$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft File: H9I4pw6sem_8a5CrMM77dzkhb0o.mft (raw, json) Hash identifier: MAOWohLSoZDZFM2TondAnuJUZPKUgV4aS8INFz6adk8= Subject key identifier: 8C:F5:4F:29:9B:E0:6A:E4:67:B7:3C:68:79:6B:6C:36:38:C9:FF:CC Authority key identifier: 1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A Certificate issuer: /CN=A913DD09/serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft Manifest number: 16 Signing time: Sat 23 Aug 2025 08:14:53 +0000 Manifest this update: Sat 23 Aug 2025 08:14:53 +0000 Manifest next update: Sat 30 Aug 2025 08:14:53 +0000 Files and hashes: 1: H9I4pw6sem_8a5CrMM77dzkhb0o.crl (hash: 2TT05zbxVtEISj7TrJf4i7cwRNKFoxA3D3NdtT9AUso=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DD09, serialNumber=1FD238A70EAC7A6FFC6B90AB30CEFB7739216F4A Validity Not Before: Aug 23 08:14:53 2025 GMT Not After : Aug 30 08:14:53 2025 GMT Subject: CN=68a9787d-ba00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:05:19:e1:b6:05:cd:17:87:ed:10:91:35:4c: 2e:db:2b:75:6f:e9:3e:be:76:6b:51:e4:52:c1:2c: 9f:33:84:cf:5d:c5:3b:d7:ef:d6:54:e4:36:f5:3b: c6:02:ee:37:85:98:e1:c0:cf:e4:b6:2b:eb:91:03: 9b:67:35:4a:4f:22:e7:52:bc:28:9b:c9:16:2f:6c: db:15:74:a8:cd:5f:f6:bb:78:13:76:f5:c5:c7:73: 6f:cf:a8:c5:87:66:95:b3:a0:e8:12:7e:36:b5:3e: db:16:04:80:19:2b:c5:f2:2e:eb:b0:15:6c:b3:19: d0:d3:ad:a8:b6:c7:1f:22:f7:5e:73:de:52:68:78: fa:92:bc:06:39:ec:a9:d6:6b:a6:d7:65:df:45:b1: 12:d0:e7:f5:fb:71:a6:6f:de:64:da:d1:f5:b0:1b: e5:7d:0a:f5:43:25:89:5b:60:cf:df:e4:5b:c3:7a: 90:61:63:e0:48:7d:04:93:3a:24:3f:17:a6:c8:4d: 51:c6:a3:b0:fc:20:6c:3c:8d:70:eb:9f:a8:71:51: 0c:ed:d0:92:80:cd:b5:9c:a3:55:7c:86:98:2a:fe: 3b:19:ed:13:ac:cf:0a:67:99:79:55:f6:e6:7f:70: b7:df:2f:6a:af:9b:89:63:cd:79:fa:ce:af:b3:75: 50:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F5:4F:29:9B:E0:6A:E4:67:B7:3C:68:79:6B:6C:36:38:C9:FF:CC X509v3 Authority Key Identifier: keyid:1F:D2:38:A7:0E:AC:7A:6F:FC:6B:90:AB:30:CE:FB:77:39:21:6F:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9I4pw6sem_8a5CrMM77dzkhb0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD09/70C10760622B11F0BE528B1FC4F9AE02/H9I4pw6sem_8a5CrMM77dzkhb0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:ae:5f:7a:e6:89:cd:1b:76:ba:12:5e:ce:21:e2:87:f3:78: 05:dd:b3:59:d7:a4:e7:27:26:a6:53:0b:c5:57:dc:5e:8f:85: 2c:ca:9a:36:b1:60:87:fc:b0:d9:61:ea:af:9f:c1:ff:e9:08: 96:d6:95:53:68:20:8b:41:e0:f8:f7:7a:2e:53:0b:d6:71:61: ed:fa:21:4b:7c:10:b8:a9:e2:6b:91:41:c0:8b:7d:b8:bd:70: 12:f5:69:0b:21:79:20:c1:d1:a9:b8:cd:1a:50:5e:14:b9:cd: 5b:9e:0f:69:77:a1:37:05:d4:98:f6:25:dd:21:2a:3f:f7:6a: 65:e8:b9:16:f9:fe:af:d9:41:e3:3e:57:76:c3:8c:d8:51:c9: 32:07:91:71:ef:64:e7:cf:8d:5a:23:76:dc:73:cf:f8:64:ec: fe:da:63:76:17:8e:1d:34:e1:3c:1e:eb:61:67:9c:60:8e:e1: fa:66:fd:e3:3f:b1:35:9e:df:b7:56:98:60:c0:46:68:60:93: fb:30:78:eb:e8:fe:29:e6:13:2e:a1:34:44:ed:3d:e8:32:ee: d6:d2:e9:04:9f:d1:3b:64:fd:db:5b:54:5c:1f:1b:5e:43:53: 25:fb:11:d4:39:90:15:7e:3d:1c:3c:f9:61:96:8f:7a:b3:be: 20:d3:ad:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz REQwOTExMC8GA1UEBRMoMUZEMjM4QTcwRUFDN0E2RkZDNkI5MEFCMzBDRUZCNzcz OTIxNkY0QTAeFw0yNTA4MjMwODE0NTNaFw0yNTA4MzAwODE0NTNaMBgxFjAUBgNV BAMTDTY4YTk3ODdkLWJhMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTBRnhtgXNF4ftEJE1TC7bK3Vv6T6+dmtR5FLBLJ8zhM9dxTvX79ZU5Db1O8YC 7jeFmOHAz+S2K+uRA5tnNUpPIudSvCibyRYvbNsVdKjNX/a7eBN29cXHc2/PqMWH ZpWzoOgSfja1PtsWBIAZK8XyLuuwFWyzGdDTrai2xx8i915z3lJoePqSvAY57KnW a6bXZd9FsRLQ5/X7caZv3mTa0fWwG+V9CvVDJYlbYM/f5FvDepBhY+BIfQSTOiQ/ F6bITVHGo7D8IGw8jXDrn6hxUQzt0JKAzbWco1V8hpgq/jsZ7ROszwpnmXlV9uZ/ cLffL2qvm4ljzXn6zq+zdVClAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjPVPKZvg auRntzxoeWtsNjjJ/8wwHwYDVR0jBBgwFoAUH9I4pw6sem/8a5CrMM77dzkhb0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNERDA5LzcwQzEwNzYwNjIy QjExRjBCRTUyOEIxRkM0RjlBRTAyL0g5STRwdzZzZW1fOGE1Q3JNTTc3ZHpraGIw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSDlJNHB3NnNlbV84YTVDck1NNzdkemtoYjBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE RDA5LzcwQzEwNzYwNjIyQjExRjBCRTUyOEIxRkM0RjlBRTAyL0g5STRwdzZzZW1f OGE1Q3JNTTc3ZHpraGIwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKOuX3rmic0bdroSXs4h4ofzeAXds1nXpOcnJqZTC8VX3F6PhSzKmjax YIf8sNlh6q+fwf/pCJbWlVNoIItB4Pj3ei5TC9ZxYe36IUt8ELip4muRQcCLfbi9 cBL1aQsheSDB0am4zRpQXhS5zVueD2l3oTcF1Jj2Jd0hKj/3amXouRb5/q/ZQeM+ V3bDjNhRyTIHkXHvZOfPjVojdtxzz/hk7P7aY3YXjh004Twe62FnnGCO4fpm/eM/ sTWe37dWmGDARmhgk/sweOvo/inmEy6hNETtPegy7tbS6QSf0Ttk/dtbVFwfG15D UyX7EdQ5kBV+PRw8+WGWj3qzviDTrcA= -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:04 2025 by rpki-client