$ rpki-client -vvf rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft File: 0fHal9jt-Zxl369uyp87Umxgq0E.mft (raw, json) Hash identifier: pCotD32OMembGUNJLlmAAxkbeWw70YxVsV2gO3sb62E= Subject key identifier: 92:CE:DE:EA:41:1A:53:7A:EB:C2:C9:0B:D4:34:65:A2:8F:6B:C9:FB Authority key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 Certificate issuer: /CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft Manifest number: B1 Signing time: Mon 11 Aug 2025 06:21:45 +0000 Manifest this update: Mon 11 Aug 2025 06:21:45 +0000 Manifest next update: Mon 18 Aug 2025 06:21:45 +0000 Files and hashes: 1: 0fHal9jt-Zxl369uyp87Umxgq0E.crl (hash: Wh8gscPbr97/cbvdLUthdzI8YKryibC+w5G7JMb77i0=) 2: F33FD8F8EA5611EF8C0DD984C4F9AE02.roa (hash: CyE/igdPfW2RYSF3wOEJ7cJivf90Ng4geSYtO0ZaU/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912185F, serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Validity Not Before: Aug 11 06:21:45 2025 GMT Not After : Aug 18 06:21:45 2025 GMT Subject: CN=68998bf9-8bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:26:e7:93:11:e0:97:72:c3:2d:99:8e:46:1d: ef:65:03:f4:70:7f:89:f5:5e:eb:f5:d5:39:c0:63: 45:a7:98:97:c4:bd:c8:cd:b6:da:a9:97:84:f5:a0: be:6b:d3:dd:a4:03:e0:85:e2:fb:e6:e1:f7:95:d6: 9f:54:22:9d:e6:4e:fb:3f:8a:e3:90:2c:96:6d:47: 9f:e6:85:ac:62:70:6c:cb:a9:83:ed:e5:96:2e:81: 1b:22:5a:25:47:d9:0d:92:89:a9:04:8a:29:8e:2a: f9:4d:3d:26:d8:b5:cc:3b:61:b6:a4:72:e3:b3:93: f9:8d:47:2d:ee:1f:7e:bb:38:d0:9b:2f:09:62:b7: 60:48:fb:ff:37:0a:ab:e3:c8:3b:94:33:96:6e:e4: 33:9f:cd:c0:14:6c:f9:e7:75:be:ff:c3:46:49:23: b8:8a:80:08:0c:a0:f7:6c:7a:41:67:6c:29:4c:b1: 2a:4e:fb:ad:a7:30:f1:ed:e4:eb:50:29:ac:6d:b5: 04:d5:4a:45:06:61:3f:50:b4:59:c3:fc:86:22:f1: c6:f0:45:8a:79:24:8a:fa:13:0d:ba:52:7b:c5:8f: d2:9b:af:ec:1a:a4:4a:be:4e:97:d7:f2:e2:d3:1e: 3a:f6:54:29:62:5d:a2:3f:4c:a1:fb:32:97:c2:9a: a5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CE:DE:EA:41:1A:53:7A:EB:C2:C9:0B:D4:34:65:A2:8F:6B:C9:FB X509v3 Authority Key Identifier: keyid:D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:5c:bb:45:0e:79:b4:1f:d7:0a:d3:1d:4e:cc:64:05:cc:35: bd:41:91:58:c6:97:95:b0:ff:1e:28:d2:94:86:0f:46:29:32: 20:7c:61:83:41:70:4c:a4:d8:33:3e:d6:1d:9d:bd:ad:38:d3: 31:33:8b:b9:e4:4b:a2:66:1e:a9:b9:e5:a8:6f:e7:0b:5d:c4: 58:ee:70:28:b2:96:02:0f:09:48:e7:5a:4b:60:14:96:0d:48: 8c:bd:57:7a:a9:bb:ea:6d:d4:c2:9e:8c:75:39:85:80:4d:44: 15:14:22:af:eb:46:14:af:b0:b4:01:92:fa:8a:8a:ad:0a:73: de:75:c7:0f:d5:bc:9c:17:4d:6c:6f:fd:54:ed:41:e2:8a:9e: 39:53:8b:66:3b:bc:c6:89:24:d6:57:b0:c4:92:96:61:e1:2d: e1:25:4e:c7:ab:c7:bf:e3:6f:4c:8f:16:38:5e:d5:e6:97:6c: 0c:67:ad:78:4f:a6:08:13:cf:11:22:ba:16:b3:99:f5:4b:1b: a6:dc:d6:c9:58:01:2f:5c:64:71:21:42:2b:ce:bd:6f:ac:fa: 42:e2:9d:51:ad:cf:16:c8:0e:d3:54:29:fb:b2:51:10:05:95: d2:70:b5:eb:b3:07:04:87:a8:5b:92:0a:8d:97:6e:88:fa:ca: c7:f8:ca:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4NUYxMTAvBgNVBAUTKEQxRjFEQTk3RDhFREY5OUM2NURGQUY2RUNBOUYzQjUy NkM2MEFCNDEwHhcNMjUwODExMDYyMTQ1WhcNMjUwODE4MDYyMTQ1WjAYMRYwFAYD VQQDEw02ODk5OGJmOS04YmNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+SbnkxHgl3LDLZmORh3vZQP0cH+J9V7r9dU5wGNFp5iXxL3IzbbaqZeE9aC+ a9PdpAPgheL75uH3ldafVCKd5k77P4rjkCyWbUef5oWsYnBsy6mD7eWWLoEbIlol R9kNkompBIopjir5TT0m2LXMO2G2pHLjs5P5jUct7h9+uzjQmy8JYrdgSPv/Nwqr 48g7lDOWbuQzn83AFGz553W+/8NGSSO4ioAIDKD3bHpBZ2wpTLEqTvutpzDx7eTr UCmsbbUE1UpFBmE/ULRZw/yGIvHG8EWKeSSK+hMNulJ7xY/Sm6/sGqRKvk6X1/Li 0x469lQpYl2iP0yh+zKXwpqlPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLO3upB GlN668LJC9Q0ZaKPa8n7MB8GA1UdIwQYMBaAFNHx2pfY7fmcZd+vbsqfO1JsYKtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg1Ri8yMEZCNkQyNjc1 NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1aeGwzNjl1eXA4N1VteGdx MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmSGFsOWp0LVp4bDM2OXV5cDg3VW14Z3EwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTg1Ri8yMEZCNkQyNjc1NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1a eGwzNjl1eXA4N1VteGdxMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1XLtFDnm0H9cK0x1OzGQFzDW9QZFYxpeVsP8eKNKUhg9GKTIgfGGD QXBMpNgzPtYdnb2tONMxM4u55EuiZh6pueWob+cLXcRY7nAospYCDwlI51pLYBSW DUiMvVd6qbvqbdTCnox1OYWATUQVFCKv60YUr7C0AZL6ioqtCnPedccP1bycF01s b/1U7UHiip45U4tmO7zGiSTWV7DEkpZh4S3hJU7Hq8e/429MjxY4XtXml2wMZ614 T6YIE88RIroWs5n1Sxum3NbJWAEvXGRxIUIrzr1vrPpC4p1Rrc8WyA7TVCn7slEQ BZXScLXrswcEh6hbkgqNl26I+srH+Mog -----END CERTIFICATE-----Generated at Wed Aug 13 00:27:12 2025 by rpki-client