$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: ob5PIrK++lWAfXmTc+uzyh0//L8OKgL2c5h5LsNOn1c= Subject key identifier: 0F:46:42:10:F1:A1:A4:95:12:21:AF:A3:7E:78:65:42:3E:79:E0:5D Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 0184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: 0179 Signing time: Wed 29 Oct 2025 03:39:30 +0000 Manifest this update: Wed 29 Oct 2025 03:39:29 +0000 Manifest next update: Wed 05 Nov 2025 03:39:29 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: IVRrhCusq7LK0n0AG/v2eHWCIuxqzBaESzWy6JhX8Q4=) 2: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: RLnLzyrrcNZhWSbOgsksg70plHnwm/0y4IiOT7XePHI=) 3: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: g3qVGTL6N3Bx7PoU5ChuYFlVdWGCksOpw5qXnk0J/9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 03:39:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 388 (0x184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: Oct 29 03:39:29 2025 GMT Not After : Nov 5 03:39:29 2025 GMT Subject: CN=69018c72-b012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7b:12:c7:10:00:22:d7:c7:9b:71:17:77:04: 3c:56:ea:d5:32:57:07:14:90:8c:eb:29:0c:6e:e3: 05:cc:c2:e2:24:e1:23:64:bc:fe:15:da:bb:10:e5: 85:8c:87:2c:7c:81:dc:5b:ea:c2:8c:d7:d0:26:3d: 60:75:67:13:29:a0:19:ec:cb:52:6c:6a:a9:37:b8: ca:34:d7:83:9b:e5:60:9a:db:27:53:3b:cb:3d:08: 15:d3:c2:1f:68:57:14:0d:d3:ed:04:06:87:ac:bb: b0:cd:96:41:6e:3e:7c:0e:cd:ae:21:20:81:79:a2: ef:9f:ef:52:ab:ce:9c:30:38:3b:bb:c6:6b:52:c8: aa:9f:c5:ae:2a:9e:d4:3a:90:03:37:10:76:cd:b6: 90:00:63:95:b3:90:65:d8:41:b6:68:4c:6f:54:1e: 95:dd:0d:ad:a2:7a:2c:6d:c9:1a:36:3c:29:ce:78: e4:78:78:42:00:45:6b:62:33:3a:e0:18:bc:e6:53: b2:84:3c:48:fe:a6:0f:7d:1e:62:59:9f:0a:0a:19: e2:e5:7d:b8:51:f8:18:f3:e0:f4:d5:2b:c0:33:f9: fd:72:45:a0:2b:21:86:bc:92:55:ba:d1:ba:60:4f: 59:74:e9:29:4d:eb:a8:d5:77:60:c6:1f:c6:38:57: 66:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:46:42:10:F1:A1:A4:95:12:21:AF:A3:7E:78:65:42:3E:79:E0:5D X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:13:ac:8b:44:9e:61:e7:45:f8:fb:35:ae:3d:f9:e3:ec:f2: 7c:b1:56:30:37:40:92:1e:0a:b0:52:b2:9f:2e:c1:28:15:69: 87:3a:53:85:3d:79:2d:db:fd:40:dc:79:23:da:a0:a8:fb:d0: 0e:c8:a2:37:6b:54:9d:42:1f:dc:af:da:70:bb:bd:23:d7:52: f7:65:3a:b0:57:64:b7:ef:e3:c0:07:18:ba:df:3e:f6:4e:ad: ef:21:21:d7:83:f0:34:3c:40:d7:b0:66:fb:37:ae:e8:3b:5b: 1e:49:74:57:b2:fb:4a:6f:2e:1e:5f:12:15:b2:ed:68:eb:0d: 89:55:5b:fb:55:73:7c:b3:51:cb:a3:8f:1e:73:6a:08:36:76: f1:1b:f2:0e:8f:80:36:f8:1c:69:ea:aa:13:00:c3:fd:c4:25: 19:98:0d:84:a8:3a:4e:57:4c:ed:8e:ef:24:0f:d5:74:b0:eb: e5:25:04:4b:2e:3a:e3:fc:63:5d:4c:78:ba:cf:54:44:59:aa: 8d:a4:cb:12:16:af:78:75:dc:ea:88:a7:eb:82:2b:6c:ef:6c: 7f:de:db:51:7e:ca:1d:50:66:58:0c:6d:26:12:b0:fb:c4:28: 9a:6e:f7:5a:7e:db:3e:5d:b7:de:51:a2:90:79:df:5d:a9:39: 29:13:13:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx Q0Q0NEZCQTcwHhcNMjUxMDI5MDMzOTI5WhcNMjUxMTA1MDMzOTI5WjAYMRYwFAYD VQQDEw02OTAxOGM3Mi1iMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwnsSxxAAItfHm3EXdwQ8VurVMlcHFJCM6ykMbuMFzMLiJOEjZLz+Fdq7EOWF jIcsfIHcW+rCjNfQJj1gdWcTKaAZ7MtSbGqpN7jKNNeDm+VgmtsnUzvLPQgV08If aFcUDdPtBAaHrLuwzZZBbj58Ds2uISCBeaLvn+9Sq86cMDg7u8ZrUsiqn8WuKp7U OpADNxB2zbaQAGOVs5Bl2EG2aExvVB6V3Q2tonosbckaNjwpznjkeHhCAEVrYjM6 4Bi85lOyhDxI/qYPfR5iWZ8KChni5X24UfgY8+D01SvAM/n9ckWgKyGGvJJVutG6 YE9ZdOkpTeuo1Xdgxh/GOFdmQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA9GQhDx oaSVEiGvo354ZUI+eeBdMB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6 ekVOeG9xT0UxaXNjMUUtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANE6yLRJ5h50X4+zWuPfnj7PJ8sVYwN0CSHgqwUrKfLsEoFWmHOlOF PXkt2/1A3Hkj2qCo+9AOyKI3a1SdQh/cr9pwu70j11L3ZTqwV2S37+PABxi63z72 Tq3vISHXg/A0PEDXsGb7N67oO1seSXRXsvtKby4eXxIVsu1o6w2JVVv7VXN8s1HL o48ec2oINnbxG/IOj4A2+Bxp6qoTAMP9xCUZmA2EqDpOV0ztju8kD9V0sOvlJQRL Ljrj/GNdTHi6z1REWaqNpMsSFq94ddzqiKfrgits72x/3ttRfsodUGZYDG0mErD7 xCiabvdafts+XbfeUaKQed9dqTkpExNK -----END CERTIFICATE-----Generated at Thu Oct 30 06:36:29 2025 by rpki-client