$ rpki-client -vvf rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft File: -HfnZ8AkHlKW_jMylZne-j0toUE.mft (raw, json) Hash identifier: mQ6UFTAU6K4DSjFo8JqhekAtntsT3owg6NUYwi4Nbgo= Subject key identifier: 38:68:C6:AB:CA:DA:C1:98:A7:E5:48:AF:9E:92:87:EC:6C:0B:68:94 Authority key identifier: F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 Certificate issuer: /CN=A9145515/serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Certificate serial: 0BB2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft Manifest number: 0BAC Signing time: Fri 22 Aug 2025 19:05:01 +0000 Manifest this update: Fri 22 Aug 2025 19:05:00 +0000 Manifest next update: Fri 29 Aug 2025 19:05:00 +0000 Files and hashes: 1: -HfnZ8AkHlKW_jMylZne-j0toUE.crl (hash: 34MaEjY+Fs2wCMJ6qoinmkaK/+rWCfq/jnMb46fh5/s=) 2: 60875A5C2A3711EABEA9BF73C4F9AE02.roa (hash: FdLJ06PTZOyh+KSk/zuzof+cUbbR4MXj/mg8yL1Rn9k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2994 (0xbb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145515, serialNumber=F877E767C0241E5296FE33329599DEFA3D2DA141 Validity Not Before: Aug 22 19:05:00 2025 GMT Not After : Aug 29 19:05:00 2025 GMT Subject: CN=68a8bf5c-74c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f1:37:1b:41:2c:20:c2:83:f8:a6:14:4a:b5: a2:d3:72:b0:06:0a:00:c9:26:d7:69:4f:04:0b:72: 0f:4e:3c:6a:ee:f9:ca:68:3a:ad:d1:99:b5:f9:fa: fb:67:5f:83:43:72:50:a0:11:b2:bc:24:b5:ca:fb: ae:19:9c:30:b3:4c:2a:5b:6f:5d:62:3f:dd:8d:21: 01:66:4f:e5:0f:e9:78:0e:6b:9c:a0:ac:d6:2f:9e: 36:46:d9:7b:e1:c4:21:41:d3:9e:07:7a:dd:8a:c4: 57:42:9c:28:01:b1:6a:22:b4:58:17:d3:83:1f:2a: 84:39:6d:d0:cf:d6:32:7d:b2:ad:8a:db:4d:29:5b: d1:9c:c1:ba:dc:2a:55:43:eb:99:f1:ea:b9:73:44: 7d:b7:f1:a2:7b:0a:f7:4f:94:11:f5:ce:4b:f1:11: 61:cf:94:3c:41:b6:a2:db:9b:4f:6a:f9:f7:66:bf: 3e:ff:92:e0:a4:a2:80:1b:7b:31:3f:13:22:5d:b0: f9:8f:78:d3:c9:fe:75:c6:83:a0:5a:a0:31:5a:36: 3e:32:3f:d7:89:09:bb:c7:e1:cd:59:b7:ad:f9:d2: 41:69:85:18:b3:02:d6:6d:4a:19:d8:38:87:34:f3: 28:d0:b8:75:ff:ae:0b:4e:d9:cc:b7:01:d2:ab:77: 92:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:68:C6:AB:CA:DA:C1:98:A7:E5:48:AF:9E:92:87:EC:6C:0B:68:94 X509v3 Authority Key Identifier: keyid:F8:77:E7:67:C0:24:1E:52:96:FE:33:32:95:99:DE:FA:3D:2D:A1:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-HfnZ8AkHlKW_jMylZne-j0toUE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145515/942FC3B82A3611EAA56EC872C4F9AE02/-HfnZ8AkHlKW_jMylZne-j0toUE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:83:71:e9:cc:dc:f5:55:ca:5e:56:ec:6a:11:73:e8:73:d7: 15:00:20:06:10:95:ef:67:5f:33:37:19:e9:1f:84:ab:37:e2: 17:c9:b5:ba:65:0b:b2:81:89:e0:09:0c:fc:40:fc:84:c5:08: 26:29:f2:cb:28:8c:97:31:ed:db:ee:f6:62:13:c3:65:55:46: 71:db:07:2d:1b:95:16:7c:a0:a1:4a:0e:80:c1:32:4b:9d:ed: fb:c0:9e:29:bf:5e:ce:63:7b:df:ca:77:78:53:06:b5:42:cb: 20:81:36:5f:83:00:a5:fd:85:01:ae:f4:2c:de:fe:7c:60:39: 5a:1b:50:6e:df:5d:fe:2f:6d:ca:24:6a:de:32:61:af:e6:60: 12:01:d0:42:a9:92:a4:9a:90:be:a9:6e:b3:2b:12:04:ec:f5: 67:93:6b:5d:1c:a5:7c:06:46:ea:6f:a5:ef:04:95:5c:19:36: 7d:33:a4:25:e2:ab:51:73:ad:aa:c9:44:b0:39:11:cf:e3:ca: 11:7b:b8:c9:1f:1b:a3:85:92:89:45:2b:c1:2d:17:be:14:20: 1d:4a:25:df:66:28:a0:e0:99:2e:3b:fa:37:39:7f:c5:13:50: 4d:f6:ab:1e:d1:2f:e7:c5:54:56:38:cf:13:be:62:37:c8:e6: 27:d7:70:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDU1MTUxMTAvBgNVBAUTKEY4NzdFNzY3QzAyNDFFNTI5NkZFMzMzMjk1OTlERUZB M0QyREExNDEwHhcNMjUwODIyMTkwNTAwWhcNMjUwODI5MTkwNTAwWjAYMRYwFAYD VQQDEw02OGE4YmY1Yy03NGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy/E3G0EsIMKD+KYUSrWi03KwBgoAySbXaU8EC3IPTjxq7vnKaDqt0Zm1+fr7 Z1+DQ3JQoBGyvCS1yvuuGZwws0wqW29dYj/djSEBZk/lD+l4DmucoKzWL542Rtl7 4cQhQdOeB3rdisRXQpwoAbFqIrRYF9ODHyqEOW3Qz9YyfbKtittNKVvRnMG63CpV Q+uZ8eq5c0R9t/Giewr3T5QR9c5L8RFhz5Q8Qbai25tPavn3Zr8+/5LgpKKAG3sx PxMiXbD5j3jTyf51xoOgWqAxWjY+Mj/XiQm7x+HNWbet+dJBaYUYswLWbUoZ2DiH NPMo0Lh1/64LTtnMtwHSq3eSmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhoxqvK 2sGYp+VIr56Sh+xsC2iUMB8GA1UdIwQYMBaAFPh352fAJB5Slv4zMpWZ3vo9LaFB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxNS85NDJGQzNCODJB MzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hsS1dfak15bFpuZS1qMHRv VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1IZm5aOEFrSGxLV19qTXlsWm5lLWowdG9VRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NTUxNS85NDJGQzNCODJBMzYxMUVBQTU2RUM4NzJDNEY5QUUwMi8tSGZuWjhBa0hs S1dfak15bFpuZS1qMHRvVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3g3HpzNz1VcpeVuxqEXPoc9cVACAGEJXvZ18zNxnpH4SrN+IXybW6 ZQuygYngCQz8QPyExQgmKfLLKIyXMe3b7vZiE8NlVUZx2wctG5UWfKChSg6AwTJL ne37wJ4pv17OY3vfynd4Uwa1QssggTZfgwCl/YUBrvQs3v58YDlaG1Bu313+L23K JGreMmGv5mASAdBCqZKkmpC+qW6zKxIE7PVnk2tdHKV8Bkbqb6XvBJVcGTZ9M6Ql 4qtRc62qyUSwORHP48oRe7jJHxujhZKJRSvBLRe+FCAdSiXfZiig4JkuO/o3OX/F E1BN9qse0S/nxVRWOM8TvmI3yOYn13Cc -----END CERTIFICATE-----Generated at Sun Aug 24 01:00:59 2025 by rpki-client