$ rpki-client -vvf rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft File: 0fHal9jt-Zxl369uyp87Umxgq0E.mft (raw, json) Hash identifier: 0P245mpnS16SWyAbqAsZ05CBOFjchtvOO8QCHca+Mw4= Subject key identifier: EF:C9:4C:D8:BC:C4:F2:E3:9C:6C:9F:69:C7:5D:8B:08:4B:A0:DC:0A Authority key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 Certificate issuer: /CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Certificate serial: DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft Manifest number: D4 Signing time: Sun 19 Oct 2025 08:49:18 +0000 Manifest this update: Sun 19 Oct 2025 08:49:17 +0000 Manifest next update: Sun 26 Oct 2025 08:49:17 +0000 Files and hashes: 1: 0fHal9jt-Zxl369uyp87Umxgq0E.crl (hash: n/vEJVzg8OsRmeLITD9mqX6Y1e9M6gAGaoSqym9e6bY=) 2: F33FD8F8EA5611EF8C0DD984C4F9AE02.roa (hash: CyE/igdPfW2RYSF3wOEJ7cJivf90Ng4geSYtO0ZaU/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:49:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 218 (0xda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912185F, serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Validity Not Before: Oct 19 08:49:17 2025 GMT Not After : Oct 26 08:49:17 2025 GMT Subject: CN=68f4a60d-4c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:76:15:18:b7:89:68:d1:04:6a:05:e4:f8: 93:48:3e:8b:40:27:4a:7d:32:ca:30:cb:32:5b:22: 6a:2c:64:19:4f:4f:84:b5:c2:e7:c1:4b:24:6b:3b: ce:db:e9:2b:60:7f:67:a0:48:1f:82:c4:6c:83:a1: 46:fb:3c:5e:8b:fc:56:ef:06:95:d2:08:b1:18:4c: aa:76:e4:aa:47:57:4d:ca:3e:e0:d0:3a:09:a6:94: 14:a1:5b:2d:4f:cf:57:80:ec:5e:a9:54:08:b6:b7: fa:06:75:c0:85:52:62:e8:96:33:66:9c:3d:6c:56: 70:66:0b:55:e5:27:da:9c:f6:c6:fd:0b:83:7c:55: 6f:2d:e6:9d:a7:53:bc:20:de:44:19:4d:56:af:32: 70:08:f7:28:d2:aa:9d:b8:24:28:71:42:90:53:a5: 2c:c3:3a:2e:75:6a:7f:6c:c7:c4:02:e2:b1:09:7c: 52:57:db:c8:2a:8f:9c:b0:07:76:2f:20:cf:2e:0c: b1:6f:d8:59:ba:40:33:8e:12:42:ed:40:d5:4a:40: 75:21:2b:d5:81:e0:6b:22:3f:84:e4:84:d7:04:8f: 8d:28:82:c0:e2:88:a1:8d:a6:a1:37:92:bf:ca:e4: 33:7b:56:50:db:e3:00:3c:e1:93:38:d6:4b:7c:17: 72:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C9:4C:D8:BC:C4:F2:E3:9C:6C:9F:69:C7:5D:8B:08:4B:A0:DC:0A X509v3 Authority Key Identifier: keyid:D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:04:17:74:50:2b:ae:92:d1:2a:c2:2d:86:28:a2:ae:b3:bd: 6e:cf:35:19:56:35:1a:c5:b4:36:16:90:43:02:f0:81:08:a6: ef:75:79:63:39:8a:b4:d9:5e:a3:8f:cb:c4:1a:f5:35:4e:7b: ea:87:76:36:9e:bd:9f:d4:8d:94:e7:74:17:7a:1d:f9:eb:9f: 4d:50:2a:16:bd:85:b5:84:ec:ed:84:ea:4f:6f:85:64:1e:8c: 35:d3:6f:29:2d:2b:28:de:88:9f:8e:60:c1:b2:12:f2:92:c6: 87:d6:dd:98:6b:e0:f8:62:53:c6:17:b0:be:05:b9:2c:cd:12: 43:23:52:82:4d:96:22:62:7c:14:3a:87:61:18:38:60:63:73: 57:2a:d6:f6:18:1a:f0:47:89:ca:01:0d:96:55:33:84:5f:93: 81:46:74:0f:38:26:58:87:ef:cf:6d:c5:74:9c:22:7d:a3:13: ef:a9:cc:d9:1b:be:8d:59:7d:e3:66:8a:3a:fe:32:a7:f5:4c: bf:9b:b7:5b:39:fd:78:c3:64:c1:b8:dd:bb:20:a0:7f:8d:06: 50:b4:ed:70:fb:d9:46:d7:7b:f6:25:41:87:70:a5:ec:b2:09: 2b:d6:53:55:77:81:fc:ce:34:71:7a:2a:c7:c2:1d:23:dc:8f: 9a:1b:f7:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4NUYxMTAvBgNVBAUTKEQxRjFEQTk3RDhFREY5OUM2NURGQUY2RUNBOUYzQjUy NkM2MEFCNDEwHhcNMjUxMDE5MDg0OTE3WhcNMjUxMDI2MDg0OTE3WjAYMRYwFAYD VQQDEw02OGY0YTYwZC00YzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4l2FRi3iWjRBGoF5PiTSD6LQCdKfTLKMMsyWyJqLGQZT0+EtcLnwUskazvO 2+krYH9noEgfgsRsg6FG+zxei/xW7waV0gixGEyqduSqR1dNyj7g0DoJppQUoVst T89XgOxeqVQItrf6BnXAhVJi6JYzZpw9bFZwZgtV5SfanPbG/QuDfFVvLeadp1O8 IN5EGU1WrzJwCPco0qqduCQocUKQU6UswzoudWp/bMfEAuKxCXxSV9vIKo+csAd2 LyDPLgyxb9hZukAzjhJC7UDVSkB1ISvVgeBrIj+E5ITXBI+NKILA4oihjaahN5K/ yuQze1ZQ2+MAPOGTONZLfBdy6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/JTNi8 xPLjnGyfacddiwhLoNwKMB8GA1UdIwQYMBaAFNHx2pfY7fmcZd+vbsqfO1JsYKtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg1Ri8yMEZCNkQyNjc1 NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1aeGwzNjl1eXA4N1VteGdx MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmSGFsOWp0LVp4bDM2OXV5cDg3VW14Z3EwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTg1Ri8yMEZCNkQyNjc1NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1a eGwzNjl1eXA4N1VteGdxMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuBBd0UCuuktEqwi2GKKKus71uzzUZVjUaxbQ2FpBDAvCBCKbvdXlj OYq02V6jj8vEGvU1Tnvqh3Y2nr2f1I2U53QXeh35659NUCoWvYW1hOzthOpPb4Vk How1028pLSso3oifjmDBshLyksaH1t2Ya+D4YlPGF7C+BbkszRJDI1KCTZYiYnwU OodhGDhgY3NXKtb2GBrwR4nKAQ2WVTOEX5OBRnQPOCZYh+/PbcV0nCJ9oxPvqczZ G76NWX3jZoo6/jKn9Uy/m7dbOf14w2TBuN27IKB/jQZQtO1w+9lG13v2JUGHcKXs sgkr1lNVd4H8zjRxeirHwh0j3I+aG/d1 -----END CERTIFICATE-----Generated at Mon Oct 20 23:11:31 2025 by rpki-client