$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft File: H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json) Hash identifier: B8UC4CdUGTmKyvN9ZXfCpynXM849GgY1kvD7W91TOug= Subject key identifier: 32:C9:7F:B3:F0:1E:1F:ED:9F:48:16:DF:5F:A7:CA:90:50:EC:CE:D7 Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B Certificate serial: 0C6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft Manifest number: 0C5E Signing time: Thu 18 Sep 2025 18:43:29 +0000 Manifest this update: Thu 18 Sep 2025 18:43:29 +0000 Manifest next update: Thu 25 Sep 2025 18:43:29 +0000 Files and hashes: 1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: PyMl/bFgOdqGXIoFTsvyrrD65Vq799pZjHsc7ZniFTw=) 2: 172E487A416911ECB6B11742C4F9AE02.roa (hash: jjQzstnlPYenRZWamhU8+OP/S56HuWE5rPwPEoYqLOI=) 3: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: FwxCipQAsBk9UBv8EDrb+Vo/Shz8I+uuiBIqO9LmFMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:43:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3183 (0xc6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B Validity Not Before: Sep 18 18:43:29 2025 GMT Not After : Sep 25 18:43:29 2025 GMT Subject: CN=68cc52d1-6deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:15:cb:84:30:96:fe:33:21:8d:11:05:d4:22: 85:b7:3b:70:a3:22:3c:83:2b:88:5e:37:45:0d:da: 46:03:6d:18:11:4f:4a:3a:f2:24:a2:93:18:71:8d: e8:1d:ea:78:2a:0f:04:3d:c0:50:1a:f4:46:50:0c: 41:61:47:56:6e:90:9a:b6:39:f8:a7:ed:17:ff:78: f9:ea:cf:56:5e:5b:ec:7d:ed:fa:44:9e:97:9e:f7: c5:a8:ce:75:47:8d:67:a2:8f:a3:75:da:2b:ad:f3: 1f:82:84:dc:90:26:8a:1c:85:5a:74:4f:c2:3f:94: 5b:37:a8:12:5f:d1:73:86:e3:04:64:c8:69:bd:12: 62:e9:dd:81:1c:8d:7d:f6:fe:f2:aa:16:a6:49:fb: 6a:68:4a:fe:fe:d3:0d:96:e7:d6:8f:a1:95:5f:6f: 49:fb:0c:88:80:2a:38:52:e4:49:0a:fe:4a:99:58: 54:13:c1:c8:25:54:4a:61:ac:de:de:3c:8c:b2:c1: c7:1e:0d:00:19:2b:3e:e1:a2:7b:2e:b4:5e:eb:5d: df:ac:89:f1:d0:d8:95:09:c1:ed:9a:fa:40:8e:16: c1:7a:60:f7:52:dc:99:c0:f8:e9:fb:79:b1:f5:ff: 78:b3:7f:a8:ad:f2:3b:77:9b:f1:af:d2:bc:a2:50: 09:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:C9:7F:B3:F0:1E:1F:ED:9F:48:16:DF:5F:A7:CA:90:50:EC:CE:D7 X509v3 Authority Key Identifier: keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:43:8d:b8:46:bc:4c:d2:ed:b0:e3:a2:44:21:3f:a1:e3:11: 08:88:58:5a:0c:54:c6:96:20:da:68:b2:6b:c1:5e:d1:fb:9d: f9:90:22:8f:58:50:1d:ab:94:c7:99:00:63:3e:03:6a:73:d8: 23:11:50:7a:44:35:d6:29:88:19:41:4d:9e:c3:48:40:ce:24: 90:2f:38:fa:60:77:13:21:b6:e7:75:12:d8:69:50:ed:df:cb: a1:b7:38:fd:2f:f0:c7:16:e4:74:1c:da:c5:3d:4d:e8:3c:6a: 89:44:7c:56:38:27:ac:00:ff:a0:21:3e:64:5d:82:05:00:03: d8:77:82:1d:07:a3:e9:3d:f8:4e:e1:39:f8:0e:4d:e4:46:64: 8c:6c:20:4b:46:bf:d7:9d:70:ee:fc:44:11:c0:f4:bd:5a:5c: f4:a0:42:11:b2:d7:ec:ef:9f:07:1d:7d:fa:25:4f:e6:78:02: 81:2b:2e:bd:d0:86:97:30:ce:e2:71:16:42:b4:ae:d0:47:a6: e8:1c:86:24:d1:5e:44:e8:5d:e0:53:28:11:ea:10:81:94:7f: 9b:b5:8c:f5:be:48:ab:96:2e:0d:a4:9d:80:50:74:a0:64:49: b7:03:d1:b6:69:92:e3:8b:32:b1:ff:4a:b0:6f:b8:b9:76:0f: c5:97:37:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDG8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMzMxMTAvBgNVBAUTKDFGOUEyMDI4OUNFOTMxNkU2NUIzREI3MjRFOEM3MzYw NkM4Rjg2NEIwHhcNMjUwOTE4MTg0MzI5WhcNMjUwOTI1MTg0MzI5WjAYMRYwFAYD VQQDEw02OGNjNTJkMS02ZGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApxXLhDCW/jMhjREF1CKFtztwoyI8gyuIXjdFDdpGA20YEU9KOvIkopMYcY3o Hep4Kg8EPcBQGvRGUAxBYUdWbpCatjn4p+0X/3j56s9WXlvsfe36RJ6XnvfFqM51 R41noo+jddorrfMfgoTckCaKHIVadE/CP5RbN6gSX9FzhuMEZMhpvRJi6d2BHI19 9v7yqhamSftqaEr+/tMNlufWj6GVX29J+wyIgCo4UuRJCv5KmVhUE8HIJVRKYaze 3jyMssHHHg0AGSs+4aJ7LrRe613frInx0NiVCcHtmvpAjhbBemD3UtyZwPjp+3mx 9f94s3+orfI7d5vxr9K8olAJcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDLJf7Pw Hh/tn0gW31+nypBQ7M7XMB8GA1UdIwQYMBaAFB+aICic6TFuZbPbck6Mc2Bsj4ZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYzMy80NjA2NjFEQzBC ODMxMUVBOTcxQTg2NERDNEY5QUUwMi9INW9nS0p6cE1XNWxzOXR5VG94ellHeVBo a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g1b2dLSnpwTVc1bHM5dHlUb3h6WUd5UGhrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYzMy80NjA2NjFEQzBCODMxMUVBOTcxQTg2NERDNEY5QUUwMi9INW9nS0p6cE1X NWxzOXR5VG94ellHeVBoa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASQ424RrxM0u2w46JEIT+h4xEIiFhaDFTGliDaaLJrwV7R+535kCKP WFAdq5THmQBjPgNqc9gjEVB6RDXWKYgZQU2ew0hAziSQLzj6YHcTIbbndRLYaVDt 38uhtzj9L/DHFuR0HNrFPU3oPGqJRHxWOCesAP+gIT5kXYIFAAPYd4IdB6PpPfhO 4Tn4Dk3kRmSMbCBLRr/XnXDu/EQRwPS9Wlz0oEIRstfs758HHX36JU/meAKBKy69 0IaXMM7icRZCtK7QR6boHIYk0V5E6F3gUygR6hCBlH+btYz1vkirli4NpJ2AUHSg ZEm3A9G2aZLjizKx/0qwb7i5dg/FlzfI -----END CERTIFICATE-----Generated at Fri Sep 19 01:20:43 2025 by rpki-client