$ rpki-client -vvf rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft File: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft (raw, json) Hash identifier: mcaMNDi8EighV+RNUZqGEoo43wFI0/mAf4NYyUkUpmo= Subject key identifier: 04:40:C9:BC:67:A3:D1:E2:BD:B9:3A:B0:BF:B8:47:1B:8F:F2:9B:F5 Authority key identifier: DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 Certificate issuer: /CN=A919CAB7/serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Certificate serial: 06C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft Manifest number: 06BA Signing time: Wed 22 Oct 2025 23:03:33 +0000 Manifest this update: Wed 22 Oct 2025 23:03:33 +0000 Manifest next update: Wed 29 Oct 2025 23:03:33 +0000 Files and hashes: 1: 3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl (hash: jXfE26lAsILler1UlAqY/OYkggMDR9qOZ9wPhAT/794=) 2: ED905CE8CF6E11ED915AD729C4F9AE02.roa (hash: ZtaTFSSlx3BNPtl2NS8jj6tuefu3ipeS22qgxArYPSk=) 3: EECD7500CF6E11ED915AD729C4F9AE02.roa (hash: QFyNBVkrpqoC0f3paRUUMemxQInra+G6JMgWsjaRB8E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 23:03:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919CAB7, serialNumber=DC7381043E36433DBA6C8295321077A02E8E8787 Validity Not Before: Oct 22 23:03:33 2025 GMT Not After : Oct 29 23:03:33 2025 GMT Subject: CN=68f962c5-15e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:ea:4f:38:fa:21:48:b0:00:44:29:81:7d: 84:e3:12:f3:83:64:a1:19:cc:6b:9d:0e:45:0e:93: 6c:e4:c6:ff:61:f8:ad:ba:01:31:37:06:b0:b7:1f: 94:f0:96:8e:5f:00:2c:b2:c4:55:b5:a6:ba:d0:c4: 70:ad:a2:b3:71:dc:e2:0d:d3:ec:3b:bf:e2:e0:d3: 39:22:9f:85:b0:74:a2:8f:04:0f:3f:ac:08:f3:8a: 3c:35:bb:23:92:e5:53:46:74:de:64:9d:1c:3a:01: 2f:80:a3:97:5a:14:70:b4:c4:0b:c3:08:db:f2:35: c4:b0:b8:81:71:5f:dc:58:63:28:ad:2b:e3:0b:06: 63:74:85:a4:c3:3a:47:4d:6c:37:6d:79:dc:14:2a: 10:45:11:11:90:94:38:df:f2:28:7e:35:91:a8:d4: ba:e0:94:4f:19:6e:85:88:4a:73:95:96:13:9d:2d: 9d:59:c1:95:02:f7:f3:51:8f:41:11:cf:79:51:e9: 38:a0:aa:a2:8f:ce:ca:af:08:ff:64:0a:dd:8f:52: f5:0e:78:03:de:f5:be:7f:dd:56:d4:57:82:7d:ba: 11:5b:4f:22:fc:c7:a3:f4:cc:09:95:cb:ec:9d:53: 9a:77:12:28:70:b1:de:df:ed:da:f5:99:76:ac:80: 1f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:40:C9:BC:67:A3:D1:E2:BD:B9:3A:B0:BF:B8:47:1B:8F:F2:9B:F5 X509v3 Authority Key Identifier: keyid:DC:73:81:04:3E:36:43:3D:BA:6C:82:95:32:10:77:A0:2E:8E:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3HOBBD42Qz26bIKVMhB3oC6Oh4c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CAB7/64698BD47CD611EB9A2A606BC4F9AE02/3HOBBD42Qz26bIKVMhB3oC6Oh4c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:79:43:f5:ab:ea:76:c8:7e:02:cc:34:a1:47:f3:64:18:8b: 1a:4c:e8:c0:fe:70:ff:6c:f9:75:17:0b:8f:57:01:ab:88:26: 46:42:67:76:f2:76:14:68:05:c5:d6:76:a7:0c:d6:15:78:16: dc:68:96:ac:a4:7b:b6:ab:7a:17:9b:6f:2d:de:7f:e4:24:0f: 9a:ae:7f:58:f9:2a:20:98:c9:78:9a:08:d0:fa:73:ac:4a:5d: 8f:c7:5a:d2:ef:7b:6b:28:fc:9f:1e:dd:58:d1:37:b6:f8:73: 30:9a:84:c7:2c:c5:b5:45:06:2f:c7:65:4a:aa:54:ff:e9:e9: 55:4c:7a:0c:70:0d:f7:85:f3:4f:ec:c4:66:55:62:33:08:69: e8:ac:18:82:42:aa:81:60:b7:b2:ff:27:a6:30:c0:79:67:a8: 34:ab:00:39:56:f9:3f:2e:e5:f6:04:85:a3:93:29:72:88:41: 34:ab:ef:82:88:77:53:a4:c7:e3:7f:64:2e:06:25:77:20:ca: d4:76:4d:b8:20:3c:05:17:ef:9e:5f:9d:8e:dc:30:e7:42:ee: 12:e0:ac:e6:b6:a9:71:06:36:34:86:e1:4b:67:c8:8f:77:a8: 7d:96:c5:16:a6:25:43:05:55:e4:b7:96:b9:48:15:91:cc:8a: 2e:47:3b:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUNBQjcxMTAvBgNVBAUTKERDNzM4MTA0M0UzNjQzM0RCQTZDODI5NTMyMTA3N0Ew MkU4RTg3ODcwHhcNMjUxMDIyMjMwMzMzWhcNMjUxMDI5MjMwMzMzWjAYMRYwFAYD VQQDEw02OGY5NjJjNS0xNWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMjqTzj6IUiwAEQpgX2E4xLzg2ShGcxrnQ5FDpNs5Mb/YfitugExNwawtx+U 8JaOXwAsssRVtaa60MRwraKzcdziDdPsO7/i4NM5Ip+FsHSijwQPP6wI84o8Nbsj kuVTRnTeZJ0cOgEvgKOXWhRwtMQLwwjb8jXEsLiBcV/cWGMorSvjCwZjdIWkwzpH TWw3bXncFCoQRRERkJQ43/IofjWRqNS64JRPGW6FiEpzlZYTnS2dWcGVAvfzUY9B Ec95Uek4oKqij87Krwj/ZArdj1L1DngD3vW+f91W1FeCfboRW08i/Mej9MwJlcvs nVOadxIocLHe3+3a9Zl2rIAf6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARAybxn o9Hivbk6sL+4RxuP8pv1MB8GA1UdIwQYMBaAFNxzgQQ+NkM9umyClTIQd6AujoeH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Q0FCNy82NDY5OEJENDdD RDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6MjZiSUtWTWhCM29DNk9o NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNIT0JCRDQyUXoyNmJJS1ZNaEIzb0M2T2g0Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 Q0FCNy82NDY5OEJENDdDRDYxMUVCOUEyQTYwNkJDNEY5QUUwMi8zSE9CQkQ0MlF6 MjZiSUtWTWhCM29DNk9oNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKeUP1q+p2yH4CzDShR/NkGIsaTOjA/nD/bPl1FwuPVwGriCZGQmd2 8nYUaAXF1nanDNYVeBbcaJaspHu2q3oXm28t3n/kJA+arn9Y+SogmMl4mgjQ+nOs Sl2Px1rS73trKPyfHt1Y0Te2+HMwmoTHLMW1RQYvx2VKqlT/6elVTHoMcA33hfNP 7MRmVWIzCGnorBiCQqqBYLey/yemMMB5Z6g0qwA5Vvk/LuX2BIWjkylyiEE0q++C iHdTpMfjf2QuBiV3IMrUdk24IDwFF++eX52O3DDnQu4S4KzmtqlxBjY0huFLZ8iP d6h9lsUWpiVDBVXkt5a5SBWRzIouRzvw -----END CERTIFICATE-----Generated at Fri Oct 24 03:37:40 2025 by rpki-client