$ rpki-client -vvf rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft File: h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft (raw, json) Hash identifier: IuS6V8WLM/+zbyNOt/dowXAS0A9OAbNJpII6PLjoKxQ= Subject key identifier: 42:96:40:46:98:AB:50:74:20:E2:1E:40:07:C2:29:19:53:4A:1D:C9 Authority key identifier: 87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B Certificate issuer: /CN=A918A35C/serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Certificate serial: 0BCA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft Manifest number: 0BC3 Signing time: Fri 22 Aug 2025 19:03:06 +0000 Manifest this update: Fri 22 Aug 2025 19:03:05 +0000 Manifest next update: Fri 29 Aug 2025 19:03:05 +0000 Files and hashes: 1: h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl (hash: bc5cCex8wc9Bka8FsbrqXDaQdNFHq03Lwa1U40OhTl0=) 2: 0D22F748261A11EA83CE8D17C4F9AE02.roa (hash: dTqPYAZ0fYSqCYvtzmzk6vV87y7uZ4+mAQSsb1JNqeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3018 (0xbca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A35C, serialNumber=878B868695FC45C9C63B6FBC54CCB3509C4B9F4B Validity Not Before: Aug 22 19:03:05 2025 GMT Not After : Aug 29 19:03:05 2025 GMT Subject: CN=68a8bee9-c48b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:f6:94:b8:4b:04:cd:f0:13:9b:4f:a1:47: ca:a7:7e:5a:bb:d7:83:f1:e8:1f:22:a5:9f:35:b8: d4:a4:3c:63:23:28:95:ed:51:5d:2d:3b:5a:6d:0e: 2c:22:87:d9:7c:bb:11:c7:f6:de:ff:08:68:88:a7: cb:19:43:24:57:50:96:3d:0f:3d:e0:68:98:f7:c8: 0f:ba:92:e5:14:19:08:02:dd:05:5e:fb:a2:bd:c2: 27:8d:a4:3f:04:c6:33:b7:88:bf:a8:5c:7d:9b:2a: 25:b1:05:67:77:db:b7:44:bf:95:b5:8e:ad:4b:7a: 16:94:3b:17:da:d2:d5:2a:d5:68:19:a2:58:a5:16: 86:72:6a:e8:0d:e9:83:23:13:34:df:da:57:6e:0e: b4:68:76:0e:2c:d4:b8:da:4a:27:e7:9f:f7:4b:fb: 49:b9:c1:b9:88:de:d5:34:95:b1:52:1c:78:5d:ae: ad:e4:ac:ea:36:85:67:6a:9e:af:45:cc:b0:55:33: a2:a9:3e:fe:e4:b5:cc:c7:12:cf:49:00:be:14:3c: 65:e4:b9:15:f8:93:b9:bb:5d:7d:28:c8:53:04:9e: 50:f7:ca:18:03:6f:14:1d:d2:59:1e:29:2d:4e:bf: f8:3b:bb:90:12:a6:ef:3e:19:4b:82:0a:f9:89:07: cb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:96:40:46:98:AB:50:74:20:E2:1E:40:07:C2:29:19:53:4A:1D:C9 X509v3 Authority Key Identifier: keyid:87:8B:86:86:95:FC:45:C9:C6:3B:6F:BC:54:CC:B3:50:9C:4B:9F:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h4uGhpX8RcnGO2-8VMyzUJxLn0s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A35C/52FC6B98261811EABFEDE113C4F9AE02/h4uGhpX8RcnGO2-8VMyzUJxLn0s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:8b:8e:1a:1e:f6:52:57:8a:a2:82:88:a4:58:90:bb:65:aa: 5e:1d:eb:57:20:e8:73:21:32:61:5c:ec:93:9c:21:42:e7:0a: c4:5f:53:6e:f1:3c:25:fa:f9:28:61:ee:ca:98:8a:f5:81:a8: ef:65:93:5b:71:7b:02:d8:39:8b:fd:b4:b7:cc:e5:91:fc:74: 29:ac:11:63:08:28:a0:f1:7a:1c:c1:cc:f9:f2:3a:50:12:e2: 36:80:b5:8c:66:12:05:c6:1b:d2:0d:50:be:5d:97:de:7c:69: 81:24:03:82:80:9e:70:fd:78:63:60:37:4f:72:d3:9a:b7:06: 3d:b6:29:ac:d2:a0:71:ee:f7:b9:51:d4:12:b2:07:02:69:bb: 5c:0d:4a:0f:e8:a2:4f:b7:04:61:e5:30:d0:33:65:9e:d1:19: d5:ae:e0:fa:03:77:99:71:43:9f:09:22:f5:12:80:bd:62:41: 3d:a6:53:f0:16:75:0a:5a:54:e2:84:5f:55:59:9a:e0:70:23: 92:97:bc:57:a0:0e:87:15:87:d5:7a:3c:b9:dd:c8:5e:f1:36: c9:ba:ee:52:b7:13:04:fe:51:ee:74:b5:86:85:e7:19:16:3f: 7e:ee:e8:19:5c:54:b7:ae:e2:4a:c1:4d:5b:e1:66:7f:3f:f3: 72:7f:7e:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEEzNUMxMTAvBgNVBAUTKDg3OEI4Njg2OTVGQzQ1QzlDNjNCNkZCQzU0Q0NCMzUw OUM0QjlGNEIwHhcNMjUwODIyMTkwMzA1WhcNMjUwODI5MTkwMzA1WjAYMRYwFAYD VQQDEw02OGE4YmVlOS1jNDhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpT2lLhLBM3wE5tPoUfKp35au9eD8egfIqWfNbjUpDxjIyiV7VFdLTtabQ4s IofZfLsRx/be/whoiKfLGUMkV1CWPQ894GiY98gPupLlFBkIAt0FXvuivcInjaQ/ BMYzt4i/qFx9myolsQVnd9u3RL+VtY6tS3oWlDsX2tLVKtVoGaJYpRaGcmroDemD IxM039pXbg60aHYOLNS42kon55/3S/tJucG5iN7VNJWxUhx4Xa6t5KzqNoVnap6v RcywVTOiqT7+5LXMxxLPSQC+FDxl5LkV+JO5u119KMhTBJ5Q98oYA28UHdJZHikt Tr/4O7uQEqbvPhlLggr5iQfLGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEKWQEaY q1B0IOIeQAfCKRlTSh3JMB8GA1UdIwQYMBaAFIeLhoaV/EXJxjtvvFTMs1CcS59L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTM1Qy81MkZDNkI5ODI2 MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJjbkdPMi04Vk15elVKeExu MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g0dUdocFg4UmNuR08yLThWTXl6VUp4TG4wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTM1Qy81MkZDNkI5ODI2MTgxMUVBQkZFREUxMTNDNEY5QUUwMi9oNHVHaHBYOFJj bkdPMi04Vk15elVKeExuMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6i44aHvZSV4qigoikWJC7ZapeHetXIOhzITJhXOyTnCFC5wrEX1Nu 8Twl+vkoYe7KmIr1gajvZZNbcXsC2DmL/bS3zOWR/HQprBFjCCig8Xocwcz58jpQ EuI2gLWMZhIFxhvSDVC+XZfefGmBJAOCgJ5w/XhjYDdPctOatwY9tims0qBx7ve5 UdQSsgcCabtcDUoP6KJPtwRh5TDQM2We0RnVruD6A3eZcUOfCSL1EoC9YkE9plPw FnUKWlTihF9VWZrgcCOSl7xXoA6HFYfVejy53che8TbJuu5StxME/lHudLWGhecZ Fj9+7ugZXFS3ruJKwU1b4WZ/P/Nyf35b -----END CERTIFICATE-----Generated at Sat Aug 23 15:59:12 2025 by rpki-client