$ rpki-client -vvf rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft File: 0fHal9jt-Zxl369uyp87Umxgq0E.mft (raw, json) Hash identifier: mAjStgDqsIWY8s1bEeWY1Supa/6HQDIuWKrcaQoG7HM= Subject key identifier: EF:5E:1D:0B:B8:F3:20:7B:1F:5B:0C:9E:F4:87:16:84:8F:7F:15:6C Authority key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 Certificate issuer: /CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Certificate serial: BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft Manifest number: B7 Signing time: Sat 23 Aug 2025 06:18:18 +0000 Manifest this update: Sat 23 Aug 2025 06:18:17 +0000 Manifest next update: Sat 30 Aug 2025 06:18:17 +0000 Files and hashes: 1: 0fHal9jt-Zxl369uyp87Umxgq0E.crl (hash: huLqa/z/yJxGxl0cnoAGuqChVy2KY4PKp+PQQFhOOUA=) 2: F33FD8F8EA5611EF8C0DD984C4F9AE02.roa (hash: CyE/igdPfW2RYSF3wOEJ7cJivf90Ng4geSYtO0ZaU/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912185F, serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Validity Not Before: Aug 23 06:18:17 2025 GMT Not After : Aug 30 06:18:17 2025 GMT Subject: CN=68a95d2a-788e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:65:da:be:a0:0c:ce:17:f1:ef:95:1a:0c:7b: ec:eb:70:f8:c7:3e:f7:e8:d2:b2:cd:5d:1d:46:48: e0:0b:2f:bb:0a:1e:52:a4:e1:c7:d8:a0:d9:4d:14: fd:01:70:4f:27:e8:0c:0e:52:75:12:52:58:37:eb: a9:2b:39:6d:65:18:85:e5:95:e6:35:18:9d:1f:9b: 23:1f:3a:d0:a8:ae:a6:ea:5a:9a:a5:8c:be:1d:23: d7:bf:27:dc:7a:a1:0d:71:5b:ce:27:c9:65:34:09: 3d:6f:8d:45:6d:32:fb:d0:d8:96:5c:81:fc:87:74: d3:16:ad:b7:d6:ef:62:7a:65:54:7b:c5:d1:31:42: 81:2c:c3:da:ca:2e:79:6e:f7:63:b6:11:79:f2:2b: e2:d2:76:cd:18:39:07:c8:38:e8:af:d5:d7:01:eb: 53:f9:88:04:08:27:9f:c7:ef:e5:33:69:ba:cb:6a: c9:b2:6a:17:5a:b3:62:7a:42:d4:0d:e8:be:e9:64: 5a:9b:18:0f:67:71:bc:bf:67:f2:90:db:34:8e:4e: 59:1b:71:77:60:3f:82:b1:63:d9:45:a8:b2:e5:05: 85:2b:60:2c:f7:b9:21:ab:27:20:e2:5c:ae:12:eb: 06:1e:16:94:42:5b:d1:ed:ea:bb:3a:ac:a8:03:76: 04:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5E:1D:0B:B8:F3:20:7B:1F:5B:0C:9E:F4:87:16:84:8F:7F:15:6C X509v3 Authority Key Identifier: keyid:D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:51:e2:70:ba:75:ae:42:d0:b7:8e:bb:71:78:bc:20:a5:3e: 4b:38:e4:0d:a0:c2:60:b3:0f:2f:64:ad:ee:a2:0e:8c:2c:02: cc:a6:62:7f:f1:f2:59:35:29:81:2b:83:cb:2b:50:d5:ee:56: ee:bf:1f:a5:4b:b8:cf:f4:03:bc:09:ea:cd:5a:f5:99:1d:67: 12:7b:ee:7e:61:d1:55:fd:7b:d5:6b:08:dd:01:72:5a:72:17: 1d:b0:a8:bf:51:a2:30:ef:31:f7:1a:b0:d3:7e:ea:5f:eb:c3: 54:c7:23:ae:c5:1c:90:fd:5e:83:64:7c:d0:a3:7f:da:b1:4b: 58:eb:6d:e6:78:3f:40:e7:fc:5c:e7:4d:39:ca:e5:6e:61:83: 7f:e6:40:ee:52:7c:14:8d:28:48:1d:67:d4:5c:be:1c:b5:dc: 33:0d:97:b4:34:0f:42:28:c7:2b:44:27:5f:7e:56:1d:04:02: 33:d0:59:db:84:72:90:e4:63:5c:aa:95:d0:56:22:3f:f1:b2: 6b:58:8b:24:4b:ec:97:f1:32:7b:15:1e:7e:63:0b:47:01:79: f9:a1:50:ec:25:b5:92:5f:65:d6:5d:f2:34:98:87:88:1b:aa: 90:9f:fb:c9:0c:db:d4:e3:67:3b:ad:f1:d2:c4:3d:ae:4a:25: c6:f3:6b:7e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4NUYxMTAvBgNVBAUTKEQxRjFEQTk3RDhFREY5OUM2NURGQUY2RUNBOUYzQjUy NkM2MEFCNDEwHhcNMjUwODIzMDYxODE3WhcNMjUwODMwMDYxODE3WjAYMRYwFAYD VQQDEw02OGE5NWQyYS03ODhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA52XavqAMzhfx75UaDHvs63D4xz736NKyzV0dRkjgCy+7Ch5SpOHH2KDZTRT9 AXBPJ+gMDlJ1ElJYN+upKzltZRiF5ZXmNRidH5sjHzrQqK6m6lqapYy+HSPXvyfc eqENcVvOJ8llNAk9b41FbTL70NiWXIH8h3TTFq231u9iemVUe8XRMUKBLMPayi55 bvdjthF58ivi0nbNGDkHyDjor9XXAetT+YgECCefx+/lM2m6y2rJsmoXWrNiekLU Dei+6WRamxgPZ3G8v2fykNs0jk5ZG3F3YD+CsWPZRaiy5QWFK2As97khqycg4lyu EusGHhaUQlvR7eq7OqyoA3YEsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9eHQu4 8yB7H1sMnvSHFoSPfxVsMB8GA1UdIwQYMBaAFNHx2pfY7fmcZd+vbsqfO1JsYKtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg1Ri8yMEZCNkQyNjc1 NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1aeGwzNjl1eXA4N1VteGdx MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmSGFsOWp0LVp4bDM2OXV5cDg3VW14Z3EwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTg1Ri8yMEZCNkQyNjc1NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1a eGwzNjl1eXA4N1VteGdxMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkUeJwunWuQtC3jrtxeLwgpT5LOOQNoMJgsw8vZK3uog6MLALMpmJ/ 8fJZNSmBK4PLK1DV7lbuvx+lS7jP9AO8CerNWvWZHWcSe+5+YdFV/XvVawjdAXJa chcdsKi/UaIw7zH3GrDTfupf68NUxyOuxRyQ/V6DZHzQo3/asUtY623meD9A5/xc 5005yuVuYYN/5kDuUnwUjShIHWfUXL4ctdwzDZe0NA9CKMcrRCdfflYdBAIz0Fnb hHKQ5GNcqpXQViI/8bJrWIskS+yX8TJ7FR5+YwtHAXn5oVDsJbWSX2XWXfI0mIeI G6qQn/vJDNvU42c7rfHSxD2uSiXG82t+ -----END CERTIFICATE-----Generated at Sun Aug 24 07:15:09 2025 by rpki-client