:ca:38:85:b2:d4:26:7d:94:25: 64:3c:51:cd:e9:af:90:39:9f:3d:fb:63:c0:e0:99: d6:bb:27:19:32:f8:2b:c7:73:9a:4d:3e:da:99:81: 7d:33:d3:2d:12:20:df:47:70:3d:e0:15:f2:fc:59: 6b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:33:4E:F4:B1:E8:F3:70:47:66:56:C2:FF:57:C2:04:BB:75:89:8C X509v3 Authority Key Identifier: keyid:84:85:A3:9E:D6:B6:21:28:ED:F4:F9:9B:2C:2A:81:1F:5C:20:15:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hIWjnta2ISjt9PmbLCqBH1wgFXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/20F2CB00EB9C11ECA682120CC4F9AE02/hIWjnta2ISjt9PmbLCqBH1wgFXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d6:a2:90:e4:5d:66:dc:a9:cd:5f:ae:34:3e:e4:d8:f2:13: bb:b4:22:7b:e6:21:b2:69:7a:81:bd:11:cb:f7:a4:b3:31:97: 89:bb:0b:4e:fb:a5:83:a2:a5:75:5d:d2:a6:0a:ff:40:12:95: 6a:ce:1e:67:28:e5:69:22:ce:78:c4:50:b1:dc:85:fc:f5:81: 0d:b7:2d:57:99:c7:39:e1:52:5a:61:b7:97:6f:1a:79:4a:c2: f1:e5:2c:2c:a7:85:e6:f5:13:d1:dd:6c:dc:48:eb:38:07:10: c4:fa:d7:40:d0:7e:ac:54:a8:a2:41:9a:3c:b1:6c:dc:39:f5: b2:38:a5:df:4c:a4:3f:60:6c:e2:f3:de:9f:29:5a:a7:f0:80: f2:20:6e:ec:3e:bb:af:61:54:d9:46:f3:06:8c:d3:e8:61:6d: 2e:44:65:0c:de:37:d4:93:d0:8a:c6:bf:4c:c4:a4:48:01:a5: a0:db:e3:0a:14:bb:03:c9:d8:02:f3:7a:a6:bc:d7:5a:2e:78: 6b:a6:a1:b8:bb:a8:2b:c4:8c:8b:7a:51:c5:ac:c7:f9:84:e2: 9f:10:03:43:8e:8f:5f:29:9a:11:e6:38:76:10:1b:ac:f9:fb: 5a:41:01:de:52:99:bd:fa:fc:78:f2:be:29:2a:c2:87:93:5c: fa:b4:5c:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQ0MkExMTAvBgNVBAUTKDg0ODVBMzlFRDZCNjIxMjhFREY0Rjk5QjJDMkE4MTFG NUMyMDE1NzAwHhcNMjUxMDIzMDIyODM4WhcNMjUxMDMwMDIyODM4WjAYMRYwFAYD VQQDEw02OGY5OTJkNy00MTNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2owyRWuEFPdq2sc3vzkL1hF3PeIn0vOJzxYa2+nxOT1gFmgJbT6+U5hQMlSP RTFJocMB68Pe2Q9kS5j0tMWbg6hF4Mx6l/UKY70WaN+YnKUReJlP/vSQuC514y8Y Mn220b2fwHDzwRGVt6m8XS4dPyAZpRQAIp2/agHAfKIdxR/rkViuQwaPiJwpm4al qeZRNeuEuM+xh71zHiwkKOlaX/LXS+qPyEJRizYG7TAM3xHyaI2KclPFkooYGJWW MrEyV1osda3Ed93KOIWy1CZ9lCVkPFHN6a+QOZ89+2PA4JnWuycZMvgrx3OaTT7a mYF9M9MtEiDfR3A94BXy/Flr2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgzTvSx 6PNwR2ZWwv9XwgS7dYmMMB8GA1UdIwQYMBaAFISFo57WtiEo7fT5mywqgR9cIBVw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS8yMEYyQ0IwMEVC OUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklTanQ5UG1iTENxQkgxd2dG WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hJV2pudGEySVNqdDlQbWJMQ3FCSDF3Z0ZYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDQyQS8yMEYyQ0IwMEVCOUMxMUVDQTY4MjEyMENDNEY5QUUwMi9oSVdqbnRhMklT anQ5UG1iTENxQkgxd2dGWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBN1qKQ5F1m3KnNX640PuTY8hO7tCJ75iGyaXqBvRHL96SzMZeJuwtO +6WDoqV1XdKmCv9AEpVqzh5nKOVpIs54xFCx3IX89YENty1Xmcc54VJaYbeXbxp5 SsLx5Swsp4Xm9RPR3WzcSOs4BxDE+tdA0H6sVKiiQZo8sWzcOfWyOKXfTKQ/YGzi 896fKVqn8IDyIG7sPruvYVTZRvMGjNPoYW0uRGUM3jfUk9CKxr9MxKRIAaWg2+MK FLsDydgC83qmvNdaLnhrpqG4u6grxIyLelHFrMf5hOKfEANDjo9fKZoR5jh2EBus +ftaQQHeUpm9+vx48r4pKsKHk1z6tFy/ -----END CERTIFICATE-----Generated at Thu Oct 23 21:21:57 2025 by rpki-client