$ rpki-client -vvf rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft File: HXJckcDUci80AIjRN03S2vN9gxI.mft (raw, json) Hash identifier: re/79aG0pv+x7JM6jGFf81XLaGzwedmN26IOycqM+ws= Subject key identifier: 9F:E7:B5:A2:A7:AC:F6:AE:CD:2A:CE:05:2F:7B:FD:7C:50:4A:82:1C Authority key identifier: 1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 Certificate issuer: /CN=A9119508/serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Certificate serial: 066F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft Manifest number: 064C Signing time: Tue 04 Nov 2025 22:44:55 +0000 Manifest this update: Tue 04 Nov 2025 22:44:55 +0000 Manifest next update: Tue 11 Nov 2025 22:44:55 +0000 Files and hashes: 1: HXJckcDUci80AIjRN03S2vN9gxI.crl (hash: hNI9WTxCCT9pUFhfo282QzL4erLkYUn6knlZKAoSYSQ=) 2: 6DD1144AACC311EBA28FAD5FC4F9AE02.roa (hash: WmyJmw5Mihv9A2JQO2xOhy7URLFfnvxzxKThl7eGoxs=) 3: 6E9FF116ACC311EBA28FAD5FC4F9AE02.roa (hash: +Kdj0gKuBf0PY5h283LzyQmY9m+afZnjRv+cn+9Qh6s=) 4: 6C9FD6BAACC311EBA28FAD5FC4F9AE02.roa (hash: bx+K75Qji7U/L3EOHI9zaUJ5yAV9kmoLl7pZd625FIc=) 5: 6BEA61CCACC311EBA28FAD5FC4F9AE02.roa (hash: NFCDhwk26+PLfvWvLWF4LR17BmkncUJCTi9+94vSI6k=) 6: 6D407F66ACC311EBA28FAD5FC4F9AE02.roa (hash: knpLwXQdC9MTp1jnTgeGf5Z4M6oM8mDDcMnK1p/I7B0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1647 (0x66f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119508, serialNumber=1D725C91C0D4722F340088D1374DD2DAF37D8312 Validity Not Before: Nov 4 22:44:55 2025 GMT Not After : Nov 11 22:44:55 2025 GMT Subject: CN=690a81e7-7d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b2:c1:a6:af:60:c8:d0:72:60:82:c7:c8:6a: e5:ff:50:f2:88:0f:ca:bd:8b:63:e9:d0:a6:13:e0: 0d:d7:70:9b:90:4c:05:9f:68:09:82:03:a0:40:8f: d3:c2:90:11:ff:40:ee:0b:54:9e:75:d9:fd:79:a0: 2b:b8:7c:a9:bc:a0:54:b8:11:e5:b6:9d:46:25:ec: a6:51:ee:ac:5b:9e:d9:ce:97:9d:31:a3:43:5c:dc: 10:90:1d:b2:6d:61:f8:be:e7:3e:99:b9:8a:58:1f: 41:d2:f7:27:37:d7:7e:55:82:34:5a:7b:4a:3c:1b: a7:af:b7:86:37:7d:50:d1:69:2a:1d:10:a7:59:1c: 79:35:0b:15:8a:6c:d3:ad:22:03:6f:68:9f:4b:00: ed:73:bb:96:8e:d5:4a:ac:f1:e1:c9:bc:76:b8:40: d1:95:80:70:84:4a:d8:f8:fe:43:21:4b:f0:19:df: 00:ce:b4:42:62:c3:16:d7:8d:58:d8:57:59:a6:84: 06:4c:30:07:fe:3c:c3:f9:15:c3:e9:6c:5b:3f:bc: 31:c6:a1:46:85:86:68:cc:53:05:4c:f8:b3:fe:85: 3e:1b:17:a5:51:b1:96:e7:39:c7:aa:02:98:f9:75: 5a:0d:ac:97:3c:e9:e8:a0:2c:3f:1e:24:29:99:65: cf:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E7:B5:A2:A7:AC:F6:AE:CD:2A:CE:05:2F:7B:FD:7C:50:4A:82:1C X509v3 Authority Key Identifier: keyid:1D:72:5C:91:C0:D4:72:2F:34:00:88:D1:37:4D:D2:DA:F3:7D:83:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HXJckcDUci80AIjRN03S2vN9gxI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119508/00020272ACC211EBABE1955EC4F9AE02/HXJckcDUci80AIjRN03S2vN9gxI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:16:af:22:7e:f6:bd:95:ba:53:21:25:58:46:93:e9:7c:73: 8f:5e:de:67:91:cb:50:aa:3d:52:52:29:41:3b:df:2f:4c:eb: e5:cd:9c:24:51:c2:cb:8b:59:f7:54:2d:b1:4b:e4:04:7b:b3: 3b:64:8b:97:97:6e:c7:cd:c0:88:84:91:ef:bb:81:f2:bf:ff: 96:ea:32:0e:30:43:2a:34:fb:88:61:55:b7:01:4c:6d:a9:96: 73:ac:71:52:84:54:47:52:3d:49:12:46:fb:da:79:7d:0c:b2: 95:4d:cb:6d:25:90:14:40:40:11:6b:e9:2b:1d:20:93:e6:ac: ab:c3:2a:f1:08:a1:1c:78:f6:8b:a0:dd:32:46:00:dd:85:c2: a0:ec:87:4a:ce:28:e0:89:49:33:7c:d9:c5:7f:dd:d1:72:ca: 5a:1b:e4:60:88:f3:88:78:3e:10:a1:f8:a6:cc:f4:3a:b4:9e: cc:2b:ef:6a:41:91:f4:58:6d:1f:a5:b4:6a:ab:8f:d8:7e:02: aa:ab:e8:40:a2:31:b7:f4:e5:a4:3d:19:07:ec:8f:50:1d:4a: 32:34:a5:9b:8e:a2:6d:44:20:f3:c3:96:47:6f:2e:30:b1:d8: 07:81:26:ab:25:a4:75:ca:ce:41:55:c3:81:f2:28:ae:f3:e1: 4e:d7:41:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1MDgxMTAvBgNVBAUTKDFENzI1QzkxQzBENDcyMkYzNDAwODhEMTM3NEREMkRB RjM3RDgzMTIwHhcNMjUxMTA0MjI0NDU1WhcNMjUxMTExMjI0NDU1WjAYMRYwFAYD VQQDEw02OTBhODFlNy03ZDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrLBpq9gyNByYILHyGrl/1DyiA/KvYtj6dCmE+AN13CbkEwFn2gJggOgQI/T wpAR/0DuC1Seddn9eaAruHypvKBUuBHltp1GJeymUe6sW57ZzpedMaNDXNwQkB2y bWH4vuc+mbmKWB9B0vcnN9d+VYI0WntKPBunr7eGN31Q0WkqHRCnWRx5NQsVimzT rSIDb2ifSwDtc7uWjtVKrPHhybx2uEDRlYBwhErY+P5DIUvwGd8AzrRCYsMW141Y 2FdZpoQGTDAH/jzD+RXD6WxbP7wxxqFGhYZozFMFTPiz/oU+GxelUbGW5znHqgKY +XVaDayXPOnooCw/HiQpmWXPawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/ntaKn rPauzSrOBS97/XxQSoIcMB8GA1UdIwQYMBaAFB1yXJHA1HIvNACI0TdN0trzfYMS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTUwOC8wMDAyMDI3MkFD QzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNpODBBSWpSTjAzUzJ2Tjln eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hYSmNrY0RVY2k4MEFJalJOMDNTMnZOOWd4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTUwOC8wMDAyMDI3MkFDQzIxMUVCQUJFMTk1NUVDNEY5QUUwMi9IWEpja2NEVWNp ODBBSWpSTjAzUzJ2TjlneEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmFq8ifva9lbpTISVYRpPpfHOPXt5nkctQqj1SUilBO98vTOvlzZwk UcLLi1n3VC2xS+QEe7M7ZIuXl27HzcCIhJHvu4Hyv/+W6jIOMEMqNPuIYVW3AUxt qZZzrHFShFRHUj1JEkb72nl9DLKVTcttJZAUQEARa+krHSCT5qyrwyrxCKEcePaL oN0yRgDdhcKg7IdKzijgiUkzfNnFf93RcspaG+RgiPOIeD4QofimzPQ6tJ7MK+9q QZH0WG0fpbRqq4/YfgKqq+hAojG39OWkPRkH7I9QHUoyNKWbjqJtRCDzw5ZHby4w sdgHgSarJaR1ys5BVcOB8iiu8+FO10HD -----END CERTIFICATE-----Generated at Wed Nov 5 05:12:51 2025 by rpki-client