$ rpki-client -vvf rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft File: HQDCg8qhqzzENxoqOE1isc1E-6c.mft (raw, json) Hash identifier: wKL6zsWcUBtgiwdoNaAOos0Tl56wjB46beYTqKMG/QA= Subject key identifier: 02:27:57:7F:DB:CE:49:2E:1F:A9:BF:EA:AA:3E:75:5B:9E:8A:9C:B1 Authority key identifier: 1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 Certificate issuer: /CN=A912F387/serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft Manifest number: 017D Signing time: Wed 05 Nov 2025 03:59:10 +0000 Manifest this update: Wed 05 Nov 2025 03:59:09 +0000 Manifest next update: Wed 12 Nov 2025 03:59:09 +0000 Files and hashes: 1: HQDCg8qhqzzENxoqOE1isc1E-6c.crl (hash: YSu73wmg/5cSkfA69/NYsFyD6g2fakvrBiiKmEWwWFc=) 2: 9556705A2E6111EF9D743040C4F9AE02.roa (hash: RLnLzyrrcNZhWSbOgsksg70plHnwm/0y4IiOT7XePHI=) 3: FC34967C6C8611EFBF35D221C4F9AE02.roa (hash: g3qVGTL6N3Bx7PoU5ChuYFlVdWGCksOpw5qXnk0J/9I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912F387, serialNumber=1D00C283CAA1AB3CC4371A2A384D62B1CD44FBA7 Validity Not Before: Nov 5 03:59:09 2025 GMT Not After : Nov 12 03:59:09 2025 GMT Subject: CN=690acb8e-6ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e3:80:0c:0c:b5:d2:2a:b2:d8:e1:58:83:84: c6:ce:31:23:20:e7:f7:eb:1e:98:4d:0d:92:35:29: 93:3c:94:5b:49:fd:c0:66:d4:d3:f8:dd:a2:b6:d6: a1:52:7c:cf:41:db:6a:95:56:c6:12:25:b3:b0:9e: da:3f:d2:ca:1a:cf:3e:f8:8a:b9:53:f4:77:0a:de: df:1e:72:cd:f7:70:66:0d:99:f5:c6:82:c2:d1:de: a1:f0:8c:71:27:49:22:5e:dc:a5:0a:cf:ce:a1:77: 0d:c0:0d:40:b4:de:49:e6:83:d3:09:57:a5:cc:89: 7e:75:f5:d1:42:75:f7:9d:8a:40:f4:2c:f7:47:fa: 47:48:df:82:6d:58:42:48:60:db:2c:f4:5c:7b:c5: 54:7e:e4:ec:8d:94:54:a4:d9:09:a3:34:e1:0a:52: 87:01:c6:41:21:ce:40:c5:6a:6c:bb:04:b3:43:4f: f3:19:77:12:f0:16:8d:16:84:e8:2b:c7:a6:ee:a4: a5:4e:bc:14:f9:56:6e:63:53:d3:c2:41:28:2f:5a: a5:39:aa:82:f3:86:84:11:1e:0d:ad:ad:9c:54:0d: 79:26:b3:20:78:79:73:aa:42:b1:b0:aa:cb:76:b0: ab:ba:a2:bb:95:e6:60:10:ff:56:39:d4:5b:16:6b: e1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:27:57:7F:DB:CE:49:2E:1F:A9:BF:EA:AA:3E:75:5B:9E:8A:9C:B1 X509v3 Authority Key Identifier: keyid:1D:00:C2:83:CA:A1:AB:3C:C4:37:1A:2A:38:4D:62:B1:CD:44:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HQDCg8qhqzzENxoqOE1isc1E-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F387/5F3C849683A311EEA0B4281CC4F9AE02/HQDCg8qhqzzENxoqOE1isc1E-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:a9:39:a7:fb:9c:b9:31:7a:c0:9f:39:60:7b:49:d0:d8:db: f1:8d:09:de:ee:e2:d6:56:03:83:c8:fc:54:29:86:4c:cb:17: c6:0c:4d:fe:41:84:ed:b7:c3:d6:99:61:ef:e1:23:77:f0:b0: 90:75:08:6b:67:6e:be:c6:7e:2b:79:24:60:e1:8d:3a:3b:af: 4d:d2:1a:e7:da:ea:2c:8c:48:cf:2a:be:25:5b:6b:bd:c0:c1: 1e:c5:ce:4e:39:62:91:de:83:df:89:76:1e:9b:c3:4d:e3:d4: 9c:12:97:5d:19:b5:74:7f:e0:9e:80:09:92:9c:c0:c7:03:f6: 10:31:67:9e:26:8f:fa:95:61:7d:0b:ce:d1:75:2d:da:bd:d0: 0c:6d:d6:4d:70:35:0f:a6:25:27:dc:2f:7b:01:53:92:7b:af: 37:90:97:66:75:fb:b4:df:a5:28:3e:02:ff:e4:5e:73:45:89: 50:40:5f:0b:d7:17:c0:43:d3:47:f2:20:96:f5:5d:14:65:e2: 43:8b:bd:18:bd:a7:e0:09:a9:98:2a:94:ea:98:45:0d:8a:f3: 34:02:70:d0:45:d8:42:75:13:6e:97:44:a4:1d:f2:4b:37:3e: 44:98:9d:e7:25:9e:fb:26:26:9f:cf:b3:6a:25:e1:c1:12:24: 5d:65:99:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkYzODcxMTAvBgNVBAUTKDFEMDBDMjgzQ0FBMUFCM0NDNDM3MUEyQTM4NEQ2MkIx Q0Q0NEZCQTcwHhcNMjUxMTA1MDM1OTA5WhcNMjUxMTEyMDM1OTA5WjAYMRYwFAYD VQQDEw02OTBhY2I4ZS02YWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo+OADAy10iqy2OFYg4TGzjEjIOf36x6YTQ2SNSmTPJRbSf3AZtTT+N2ittah UnzPQdtqlVbGEiWzsJ7aP9LKGs8++Iq5U/R3Ct7fHnLN93BmDZn1xoLC0d6h8Ixx J0kiXtylCs/OoXcNwA1AtN5J5oPTCVelzIl+dfXRQnX3nYpA9Cz3R/pHSN+CbVhC SGDbLPRce8VUfuTsjZRUpNkJozThClKHAcZBIc5AxWpsuwSzQ0/zGXcS8BaNFoTo K8em7qSlTrwU+VZuY1PTwkEoL1qlOaqC84aEER4Nra2cVA15JrMgeHlzqkKxsKrL drCruqK7leZgEP9WOdRbFmvhKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAInV3/b zkkuH6m/6qo+dVueipyxMB8GA1UdIwQYMBaAFB0AwoPKoas8xDcaKjhNYrHNRPun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRjM4Ny81RjNDODQ5Njgz QTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6ekVOeG9xT0UxaXNjMUUt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hRRENnOHFocXp6RU54b3FPRTFpc2MxRS02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RjM4Ny81RjNDODQ5NjgzQTMxMUVFQTBCNDI4MUNDNEY5QUUwMi9IUURDZzhxaHF6 ekVOeG9xT0UxaXNjMUUtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzqTmn+5y5MXrAnzlge0nQ2NvxjQne7uLWVgODyPxUKYZMyxfGDE3+ QYTtt8PWmWHv4SN38LCQdQhrZ26+xn4reSRg4Y06O69N0hrn2uosjEjPKr4lW2u9 wMEexc5OOWKR3oPfiXYem8NN49ScEpddGbV0f+CegAmSnMDHA/YQMWeeJo/6lWF9 C87RdS3avdAMbdZNcDUPpiUn3C97AVOSe683kJdmdfu036UoPgL/5F5zRYlQQF8L 1xfAQ9NH8iCW9V0UZeJDi70YvafgCamYKpTqmEUNivM0AnDQRdhCdRNul0SkHfJL Nz5EmJ3nJZ77Jiafz7NqJeHBEiRdZZkJ -----END CERTIFICATE-----Generated at Thu Nov 6 00:38:56 2025 by rpki-client