$ rpki-client -vvf rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft File: hobJK4fdXdLuKrtA7HPxePYEWjQ.mft (raw, json) Hash identifier: FjFQJLhiCEBRw/J4WoxCUaTjbnnvJIdyBlRxCRCwK1w= Subject key identifier: DF:57:FC:09:8E:F8:41:E4:A0:47:72:31:05:DD:D1:B1:C8:A4:4A:C7 Authority key identifier: 86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 Certificate issuer: /CN=A9165DB1/serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Certificate serial: 02A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft Manifest number: 02A1 Signing time: Sat 23 Aug 2025 01:48:42 +0000 Manifest this update: Sat 23 Aug 2025 01:48:41 +0000 Manifest next update: Sat 30 Aug 2025 01:48:41 +0000 Files and hashes: 1: hobJK4fdXdLuKrtA7HPxePYEWjQ.crl (hash: 6q3+yqYN6Pa+qu81E1K8EagLFArH266/BLA+Vs/M3kA=) 2: 7D164B822A2811F0819D8C13C4F9AE02.roa (hash: ev+YjLUEFuV9synNnilJkgFER39S40N1zyX1CzULmag=) 3: 7CA593102A2811F0819D8C13C4F9AE02.roa (hash: Ia6tlVbLIeqz/TCnxF60wA233bLpbVn+2ya+t4NGuKY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 677 (0x2a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165DB1, serialNumber=8686C92B87DD5DD2EE2ABB40EC73F178F6045A34 Validity Not Before: Aug 23 01:48:41 2025 GMT Not After : Aug 30 01:48:41 2025 GMT Subject: CN=68a91df9-8c05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4e:41:51:82:4e:4e:38:39:70:13:ba:3d:31: 41:13:ea:dc:d4:f3:cb:96:e0:1f:05:ac:d3:52:bf: f2:60:d8:18:27:5f:41:96:f4:cd:cd:dd:4e:1f:45: 19:b3:0e:49:c5:d5:46:18:fb:53:3c:5b:b5:fa:9c: a4:97:2e:6e:d4:c3:f0:13:77:3b:61:20:8c:ec:d6: 02:0a:58:11:e7:27:0d:60:89:f2:53:55:63:07:7c: 13:05:a8:60:19:ab:38:99:44:88:31:84:23:a8:31: 9b:c9:3a:09:3d:e4:dd:68:5a:3e:6c:21:65:d2:e8: 2e:da:6e:0e:24:47:56:12:b7:20:70:be:5c:ca:45: 98:70:57:4b:39:60:36:0c:65:5a:30:14:bb:ac:ce: 8b:91:8d:88:a3:d1:fd:17:6e:9e:74:42:0e:21:56: 4e:1c:e9:f5:49:a9:87:6f:3f:3b:4c:49:26:b4:92: 27:ad:c3:8b:d4:b3:50:21:d2:95:99:ae:67:ee:53: c1:7b:c7:d5:88:83:5e:4c:ac:b6:8d:5b:59:69:4d: 11:94:9f:87:dd:3c:1b:e2:7a:ef:4f:17:07:15:17: 96:25:c7:8e:b1:e3:fa:3d:e0:03:39:fd:e0:3c:f5: 0e:4d:c3:4e:ce:63:cb:ac:21:b2:a3:7a:06:ee:34: ee:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:57:FC:09:8E:F8:41:E4:A0:47:72:31:05:DD:D1:B1:C8:A4:4A:C7 X509v3 Authority Key Identifier: keyid:86:86:C9:2B:87:DD:5D:D2:EE:2A:BB:40:EC:73:F1:78:F6:04:5A:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hobJK4fdXdLuKrtA7HPxePYEWjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165DB1/5A496F880E1711ED8E3BD915C4F9AE02/hobJK4fdXdLuKrtA7HPxePYEWjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:b8:aa:55:26:1b:22:ab:e1:11:8f:75:54:b9:2e:9c:42:85: 9b:c8:eb:01:90:b2:ce:96:30:a1:9c:8b:26:9b:56:8d:08:5b: 9c:26:48:0d:49:ef:97:7a:89:dc:67:0c:a3:85:da:35:30:15: a1:a3:03:c0:55:24:e8:66:d2:8b:f2:b3:05:09:59:3a:f8:6b: 5d:eb:1c:81:04:15:66:58:93:c3:ff:c1:43:bf:82:32:75:4f: 1c:dc:24:ad:9e:1b:14:da:b3:91:0e:0f:82:be:34:6d:dc:55: 6f:32:67:a3:87:dc:50:9c:c0:b5:54:4b:6e:dd:31:db:44:e7: fa:0b:c7:fe:cd:5c:99:75:80:b3:96:30:99:96:c6:51:bd:63: ad:2d:9d:7d:bc:85:43:44:31:86:f1:08:09:b4:2f:eb:a6:79: d1:ed:93:5e:4e:98:94:c3:4a:66:d0:3f:68:77:c4:95:8f:7f: fe:a6:30:6b:06:38:c0:b5:be:34:7c:92:d2:04:b8:49:f4:0a: 44:35:e9:2b:8e:24:fd:4d:ab:b9:89:6d:22:9d:c4:ae:a7:ab: d7:65:5b:8e:80:b1:fa:91:17:e2:fb:09:f7:45:5b:40:f3:19: 46:76:ac:fc:c4:bd:ba:50:da:0b:04:d5:82:04:27:9d:73:eb: 39:7c:2c:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVEQjExMTAvBgNVBAUTKDg2ODZDOTJCODdERDVERDJFRTJBQkI0MEVDNzNGMTc4 RjYwNDVBMzQwHhcNMjUwODIzMDE0ODQxWhcNMjUwODMwMDE0ODQxWjAYMRYwFAYD VQQDEw02OGE5MWRmOS04YzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzU5BUYJOTjg5cBO6PTFBE+rc1PPLluAfBazTUr/yYNgYJ19BlvTNzd1OH0UZ sw5JxdVGGPtTPFu1+pykly5u1MPwE3c7YSCM7NYCClgR5ycNYInyU1VjB3wTBahg Gas4mUSIMYQjqDGbyToJPeTdaFo+bCFl0ugu2m4OJEdWErcgcL5cykWYcFdLOWA2 DGVaMBS7rM6LkY2Io9H9F26edEIOIVZOHOn1SamHbz87TEkmtJInrcOL1LNQIdKV ma5n7lPBe8fViINeTKy2jVtZaU0RlJ+H3Twb4nrvTxcHFReWJceOseP6PeADOf3g PPUOTcNOzmPLrCGyo3oG7jTurwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN9X/AmO +EHkoEdyMQXd0bHIpErHMB8GA1UdIwQYMBaAFIaGySuH3V3S7iq7QOxz8Xj2BFo0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NURCMS81QTQ5NkY4ODBF MTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhkTHVLcnRBN0hQeGVQWUVX alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hvYkpLNGZkWGRMdUtydEE3SFB4ZVBZRVdqUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NURCMS81QTQ5NkY4ODBFMTcxMUVEOEUzQkQ5MTVDNEY5QUUwMi9ob2JKSzRmZFhk THVLcnRBN0hQeGVQWUVXalEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXuKpVJhsiq+ERj3VUuS6cQoWbyOsBkLLOljChnIsmm1aNCFucJkgN Se+XeoncZwyjhdo1MBWhowPAVSToZtKL8rMFCVk6+Gtd6xyBBBVmWJPD/8FDv4Iy dU8c3CStnhsU2rORDg+CvjRt3FVvMmejh9xQnMC1VEtu3THbROf6C8f+zVyZdYCz ljCZlsZRvWOtLZ19vIVDRDGG8QgJtC/rpnnR7ZNeTpiUw0pm0D9od8SVj3/+pjBr BjjAtb40fJLSBLhJ9ApENekrjiT9Tau5iW0incSup6vXZVuOgLH6kRfi+wn3RVtA 8xlGdqz8xL26UNoLBNWCBCedc+s5fCwF -----END CERTIFICATE-----Generated at Sat Aug 23 21:29:20 2025 by rpki-client