$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft File: hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json) Hash identifier: Pg4eYT6ANhSdBb9ymSZXz7OD9zwr6w7BdmVOFln5+u0= Subject key identifier: 28:3B:B4:FE:49:3F:B2:DE:E4:95:64:7F:3F:4D:9B:C7:E9:01:DA:06 Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 Certificate issuer: /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Certificate serial: 9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft Manifest number: 98 Signing time: Wed 17 Sep 2025 07:09:36 +0000 Manifest this update: Wed 17 Sep 2025 07:09:35 +0000 Manifest next update: Wed 24 Sep 2025 07:09:35 +0000 Files and hashes: 1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: /q1+qHZAmC9I4hU9JfB/Dw5e8glVnCD7xgrvokCon08=) 2: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: 1aGxRTXwu6ybjRU4JNrtMNFs2xwtsiTJtnAFcF9bvmg=) 3: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: FC93rdM/vdZQAg1QRdAMhOId3DELs7nG9wTwZW4DnWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 07:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 156 (0x9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Validity Not Before: Sep 17 07:09:35 2025 GMT Not After : Sep 24 07:09:35 2025 GMT Subject: CN=68ca5eb0-0ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7e:c1:50:c4:a3:d6:0e:41:30:a1:24:24:85: 52:e3:46:55:7f:14:af:e9:e5:74:71:aa:70:aa:ba: 24:85:d6:bf:fb:5a:46:65:7b:ad:a3:33:55:17:bb: 6c:70:d0:a6:2c:e3:86:95:3c:d1:d7:dd:02:61:ed: 50:03:cb:f1:58:60:b5:4c:74:86:35:ce:83:90:4a: 35:94:34:c4:10:df:2d:82:a4:7d:7f:0a:7a:66:68: a4:0f:64:c9:df:6d:f6:82:43:79:57:ef:62:2d:a7: 89:7a:4b:c3:02:fa:48:3b:d6:16:67:d8:01:fc:c8: 7f:44:99:35:13:12:92:b3:c3:ad:ed:65:50:e7:03: 77:2a:b6:8d:f0:60:65:f7:3b:d8:53:f5:38:ba:ab: 57:7e:61:12:81:9e:2a:9e:f8:c0:d0:2c:1a:c9:37: f2:34:51:fe:b6:87:03:c8:a8:df:b1:e0:5c:59:02: d4:fb:09:2f:54:42:dc:b2:5c:06:47:b7:64:e3:e3: 86:db:13:93:9a:ae:ab:63:ff:7c:e7:f3:7a:39:ba: 99:d9:cf:97:92:d5:9d:32:66:6d:aa:d3:24:e3:59: 38:3f:2b:f9:9f:17:87:24:24:fe:3a:ef:94:5d:6e: e0:59:07:5f:e0:6b:a3:43:19:6e:86:59:7a:77:ba: 55:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3B:B4:FE:49:3F:B2:DE:E4:95:64:7F:3F:4D:9B:C7:E9:01:DA:06 X509v3 Authority Key Identifier: keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:bd:61:fd:6c:7c:4c:83:f2:d2:0a:27:33:bd:f6:0e:19:59: 1a:be:53:08:1b:b7:b0:46:6b:a9:73:4d:0f:b7:1a:87:4c:f2: 38:12:6a:17:93:21:37:1c:a2:9c:1c:09:df:5b:45:f0:97:c9: 84:f7:14:39:71:e6:e5:e2:58:9b:cb:2f:76:6d:ef:5f:b7:ae: b3:e7:e5:00:d7:31:59:a2:11:c9:b2:24:df:5e:ed:78:6d:1d: 00:7b:a6:b0:85:b2:7b:2d:a0:a2:ce:a6:5b:3c:8b:8f:7f:ec: 4b:10:8a:d1:8d:b8:38:0a:67:c7:ba:95:e5:9d:ce:a0:6f:76: 13:b6:57:67:4d:1a:46:3a:e9:9c:c6:85:33:f8:1a:b9:c3:42: fb:3d:94:aa:c6:ce:b5:c5:31:a4:75:ac:19:7a:6c:6c:23:74: 00:a9:5c:18:69:7f:e5:c0:dc:6a:f4:5f:a6:90:3e:d0:aa:cb: f9:b5:0b:91:34:11:cc:99:eb:76:67:43:92:16:00:e6:ef:29: cb:da:f2:06:a7:b0:11:c4:4a:68:a7:4f:98:78:aa:d9:e1:5d: 6a:0a:8e:e3:0d:0c:66:db:52:af:99:17:a5:15:08:5c:6e:72: 1f:4a:42:e5:a5:f2:d4:3e:12:e4:ae:28:65:93:ca:9e:f6:fe: 26:1d:b9:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM0OEQxMTAvBgNVBAUTKDg2NDQ0QTMzNDkxNTEyMTRCNEYyNzExQjJDNURBMENC OTlFNTBGMTMwHhcNMjUwOTE3MDcwOTM1WhcNMjUwOTI0MDcwOTM1WjAYMRYwFAYD VQQDEw02OGNhNWViMC0wYmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3X7BUMSj1g5BMKEkJIVS40ZVfxSv6eV0capwqrokhda/+1pGZXutozNVF7ts cNCmLOOGlTzR190CYe1QA8vxWGC1THSGNc6DkEo1lDTEEN8tgqR9fwp6ZmikD2TJ 3232gkN5V+9iLaeJekvDAvpIO9YWZ9gB/Mh/RJk1ExKSs8Ot7WVQ5wN3KraN8GBl 9zvYU/U4uqtXfmESgZ4qnvjA0CwayTfyNFH+tocDyKjfseBcWQLU+wkvVELcslwG R7dk4+OG2xOTmq6rY/985/N6ObqZ2c+XktWdMmZtqtMk41k4Pyv5nxeHJCT+Ou+U XW7gWQdf4GujQxluhll6d7pV+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCg7tP5J P7Le5JVkfz9Nm8fpAdoGMB8GA1UdIwQYMBaAFIZESjNJFRIUtPJxGyxdoMuZ5Q8T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzQ4RC8wQzIxNThCMkIy QzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVoUzA4bkViTEYyZ3k1bmxE eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hrUktNMGtWRWhTMDhuRWJMRjJneTVubER4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzQ4RC8wQzIxNThCMkIyQzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVo UzA4bkViTEYyZ3k1bmxEeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/vWH9bHxMg/LSCiczvfYOGVkavlMIG7ewRmupc00PtxqHTPI4EmoX kyE3HKKcHAnfW0Xwl8mE9xQ5cebl4libyy92be9ft66z5+UA1zFZohHJsiTfXu14 bR0Ae6awhbJ7LaCizqZbPIuPf+xLEIrRjbg4CmfHupXlnc6gb3YTtldnTRpGOumc xoUz+Bq5w0L7PZSqxs61xTGkdawZemxsI3QAqVwYaX/lwNxq9F+mkD7Qqsv5tQuR NBHMmet2Z0OSFgDm7ynL2vIGp7ARxEpop0+YeKrZ4V1qCo7jDQxm21KvmRelFQhc bnIfSkLlpfLUPhLkrihlk8qe9v4mHbkV -----END CERTIFICATE-----Generated at Fri Sep 19 07:14:29 2025 by rpki-client