$ rpki-client -vvf rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft File: H5ogKJzpMW5ls9tyToxzYGyPhks.mft (raw, json) Hash identifier: 399xMsK8oWdsZrvuCkV0FavTLVUKVj7m2S4O+uSldco= Subject key identifier: E3:15:5B:F6:CC:51:04:C9:83:B0:77:89:C2:E7:07:4C:63:DD:EA:6A Authority key identifier: 1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B Certificate issuer: /CN=A914BF33/serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B Certificate serial: 0C86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft Manifest number: 0C75 Signing time: Sun 02 Nov 2025 18:29:43 +0000 Manifest this update: Sun 02 Nov 2025 18:29:42 +0000 Manifest next update: Sun 09 Nov 2025 18:29:42 +0000 Files and hashes: 1: H5ogKJzpMW5ls9tyToxzYGyPhks.crl (hash: Dbh0Ev9hXbu74vecCfkAfpVLZd0Kw2RK/quzOm3VHBQ=) 2: 172E487A416911ECB6B11742C4F9AE02.roa (hash: jjQzstnlPYenRZWamhU8+OP/S56HuWE5rPwPEoYqLOI=) 3: 67827BDC0B8511EA97C80D52C4F9AE02.roa (hash: FwxCipQAsBk9UBv8EDrb+Vo/Shz8I+uuiBIqO9LmFMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BF33, serialNumber=1F9A20289CE9316E65B3DB724E8C73606C8F864B Validity Not Before: Nov 2 18:29:42 2025 GMT Not After : Nov 9 18:29:42 2025 GMT Subject: CN=6907a316-aecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c0:00:b7:73:1b:7e:4f:af:aa:90:09:5e:b1: 90:e2:f4:02:eb:33:a3:be:79:9e:a6:c6:8c:db:a1: 45:f7:f7:e3:8e:44:86:5b:98:3e:91:58:db:3f:fe: ed:83:b2:93:88:c9:1c:fe:fd:86:40:49:72:f0:2f: af:02:f6:81:17:9d:68:ae:65:47:ac:6d:45:10:a3: 7a:97:d9:a3:85:20:42:af:13:86:73:f1:e7:59:3d: f0:3c:dc:cf:ce:9c:d1:dc:8c:ad:d2:21:0b:2b:ee: bd:77:c5:b8:58:47:5f:82:ae:3c:34:63:cd:a0:3f: e4:1c:fc:98:c1:f2:b7:47:ae:43:90:b9:19:2f:95: cd:d8:7d:d6:ed:8a:47:5f:4b:03:f5:14:87:f7:8a: 2e:61:08:62:c8:2f:a1:54:11:c1:bb:be:87:da:28: 81:f0:7a:41:2e:35:fc:be:a5:2b:c7:c2:0b:18:68: a9:a8:3a:c8:ec:6e:a5:06:e7:01:d6:b5:42:5f:99: cb:cc:ff:80:c5:11:c0:0e:e1:b8:30:eb:7c:4d:ae: d6:5e:25:59:1e:c6:a8:89:94:a4:39:9f:72:73:7a: 44:cf:8d:c5:d6:da:61:87:ea:ac:e9:ae:98:02:db: 3a:e3:22:d1:1f:1b:b2:17:9a:ab:1d:bc:46:32:36: 71:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:15:5B:F6:CC:51:04:C9:83:B0:77:89:C2:E7:07:4C:63:DD:EA:6A X509v3 Authority Key Identifier: keyid:1F:9A:20:28:9C:E9:31:6E:65:B3:DB:72:4E:8C:73:60:6C:8F:86:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H5ogKJzpMW5ls9tyToxzYGyPhks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BF33/460661DC0B8311EA971A864DC4F9AE02/H5ogKJzpMW5ls9tyToxzYGyPhks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:68:38:0f:45:ec:d8:83:16:36:9e:30:fd:1e:ce:64:06:ff: aa:86:8f:73:5b:72:1b:2d:af:9e:78:68:46:a4:d6:b6:cd:68: 2c:a9:6c:82:87:6a:4c:7f:72:6a:0f:32:69:21:7a:2c:05:ad: 63:c8:7c:0f:11:4e:2b:b6:30:d9:d0:67:00:1e:3f:dd:fd:35: db:0e:8b:a7:bd:a7:94:0a:2f:34:86:21:69:1d:39:28:6b:0d: 4a:f5:6c:60:5b:8d:55:00:eb:c8:75:bd:c5:22:ab:03:bc:a7: cf:68:76:3d:39:2a:92:f3:e4:7b:6f:1b:9c:ec:24:6a:65:a2: 8d:4d:75:46:45:02:6a:eb:e1:5a:72:88:fb:6d:b7:1b:6f:47: ab:72:da:8f:97:0d:db:76:da:e8:54:6b:f7:6f:f9:d0:42:ed: 59:36:6e:11:ba:7e:69:df:f7:9c:fd:71:a6:3c:9c:d6:73:7b: 7d:c1:7a:34:70:97:60:8d:c3:c5:c3:b1:ab:0e:9f:f2:ff:c7: 03:ec:84:c6:20:fb:c8:55:b4:2a:92:38:37:48:2a:23:88:57: c4:e0:5a:e1:2f:f2:cb:59:5e:dc:80:07:5b:3b:0a:24:1d:65: 56:58:20:86:8e:8f:f4:f4:5b:a7:45:69:89:14:f8:aa:14:93: d1:af:cc:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEJGMzMxMTAvBgNVBAUTKDFGOUEyMDI4OUNFOTMxNkU2NUIzREI3MjRFOEM3MzYw NkM4Rjg2NEIwHhcNMjUxMTAyMTgyOTQyWhcNMjUxMTA5MTgyOTQyWjAYMRYwFAYD VQQDEw02OTA3YTMxNi1hZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8cAAt3Mbfk+vqpAJXrGQ4vQC6zOjvnmepsaM26FF9/fjjkSGW5g+kVjbP/7t g7KTiMkc/v2GQEly8C+vAvaBF51ormVHrG1FEKN6l9mjhSBCrxOGc/HnWT3wPNzP zpzR3Iyt0iELK+69d8W4WEdfgq48NGPNoD/kHPyYwfK3R65DkLkZL5XN2H3W7YpH X0sD9RSH94ouYQhiyC+hVBHBu76H2iiB8HpBLjX8vqUrx8ILGGipqDrI7G6lBucB 1rVCX5nLzP+AxRHADuG4MOt8Ta7WXiVZHsaoiZSkOZ9yc3pEz43F1tphh+qs6a6Y Ats64yLRHxuyF5qrHbxGMjZxnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMVW/bM UQTJg7B3icLnB0xj3epqMB8GA1UdIwQYMBaAFB+aICic6TFuZbPbck6Mc2Bsj4ZL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkYzMy80NjA2NjFEQzBC ODMxMUVBOTcxQTg2NERDNEY5QUUwMi9INW9nS0p6cE1XNWxzOXR5VG94ellHeVBo a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g1b2dLSnpwTVc1bHM5dHlUb3h6WUd5UGhrcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QkYzMy80NjA2NjFEQzBCODMxMUVBOTcxQTg2NERDNEY5QUUwMi9INW9nS0p6cE1X NWxzOXR5VG94ellHeVBoa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuaDgPRezYgxY2njD9Hs5kBv+qho9zW3IbLa+eeGhGpNa2zWgsqWyC h2pMf3JqDzJpIXosBa1jyHwPEU4rtjDZ0GcAHj/d/TXbDounvaeUCi80hiFpHTko aw1K9WxgW41VAOvIdb3FIqsDvKfPaHY9OSqS8+R7bxuc7CRqZaKNTXVGRQJq6+Fa coj7bbcbb0erctqPlw3bdtroVGv3b/nQQu1ZNm4Run5p3/ec/XGmPJzWc3t9wXo0 cJdgjcPFw7GrDp/y/8cD7ITGIPvIVbQqkjg3SCojiFfE4FrhL/LLWV7cgAdbOwok HWVWWCCGjo/09FunRWmJFPiqFJPRr8x7 -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:30 2025 by rpki-client