$ rpki-client -vvf rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft File: Hte4fPVriwDuFD5GlnhQOBTl-lM.mft (raw, json) Hash identifier: FpFazjOehL9ryXBIB+zsM7GbNlutzm6rP/M4XVxKR9U= Subject key identifier: DD:6C:FA:7B:6A:A8:0B:8A:1B:97:22:9A:C2:45:E8:F7:23:43:C4:0E Authority key identifier: 1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53 Certificate issuer: /CN=A914C0F5/serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53 Certificate serial: 062D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft Manifest number: 0624 Signing time: Sun 02 Nov 2025 22:48:41 +0000 Manifest this update: Sun 02 Nov 2025 22:48:40 +0000 Manifest next update: Sun 09 Nov 2025 22:48:40 +0000 Files and hashes: 1: Hte4fPVriwDuFD5GlnhQOBTl-lM.crl (hash: /yf9uMlzpIrRnITgvBQeGMcI23JfSOy+ccxn2uU0Q6I=) 2: 694F9F9CBE2811EBBB48FF52C4F9AE02.roa (hash: iTUFdSRp6nWyaxTUI/RtXuC6V6TbUSDHt+jDf6Dd89Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:48:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1581 (0x62d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C0F5, serialNumber=1ED7B87CF56B8B00EE143E469678503814E5FA53 Validity Not Before: Nov 2 22:48:40 2025 GMT Not After : Nov 9 22:48:40 2025 GMT Subject: CN=6907dfc8-b821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:49:96:93:9c:00:0d:4a:35:9d:7c:4c:ce: e5:cb:5c:6c:13:a8:ca:be:0e:33:e0:33:08:f0:23: 2a:dc:ac:ba:fa:ac:6f:d6:b5:1d:13:74:74:8d:2f: d8:37:9a:39:44:a2:89:06:94:f0:4a:d9:9b:c9:5e: 46:54:10:2f:ad:5f:e7:a1:62:6b:87:fa:84:15:fa: 23:81:27:4e:e6:dd:46:0a:12:87:97:b4:92:4d:a2: 3c:3d:fb:b8:c8:64:a3:e5:de:44:7c:39:41:c1:75: eb:98:c8:db:ba:e7:45:c9:af:2a:d8:57:d0:23:b2: 76:26:2d:f0:27:c8:79:69:2c:83:04:54:3b:f1:07: ee:62:f3:08:c5:9f:3e:34:8b:d0:9e:3d:30:33:64: 11:51:0a:c9:bf:b6:0c:69:dc:3f:57:fa:b4:20:a3: f7:b4:57:6e:83:30:54:03:63:46:a9:84:0d:2c:e5: f0:59:71:5f:aa:50:f4:e9:42:68:bb:7e:49:da:45: b7:58:82:00:9d:75:50:02:fe:50:80:20:46:23:e5: 33:98:d1:49:43:f2:ce:5d:13:18:18:44:59:f0:57: b8:4c:8e:79:c9:51:60:cd:90:29:5b:4c:f9:d0:ed: 1d:4b:96:ab:b5:bf:e7:8d:a1:a5:34:fb:de:a9:d4: 39:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6C:FA:7B:6A:A8:0B:8A:1B:97:22:9A:C2:45:E8:F7:23:43:C4:0E X509v3 Authority Key Identifier: keyid:1E:D7:B8:7C:F5:6B:8B:00:EE:14:3E:46:96:78:50:38:14:E5:FA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hte4fPVriwDuFD5GlnhQOBTl-lM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C0F5/DF013A32BE2511EB94568151C4F9AE02/Hte4fPVriwDuFD5GlnhQOBTl-lM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:f5:d7:4a:3e:33:aa:c1:ff:6e:e0:a7:e6:5c:15:aa:1a:eb: 41:46:9f:70:c3:1a:0e:db:1c:db:e7:d9:e5:a9:d8:b3:8d:15: 0c:52:d5:e5:6b:9b:4a:71:d8:d8:7b:7c:f5:21:0a:98:94:84: 23:e4:21:f5:dc:9d:e3:48:6f:05:ed:a8:c0:95:1d:72:87:22: 47:53:c3:64:d1:40:78:9c:7e:1c:d4:4e:68:d0:85:27:5c:12: 06:02:6b:91:05:0a:54:10:1a:14:91:25:12:76:41:f0:1c:9b: a8:b9:af:71:9d:9a:36:d2:ac:42:0a:30:e2:3d:9a:7b:a8:32: d9:d7:f8:79:95:d0:83:65:14:ce:08:8c:be:63:83:49:5d:63: 21:fe:55:8d:8c:05:bf:4e:f8:15:88:b5:8b:8f:16:7a:4d:cb: 78:06:54:1a:7b:2f:57:b8:d3:9f:09:0b:fa:f8:da:19:21:a2: 12:0d:cf:da:43:33:2b:ea:5e:4f:a0:4f:a1:5c:68:db:42:8e: 5b:4d:1d:06:74:52:b0:bd:29:80:4f:de:14:ea:16:0f:b1:99: c3:32:04:1c:22:57:6b:0a:fc:e1:d1:96:d9:38:bb:f5:d4:3c: fa:da:2f:ce:1f:d9:4f:3e:47:14:4d:79:04:70:cb:29:34:5b: ad:1a:d5:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEMwRjUxMTAvBgNVBAUTKDFFRDdCODdDRjU2QjhCMDBFRTE0M0U0Njk2Nzg1MDM4 MTRFNUZBNTMwHhcNMjUxMTAyMjI0ODQwWhcNMjUxMTA5MjI0ODQwWjAYMRYwFAYD VQQDEw02OTA3ZGZjOC1iODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwERJlpOcAA1KNZ18TM7ly1xsE6jKvg4z4DMI8CMq3Ky6+qxv1rUdE3R0jS/Y N5o5RKKJBpTwStmbyV5GVBAvrV/noWJrh/qEFfojgSdO5t1GChKHl7SSTaI8Pfu4 yGSj5d5EfDlBwXXrmMjbuudFya8q2FfQI7J2Ji3wJ8h5aSyDBFQ78QfuYvMIxZ8+ NIvQnj0wM2QRUQrJv7YMadw/V/q0IKP3tFdugzBUA2NGqYQNLOXwWXFfqlD06UJo u35J2kW3WIIAnXVQAv5QgCBGI+UzmNFJQ/LOXRMYGERZ8Fe4TI55yVFgzZApW0z5 0O0dS5artb/njaGlNPveqdQ5PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1s+ntq qAuKG5cimsJF6PcjQ8QOMB8GA1UdIwQYMBaAFB7XuHz1a4sA7hQ+RpZ4UDgU5fpT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzBGNS9ERjAxM0EzMkJF MjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3RHVGRDVHbG5oUU9CVGwt bE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0ZTRmUFZyaXdEdUZENUdsbmhRT0JUbC1sTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzBGNS9ERjAxM0EzMkJFMjUxMUVCOTQ1NjgxNTFDNEY5QUUwMi9IdGU0ZlBWcml3 RHVGRDVHbG5oUU9CVGwtbE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy9ddKPjOqwf9u4KfmXBWqGutBRp9wwxoO2xzb59nlqdizjRUMUtXl a5tKcdjYe3z1IQqYlIQj5CH13J3jSG8F7ajAlR1yhyJHU8Nk0UB4nH4c1E5o0IUn XBIGAmuRBQpUEBoUkSUSdkHwHJuoua9xnZo20qxCCjDiPZp7qDLZ1/h5ldCDZRTO CIy+Y4NJXWMh/lWNjAW/TvgViLWLjxZ6Tct4BlQaey9XuNOfCQv6+NoZIaISDc/a QzMr6l5PoE+hXGjbQo5bTR0GdFKwvSmAT94U6hYPsZnDMgQcIldrCvzh0ZbZOLv1 1Dz62i/OH9lPPkcUTXkEcMspNFutGtV0 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:19 2025 by rpki-client