$ rpki-client -vvf rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft File: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft (raw, json) Hash identifier: iY/EliLmzK1dOxli//buvSQ6iYN330+FRVdXkencWdg= Subject key identifier: ED:50:1F:86:70:7B:94:46:B9:7A:FA:E8:33:75:02:FF:16:90:C4:91 Authority key identifier: 1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 Certificate issuer: /CN=A913C52D/serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Certificate serial: 0709 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft Manifest number: 0708 Signing time: Sun 26 Oct 2025 22:40:46 +0000 Manifest this update: Sun 26 Oct 2025 22:40:45 +0000 Manifest next update: Sun 02 Nov 2025 22:40:45 +0000 Files and hashes: 1: HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl (hash: rAX+v8TcyI+xFvwh0HOYPKQ6P0Ljhfi8uxxkUji19Q8=) 2: FCF8B992679111F09C8F057DC4F9AE02.roa (hash: kwKEGvjPSYWkocb09ei383ShnOWyBUUVEonrFFSPNGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 22:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1801 (0x709) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913C52D, serialNumber=1D3A9A8FC97CFCD7AE84FFDC5AA0BBFB9693DC97 Validity Not Before: Oct 26 22:40:45 2025 GMT Not After : Nov 2 22:40:45 2025 GMT Subject: CN=68fea36d-be08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8a:c6:2d:f6:bf:03:80:33:e0:2d:88:27:f0: a4:85:31:77:09:be:9c:6b:c0:8f:35:de:2c:14:01: 36:2d:e8:b9:ff:23:55:70:63:f2:ba:23:68:4d:99: 7f:1e:25:25:e0:ee:37:74:66:ad:a2:e5:26:e7:99: 2d:8e:8a:a2:9d:f6:47:8c:57:6c:b6:66:3f:80:18: b1:cf:f7:c6:c3:e2:d1:15:15:38:98:89:85:98:ef: 5f:f7:52:f9:3c:85:9f:74:13:14:e6:de:91:72:b5: 85:f1:94:f5:55:1e:dd:33:4d:20:da:17:f6:b3:b3: 72:0f:eb:ac:0f:d9:95:a3:7e:a4:e2:60:f3:82:f5: d3:8f:03:01:27:da:fe:c2:35:35:e5:ca:86:b7:8e: 11:28:6b:51:bd:20:60:47:37:33:9c:43:da:64:25: 70:50:56:e9:b1:04:d9:64:d6:af:55:57:e1:3f:d8: a8:21:02:6f:75:35:d1:a7:7a:2b:26:6c:3a:5d:2f: b6:77:da:da:39:e9:96:1b:29:e9:ee:b1:d9:f8:b8: 32:e0:0e:ac:3d:fa:68:49:d6:17:0b:b8:eb:6f:e9: 53:c0:3b:5c:d7:05:68:d5:37:56:f2:9d:8c:8f:8e: cd:8d:77:a8:a0:78:f4:7c:69:cf:1b:7b:1b:98:21: 77:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:50:1F:86:70:7B:94:46:B9:7A:FA:E8:33:75:02:FF:16:90:C4:91 X509v3 Authority Key Identifier: keyid:1D:3A:9A:8F:C9:7C:FC:D7:AE:84:FF:DC:5A:A0:BB:FB:96:93:DC:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C52D/8FA976BE5BB711EB8BAD2142C4F9AE02/HTqaj8l8_NeuhP_cWqC7-5aT3Jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:7b:3c:68:cf:41:55:7b:13:13:bc:35:a8:b5:93:ce:c1:0b: 39:43:6e:99:49:b0:0c:75:9e:4b:2f:12:7e:72:6a:c7:b5:85: ef:87:21:71:ba:9a:d4:a4:0f:16:62:39:13:91:30:98:2b:e9: b5:68:d1:c2:2b:0c:f0:81:49:4f:0d:bd:4f:39:ad:28:5e:c4: f4:3b:12:ae:a0:72:7b:73:e0:2c:2f:7d:28:ff:29:11:49:d0: d3:8f:c5:11:b0:be:9b:a9:12:4a:5b:64:40:a5:72:fc:ef:e9: cb:30:0e:33:69:53:08:1f:b2:34:02:d5:b0:81:36:d5:8d:22: 4c:91:cf:24:2d:94:c1:db:f0:66:76:47:0f:26:94:49:72:de: 62:b1:1a:26:33:0f:3d:94:b2:5a:9e:49:bc:a0:63:32:71:40: 26:49:39:17:5b:15:98:b8:15:06:dc:f1:2d:1c:23:8b:c6:f8: 41:7e:c8:34:94:f0:bf:ef:77:57:ab:24:22:f3:10:c5:1c:20: 4b:b0:5d:2e:fc:42:c8:da:ff:ec:cd:4e:c5:93:3c:2e:3a:4e: e9:a1:62:73:a9:48:74:d8:27:0c:6a:db:d2:ca:fd:02:06:33: bf:78:d1:98:f2:ee:81:07:c0:c7:48:d7:ac:c1:70:4c:9c:1b: 67:9b:8c:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0M1MkQxMTAvBgNVBAUTKDFEM0E5QThGQzk3Q0ZDRDdBRTg0RkZEQzVBQTBCQkZC OTY5M0RDOTcwHhcNMjUxMDI2MjI0MDQ1WhcNMjUxMTAyMjI0MDQ1WjAYMRYwFAYD VQQDEw02OGZlYTM2ZC1iZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4rGLfa/A4Az4C2IJ/CkhTF3Cb6ca8CPNd4sFAE2Lei5/yNVcGPyuiNoTZl/ HiUl4O43dGatouUm55ktjoqinfZHjFdstmY/gBixz/fGw+LRFRU4mImFmO9f91L5 PIWfdBMU5t6RcrWF8ZT1VR7dM00g2hf2s7NyD+usD9mVo36k4mDzgvXTjwMBJ9r+ wjU15cqGt44RKGtRvSBgRzcznEPaZCVwUFbpsQTZZNavVVfhP9ioIQJvdTXRp3or Jmw6XS+2d9raOemWGynp7rHZ+Lgy4A6sPfpoSdYXC7jrb+lTwDtc1wVo1TdW8p2M j47NjXeooHj0fGnPG3sbmCF33wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1QH4Zw e5RGuXr66DN1Av8WkMSRMB8GA1UdIwQYMBaAFB06mo/JfPzXroT/3Fqgu/uWk9yX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzUyRC84RkE5NzZCRTVC QjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9OZXVoUF9jV3FDNy01YVQz SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hUcWFqOGw4X05ldWhQX2NXcUM3LTVhVDNKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QzUyRC84RkE5NzZCRTVCQjcxMUVCOEJBRDIxNDJDNEY5QUUwMi9IVHFhajhsOF9O ZXVoUF9jV3FDNy01YVQzSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEezxoz0FVexMTvDWotZPOwQs5Q26ZSbAMdZ5LLxJ+cmrHtYXvhyFx uprUpA8WYjkTkTCYK+m1aNHCKwzwgUlPDb1POa0oXsT0OxKuoHJ7c+AsL30o/ykR SdDTj8URsL6bqRJKW2RApXL87+nLMA4zaVMIH7I0AtWwgTbVjSJMkc8kLZTB2/Bm dkcPJpRJct5isRomMw89lLJankm8oGMycUAmSTkXWxWYuBUG3PEtHCOLxvhBfsg0 lPC/73dXqyQi8xDFHCBLsF0u/ELI2v/szU7FkzwuOk7poWJzqUh02CcMatvSyv0C BjO/eNGY8u6BB8DHSNeswXBMnBtnm4xM -----END CERTIFICATE-----Generated at Mon Oct 27 04:41:28 2025 by rpki-client