$ rpki-client -vvf rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft File: 0fHal9jt-Zxl369uyp87Umxgq0E.mft (raw, json) Hash identifier: TV1ttXb2YvVu8KBocZJ8JuZj3zN78IdkvIT6kBsJ4aQ= Subject key identifier: A8:CC:F5:43:86:14:BD:42:C4:9B:D6:4D:BD:7E:42:FE:40:93:E8:89 Authority key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 Certificate issuer: /CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft Manifest number: 9C Signing time: Tue 01 Jul 2025 07:07:57 +0000 Manifest this update: Tue 01 Jul 2025 07:07:57 +0000 Manifest next update: Tue 08 Jul 2025 07:07:57 +0000 Files and hashes: 1: 0fHal9jt-Zxl369uyp87Umxgq0E.crl (hash: qms54NxbjNjZ82mSz3r6R/XeRoI6Hi0SHR641K+WESg=) 2: F33FD8F8EA5611EF8C0DD984C4F9AE02.roa (hash: CyE/igdPfW2RYSF3wOEJ7cJivf90Ng4geSYtO0ZaU/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912185F, serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Validity Not Before: Jul 1 07:07:57 2025 GMT Not After : Jul 8 07:07:57 2025 GMT Subject: CN=6863894d-b87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ae:d9:30:73:5e:c7:b1:7e:86:f4:5c:69:64: ee:10:28:6c:d3:9f:0f:75:a6:f3:fc:d9:51:6a:74: a6:e4:0e:d2:da:bb:fa:68:10:22:d9:d5:c1:91:27: 8e:7d:16:93:23:a2:6c:15:3b:12:31:2f:e9:ac:1d: f8:9d:c7:d3:c6:48:73:41:b1:fc:5c:df:d5:cb:06: f6:61:d7:8f:10:c0:2d:14:38:4f:50:d8:d9:cb:c0: 5f:21:db:03:56:1d:d8:f5:b1:4c:77:e0:05:7e:c1: 47:51:96:f3:61:43:2c:9a:18:22:47:ef:a1:98:5a: 14:47:19:18:1a:c4:75:cc:c3:d6:8c:48:f3:51:95: c5:12:4e:ea:c6:9c:5f:0f:ba:b0:14:b6:0c:84:c2: b9:27:13:ca:0b:bc:06:d1:52:5f:d8:b8:b1:a8:9c: c2:4b:d4:6d:56:a2:da:28:81:2c:e4:c7:13:f6:5c: ac:e9:85:0d:8a:71:3f:bc:2f:e9:05:57:ba:a2:ed: 70:67:52:91:9e:5d:3c:54:63:6d:da:eb:a0:ad:0b: 07:2a:6d:a1:2f:47:23:55:8c:56:58:99:3d:20:e3: 1f:a1:ad:17:12:a2:ab:9c:36:f2:96:0c:aa:56:03: cb:11:31:fb:1f:13:bf:f5:1e:4a:bf:5a:5d:da:7a: ee:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CC:F5:43:86:14:BD:42:C4:9B:D6:4D:BD:7E:42:FE:40:93:E8:89 X509v3 Authority Key Identifier: keyid:D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:1e:fa:1e:97:6c:bf:36:89:29:a3:44:55:30:89:5f:e8:0e: a1:65:4f:2c:3e:38:ed:d8:f5:8a:f7:6e:91:89:74:da:88:0e: 3d:16:7d:56:89:a8:4f:e7:1f:20:99:6f:1e:f4:61:a1:0d:2e: ea:36:2b:a9:37:5c:20:2a:00:d6:83:0c:73:7e:0e:60:58:4b: ae:57:d8:45:71:32:e8:6f:3d:d3:f0:00:ba:51:ae:64:db:3f: 68:71:74:0d:c1:f6:47:d8:82:87:43:0f:98:ce:b3:8e:c3:74: 52:52:28:bc:29:97:df:ce:61:5c:19:bb:57:71:57:1e:76:dc: d9:ca:b5:2b:ab:15:9b:e0:98:7b:9a:cc:68:f3:26:95:23:6a: 0e:43:5d:af:7f:7f:0f:58:49:69:46:38:47:00:0e:b1:91:d1: 95:95:13:58:f7:35:3c:69:b1:38:5b:39:44:3a:a8:74:d3:8b: f3:dd:54:35:a1:1c:a8:f0:0d:4f:81:f6:7f:ab:83:0e:38:82: 9e:e8:57:2a:c3:c2:34:c4:83:53:bb:3d:c0:d5:17:9a:9d:85: 53:67:87:ff:24:fe:95:35:4c:e1:a4:fa:f0:7d:9b:7d:ee:d3: ac:9f:ea:f3:83:9c:f5:d7:c0:bb:6e:e4:e3:81:94:6c:50:ad: 9b:5d:27:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4NUYxMTAvBgNVBAUTKEQxRjFEQTk3RDhFREY5OUM2NURGQUY2RUNBOUYzQjUy NkM2MEFCNDEwHhcNMjUwNzAxMDcwNzU3WhcNMjUwNzA4MDcwNzU3WjAYMRYwFAYD VQQDEw02ODYzODk0ZC1iODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAya7ZMHNex7F+hvRcaWTuEChs058Pdabz/NlRanSm5A7S2rv6aBAi2dXBkSeO fRaTI6JsFTsSMS/prB34ncfTxkhzQbH8XN/Vywb2YdePEMAtFDhPUNjZy8BfIdsD Vh3Y9bFMd+AFfsFHUZbzYUMsmhgiR++hmFoURxkYGsR1zMPWjEjzUZXFEk7qxpxf D7qwFLYMhMK5JxPKC7wG0VJf2LixqJzCS9RtVqLaKIEs5McT9lys6YUNinE/vC/p BVe6ou1wZ1KRnl08VGNt2uugrQsHKm2hL0cjVYxWWJk9IOMfoa0XEqKrnDbylgyq VgPLETH7HxO/9R5Kv1pd2nruuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKjM9UOG FL1CxJvWTb1+Qv5Ak+iJMB8GA1UdIwQYMBaAFNHx2pfY7fmcZd+vbsqfO1JsYKtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg1Ri8yMEZCNkQyNjc1 NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1aeGwzNjl1eXA4N1VteGdx MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmSGFsOWp0LVp4bDM2OXV5cDg3VW14Z3EwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTg1Ri8yMEZCNkQyNjc1NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1a eGwzNjl1eXA4N1VteGdxMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5Hvoel2y/Nokpo0RVMIlf6A6hZU8sPjjt2PWK926RiXTaiA49Fn1W iahP5x8gmW8e9GGhDS7qNiupN1wgKgDWgwxzfg5gWEuuV9hFcTLobz3T8AC6Ua5k 2z9ocXQNwfZH2IKHQw+YzrOOw3RSUii8KZffzmFcGbtXcVcedtzZyrUrqxWb4Jh7 msxo8yaVI2oOQ12vf38PWElpRjhHAA6xkdGVlRNY9zU8abE4WzlEOqh004vz3VQ1 oRyo8A1PgfZ/q4MOOIKe6Fcqw8I0xINTuz3A1ReanYVTZ4f/JP6VNUzhpPrwfZt9 7tOsn+rzg5z118C7buTjgZRsUK2bXSer -----END CERTIFICATE-----Generated at Thu Jul 3 05:56:12 2025 by rpki-client