$ rpki-client -vvf rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft File: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft (raw, json) Hash identifier: 5nMYCwL4LZqyc63sFdGqiTElzjJ52J3cUMv1Ys4f460= Subject key identifier: 65:33:EB:3C:65:1D:2A:6C:14:C3:5F:79:42:A7:5A:B0:4A:CE:57:8D Authority key identifier: 1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 Certificate issuer: /CN=A919BEDB/serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Certificate serial: 1BAF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft Manifest number: 1B6C Signing time: Tue 04 Nov 2025 16:22:21 +0000 Manifest this update: Tue 04 Nov 2025 16:22:21 +0000 Manifest next update: Tue 11 Nov 2025 16:22:21 +0000 Files and hashes: 1: Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl (hash: EjQtxYqkwGxs7qKqTGZ9QDCKyr4gfMOxDy/83+5c4Fk=) 2: AA54657A880E11ED9BE52B17C4F9AE02.roa (hash: m7jMoGaJOamQccyHDJiW6HrfpYtQA9+C9u4Ehg8vWNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:22:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7087 (0x1baf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BEDB, serialNumber=1EDE5C6E008028BCD2AE33651381BDE1FD07C5D4 Validity Not Before: Nov 4 16:22:21 2025 GMT Not After : Nov 11 16:22:21 2025 GMT Subject: CN=690a283d-4f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f6:d1:3f:1d:51:87:74:df:54:9d:51:ac:12: 87:7c:a0:ec:6f:8c:65:00:3b:d5:8c:f2:d3:d8:b3: 27:80:46:19:f2:20:df:fb:cc:d7:10:90:af:a9:8f: 46:0d:6f:b5:81:13:84:da:7b:8c:12:03:f4:6e:41: 27:58:8d:e3:d0:ca:1d:a0:3d:d6:3c:49:96:66:14: 37:e6:f5:13:74:40:14:2d:aa:31:f9:17:86:59:89: 78:23:36:c6:c7:ef:46:4f:6b:65:09:d1:c8:c7:8f: 33:e7:73:45:e2:53:2a:49:8d:43:6c:69:5a:b4:a4: 4c:3d:cb:d7:27:79:58:e2:fe:16:70:f2:22:07:5f: e6:19:ac:5b:38:1f:41:54:68:76:d6:10:98:dc:af: 68:87:7a:8c:7b:af:d2:8d:bf:fa:12:26:ea:e0:16: 3f:c6:0a:bc:e0:1e:55:5c:aa:47:2a:ce:80:50:fd: 75:bc:a4:13:4f:f9:8d:92:6d:66:98:2d:d0:1b:63: 93:73:70:9b:c5:8c:bb:7c:00:e8:a9:ef:d8:6a:d7: bb:dc:f7:b2:c0:21:d5:f9:75:81:1d:af:57:fc:05: 58:fe:79:3f:ae:00:f1:50:40:35:ce:32:f1:7a:c0: 35:62:98:d7:59:cb:b9:dd:51:61:e8:23:bf:dd:bb: f5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:33:EB:3C:65:1D:2A:6C:14:C3:5F:79:42:A7:5A:B0:4A:CE:57:8D X509v3 Authority Key Identifier: keyid:1E:DE:5C:6E:00:80:28:BC:D2:AE:33:65:13:81:BD:E1:FD:07:C5:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BEDB/5D867EBC1F8311E7B57E6053C4F9AE02/Ht5cbgCAKLzSrjNlE4G94f0HxdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:0f:45:ec:35:06:b9:01:26:ca:43:e4:5c:74:4c:bb:10:80: 10:9f:04:08:1b:4c:2e:77:de:4b:7b:86:73:fc:86:e8:72:10: 71:24:9a:1f:29:88:65:da:2f:19:c3:77:8c:48:39:ea:b9:e6: 69:9c:32:7a:d5:71:23:c5:63:6e:c6:45:bf:ad:23:56:24:7e: 78:ab:a2:f5:b5:a8:59:b3:43:56:07:6d:7d:62:9f:e5:8e:5f: 19:6b:cc:79:08:91:9b:a2:18:48:9f:1b:fa:1b:91:ac:3e:e7: f3:c5:0d:cf:2f:1a:fa:97:45:10:b2:74:df:34:73:2e:fc:86: 3b:0d:1c:0b:52:ff:7d:8a:97:41:81:1b:ca:b8:f1:5c:3f:be: 6c:5a:05:06:05:29:db:26:88:bf:45:91:af:ba:4a:0d:51:0f: 13:5d:61:da:3e:dd:df:34:f8:12:16:58:d5:6d:ac:4f:04:c8: 3a:66:10:15:bf:fa:88:f5:91:2c:f8:d8:94:b0:21:17:a9:a6: f8:a0:e2:f4:38:11:de:38:34:74:9d:aa:a8:2a:4c:08:dd:b0: 87:d7:8b:9c:52:24:c3:6d:20:77:96:1e:be:6e:19:d1:56:65: 88:e0:05:bc:91:fb:cd:32:e6:e7:0a:5a:9e:ff:36:3c:30:5a: 33:9d:30:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG68wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJFREIxMTAvBgNVBAUTKDFFREU1QzZFMDA4MDI4QkNEMkFFMzM2NTEzODFCREUx RkQwN0M1RDQwHhcNMjUxMTA0MTYyMjIxWhcNMjUxMTExMTYyMjIxWjAYMRYwFAYD VQQDEw02OTBhMjgzZC00ZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPbRPx1Rh3TfVJ1RrBKHfKDsb4xlADvVjPLT2LMngEYZ8iDf+8zXEJCvqY9G DW+1gROE2nuMEgP0bkEnWI3j0ModoD3WPEmWZhQ35vUTdEAULaox+ReGWYl4IzbG x+9GT2tlCdHIx48z53NF4lMqSY1DbGlatKRMPcvXJ3lY4v4WcPIiB1/mGaxbOB9B VGh21hCY3K9oh3qMe6/Sjb/6Eibq4BY/xgq84B5VXKpHKs6AUP11vKQTT/mNkm1m mC3QG2OTc3CbxYy7fADoqe/Yate73PeywCHV+XWBHa9X/AVY/nk/rgDxUEA1zjLx esA1YpjXWcu53VFh6CO/3bv14wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUz6zxl HSpsFMNfeUKnWrBKzleNMB8GA1UdIwQYMBaAFB7eXG4AgCi80q4zZROBveH9B8XU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkVEQi81RDg2N0VCQzFG ODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtMelNyak5sRTRHOTRmMEh4 ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0NWNiZ0NBS0x6U3JqTmxFNEc5NGYwSHhkUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkVEQi81RDg2N0VCQzFGODMxMUU3QjU3RTYwNTNDNEY5QUUwMi9IdDVjYmdDQUtM elNyak5sRTRHOTRmMEh4ZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9D0XsNQa5ASbKQ+RcdEy7EIAQnwQIG0wud95Le4Zz/IbochBxJJof KYhl2i8Zw3eMSDnqueZpnDJ61XEjxWNuxkW/rSNWJH54q6L1tahZs0NWB219Yp/l jl8Za8x5CJGbohhInxv6G5GsPufzxQ3PLxr6l0UQsnTfNHMu/IY7DRwLUv99ipdB gRvKuPFcP75sWgUGBSnbJoi/RZGvukoNUQ8TXWHaPt3fNPgSFljVbaxPBMg6ZhAV v/qI9ZEs+NiUsCEXqab4oOL0OBHeODR0naqoKkwI3bCH14ucUiTDbSB3lh6+bhnR VmWI4AW8kfvNMubnClqe/zY8MFoznTAL -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:32 2025 by rpki-client