$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft File: H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json) Hash identifier: b9bcDLAsKTtTasH2fPVaD2ZhAGXGmapNxlEyk2vKxoo= Subject key identifier: 0A:94:34:83:D0:67:3D:92:22:2B:0B:37:1E:6C:C5:79:97:6C:97:A0 Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 Certificate issuer: /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Certificate serial: 0424 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft Manifest number: 041F Signing time: Wed 13 Aug 2025 00:52:08 +0000 Manifest this update: Wed 13 Aug 2025 00:52:07 +0000 Manifest next update: Wed 20 Aug 2025 00:52:07 +0000 Files and hashes: 1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: iB4bwc1/CaakxeSaaPFvEJvoCFIGDafWBXuxjRH43u4=) 2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: SNGQWMcRYXt1ox4JFFIvZZfuFD9w5cZeUSbmFmE9wug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 00:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1060 (0x424) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Validity Not Before: Aug 13 00:52:07 2025 GMT Not After : Aug 20 00:52:07 2025 GMT Subject: CN=689be1b7-f122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:66:09:fa:22:78:e1:e2:90:8b:f2:4a:d9:db: f3:d6:1e:2b:58:5b:2c:00:2e:b6:3f:c7:59:fb:32: cd:71:36:18:b5:dc:45:8b:03:32:f1:45:08:cd:3d: 92:c1:d3:4a:9f:5b:96:e9:0c:0c:e1:53:97:b6:73: 37:63:3e:b8:ad:24:93:4a:06:d9:77:64:eb:db:75: 3c:9a:b5:ee:1b:fe:4d:4d:8d:0a:3e:4a:a3:c1:e9: bc:2e:64:42:f8:29:0c:5c:9a:57:ba:3d:a7:e8:cc: 34:ac:80:9e:37:b5:e8:ca:20:d0:97:bf:b2:66:ac: 44:13:45:1a:19:45:f2:6d:35:55:70:1d:fa:69:45: 4f:1b:ce:3e:ba:e9:32:a2:f5:e5:9f:4f:49:a4:14: 9b:28:dd:d1:ee:1a:d2:89:19:c1:bc:c5:b5:4e:f6: 34:60:58:90:a3:49:1c:57:2e:ca:46:f8:3d:35:7a: d4:05:4a:6b:47:c2:80:9d:81:b4:c8:8c:f5:d1:a4: 25:3a:61:1f:2e:43:38:d4:d1:0b:b7:3f:10:39:13: a6:81:77:57:e9:4c:39:f6:d6:b1:23:5f:e3:f2:28: 1e:a6:26:95:0c:6f:c2:8a:e1:1a:ad:10:1c:d9:b2: b6:37:29:7c:bf:7c:ee:f3:69:62:1e:07:60:4c:c1: bf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:94:34:83:D0:67:3D:92:22:2B:0B:37:1E:6C:C5:79:97:6C:97:A0 X509v3 Authority Key Identifier: keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b2:96:95:bf:62:f8:50:0e:e4:bc:85:9e:ba:ea:0f:ee:be: 75:e0:66:0a:80:09:08:af:41:7f:b1:6b:e8:80:7f:33:6d:50: 56:d7:5e:4e:42:dd:0c:3d:fe:8b:ff:2c:5a:7c:9a:72:f4:c5: c4:14:1c:91:c4:f0:19:f6:be:c8:e5:b9:26:5a:85:54:80:85: 44:ea:f7:cd:ff:a3:1b:13:62:0b:39:95:77:40:e1:57:1b:bd: 12:ce:8b:ff:c8:a3:cf:b7:30:f1:bc:99:b2:94:57:3a:51:93: ca:bc:8c:a2:5b:42:9e:58:67:22:19:d1:85:ea:23:5c:f5:95: c4:6b:1e:5e:c6:5d:13:c8:a6:ca:f8:b2:61:57:07:5a:e4:12: 40:53:11:fc:49:14:d2:4d:63:87:6f:04:9c:dc:40:b5:a9:38: 5c:40:c3:73:fa:f8:d9:06:0a:b3:ed:a8:50:58:31:bb:4b:64: ce:f2:a5:8d:01:99:20:0a:e7:c2:44:3b:8c:4c:04:12:59:60: ba:2f:a3:e2:28:0e:b7:7d:98:7d:92:9b:ea:23:74:fb:fa:4d: 27:fd:6d:6e:a3:f8:ee:c5:66:dd:e9:f5:66:d1:ce:3d:ef:5e: 4f:ee:1f:bb:4e:fc:01:aa:fe:60:33:56:39:34:ee:5e:f0:02: a7:f7:b0:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM3MkYxMTAvBgNVBAUTKDFGQzc1QUFEQTBBNTFCRUUxQUJFNkY3MzM1OUY3OUI2 QTM0NkY2QTQwHhcNMjUwODEzMDA1MjA3WhcNMjUwODIwMDA1MjA3WjAYMRYwFAYD VQQDEw02ODliZTFiNy1mMTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWYJ+iJ44eKQi/JK2dvz1h4rWFssAC62P8dZ+zLNcTYYtdxFiwMy8UUIzT2S wdNKn1uW6QwM4VOXtnM3Yz64rSSTSgbZd2Tr23U8mrXuG/5NTY0KPkqjwem8LmRC +CkMXJpXuj2n6Mw0rICeN7XoyiDQl7+yZqxEE0UaGUXybTVVcB36aUVPG84+uuky ovXln09JpBSbKN3R7hrSiRnBvMW1TvY0YFiQo0kcVy7KRvg9NXrUBUprR8KAnYG0 yIz10aQlOmEfLkM41NELtz8QOROmgXdX6Uw59taxI1/j8igepiaVDG/CiuEarRAc 2bK2Nyl8v3zu82liHgdgTMG/tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqUNIPQ Zz2SIisLNx5sxXmXbJegMB8GA1UdIwQYMBaAFB/HWq2gpRvuGr5vczWfebajRvak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzcyRi85MzI2Qzc5MDc3 NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEctNGF2bTl6Tlo5NXRxTkc5 cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4ZGFyYUNsRy00YXZtOXpOWjk1dHFORzlxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzcyRi85MzI2Qzc5MDc3NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEct NGF2bTl6Tlo5NXRxTkc5cVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvspaVv2L4UA7kvIWeuuoP7r514GYKgAkIr0F/sWvogH8zbVBW115O Qt0MPf6L/yxafJpy9MXEFByRxPAZ9r7I5bkmWoVUgIVE6vfN/6MbE2ILOZV3QOFX G70Szov/yKPPtzDxvJmylFc6UZPKvIyiW0KeWGciGdGF6iNc9ZXEax5exl0TyKbK +LJhVwda5BJAUxH8SRTSTWOHbwSc3EC1qThcQMNz+vjZBgqz7ahQWDG7S2TO8qWN AZkgCufCRDuMTAQSWWC6L6PiKA63fZh9kpvqI3T7+k0n/W1uo/juxWbd6fVm0c49 715P7h+7TvwBqv5gM1Y5NO5e8AKn97B9 -----END CERTIFICATE-----Generated at Wed Aug 13 04:29:56 2025 by rpki-client