$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft File: hUw8jb_u2qy7OypCS1iyWaFMnws.mft (raw, json) Hash identifier: x5tP7GrnDMB1sOZTNRBqcfrfSdFhKYpuVex1vFBF6+I= Subject key identifier: 12:EA:38:45:E2:BE:6D:43:D6:5F:EE:88:F6:37:65:CF:BA:49:6D:9F Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B Certificate issuer: /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B Certificate serial: 021D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft Manifest number: 0212 Signing time: Mon 03 Nov 2025 02:18:53 +0000 Manifest this update: Mon 03 Nov 2025 02:18:52 +0000 Manifest next update: Mon 10 Nov 2025 02:18:52 +0000 Files and hashes: 1: hUw8jb_u2qy7OypCS1iyWaFMnws.crl (hash: IFOwHQmZqfUual9RFpfuVPlWk8b0lfpWci0kZ7kAuDs=) 2: 86312104899311F0ACB13D20C4F9AE02.roa (hash: IeMc/sZZnrV1a/m8gaYSwC2jZsyT84H1D6+PvUGsie8=) 3: CF4B4BC61E6411EF8AA5A942C4F9AE02.roa (hash: kzhQlx9+qX+tcsUYqFntEgfacYCnpt0zMHVXOQLV78s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:18:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 541 (0x21d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DBBF, serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B Validity Not Before: Nov 3 02:18:52 2025 GMT Not After : Nov 10 02:18:52 2025 GMT Subject: CN=6908110c-3e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:6b:45:6d:1c:35:7b:ef:1f:3d:bb:95:a5:ea: d7:47:c6:69:49:fc:f7:39:d8:c6:42:cf:e3:ab:f2: e2:87:6f:57:c7:31:f7:19:a2:2e:84:9d:41:61:0c: 01:48:30:b2:e9:c8:ed:51:32:29:65:2e:96:fe:7d: 0b:fb:2c:66:8b:0a:ae:ff:69:60:8d:f9:62:07:df: 5a:5f:7c:b9:f1:fd:69:e5:8b:be:6d:9c:7e:6c:4c: f0:00:88:f8:49:5f:e3:7b:ce:01:78:44:4b:d9:a1: 18:ac:67:45:44:b0:c4:4c:55:9f:63:f3:ac:b8:a7: 61:f1:88:06:ea:96:99:62:4f:10:e6:8b:c9:08:91: d9:83:2a:ae:d4:6b:61:74:de:2f:05:8b:83:4e:db: c9:7f:c3:aa:ab:fd:c3:aa:cc:49:6f:82:00:58:ec: a3:82:cb:9d:e0:6a:e7:f2:f6:fd:cf:f7:b7:84:2b: 68:ac:1a:38:30:4f:14:76:86:00:35:02:c2:38:63: b9:bf:ef:3f:52:2e:34:52:60:03:c9:bc:f8:21:f1: f3:b3:d0:1f:4e:f4:2f:5d:91:3a:94:27:0b:da:47: 2d:df:c1:1e:c4:44:99:d9:b0:b5:db:c9:0e:77:68: 8d:e4:10:3e:86:42:02:0b:a6:74:ff:fc:f0:a7:23: 7c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EA:38:45:E2:BE:6D:43:D6:5F:EE:88:F6:37:65:CF:BA:49:6D:9F X509v3 Authority Key Identifier: keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:66:9c:85:58:9c:01:23:2f:a3:02:8b:9f:7c:a4:ba:f5:44: ef:1c:42:d9:e5:a0:32:8c:7a:7f:ce:d9:35:e2:f9:dd:99:94: 27:1e:6a:fa:15:96:62:1f:7c:64:26:68:32:82:22:a0:ca:2a: be:d5:1f:92:bd:aa:da:66:29:61:da:dd:13:40:70:b5:96:b8: ec:92:f5:3b:ef:d4:23:a8:e7:6b:f4:10:56:f1:c3:d7:92:00: 7e:29:41:4f:7f:73:7e:89:51:a1:5b:74:44:d0:22:79:30:cc: 36:b6:31:1b:a7:28:09:6d:5c:dc:25:b3:05:1b:4e:d3:15:e4: fa:73:99:45:99:4c:24:3c:77:ee:26:06:ea:0d:f0:59:b3:92: 9a:77:6f:f1:22:7a:62:79:02:9d:02:ed:86:82:48:64:03:3f: 85:83:fd:fb:f7:b8:83:a7:af:4b:c6:8a:7f:48:05:64:1a:0a: c8:8f:c9:ad:fe:52:61:b0:37:b2:a7:b7:75:eb:a7:ec:91:51: 6e:ae:94:09:30:a6:47:6b:22:ed:8c:48:a3:87:3e:37:de:d3: 4a:2b:a3:b4:46:b3:47:3b:80:ab:16:88:f6:cb:a0:81:f3:e5: 65:b7:b0:44:3c:c5:0d:98:2c:44:5b:45:bb:d3:3f:96:af:fa: c9:86:ac:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OURCQkYxMTAvBgNVBAUTKDg1NEMzQzhEQkZFRURBQUNCQjNCMkE0MjRCNThCMjU5 QTE0QzlGMEIwHhcNMjUxMTAzMDIxODUyWhcNMjUxMTEwMDIxODUyWjAYMRYwFAYD VQQDEw02OTA4MTEwYy0zZTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA/WtFbRw1e+8fPbuVperXR8ZpSfz3OdjGQs/jq/Lih29XxzH3GaIuhJ1BYQwB SDCy6cjtUTIpZS6W/n0L+yxmiwqu/2lgjfliB99aX3y58f1p5Yu+bZx+bEzwAIj4 SV/je84BeERL2aEYrGdFRLDETFWfY/OsuKdh8YgG6paZYk8Q5ovJCJHZgyqu1Gth dN4vBYuDTtvJf8Oqq/3DqsxJb4IAWOyjgsud4Grn8vb9z/e3hCtorBo4ME8UdoYA NQLCOGO5v+8/Ui40UmADybz4IfHzs9AfTvQvXZE6lCcL2kct38EexESZ2bC128kO d2iN5BA+hkICC6Z0//zwpyN80QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBLqOEXi vm1D1l/uiPY3Zc+6SW2fMB8GA1UdIwQYMBaAFIVMPI2/7tqsuzsqQktYslmhTJ8L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REJCRi9CNTk1QTY2ODlC RjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJxeTdPeXBDUzFpeVdhRk1u d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVdzhqYl91MnF5N095cENTMWl5V2FGTW53cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REJCRi9CNTk1QTY2ODlCRjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJx eTdPeXBDUzFpeVdhRk1ud3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHZpyFWJwBIy+jAouffKS69UTvHELZ5aAyjHp/ztk14vndmZQnHmr6 FZZiH3xkJmgygiKgyiq+1R+SvaraZilh2t0TQHC1lrjskvU779QjqOdr9BBW8cPX kgB+KUFPf3N+iVGhW3RE0CJ5MMw2tjEbpygJbVzcJbMFG07TFeT6c5lFmUwkPHfu JgbqDfBZs5Kad2/xInpieQKdAu2GgkhkAz+Fg/3797iDp69Lxop/SAVkGgrIj8mt /lJhsDeyp7d166fskVFurpQJMKZHayLtjEijhz433tNKK6O0RrNHO4CrFoj2y6CB 8+Vlt7BEPMUNmCxEW0W70z+Wr/rJhqwh -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:16 2025 by rpki-client