$ rpki-client -vvf rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft File: hdbxhJPYoIzHKxsJHUr1T48KKLM.mft (raw, json) Hash identifier: xu9Ei5d9RQ6h6K5x3nNQG/D6NqbTs9H1kvUpRur/v/c= Subject key identifier: 28:32:5F:85:72:01:52:CD:75:FD:2D:1E:F9:64:7F:94:4B:9F:FB:AD Authority key identifier: 85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 Certificate issuer: /CN=A9125225/serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft Manifest number: 067C Signing time: Sun 10 Aug 2025 22:31:13 +0000 Manifest this update: Sun 10 Aug 2025 22:31:13 +0000 Manifest next update: Sun 17 Aug 2025 22:31:13 +0000 Files and hashes: 1: hdbxhJPYoIzHKxsJHUr1T48KKLM.crl (hash: BcZokyIK/ILQIfPT/g5BoTl6rF/+TpaSl76NJgQMAt4=) 2: F66F50628A9C11EB9B2E044BC4F9AE02.roa (hash: hWP/crnjmiKRkQxu0624FvYvc5uF2iF9vYd33TXrr/0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9125225, serialNumber=85D6F18493D8A08CC72B1B091D4AF54F8F0A28B3 Validity Not Before: Aug 10 22:31:13 2025 GMT Not After : Aug 17 22:31:13 2025 GMT Subject: CN=68991db1-3f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d9:1e:a2:cf:6e:29:d9:c5:76:0d:8b:ee:08: 04:57:64:7e:fb:c1:ae:49:18:bc:72:c9:62:2f:64: aa:0e:83:51:0a:5e:d4:2b:6d:13:56:94:da:95:83: 7f:a8:92:6a:b6:a2:13:bc:c9:29:76:de:6a:4f:40: 37:8c:82:2f:b9:ea:37:6c:7e:55:88:7b:0c:a2:e2: b2:0c:b7:6e:fe:fa:1f:37:a8:77:d3:15:54:24:71: a3:b1:c0:a6:4c:4c:e0:01:eb:6e:5c:fb:04:62:50: ec:ca:0d:cc:c7:5c:cf:ae:aa:f8:3c:9c:a6:24:8b: 62:73:1d:53:c7:f0:91:6d:82:36:44:3c:c0:09:70: f8:4b:3d:23:f7:f0:de:48:00:da:d3:a7:c3:16:b9: 8d:32:57:a8:85:58:e5:49:c3:ac:37:4d:10:5d:e8: 76:4c:9e:d9:da:5e:2a:7e:f0:46:5a:30:bc:a9:ae: 27:e0:33:75:4b:2e:99:f4:07:97:a8:ad:58:74:b2: 28:fd:7f:47:da:da:7e:e8:d2:d7:5f:24:17:6a:31: a3:e8:1b:7c:53:62:3a:56:c9:21:1e:1a:2c:7a:60: 78:b3:8f:a4:69:33:3d:fe:43:c8:c1:00:e6:46:69: 75:11:90:41:83:9e:32:f4:42:f3:e2:09:89:b5:2c: 10:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:32:5F:85:72:01:52:CD:75:FD:2D:1E:F9:64:7F:94:4B:9F:FB:AD X509v3 Authority Key Identifier: keyid:85:D6:F1:84:93:D8:A0:8C:C7:2B:1B:09:1D:4A:F5:4F:8F:0A:28:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hdbxhJPYoIzHKxsJHUr1T48KKLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125225/CA6904428A9A11EB80C3ED47C4F9AE02/hdbxhJPYoIzHKxsJHUr1T48KKLM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:84:cb:f3:4e:42:77:23:5b:0e:55:a4:92:c6:1a:7c:5b:c2: 06:7c:83:b4:0d:c1:70:8c:d6:54:9e:a6:c7:8f:3d:49:89:b2: 00:2c:e6:8d:18:b0:fc:f3:4b:dc:b2:da:09:b0:f3:9f:79:1e: d0:1b:26:26:4a:b0:1f:00:91:04:3d:03:4d:4d:15:90:0b:f1: 9c:87:bb:41:cf:f6:f8:f8:d9:29:23:06:42:4c:fd:ec:af:3e: 88:a8:c6:4d:4f:00:d6:14:7e:0a:5e:de:67:2d:87:a1:04:37: b4:fe:7c:0e:f4:50:78:8e:32:d5:a2:4e:6c:68:f3:83:26:e7: 79:ea:c1:24:de:d8:c7:f6:bc:45:9e:74:92:5e:fe:d6:0c:b1: d7:90:0f:77:1c:6e:03:ac:e8:a0:47:a8:32:5f:62:4c:9c:c1: bb:18:a1:82:d1:a2:8f:0e:f5:0e:1d:34:79:34:a8:db:ec:ff: ae:b4:55:4b:0a:a6:08:37:cd:58:27:73:f7:cf:51:b1:d7:e8: bc:51:3f:e0:01:b5:24:17:13:ae:ff:3d:98:22:91:09:6e:59: 51:02:ca:e5:62:7a:24:6b:a8:ba:69:cc:ac:b4:79:c5:3a:63: c7:23:09:90:0c:a0:40:f7:2b:29:51:4b:3b:34:44:f0:fd:10: 80:d7:64:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjUyMjUxMTAvBgNVBAUTKDg1RDZGMTg0OTNEOEEwOENDNzJCMUIwOTFENEFGNTRG OEYwQTI4QjMwHhcNMjUwODEwMjIzMTEzWhcNMjUwODE3MjIzMTEzWjAYMRYwFAYD VQQDEw02ODk5MWRiMS0zZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydkeos9uKdnFdg2L7ggEV2R++8GuSRi8csliL2SqDoNRCl7UK20TVpTalYN/ qJJqtqITvMkpdt5qT0A3jIIvueo3bH5ViHsMouKyDLdu/vofN6h30xVUJHGjscCm TEzgAetuXPsEYlDsyg3Mx1zPrqr4PJymJIticx1Tx/CRbYI2RDzACXD4Sz0j9/De SADa06fDFrmNMleohVjlScOsN00QXeh2TJ7Z2l4qfvBGWjC8qa4n4DN1Sy6Z9AeX qK1YdLIo/X9H2tp+6NLXXyQXajGj6Bt8U2I6VskhHhosemB4s4+kaTM9/kPIwQDm Rml1EZBBg54y9ELz4gmJtSwQ8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCgyX4Vy AVLNdf0tHvlkf5RLn/utMB8GA1UdIwQYMBaAFIXW8YST2KCMxysbCR1K9U+PCiiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTIyNS9DQTY5MDQ0MjhB OUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9JekhLeHNKSFVyMVQ0OEtL TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hkYnhoSlBZb0l6SEt4c0pIVXIxVDQ4S0tMTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NTIyNS9DQTY5MDQ0MjhBOUExMUVCODBDM0VENDdDNEY5QUUwMi9oZGJ4aEpQWW9J ekhLeHNKSFVyMVQ0OEtLTE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWhMvzTkJ3I1sOVaSSxhp8W8IGfIO0DcFwjNZUnqbHjz1JibIALOaN GLD880vcstoJsPOfeR7QGyYmSrAfAJEEPQNNTRWQC/Gch7tBz/b4+NkpIwZCTP3s rz6IqMZNTwDWFH4KXt5nLYehBDe0/nwO9FB4jjLVok5saPODJud56sEk3tjH9rxF nnSSXv7WDLHXkA93HG4DrOigR6gyX2JMnMG7GKGC0aKPDvUOHTR5NKjb7P+utFVL CqYIN81YJ3P3z1Gx1+i8UT/gAbUkFxOu/z2YIpEJbllRAsrlYnoka6i6acystHnF OmPHIwmQDKBA9yspUUs7NETw/RCA12RY -----END CERTIFICATE-----Generated at Mon Aug 11 10:40:01 2025 by rpki-client