$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft File: HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json) Hash identifier: LTXCeFtCEB8KKv7XpPk1QO/Qd3ofyvWZDe2MSE5X7hs= Subject key identifier: 36:AB:DD:57:50:A9:A1:B4:00:24:C2:5A:EF:93:36:B5:14:C0:4E:3F Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Certificate serial: 199F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft Manifest number: 1989 Signing time: Sun 02 Nov 2025 16:24:10 +0000 Manifest this update: Sun 02 Nov 2025 16:24:09 +0000 Manifest next update: Sun 09 Nov 2025 16:24:09 +0000 Files and hashes: 1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: iiVs28OW1FcegHkoG1Dn1Z6hawhEmTUdqBb0r6vr9ns=) 2: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: 3hzCzmgLP0OteAC7KDBKKCAso9LvkCWYyHJfJCTMisY=) 3: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: NzsKwICfagzX9T3AahXgeWsHOEBVdu2eB1iizPCz1SA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6559 (0x199f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Validity Not Before: Nov 2 16:24:09 2025 GMT Not After : Nov 9 16:24:09 2025 GMT Subject: CN=690785aa-750e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:25:6c:35:f9:94:6c:0b:08:26:59:f2:66:ee: 88:80:df:fa:6e:4a:1b:bb:49:aa:85:28:54:5c:f9: 56:6c:3a:56:90:a6:80:14:02:7b:3d:f3:dd:18:88: 04:47:2b:e9:46:5e:75:e7:52:e5:9a:f9:3e:9f:7a: 63:85:65:63:3a:48:70:a9:7e:38:8f:e2:cb:76:d1: f2:83:64:9e:0b:74:10:8a:5a:7d:4b:8d:35:cb:36: 03:6e:ed:0f:47:a9:56:6c:d8:a8:da:74:7a:fd:13: 77:21:c6:f4:51:7b:91:dc:aa:33:93:e4:78:13:53: e8:8e:2a:65:6a:eb:27:1e:7b:20:a2:15:9d:4d:fb: 97:4f:0b:fa:0a:3d:68:1c:a5:ca:b9:b9:6a:36:87: 0e:2d:e7:29:84:54:b2:11:ba:97:c2:09:a8:60:04: af:61:8e:5c:aa:e1:28:39:f4:f1:1d:d3:e8:8d:44: a4:f0:12:a8:d4:1e:ef:ab:be:33:f5:ee:f7:da:ea: a4:44:07:da:b6:62:5f:12:34:27:c4:0d:7f:84:70: 4a:ec:08:5e:4a:6c:2a:5f:e3:3e:02:53:0c:27:ce: 73:c3:1e:96:5b:a5:33:fd:32:83:78:f6:b1:95:21: ba:22:51:f0:7a:d9:08:31:14:8d:c5:05:d0:6b:ca: 14:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AB:DD:57:50:A9:A1:B4:00:24:C2:5A:EF:93:36:B5:14:C0:4E:3F X509v3 Authority Key Identifier: keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:9c:b8:ef:8e:9c:ae:d9:ca:70:22:64:a2:7c:08:32:db:d6: f1:a6:6c:ec:75:8d:fa:7c:b9:b4:c9:9c:a1:ae:f8:3b:22:47: 59:3d:2e:79:3b:16:4a:11:39:74:a4:47:87:34:50:f4:78:a8: 8d:bb:e0:36:94:a5:a4:07:23:40:fd:1f:90:ec:c3:72:6b:d0: 55:7f:76:80:b7:f8:ae:1d:3d:ba:48:69:76:36:8e:a5:20:a6: 8a:f0:47:a8:b8:37:82:85:76:52:24:87:ec:ce:f1:d0:0b:ee: f0:af:0c:72:89:83:c0:33:de:e9:f9:7d:dd:79:b8:fa:05:7b: 9d:87:9b:64:f0:51:06:60:a6:dc:27:43:b6:aa:e3:0f:6e:7c: f0:af:d2:af:e9:7e:cd:41:d6:0f:6c:b5:85:b2:25:6a:5c:94: e7:38:c4:d9:1d:61:6b:32:1f:76:9d:84:39:0b:e8:56:96:d9: 6f:9e:bd:08:41:53:54:f6:0d:2a:30:5d:b5:05:6b:1b:34:0e: e2:70:6b:c9:81:d0:23:52:be:90:33:f9:07:c9:35:5e:d1:c6: fd:b0:b9:ac:73:3a:c2:56:a2:d1:e2:67:68:d4:66:ee:4e:c1: 2f:56:e3:a8:d2:4f:de:86:b5:a2:dc:70:cf:d4:83:5f:a4:b3: 2f:9f:83:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDFDNjJEQzFEODBDQkFCMDMwMzUzRTFGNTc0QjM2MDAx OThGQjZCNzEwHhcNMjUxMTAyMTYyNDA5WhcNMjUxMTA5MTYyNDA5WjAYMRYwFAYD VQQDEw02OTA3ODVhYS03NTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3CVsNfmUbAsIJlnyZu6IgN/6bkobu0mqhShUXPlWbDpWkKaAFAJ7PfPdGIgE RyvpRl5151Llmvk+n3pjhWVjOkhwqX44j+LLdtHyg2SeC3QQilp9S401yzYDbu0P R6lWbNio2nR6/RN3Icb0UXuR3Kozk+R4E1PojiplausnHnsgohWdTfuXTwv6Cj1o HKXKublqNocOLecphFSyEbqXwgmoYASvYY5cquEoOfTxHdPojUSk8BKo1B7vq74z 9e732uqkRAfatmJfEjQnxA1/hHBK7AheSmwqX+M+AlMMJ85zwx6WW6Uz/TKDePax lSG6IlHwetkIMRSNxQXQa8oUDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDar3VdQ qaG0ACTCWu+TNrUUwE4/MB8GA1UdIwQYMBaAFBxi3B2Ay6sDA1Ph9XSzYAGY+2tx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GRkZFQzExQTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3TURVLUgxZExOZ0Faajdh M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hHTGNIWURMcXdNRFUtSDFkTE5nQVpqN2EzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GRkZFQzExQTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3 TURVLUgxZExOZ0FaajdhM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANnLjvjpyu2cpwImSifAgy29bxpmzsdY36fLm0yZyhrvg7IkdZPS55 OxZKETl0pEeHNFD0eKiNu+A2lKWkByNA/R+Q7MNya9BVf3aAt/iuHT26SGl2No6l IKaK8EeouDeChXZSJIfszvHQC+7wrwxyiYPAM97p+X3debj6BXudh5tk8FEGYKbc J0O2quMPbnzwr9Kv6X7NQdYPbLWFsiVqXJTnOMTZHWFrMh92nYQ5C+hWltlvnr0I QVNU9g0qMF21BWsbNA7icGvJgdAjUr6QM/kHyTVe0cb9sLmsczrCVqLR4mdo1Gbu TsEvVuOo0k/ehrWi3HDP1INfpLMvn4PG -----END CERTIFICATE-----Generated at Tue Nov 4 01:02:47 2025 by rpki-client