$ rpki-client -vvf rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft File: g4a-hhvb220BZQh9wESgf6TU8Ik.mft (raw, json) Hash identifier: SiIUD9X+x5p7qLjW5QDIAdo58IEOvTKbEOP7svuNmA0= Subject key identifier: F5:1F:11:72:DC:73:FC:7C:2D:8D:7C:2B:41:DE:C7:77:A2:DE:2D:85 Authority key identifier: 83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 Certificate issuer: /CN=A918A996/serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Certificate serial: 01D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft Manifest number: 01BD Signing time: Sat 25 Oct 2025 06:37:22 +0000 Manifest this update: Sat 25 Oct 2025 06:37:22 +0000 Manifest next update: Sat 01 Nov 2025 06:37:22 +0000 Files and hashes: 1: g4a-hhvb220BZQh9wESgf6TU8Ik.crl (hash: JUocGhW777U+bT/BSEGINFuOgkx6WPKnLdbtFJfwLV0=) 2: 44CF316C29DA11EEAC070054C4F9AE02.roa (hash: 0HkSWoIqELp3ylHO6VoceHK/AkbpkOqVqSCheHiI6Uo=) 3: 046B33A4431C11EE8DDA391AC4F9AE02.roa (hash: n8VX91JedlAvIqLFu7Bl3QhQfuPAxDc2ekOd4lvr+ec=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 06:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 466 (0x1d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A996, serialNumber=8386BE861BDBDB6D0165087DC044A07FA4D4F089 Validity Not Before: Oct 25 06:37:22 2025 GMT Not After : Nov 1 06:37:22 2025 GMT Subject: CN=68fc7022-576c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:a1:d4:18:64:26:82:14:e6:8f:ff:04:78: bd:4a:16:78:d8:81:1d:2f:3e:b9:15:32:75:f6:09: 41:a6:4b:d4:34:ff:6e:8d:95:75:a6:d3:24:f6:39: 9e:52:60:c1:c2:a2:ee:41:c8:27:a7:9c:62:8d:54: fd:a0:51:a5:98:70:03:c6:ff:c0:98:b4:08:ec:40: 26:a9:03:5e:3d:9e:cf:b4:54:f6:43:06:c9:bf:37: 95:74:05:53:2c:39:22:e8:db:d1:0e:40:70:6b:ba: f0:f8:67:04:52:58:db:66:d8:39:d3:78:d9:59:17: 1f:34:8d:05:51:fa:ec:2e:2a:32:fa:30:1b:7b:e1: 8d:70:51:7a:59:53:40:37:63:22:b2:84:0a:fb:36: 3b:d4:08:aa:b2:d5:84:8f:40:e2:90:1b:60:b2:f7: 8a:1a:53:89:2b:90:e2:bb:0b:45:4a:3c:53:2b:9a: a7:60:ab:45:dd:d5:c0:14:b9:28:8c:75:a1:ca:c5: aa:9e:48:6d:ed:4e:33:b9:f7:b0:a1:c2:ef:20:22: 2a:d3:43:2d:5c:9d:0a:45:d4:93:33:f6:17:ba:d6: ac:0f:f6:eb:c7:5e:df:d7:f7:55:ac:6e:85:75:7d: 5a:54:ff:10:6f:49:08:90:b6:4e:d7:6e:8d:e0:74: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1F:11:72:DC:73:FC:7C:2D:8D:7C:2B:41:DE:C7:77:A2:DE:2D:85 X509v3 Authority Key Identifier: keyid:83:86:BE:86:1B:DB:DB:6D:01:65:08:7D:C0:44:A0:7F:A4:D4:F0:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g4a-hhvb220BZQh9wESgf6TU8Ik.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A996/32C68A5E279811EEBD8DC55FC4F9AE02/g4a-hhvb220BZQh9wESgf6TU8Ik.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:b4:ff:93:a7:11:77:7b:9f:6b:c5:1c:aa:89:2b:22:b8:61: 72:5e:64:3c:de:a0:b5:cd:34:77:93:3b:9e:e8:ac:54:8d:a5: d9:cb:c9:fe:c9:6b:6e:03:d5:38:e8:bc:cd:77:32:1d:be:9d: 0c:32:de:33:d3:32:0b:d8:03:6e:dd:37:82:7f:3b:9a:cb:be: 41:d2:1b:5c:2d:20:9d:bc:09:2c:77:c2:6b:89:59:2b:76:78: 41:d4:8b:c9:06:e6:50:c7:61:07:98:fc:fe:de:0e:b5:17:01: bb:04:01:43:3a:14:54:73:99:1e:95:24:ca:27:d1:c8:f3:c2: a6:95:89:df:d1:ae:9c:88:d7:51:44:22:cc:d9:3c:05:90:f4: 6c:aa:e9:e6:e2:13:e2:51:46:45:a2:2f:99:63:f6:a8:33:19: 51:00:bf:a3:16:ce:59:7b:2e:2f:d8:a4:77:fe:f8:3b:e3:cb: f4:47:92:5c:b1:d5:bf:42:02:db:eb:cd:31:72:4e:42:52:3d: 58:53:de:23:12:6c:e3:16:bb:c7:4b:00:4f:2c:55:a1:49:41: 9b:53:3e:b8:2c:82:d8:e8:75:db:7d:89:4c:f0:76:b4:d4:0a: d0:d8:b1:88:43:df:e3:ba:78:d7:da:78:02:60:d6:6a:70:5b: 74:ff:0c:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE5OTYxMTAvBgNVBAUTKDgzODZCRTg2MUJEQkRCNkQwMTY1MDg3REMwNDRBMDdG QTRENEYwODkwHhcNMjUxMDI1MDYzNzIyWhcNMjUxMTAxMDYzNzIyWjAYMRYwFAYD VQQDEw02OGZjNzAyMi01NzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzD2h1BhkJoIU5o//BHi9ShZ42IEdLz65FTJ19glBpkvUNP9ujZV1ptMk9jme UmDBwqLuQcgnp5xijVT9oFGlmHADxv/AmLQI7EAmqQNePZ7PtFT2QwbJvzeVdAVT LDki6NvRDkBwa7rw+GcEUljbZtg503jZWRcfNI0FUfrsLioy+jAbe+GNcFF6WVNA N2MisoQK+zY71AiqstWEj0DikBtgsveKGlOJK5DiuwtFSjxTK5qnYKtF3dXAFLko jHWhysWqnkht7U4zufewocLvICIq00MtXJ0KRdSTM/YXutasD/brx17f1/dVrG6F dX1aVP8Qb0kIkLZO126N4HTS6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPUfEXLc c/x8LY18K0Hex3ei3i2FMB8GA1UdIwQYMBaAFIOGvoYb29ttAWUIfcBEoH+k1PCJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTk5Ni8zMkM2OEE1RTI3 OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIyMEJaUWg5d0VTZ2Y2VFU4 SWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c0YS1oaHZiMjIwQlpRaDl3RVNnZjZUVThJay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTk5Ni8zMkM2OEE1RTI3OTgxMUVFQkQ4REM1NUZDNEY5QUUwMi9nNGEtaGh2YjIy MEJaUWg5d0VTZ2Y2VFU4SWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6tP+TpxF3e59rxRyqiSsiuGFyXmQ83qC1zTR3kzue6KxUjaXZy8n+ yWtuA9U46LzNdzIdvp0MMt4z0zIL2ANu3TeCfzuay75B0htcLSCdvAksd8JriVkr dnhB1IvJBuZQx2EHmPz+3g61FwG7BAFDOhRUc5kelSTKJ9HI88KmlYnf0a6ciNdR RCLM2TwFkPRsqunm4hPiUUZFoi+ZY/aoMxlRAL+jFs5Zey4v2KR3/vg748v0R5Jc sdW/QgLb680xck5CUj1YU94jEmzjFrvHSwBPLFWhSUGbUz64LILY6HXbfYlM8Ha0 1ArQ2LGIQ9/junjX2ngCYNZqcFt0/wz6 -----END CERTIFICATE-----Generated at Sat Oct 25 20:51:52 2025 by rpki-client