$ rpki-client -vvf rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft File: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft (raw, json) Hash identifier: Dmh8KqBPFmtulkQW1F/fo1Nr1vQ24qRSbA3K/L3dn00= Subject key identifier: 42:5F:D1:FB:35:00:4B:51:67:52:16:82:28:11:B9:41:B7:BF:73:22 Authority key identifier: D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 Certificate issuer: /CN=A917039B/serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Certificate serial: 0364 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft Manifest number: 035C Signing time: Mon 11 Aug 2025 01:09:08 +0000 Manifest this update: Mon 11 Aug 2025 01:09:08 +0000 Manifest next update: Mon 18 Aug 2025 01:09:08 +0000 Files and hashes: 1: 0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl (hash: OOKabXRpaznvdr9sw62o2qhpKAM1mEmilfui8AKGCn0=) 2: A26E4F16C13411ECA5838429C4F9AE02.roa (hash: iCw79y4BWdxeg4SkApinNCBIqylm75Jz7mdMCrDh0eI=) 3: A1CB8D62C13411ECA5838429C4F9AE02.roa (hash: fD9tz1Cxj0LH2YQosk7eVSKaAn/WfIdEtafahpCOyrI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 01:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 868 (0x364) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917039B, serialNumber=D21022C00F0DBBE58A99A1E673D3AE1C5DFDCB89 Validity Not Before: Aug 11 01:09:08 2025 GMT Not After : Aug 18 01:09:08 2025 GMT Subject: CN=689942b4-c25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:21:ac:d6:55:16:3b:4e:e7:49:d0:36:17:32: 12:91:6b:15:55:0e:c5:8b:5f:1c:a5:d5:da:95:2d: be:26:0d:d5:21:f3:73:0c:cd:0b:c6:45:ad:71:70: aa:e0:98:e5:c9:51:c3:88:9f:06:e9:4a:81:10:13: 89:4a:16:07:45:d2:3f:bd:5f:9a:c3:1c:cd:74:d1: ad:ae:06:dd:32:c7:02:b1:c1:41:5a:8b:ae:80:63: 18:a5:61:40:14:6c:40:78:2c:31:0c:a3:69:d3:98: 66:28:d6:94:84:56:92:b0:8c:e3:7f:73:97:c6:10: ab:f9:6b:da:9e:be:76:a3:32:90:3f:6c:4e:aa:3d: a2:54:01:05:85:8f:26:35:8f:18:7d:b1:f9:0c:b7: 01:5b:89:ba:aa:63:4b:d4:f6:81:fb:4e:74:bc:c6: 85:d7:94:bd:8f:37:45:52:e0:42:33:10:f8:64:bb: 82:8a:89:53:2a:62:5b:60:70:b4:0b:18:44:16:18: 6b:39:e6:56:96:84:5f:71:c8:5d:7a:28:04:42:52: 1e:b3:1d:10:0f:a9:47:91:ed:51:66:30:24:3c:dd: 13:7e:ef:b3:b4:03:e6:5e:24:c9:91:bc:94:1f:77: da:44:60:f8:7e:19:7a:c2:54:d2:03:d2:30:01:c6: 8a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:5F:D1:FB:35:00:4B:51:67:52:16:82:28:11:B9:41:B7:BF:73:22 X509v3 Authority Key Identifier: keyid:D2:10:22:C0:0F:0D:BB:E5:8A:99:A1:E6:73:D3:AE:1C:5D:FD:CB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0hAiwA8Nu-WKmaHmc9OuHF39y4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917039B/99F54478C13111EC96B5E025C4F9AE02/0hAiwA8Nu-WKmaHmc9OuHF39y4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:dd:62:fc:99:ee:0e:79:d3:c0:6f:cb:fe:cc:39:e3:e2:3e: 80:4d:d4:b5:27:85:b6:96:ec:25:58:dc:da:d1:fa:ad:e7:d0: 09:de:0a:3c:73:e5:a5:e7:df:c0:f1:2f:96:36:0c:fb:ff:68: 48:1d:62:13:47:75:03:ec:4a:9c:b5:69:5d:87:0b:6a:dc:13: 99:65:cb:a9:62:c3:db:c9:eb:fc:19:9d:10:f4:82:5e:2f:f4: fa:81:2e:d7:91:6c:b6:d7:c4:77:c7:33:d4:bf:7c:ce:ab:6e: a8:12:45:64:7c:81:51:36:51:8a:a7:d9:29:ee:dd:3c:9b:3c: 0b:60:2e:bd:37:85:31:93:3f:f3:27:cb:ba:40:5f:3d:eb:25: 35:fe:6d:95:4a:52:54:f6:c0:63:de:3c:d1:c9:37:1f:a4:89: 25:7c:c9:4e:b3:a7:02:38:bc:f6:29:30:97:53:07:da:be:3f: f2:a5:0f:5a:ce:de:a7:78:3a:fe:b6:82:b2:27:33:95:93:83: 8f:37:ba:3c:2d:11:26:55:73:4e:aa:b0:b5:1d:41:82:40:c7: 42:3f:16:59:fb:e0:b1:c4:d0:c3:05:fd:21:ac:c2:b2:c9:91: 94:58:29:79:c4:06:e3:a0:fb:d5:85:6e:a7:69:52:a2:5c:7b: 70:3d:d2:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzAzOUIxMTAvBgNVBAUTKEQyMTAyMkMwMEYwREJCRTU4QTk5QTFFNjczRDNBRTFD NURGRENCODkwHhcNMjUwODExMDEwOTA4WhcNMjUwODE4MDEwOTA4WjAYMRYwFAYD VQQDEw02ODk5NDJiNC1jMjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yGs1lUWO07nSdA2FzISkWsVVQ7Fi18cpdXalS2+Jg3VIfNzDM0LxkWtcXCq 4JjlyVHDiJ8G6UqBEBOJShYHRdI/vV+awxzNdNGtrgbdMscCscFBWouugGMYpWFA FGxAeCwxDKNp05hmKNaUhFaSsIzjf3OXxhCr+Wvanr52ozKQP2xOqj2iVAEFhY8m NY8YfbH5DLcBW4m6qmNL1PaB+050vMaF15S9jzdFUuBCMxD4ZLuCiolTKmJbYHC0 CxhEFhhrOeZWloRfcchdeigEQlIesx0QD6lHke1RZjAkPN0Tfu+ztAPmXiTJkbyU H3faRGD4fhl6wlTSA9IwAcaK2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJf0fs1 AEtRZ1IWgigRuUG3v3MiMB8GA1UdIwQYMBaAFNIQIsAPDbvlipmh5nPTrhxd/cuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDM5Qi85OUY1NDQ3OEMx MzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUtV0ttYUhtYzlPdUhGMzl5 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBoQWl3QThOdS1XS21hSG1jOU91SEYzOXk0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDM5Qi85OUY1NDQ3OEMxMzExMUVDOTZCNUUwMjVDNEY5QUUwMi8waEFpd0E4TnUt V0ttYUhtYzlPdUhGMzl5NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA53WL8me4OedPAb8v+zDnj4j6ATdS1J4W2luwlWNza0fqt59AJ3go8 c+Wl59/A8S+WNgz7/2hIHWITR3UD7EqctWldhwtq3BOZZcupYsPbyev8GZ0Q9IJe L/T6gS7XkWy218R3xzPUv3zOq26oEkVkfIFRNlGKp9kp7t08mzwLYC69N4Uxkz/z J8u6QF896yU1/m2VSlJU9sBj3jzRyTcfpIklfMlOs6cCOLz2KTCXUwfavj/ypQ9a zt6neDr+toKyJzOVk4OPN7o8LREmVXNOqrC1HUGCQMdCPxZZ++CxxNDDBf0hrMKy yZGUWCl5xAbjoPvVhW6naVKiXHtwPdKe -----END CERTIFICATE-----Generated at Tue Aug 12 22:48:09 2025 by rpki-client