$ rpki-client -vvf rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft File: 0fHal9jt-Zxl369uyp87Umxgq0E.mft (raw, json) Hash identifier: /ArISjBEWPeo5Mfs/8MN2ja+a3iVIPYZWyxCRGQFMQs= Subject key identifier: FF:8E:84:CF:86:D0:9B:D2:E0:DE:7D:1B:90:C3:80:A1:71:20:FD:AD Authority key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 Certificate issuer: /CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft Manifest number: 94 Signing time: Sun 15 Jun 2025 05:36:59 +0000 Manifest this update: Sun 15 Jun 2025 05:36:59 +0000 Manifest next update: Sun 22 Jun 2025 05:36:59 +0000 Files and hashes: 1: 0fHal9jt-Zxl369uyp87Umxgq0E.crl (hash: Ddr8sL6hz6DQUhopPAvcw3FhKSRVcmp2z4n7BB4pz28=) 2: F33FD8F8EA5611EF8C0DD984C4F9AE02.roa (hash: CyE/igdPfW2RYSF3wOEJ7cJivf90Ng4geSYtO0ZaU/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912185F, serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Validity Not Before: Jun 15 05:36:59 2025 GMT Not After : Jun 22 05:36:59 2025 GMT Subject: CN=684e5bfb-3183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d4:86:4f:7f:18:bc:d8:cf:11:13:36:f9:50: ba:5b:38:3d:92:ec:41:7c:e9:fe:29:55:72:c8:50: 45:3c:71:6d:4c:27:89:86:e9:a6:a1:17:af:75:aa: 08:df:d5:32:64:72:54:94:e4:50:1c:e3:25:33:4d: 67:87:bd:91:a9:24:3b:b7:5b:2f:4c:a2:08:b1:f3: 88:f5:08:74:5a:b1:79:82:99:41:bf:99:a5:8a:50: b6:69:c2:9c:1c:19:8f:66:2b:95:41:55:37:7e:99: 3b:e3:a0:e0:9a:54:1f:ef:a2:b7:b6:a3:12:92:9e: bc:08:45:75:74:9c:4f:30:69:06:c3:3d:04:b5:29: 16:03:8d:00:74:3f:2c:bf:fc:e3:3f:dd:64:00:66: d9:c3:7c:eb:67:b4:8a:a4:bb:ce:fb:19:63:b8:97: 74:3c:6a:2c:9e:70:98:07:c9:65:37:45:65:ff:78: e4:fb:f4:8d:01:85:bc:5b:06:8e:3a:d7:b4:30:c0: 95:a9:c6:81:ab:62:95:c2:30:09:2e:1b:f3:40:61: 51:16:6f:8b:08:d8:20:97:82:fe:dc:fb:ca:b8:80: aa:1e:00:07:58:4d:2f:62:e5:59:d8:7b:a6:5e:92: 66:05:4d:95:60:d4:b9:a1:00:a4:1c:4d:21:38:4b: 78:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8E:84:CF:86:D0:9B:D2:E0:DE:7D:1B:90:C3:80:A1:71:20:FD:AD X509v3 Authority Key Identifier: keyid:D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:95:18:f2:a1:93:41:f7:4d:0c:76:b0:70:0b:57:73:c4:9a: fe:4c:d8:66:f1:db:52:75:6e:e1:34:5e:26:0c:34:bf:38:3a: 90:04:df:29:2d:b2:ac:04:f0:46:ca:0d:cb:f8:d8:19:cb:e4: db:b0:93:9f:52:0b:79:31:6c:55:e7:71:11:18:d0:0f:97:00: 6d:70:b7:10:1c:32:e5:35:19:a6:2e:ae:4e:93:60:f4:d3:f2: 37:dc:34:ab:ae:26:a1:70:1b:4e:aa:f5:d1:c1:d9:90:de:0a: ee:9a:09:ec:d8:2f:2c:46:45:d9:25:6d:78:48:14:12:e7:a6: 82:37:fe:b2:af:05:2c:89:12:4c:8a:27:93:0c:59:ff:a3:4e: 56:89:a0:ab:64:c2:15:0e:23:ff:1d:ec:5d:8d:97:ca:10:47: 27:05:13:44:99:67:38:84:51:11:59:e3:14:10:28:6d:24:0b: 36:c8:a0:56:17:e9:aa:80:67:08:66:b8:e1:b1:b2:1b:24:b0: 8a:2e:a3:6e:c7:7b:03:ba:78:ff:81:da:c7:0d:1c:83:19:4c: e9:4e:96:8f:32:ba:45:6d:ba:d2:46:9c:ba:3e:50:5b:da:15: 49:25:8f:ec:73:33:db:25:01:ae:7a:c3:2d:f6:0c:f9:2f:39: 02:10:c8:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4NUYxMTAvBgNVBAUTKEQxRjFEQTk3RDhFREY5OUM2NURGQUY2RUNBOUYzQjUy NkM2MEFCNDEwHhcNMjUwNjE1MDUzNjU5WhcNMjUwNjIyMDUzNjU5WjAYMRYwFAYD VQQDEw02ODRlNWJmYi0zMTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9SGT38YvNjPERM2+VC6Wzg9kuxBfOn+KVVyyFBFPHFtTCeJhummoRevdaoI 39UyZHJUlORQHOMlM01nh72RqSQ7t1svTKIIsfOI9Qh0WrF5gplBv5mlilC2acKc HBmPZiuVQVU3fpk746DgmlQf76K3tqMSkp68CEV1dJxPMGkGwz0EtSkWA40AdD8s v/zjP91kAGbZw3zrZ7SKpLvO+xljuJd0PGosnnCYB8llN0Vl/3jk+/SNAYW8WwaO Ote0MMCVqcaBq2KVwjAJLhvzQGFRFm+LCNggl4L+3PvKuICqHgAHWE0vYuVZ2Hum XpJmBU2VYNS5oQCkHE0hOEt4pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+OhM+G 0JvS4N59G5DDgKFxIP2tMB8GA1UdIwQYMBaAFNHx2pfY7fmcZd+vbsqfO1JsYKtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg1Ri8yMEZCNkQyNjc1 NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1aeGwzNjl1eXA4N1VteGdx MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmSGFsOWp0LVp4bDM2OXV5cDg3VW14Z3EwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTg1Ri8yMEZCNkQyNjc1NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1a eGwzNjl1eXA4N1VteGdxMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNlRjyoZNB900MdrBwC1dzxJr+TNhm8dtSdW7hNF4mDDS/ODqQBN8p LbKsBPBGyg3L+NgZy+TbsJOfUgt5MWxV53ERGNAPlwBtcLcQHDLlNRmmLq5Ok2D0 0/I33DSrriahcBtOqvXRwdmQ3grumgns2C8sRkXZJW14SBQS56aCN/6yrwUsiRJM iieTDFn/o05WiaCrZMIVDiP/HexdjZfKEEcnBRNEmWc4hFERWeMUEChtJAs2yKBW F+mqgGcIZrjhsbIbJLCKLqNux3sDunj/gdrHDRyDGUzpTpaPMrpFbbrSRpy6PlBb 2hVJJY/sczPbJQGuesMt9gz5LzkCEMhf -----END CERTIFICATE-----Generated at Sun Jun 15 09:54:42 2025 by rpki-client