$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft File: HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft (raw, json) Hash identifier: lrDGlObu4O68mOWHlv8y0/aT9Hvrdx6sjKJuK8oJ1YY= Subject key identifier: C5:6C:AF:13:E6:D6:A6:47:E1:AD:A8:9F:F7:3E:F8:99:59:F7:74:D3 Authority key identifier: 1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 Certificate issuer: /CN=A916ED18/serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Certificate serial: 19A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft Manifest number: 198A Signing time: Tue 04 Nov 2025 16:29:24 +0000 Manifest this update: Tue 04 Nov 2025 16:29:23 +0000 Manifest next update: Tue 11 Nov 2025 16:29:23 +0000 Files and hashes: 1: HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl (hash: /kuiUh6dy+CY1BrsqzkcFZelZNNJNma2T8Vqsib7NPc=) 2: BE8F165C873111E9AA82EC27C4F9AE02.roa (hash: 3hzCzmgLP0OteAC7KDBKKCAso9LvkCWYyHJfJCTMisY=) 3: 9C1DF7FC434311ECBE4BAA38C4F9AE02.roa (hash: NzsKwICfagzX9T3AahXgeWsHOEBVdu2eB1iizPCz1SA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:29:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6560 (0x19a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916ED18, serialNumber=1C62DC1D80CBAB030353E1F574B3600198FB6B71 Validity Not Before: Nov 4 16:29:23 2025 GMT Not After : Nov 11 16:29:23 2025 GMT Subject: CN=690a29e4-aa71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:51:87:74:2a:54:c5:97:86:c8:01:8b:02: 30:3b:52:52:c3:5e:6f:26:c6:2d:54:04:7a:97:71: 3a:9a:ac:c9:66:c5:0a:02:dc:66:29:aa:22:62:be: 87:66:a8:24:82:b0:2b:ac:31:83:b8:94:ab:d5:e2: ae:bd:0e:14:c1:d1:af:68:cf:30:85:17:05:f1:9c: ec:2b:fb:52:9f:fe:d7:4a:bd:c4:11:1a:2d:3c:0d: 74:4f:0a:d9:e2:fe:4d:16:24:98:18:81:9f:54:35: 05:35:98:bc:06:43:88:f7:02:d2:92:a8:74:4b:5b: fc:ae:d2:4c:9c:15:a0:bd:d4:1c:c1:b1:1b:ef:6b: 4e:49:07:69:f8:20:7f:14:8b:c7:7e:8c:89:20:a0: 0b:d5:6b:42:5b:f5:ea:dd:60:82:ac:3e:00:84:98: 58:77:b5:84:68:0c:8f:32:2f:f9:7a:ed:05:e3:71: 72:47:96:3b:81:7c:04:b6:77:d3:e4:10:8d:95:60: f4:7b:5b:6d:2f:56:40:47:61:f5:8a:b5:31:28:d4: 00:50:fe:a9:ab:2d:c6:4c:db:31:d3:5d:56:4a:0e: 6a:b7:05:18:d4:e1:e9:c6:15:81:c6:e3:ce:eb:fd: d0:33:05:dc:f0:d7:6e:4e:c0:aa:40:13:9e:4c:30: 5a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6C:AF:13:E6:D6:A6:47:E1:AD:A8:9F:F7:3E:F8:99:59:F7:74:D3 X509v3 Authority Key Identifier: keyid:1C:62:DC:1D:80:CB:AB:03:03:53:E1:F5:74:B3:60:01:98:FB:6B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HGLcHYDLqwMDU-H1dLNgAZj7a3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED18/FFFEC11A7AF811E7898A6F2EC4F9AE02/HGLcHYDLqwMDU-H1dLNgAZj7a3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:c0:19:6e:69:cc:0f:bf:fa:93:47:2e:14:c9:4c:e1:2d:d6: 58:07:25:b2:cd:79:d2:50:32:c4:d6:8d:a5:77:62:a6:b7:23: f2:c6:5c:78:f1:93:69:61:7c:d6:a5:72:bf:a5:1b:1f:5f:2b: 0d:79:c8:b3:b6:3f:49:11:5e:c2:3c:bc:f1:92:90:b5:74:9e: 6b:21:3c:99:99:be:d7:c2:a5:99:16:0b:4a:56:4f:48:0f:db: 1a:40:ec:b0:ae:9a:6a:9e:c7:02:92:93:99:86:a8:f6:91:88: db:dc:3a:3f:1a:61:05:a3:5b:eb:76:cd:d7:2b:52:76:82:1c: 58:7e:f7:2e:44:90:a4:d3:4a:d4:fe:cc:8a:2a:f7:7a:80:2b: 5d:1f:99:61:34:0d:41:ab:0b:99:5e:0a:38:b4:9f:e8:12:58: 17:b7:01:e4:77:29:18:02:d0:d3:f0:e2:e0:51:02:ba:82:3a: e3:ef:a7:40:fd:d5:c3:cc:03:00:22:f8:76:08:24:6c:c2:d1: 82:c8:eb:b4:a6:15:65:19:01:55:71:05:89:db:4d:b3:10:7f: 0d:ab:20:5e:9b:62:a4:05:a2:4c:cd:44:6b:be:00:25:7f:7b: b8:88:4a:ea:89:c7:41:f0:63:d3:54:6e:03:1d:6e:73:4c:8c: 48:3d:e0:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkVEMTgxMTAvBgNVBAUTKDFDNjJEQzFEODBDQkFCMDMwMzUzRTFGNTc0QjM2MDAx OThGQjZCNzEwHhcNMjUxMTA0MTYyOTIzWhcNMjUxMTExMTYyOTIzWjAYMRYwFAYD VQQDEw02OTBhMjllNC1hYTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAutxRh3QqVMWXhsgBiwIwO1JSw15vJsYtVAR6l3E6mqzJZsUKAtxmKaoiYr6H ZqgkgrArrDGDuJSr1eKuvQ4UwdGvaM8whRcF8ZzsK/tSn/7XSr3EERotPA10TwrZ 4v5NFiSYGIGfVDUFNZi8BkOI9wLSkqh0S1v8rtJMnBWgvdQcwbEb72tOSQdp+CB/ FIvHfoyJIKAL1WtCW/Xq3WCCrD4AhJhYd7WEaAyPMi/5eu0F43FyR5Y7gXwEtnfT 5BCNlWD0e1ttL1ZAR2H1irUxKNQAUP6pqy3GTNsx011WSg5qtwUY1OHpxhWBxuPO 6/3QMwXc8NduTsCqQBOeTDBavQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVsrxPm 1qZH4a2on/c++JlZ93TTMB8GA1UdIwQYMBaAFBxi3B2Ay6sDA1Ph9XSzYAGY+2tx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQxOC9GRkZFQzExQTdB RjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3TURVLUgxZExOZ0Faajdh M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hHTGNIWURMcXdNRFUtSDFkTE5nQVpqN2EzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RUQxOC9GRkZFQzExQTdBRjgxMUU3ODk4QTZGMkVDNEY5QUUwMi9IR0xjSFlETHF3 TURVLUgxZExOZ0FaajdhM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC3wBluacwPv/qTRy4UyUzhLdZYByWyzXnSUDLE1o2ld2KmtyPyxlx4 8ZNpYXzWpXK/pRsfXysNeciztj9JEV7CPLzxkpC1dJ5rITyZmb7XwqWZFgtKVk9I D9saQOywrppqnscCkpOZhqj2kYjb3Do/GmEFo1vrds3XK1J2ghxYfvcuRJCk00rU /syKKvd6gCtdH5lhNA1BqwuZXgo4tJ/oElgXtwHkdykYAtDT8OLgUQK6gjrj76dA /dXDzAMAIvh2CCRswtGCyOu0phVlGQFVcQWJ202zEH8NqyBem2KkBaJMzURrvgAl f3u4iErqicdB8GPTVG4DHW5zTIxIPeDu -----END CERTIFICATE-----Generated at Wed Nov 5 07:13:10 2025 by rpki-client