$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft File: h9O9fQreBlCeuFrGullInZVAH38.mft (raw, json) Hash identifier: VZxa1DSUqjvyPusXaUujMTovni2G+UXe7cr7d2YaklI= Subject key identifier: A0:AB:39:1D:AA:EC:56:A2:A8:35:D7:E3:43:52:9B:87:FA:D3:8F:1F Authority key identifier: 87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F Certificate issuer: /CN=A913AE13/serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Certificate serial: 052F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft Manifest number: 0513 Signing time: Fri 22 Aug 2025 23:54:20 +0000 Manifest this update: Fri 22 Aug 2025 23:54:19 +0000 Manifest next update: Fri 29 Aug 2025 23:54:19 +0000 Files and hashes: 1: h9O9fQreBlCeuFrGullInZVAH38.crl (hash: nA9q6HIMxZTx8X8y1POU6FsUsZWTNhehaZ1vd9KHC50=) 2: D758E96CF8FF11ED98C6D45FC4F9AE02.roa (hash: ZQeH9s5GaYIk1ZxktX3ZDI1XyJXOlpVX7ljtVr42XF4=) 3: 9B528A5AB7D611EDACEDEC79C4F9AE02.roa (hash: o2ReRLcJlulFpKfpdWmE6u0f7G1G3KpQA2ac4wDJgWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:54:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1327 (0x52f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE13, serialNumber=87D3BD7D0ADE06509EB85AC6BA59489D95401F7F Validity Not Before: Aug 22 23:54:19 2025 GMT Not After : Aug 29 23:54:19 2025 GMT Subject: CN=68a9032c-8351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:b7:a7:20:8b:a2:7d:a7:73:7e:e9:9d:bd: a3:4a:63:51:77:b2:64:06:6b:55:99:45:56:dd:4b: ce:3b:19:d7:54:7a:aa:ad:71:18:9f:1f:7d:0e:95: af:a4:02:a2:16:64:68:b5:1a:ed:d3:2c:59:7e:8f: a0:0b:f8:59:86:ff:57:85:af:d2:b4:29:31:0d:ec: f6:ab:f6:9c:b1:1c:06:03:8b:50:c3:5e:e5:37:53: 10:94:f8:1f:f1:01:5a:65:de:7f:b4:24:5f:17:7c: 84:07:84:86:54:8c:d2:58:0f:1c:c1:ff:6c:d9:c3: f3:99:f2:27:d4:cc:9a:a4:5e:7d:88:52:6b:5c:2d: 75:33:63:64:56:3e:c7:0c:31:ee:8a:b7:c4:31:f2: fa:a8:2c:ac:b2:6b:86:fc:66:3c:c5:fc:ed:8a:16: ca:17:35:6d:bd:d6:67:a1:8c:29:aa:3a:13:d5:5e: 53:a4:90:e8:0e:80:7b:a3:5e:6d:30:c9:76:3b:91: 72:69:52:a0:68:5f:ab:e3:eb:35:e7:28:ce:3a:b2: 3e:da:f0:97:6a:82:8a:f8:36:59:04:cd:66:cd:ab: 01:4f:58:dc:7e:92:1b:4b:4b:21:7b:0a:a0:0c:ef: fd:82:06:c2:99:c5:6e:62:5e:fb:f7:20:8c:38:59: 5d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AB:39:1D:AA:EC:56:A2:A8:35:D7:E3:43:52:9B:87:FA:D3:8F:1F X509v3 Authority Key Identifier: keyid:87:D3:BD:7D:0A:DE:06:50:9E:B8:5A:C6:BA:59:48:9D:95:40:1F:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h9O9fQreBlCeuFrGullInZVAH38.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE13/8936357826FB11ECA7135D73C4F9AE02/h9O9fQreBlCeuFrGullInZVAH38.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:4e:3b:4e:1b:af:a2:f9:11:d4:fc:e0:1d:c7:29:f2:52:de: 81:e6:24:d8:d9:b0:23:fc:68:d9:a5:49:83:71:83:ff:c2:b3: 52:80:38:74:b7:ad:be:b4:c8:00:ec:41:c7:81:82:22:b3:25: 6e:3d:08:c5:e1:79:97:96:e2:84:83:9b:e3:a2:2b:6a:81:f2: f7:1d:33:9b:3f:e1:64:20:6d:d3:8b:72:04:2c:f5:82:6a:a6: 41:13:05:fd:3f:61:1a:86:9c:77:bb:40:3f:a0:ce:70:2e:a6: d4:b6:be:31:36:d5:ea:70:c9:2b:07:0c:0e:22:7a:55:57:41: 42:ab:e5:c4:d1:ab:73:b7:c5:89:e8:b6:46:00:ce:6b:07:0b: b9:b0:37:8f:09:e8:bd:41:3e:b4:86:33:d9:3e:87:29:ca:c1: 38:e2:f0:72:4d:4b:87:82:46:95:83:d7:26:dc:c7:02:67:35: f4:e1:c5:ae:92:54:74:76:b6:90:a8:9b:d5:bb:91:d4:ef:68: 4c:bd:4e:a3:1c:81:33:0b:f1:9a:8b:8e:78:0d:b9:cf:c9:15: 58:91:97:8d:34:97:f3:96:ab:ba:87:e5:a9:a0:b3:3a:b5:46: 20:8f:00:22:11:d4:c9:f2:67:98:f7:59:28:87:8f:c3:c4:cf: db:3a:bd:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBS8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMTMxMTAvBgNVBAUTKDg3RDNCRDdEMEFERTA2NTA5RUI4NUFDNkJBNTk0ODlE OTU0MDFGN0YwHhcNMjUwODIyMjM1NDE5WhcNMjUwODI5MjM1NDE5WjAYMRYwFAYD VQQDEw02OGE5MDMyYy04MzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt2e3pyCLon2nc37pnb2jSmNRd7JkBmtVmUVW3UvOOxnXVHqqrXEYnx99DpWv pAKiFmRotRrt0yxZfo+gC/hZhv9Xha/StCkxDez2q/acsRwGA4tQw17lN1MQlPgf 8QFaZd5/tCRfF3yEB4SGVIzSWA8cwf9s2cPzmfIn1MyapF59iFJrXC11M2NkVj7H DDHuirfEMfL6qCyssmuG/GY8xfztihbKFzVtvdZnoYwpqjoT1V5TpJDoDoB7o15t MMl2O5FyaVKgaF+r4+s15yjOOrI+2vCXaoKK+DZZBM1mzasBT1jcfpIbS0shewqg DO/9ggbCmcVuYl779yCMOFldXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCrOR2q 7FaiqDXX40NSm4f6048fMB8GA1UdIwQYMBaAFIfTvX0K3gZQnrhaxrpZSJ2VQB9/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUxMy84OTM2MzU3ODI2 RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJsQ2V1RnJHdWxsSW5aVkFI MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g5TzlmUXJlQmxDZXVGckd1bGxJblpWQUgzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUUxMy84OTM2MzU3ODI2RkIxMUVDQTcxMzVENzNDNEY5QUUwMi9oOU85ZlFyZUJs Q2V1RnJHdWxsSW5aVkFIMzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCTjtOG6+i+RHU/OAdxynyUt6B5iTY2bAj/GjZpUmDcYP/wrNSgDh0 t62+tMgA7EHHgYIisyVuPQjF4XmXluKEg5vjoitqgfL3HTObP+FkIG3Ti3IELPWC aqZBEwX9P2Eahpx3u0A/oM5wLqbUtr4xNtXqcMkrBwwOInpVV0FCq+XE0atzt8WJ 6LZGAM5rBwu5sDePCei9QT60hjPZPocpysE44vByTUuHgkaVg9cm3McCZzX04cWu klR0draQqJvVu5HU72hMvU6jHIEzC/Gai454DbnPyRVYkZeNNJfzlqu6h+WpoLM6 tUYgjwAiEdTJ8meY91koh4/DxM/bOr2a -----END CERTIFICATE-----Generated at Sun Aug 24 00:09:54 2025 by rpki-client