$ rpki-client -vvf rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft File: HsQsG2nhb183xz2Bv5-rH0ukIyk.mft (raw, json) Hash identifier: IjOpOR9QtlRzq/BdNRtgw2CpN3QAj7t3QSnVKoFY5TE= Subject key identifier: 9A:92:30:D3:36:38:52:21:D9:38:70:1A:B1:5C:D4:DC:6E:AD:04:CC Authority key identifier: 1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 Certificate issuer: /CN=A918C661/serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Certificate serial: 0ACA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft Manifest number: 0A68 Signing time: Wed 22 Oct 2025 20:30:28 +0000 Manifest this update: Wed 22 Oct 2025 20:30:28 +0000 Manifest next update: Wed 29 Oct 2025 20:30:28 +0000 Files and hashes: 1: HsQsG2nhb183xz2Bv5-rH0ukIyk.crl (hash: ykudXAbRz7LdZgC+dwZNfkes/rZO56Uz/42VHBFJYfY=) 2: A81364AC4B0611EF91534014C4F9AE02.roa (hash: w/5bZBiXDjvqgxnP7qfHyeDTFEoVXi8DgwG0C4ccn5Q=) 3: D9AFDBC2400111EFBB30C475C4F9AE02.roa (hash: Ve3ejv62M16tRhsxP6f89AusOlZpUFORwV+rrPuD1sg=) 4: 73DC26744B0611EF8698EB13C4F9AE02.roa (hash: ybrtkQR3uxqIC7ty9/ANRKrx+CuUtT0biIda1i5SZAg=) 5: B8D18508EDE011EF88407251C4F9AE02.roa (hash: 7FKsDT71I8DwEjcBpbCZQH8HmSgZkJ2Kdkp2VjtHRzA=) 6: 6C68485C5A1D11EFA9989052C4F9AE02.roa (hash: eMC9itpv3oFgg3wC16WZV3uYeAr5DZklaR+zjZUUL1Q=) 7: A7A72BF24B0611EF91534014C4F9AE02.roa (hash: 5X86twqvrwj9rAMXwE7dxiHPJmnmzTIw/q2mjxKYTMU=) 8: D42F0D06B51611EEADC7924BC4F9AE02.roa (hash: 74YlPjSTLEaBRhMrN5akas7kNpehqYE1ysoQhZlJDuM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 20:30:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2762 (0xaca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918C661, serialNumber=1EC42C1B69E16F5F37C73D81BF9FAB1F4BA42329 Validity Not Before: Oct 22 20:30:28 2025 GMT Not After : Oct 29 20:30:28 2025 GMT Subject: CN=68f93ee4-be28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:6d:bd:f0:1a:60:cb:10:14:ef:8a:93:b4: 50:dc:5b:b4:7d:79:78:31:90:20:12:94:56:c7:b3: 5a:c4:c4:a2:ad:f2:a6:e6:a4:81:08:83:25:f7:4e: 96:d9:58:02:79:f9:dd:27:d7:4f:e9:2f:f5:6f:f7: c4:36:01:18:d1:32:82:6c:0d:04:b0:66:25:d6:0a: e7:88:8c:d2:fc:06:c4:c4:f1:98:51:21:40:58:72: d4:46:17:3b:d3:30:03:63:5e:5e:ca:16:3b:56:83: 94:aa:8e:00:f4:bb:77:71:50:5e:ff:21:62:0b:ac: 8e:fd:a8:9a:39:ad:ff:3b:20:38:73:90:65:a2:86: 50:f5:4e:38:c6:7e:58:5e:05:8f:fc:f9:15:ce:4f: de:6b:09:fc:53:c1:20:9f:b1:80:b9:af:fc:4c:5a: 5c:c7:86:90:10:09:5a:60:fb:d1:ee:df:62:3a:ad: 4b:c6:92:6a:fc:6e:2b:e8:40:25:3c:13:88:ba:d2: 24:2c:44:98:dd:17:22:95:49:b3:09:bf:3b:25:84: ba:e8:87:c5:41:2b:e1:fb:30:f2:46:3e:c4:7b:e1: 2d:62:3e:24:e0:f3:8e:70:59:40:ca:b4:4e:0e:9e: 40:49:54:83:44:d9:ef:4b:6d:60:d2:90:d3:4c:5a: 0a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:92:30:D3:36:38:52:21:D9:38:70:1A:B1:5C:D4:DC:6E:AD:04:CC X509v3 Authority Key Identifier: keyid:1E:C4:2C:1B:69:E1:6F:5F:37:C7:3D:81:BF:9F:AB:1F:4B:A4:23:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsQsG2nhb183xz2Bv5-rH0ukIyk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C661/0BBD9EA2836D11EAB4A2D76DC4F9AE02/HsQsG2nhb183xz2Bv5-rH0ukIyk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:71:04:70:00:67:aa:d7:d3:28:e6:d2:9f:7c:f0:47:3d:40: a0:81:3f:bc:70:9e:f6:b5:92:93:ab:a1:16:fb:eb:05:60:40: 00:7c:3a:e3:c7:fc:23:89:11:5f:29:09:1c:3a:d0:4e:42:c9: 88:fe:58:cf:f5:24:1b:d6:50:1e:f2:d5:52:a3:19:f4:c9:80: 9d:6d:5a:d2:63:fe:fc:db:0e:36:eb:99:be:75:8a:5f:f7:a2: 68:e3:8a:14:ec:50:a5:1c:35:cc:66:7a:5f:43:c6:ac:04:50: 56:0e:1e:69:ae:cf:e0:4c:a5:6b:25:0d:a3:13:be:51:24:8d: 2d:e9:64:9f:1e:84:bc:9d:8f:eb:81:83:3b:49:bf:a2:1e:48: c1:50:fc:25:d8:76:f9:95:67:53:12:72:e3:6f:b0:f8:76:5d: 69:bf:bf:20:37:7b:87:24:81:e5:c4:54:86:84:d9:12:6d:9b: 48:d8:4d:c9:6c:91:a8:17:e3:72:b8:66:45:7a:9f:3a:23:36: 69:c4:d3:e2:98:ab:93:d9:19:59:de:a1:4c:de:72:89:e6:1c: 58:a0:a3:20:77:57:39:c6:c4:3e:45:3f:e0:b5:87:b6:9a:37: 8e:32:29:02:17:45:6c:95:56:de:25:80:a5:66:a5:17:54:67: b4:42:64:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCsowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEM2NjExMTAvBgNVBAUTKDFFQzQyQzFCNjlFMTZGNUYzN0M3M0Q4MUJGOUZBQjFG NEJBNDIzMjkwHhcNMjUxMDIyMjAzMDI4WhcNMjUxMDI5MjAzMDI4WjAYMRYwFAYD VQQDEw02OGY5M2VlNC1iZTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrttvfAaYMsQFO+Kk7RQ3Fu0fXl4MZAgEpRWx7NaxMSirfKm5qSBCIMl906W 2VgCefndJ9dP6S/1b/fENgEY0TKCbA0EsGYl1grniIzS/AbExPGYUSFAWHLURhc7 0zADY15eyhY7VoOUqo4A9Lt3cVBe/yFiC6yO/aiaOa3/OyA4c5BlooZQ9U44xn5Y XgWP/PkVzk/eawn8U8Egn7GAua/8TFpcx4aQEAlaYPvR7t9iOq1LxpJq/G4r6EAl PBOIutIkLESY3RcilUmzCb87JYS66IfFQSvh+zDyRj7Ee+EtYj4k4POOcFlAyrRO Dp5ASVSDRNnvS21g0pDTTFoKZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqSMNM2 OFIh2ThwGrFc1NxurQTMMB8GA1UdIwQYMBaAFB7ELBtp4W9fN8c9gb+fqx9LpCMp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzY2MS8wQkJEOUVBMjgz NkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIxODN4ejJCdjUtckgwdWtJ eWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hzUXNHMm5oYjE4M3h6MkJ2NS1ySDB1a0l5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QzY2MS8wQkJEOUVBMjgzNkQxMUVBQjRBMkQ3NkRDNEY5QUUwMi9Ic1FzRzJuaGIx ODN4ejJCdjUtckgwdWtJeWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZcQRwAGeq19Mo5tKffPBHPUCggT+8cJ72tZKTq6EW++sFYEAAfDrj x/wjiRFfKQkcOtBOQsmI/ljP9SQb1lAe8tVSoxn0yYCdbVrSY/782w4265m+dYpf 96Jo44oU7FClHDXMZnpfQ8asBFBWDh5prs/gTKVrJQ2jE75RJI0t6WSfHoS8nY/r gYM7Sb+iHkjBUPwl2Hb5lWdTEnLjb7D4dl1pv78gN3uHJIHlxFSGhNkSbZtI2E3J bJGoF+NyuGZFep86IzZpxNPimKuT2RlZ3qFM3nKJ5hxYoKMgd1c5xsQ+RT/gtYe2 mjeOMikCF0VslVbeJYClZqUXVGe0QmRH -----END CERTIFICATE-----Generated at Fri Oct 24 20:50:26 2025 by rpki-client