$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft File: H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json) Hash identifier: zcX18OgmSHs5cdFk0goJcMFv2fT4eqmE44NYTMIHsSI= Subject key identifier: 01:2C:1F:B7:E6:CA:8D:19:1C:95:7A:89:4B:FB:57:E7:34:C4:2A:FB Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 Certificate issuer: /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Certificate serial: 0429 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft Manifest number: 0424 Signing time: Sat 23 Aug 2025 00:33:52 +0000 Manifest this update: Sat 23 Aug 2025 00:33:52 +0000 Manifest next update: Sat 30 Aug 2025 00:33:52 +0000 Files and hashes: 1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: IxaoNB8jQx8DYNxXw3Rk2tJk+qFJ2FYhhNiNUk32s90=) 2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: SNGQWMcRYXt1ox4JFFIvZZfuFD9w5cZeUSbmFmE9wug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:33:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1065 (0x429) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Validity Not Before: Aug 23 00:33:52 2025 GMT Not After : Aug 30 00:33:52 2025 GMT Subject: CN=68a90c70-4e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ce:6f:96:54:18:d9:6d:e7:f8:c5:12:87:2f: 5d:45:af:98:d4:ea:c7:58:fc:d1:af:ea:d7:9e:f7: fa:c6:82:86:19:dc:96:01:9a:c8:c2:fd:a4:42:83: 55:bf:e3:f0:73:77:cf:0c:f8:f3:b3:2f:7f:df:b1: 74:11:bf:b7:b6:8c:ed:1e:62:12:6d:f5:91:9e:ff: 91:4a:a5:cd:18:af:35:07:2a:88:83:e0:ce:24:c3: 68:f7:54:ef:5f:8b:8f:ec:de:c7:3f:ae:e4:82:0c: ee:7b:b2:72:18:91:e7:7f:2f:cd:41:ed:35:c9:fb: c8:c8:82:a9:83:28:9d:49:83:de:98:fc:b2:ce:26: 7f:b4:11:6c:35:72:0b:d3:17:b6:10:eb:c8:85:5a: 3e:54:be:4c:40:99:54:bf:f4:16:6f:43:3d:46:e6: 25:c6:a8:f7:69:42:26:6f:ff:fc:d2:fa:93:43:f6: 05:f6:da:e7:17:f7:39:b3:e5:2a:e7:ac:eb:35:70: d0:0b:10:a0:c7:77:73:60:de:ff:d1:b1:7b:14:2d: 75:5e:5a:31:74:be:eb:ea:06:c3:78:f4:6a:5a:f4: f9:35:d5:be:12:bf:c1:62:ba:e0:33:8a:d2:77:63: 40:5d:51:2c:66:dc:78:7c:32:65:58:37:3f:63:77: 16:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:2C:1F:B7:E6:CA:8D:19:1C:95:7A:89:4B:FB:57:E7:34:C4:2A:FB X509v3 Authority Key Identifier: keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:88:84:88:0a:95:9c:47:e8:dc:4d:92:3d:c7:db:fc:62:f7: 46:2d:57:a3:44:08:a2:e7:de:68:c8:c8:34:ba:8c:fc:cc:ae: 6d:cc:e4:12:ba:7a:1f:58:af:47:8a:3b:2c:fe:af:05:91:93: 34:78:11:bc:66:74:41:a5:44:14:4a:77:05:f1:f6:0f:89:7b: e5:f6:a1:fd:40:33:13:e4:98:cb:f2:ee:7a:d3:53:4c:7e:f6: 7e:65:29:12:5d:93:c0:44:b3:13:18:ab:9f:a8:7a:8c:85:04: 44:91:29:d8:cc:58:ce:fc:82:f4:93:cf:8b:3c:15:c2:74:94: 33:d2:03:d6:cc:ca:06:e4:e6:bf:2c:d6:bc:11:75:74:ae:27: 15:ac:09:cd:09:cf:8a:0b:46:38:da:21:1e:bc:2f:5b:19:a9: b2:b3:94:f6:ac:28:20:01:a4:49:d7:3a:60:21:2f:b3:63:15: 3d:22:b7:0a:c7:dd:9f:ba:12:75:35:04:a4:af:38:a3:81:df: 4e:11:08:a2:68:23:a6:54:01:1a:48:65:d9:52:31:d4:35:bd: 15:93:f4:78:ac:ba:b5:73:47:f7:cd:e3:6b:7e:e7:83:22:2e: f0:5c:bc:6f:56:7d:fe:e7:5f:24:bf:54:97:5a:b2:ac:fe:b8: fa:60:61:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM3MkYxMTAvBgNVBAUTKDFGQzc1QUFEQTBBNTFCRUUxQUJFNkY3MzM1OUY3OUI2 QTM0NkY2QTQwHhcNMjUwODIzMDAzMzUyWhcNMjUwODMwMDAzMzUyWjAYMRYwFAYD VQQDEw02OGE5MGM3MC00ZTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA085vllQY2W3n+MUShy9dRa+Y1OrHWPzRr+rXnvf6xoKGGdyWAZrIwv2kQoNV v+Pwc3fPDPjzsy9/37F0Eb+3toztHmISbfWRnv+RSqXNGK81ByqIg+DOJMNo91Tv X4uP7N7HP67kggzue7JyGJHnfy/NQe01yfvIyIKpgyidSYPemPyyziZ/tBFsNXIL 0xe2EOvIhVo+VL5MQJlUv/QWb0M9RuYlxqj3aUImb//80vqTQ/YF9trnF/c5s+Uq 56zrNXDQCxCgx3dzYN7/0bF7FC11XloxdL7r6gbDePRqWvT5NdW+Er/BYrrgM4rS d2NAXVEsZtx4fDJlWDc/Y3cWOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEsH7fm yo0ZHJV6iUv7V+c0xCr7MB8GA1UdIwQYMBaAFB/HWq2gpRvuGr5vczWfebajRvak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzcyRi85MzI2Qzc5MDc3 NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEctNGF2bTl6Tlo5NXRxTkc5 cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4ZGFyYUNsRy00YXZtOXpOWjk1dHFORzlxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzcyRi85MzI2Qzc5MDc3NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEct NGF2bTl6Tlo5NXRxTkc5cVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+iISICpWcR+jcTZI9x9v8YvdGLVejRAii595oyMg0uoz8zK5tzOQS unofWK9Hijss/q8FkZM0eBG8ZnRBpUQUSncF8fYPiXvl9qH9QDMT5JjL8u5601NM fvZ+ZSkSXZPARLMTGKufqHqMhQREkSnYzFjO/IL0k8+LPBXCdJQz0gPWzMoG5Oa/ LNa8EXV0ricVrAnNCc+KC0Y42iEevC9bGamys5T2rCggAaRJ1zpgIS+zYxU9IrcK x92fuhJ1NQSkrzijgd9OEQiiaCOmVAEaSGXZUjHUNb0Vk/R4rLq1c0f3zeNrfueD Ii7wXLxvVn3+518kv1SXWrKs/rj6YGFN -----END CERTIFICATE-----Generated at Sun Aug 24 07:03:47 2025 by rpki-client