$ rpki-client -vvf rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft File: hkRKM0kVEhS08nEbLF2gy5nlDxM.mft (raw, json) Hash identifier: Td3HDFPIdDme+0fQi1znkwtXFi0owj1CAQGw3uoMDpU= Subject key identifier: 22:4C:3B:0A:09:0C:5D:C9:A3:BC:72:36:1D:D1:3E:B1:0A:99:4C:E9 Authority key identifier: 86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 Certificate issuer: /CN=A915C48D/serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft Manifest number: AF Signing time: Mon 03 Nov 2025 06:10:45 +0000 Manifest this update: Mon 03 Nov 2025 06:10:44 +0000 Manifest next update: Mon 10 Nov 2025 06:10:44 +0000 Files and hashes: 1: hkRKM0kVEhS08nEbLF2gy5nlDxM.crl (hash: p8TIyhbSP1TMkp0qaeddzwNhQHEhPu2m2jS/ui7GnJY=) 2: DE1B9460EDF511EF86CB7315C4F9AE02.roa (hash: 1aGxRTXwu6ybjRU4JNrtMNFs2xwtsiTJtnAFcF9bvmg=) 3: 55EFA6C0ECF711EF88590A69C4F9AE02.roa (hash: FC93rdM/vdZQAg1QRdAMhOId3DELs7nG9wTwZW4DnWQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C48D, serialNumber=86444A3349151214B4F2711B2C5DA0CB99E50F13 Validity Not Before: Nov 3 06:10:44 2025 GMT Not After : Nov 10 06:10:44 2025 GMT Subject: CN=69084764-73f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c9:17:4a:01:79:a4:78:4d:a2:51:52:d4:cc: 7b:76:96:0a:ce:7a:24:8e:6c:23:2a:f9:a0:79:30: bb:27:84:35:27:35:d7:47:7a:bd:22:90:26:1e:9a: f4:86:99:c1:5e:fd:da:d4:79:35:48:1a:fe:dc:a9: f6:c9:60:ec:78:a0:d4:6c:10:52:bc:88:23:9a:02: 24:1f:83:1b:8e:87:c2:56:d4:2d:52:05:88:9c:4c: 07:3d:ad:23:08:c6:77:79:6b:97:6e:c7:fc:06:e7: 47:2e:af:a3:dd:e9:97:a0:b3:cd:da:5b:85:71:26: d8:aa:b7:e3:ea:14:f7:d1:20:a8:54:3b:7a:d5:97: 80:ab:c9:90:98:08:46:a8:f3:db:07:90:e0:cf:b4: 8c:7d:f5:fe:cc:66:76:70:60:d6:06:ef:6d:3a:65: ac:6e:b5:56:96:40:c3:4e:8e:c4:1a:98:7c:d2:3d: 71:5b:46:c2:2b:5b:db:7a:2f:5f:ca:ec:bd:ba:24: ba:f3:ca:4f:c1:3e:b0:45:b6:1f:a9:10:89:d5:9b: 88:43:db:36:dd:15:16:a6:ed:63:83:e9:85:c7:be: 74:50:41:79:23:48:10:0d:d2:be:49:e2:de:48:9d: 00:5d:c5:ad:a4:ae:1a:99:eb:11:d4:e3:7f:6e:95: 08:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4C:3B:0A:09:0C:5D:C9:A3:BC:72:36:1D:D1:3E:B1:0A:99:4C:E9 X509v3 Authority Key Identifier: keyid:86:44:4A:33:49:15:12:14:B4:F2:71:1B:2C:5D:A0:CB:99:E5:0F:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hkRKM0kVEhS08nEbLF2gy5nlDxM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C48D/0C2158B2B2C911EF903F7883C4F9AE02/hkRKM0kVEhS08nEbLF2gy5nlDxM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:23:8c:34:90:e3:e2:53:9c:75:88:99:16:22:10:75:18:01: 4a:7e:b9:bb:74:e6:e2:fa:62:1f:6d:18:49:eb:7e:80:e8:64: a9:04:43:0b:a5:1b:18:a7:4a:7e:25:8c:e2:0d:a5:a6:12:11: 7e:57:85:48:9b:0c:04:cf:dc:a7:8c:7a:c2:92:d7:db:50:e2: 29:02:0c:c9:df:d4:19:61:44:58:88:97:cc:eb:2a:62:10:38: 5b:e5:de:b5:2c:42:07:e6:59:ee:f0:1a:3d:6f:25:1a:b5:ed: e2:03:f3:40:1e:4d:90:d1:56:d8:0c:8b:82:d8:8e:af:05:80: 7a:e3:06:b1:e0:55:67:75:fa:26:e0:14:32:70:24:9d:93:27: d2:c6:3b:e2:9a:5d:c1:3d:44:8d:80:c0:20:70:5c:b0:c5:69: 70:90:0e:28:a8:0a:5e:23:e7:06:44:71:a3:08:2b:1b:f4:55: e7:ba:54:d1:51:a0:a2:20:ed:37:22:8f:70:6f:98:c3:37:c6: 4e:8b:07:57:4d:15:16:a5:3d:3a:35:58:cd:55:c0:96:90:4a: dc:b3:f6:b9:e8:ba:2b:37:64:81:9c:63:f2:a0:fe:55:85:94: ed:b8:c7:b9:fa:74:11:77:af:49:51:e4:a5:ed:58:46:0a:c0: 15:6f:1b:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM0OEQxMTAvBgNVBAUTKDg2NDQ0QTMzNDkxNTEyMTRCNEYyNzExQjJDNURBMENC OTlFNTBGMTMwHhcNMjUxMTAzMDYxMDQ0WhcNMjUxMTEwMDYxMDQ0WjAYMRYwFAYD VQQDEw02OTA4NDc2NC03M2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0skXSgF5pHhNolFS1Mx7dpYKznokjmwjKvmgeTC7J4Q1JzXXR3q9IpAmHpr0 hpnBXv3a1Hk1SBr+3Kn2yWDseKDUbBBSvIgjmgIkH4MbjofCVtQtUgWInEwHPa0j CMZ3eWuXbsf8BudHLq+j3emXoLPN2luFcSbYqrfj6hT30SCoVDt61ZeAq8mQmAhG qPPbB5Dgz7SMffX+zGZ2cGDWBu9tOmWsbrVWlkDDTo7EGph80j1xW0bCK1vbei9f yuy9uiS688pPwT6wRbYfqRCJ1ZuIQ9s23RUWpu1jg+mFx750UEF5I0gQDdK+SeLe SJ0AXcWtpK4amesR1ON/bpUImQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJMOwoJ DF3Jo7xyNh3RPrEKmUzpMB8GA1UdIwQYMBaAFIZESjNJFRIUtPJxGyxdoMuZ5Q8T MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzQ4RC8wQzIxNThCMkIy QzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVoUzA4bkViTEYyZ3k1bmxE eE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hrUktNMGtWRWhTMDhuRWJMRjJneTVubER4TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzQ4RC8wQzIxNThCMkIyQzkxMUVGOTAzRjc4ODNDNEY5QUUwMi9oa1JLTTBrVkVo UzA4bkViTEYyZ3k1bmxEeE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnI4w0kOPiU5x1iJkWIhB1GAFKfrm7dObi+mIfbRhJ636A6GSpBEML pRsYp0p+JYziDaWmEhF+V4VImwwEz9ynjHrCktfbUOIpAgzJ39QZYURYiJfM6ypi EDhb5d61LEIH5lnu8Bo9byUate3iA/NAHk2Q0VbYDIuC2I6vBYB64wax4FVndfom 4BQycCSdkyfSxjviml3BPUSNgMAgcFywxWlwkA4oqApeI+cGRHGjCCsb9FXnulTR UaCiIO03Io9wb5jDN8ZOiwdXTRUWpT06NVjNVcCWkErcs/a56LorN2SBnGPyoP5V hZTtuMe5+nQRd69JUeSl7VhGCsAVbxvy -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:10 2025 by rpki-client