$ rpki-client -vvf rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft File: hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft (raw, json) Hash identifier: FnJg/LM+IK+Eo/otWBvCqPSrZ9vSO3d+oB+aPvkXPEU= Subject key identifier: 96:42:F2:38:DD:7C:13:B9:84:ED:B6:6D:E3:69:6D:BF:07:F7:B9:DD Authority key identifier: 85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF Certificate issuer: /CN=A911C9E8/serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF Certificate serial: 0179 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft Manifest number: 0176 Signing time: Wed 17 Sep 2025 04:19:07 +0000 Manifest this update: Wed 17 Sep 2025 04:19:06 +0000 Manifest next update: Wed 24 Sep 2025 04:19:06 +0000 Files and hashes: 1: hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl (hash: ++3WflvqUPsGUKkAlAMPkF8dNmVcDQzNGatL4Lq6eAU=) 2: E39F4ED65C2411EEB54C4F43C4F9AE02.roa (hash: jSX8BBXcDhKRO02h61flDcL9PRKVJzf27mu274wCdhk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:19:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 377 (0x179) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C9E8, serialNumber=85299F0DB14C8F0A53D2446EFDB0CC059C1524BF Validity Not Before: Sep 17 04:19:06 2025 GMT Not After : Sep 24 04:19:06 2025 GMT Subject: CN=68ca36ba-a5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5d:ca:ae:91:31:64:2c:b6:3f:00:62:9c:b0: eb:74:4d:19:db:2b:ee:df:6d:c5:b5:27:a9:89:80: e2:dc:8b:cf:3e:d2:7b:6b:9c:41:70:89:77:96:cc: 8d:8a:ea:a8:f7:25:bc:d8:09:85:5c:05:db:1b:1c: 59:0e:fe:6b:be:85:cb:45:77:2c:f8:b9:96:4a:0c: 26:da:b0:de:0e:84:80:e6:55:c0:37:a8:94:d4:cf: f8:94:73:d7:0d:a1:58:69:33:c7:5b:52:aa:7e:e8: 8b:fb:d4:86:24:88:7d:24:bc:4d:2f:00:34:1f:7f: c1:87:33:93:66:65:3b:2a:00:ee:ee:d0:85:bc:5d: b4:2a:25:fe:d7:66:c5:4c:f5:1e:5e:eb:02:bf:61: dc:55:9a:98:f4:ab:3b:1b:d6:92:17:a8:70:98:44: d1:72:9c:2a:14:1a:2a:df:0a:12:59:e4:85:73:90: 73:44:2c:44:94:28:82:f2:68:3c:be:5e:58:fd:21: 73:05:50:78:bb:01:83:74:03:3c:79:90:b3:34:a7: 11:29:21:d0:65:ec:34:c7:28:df:33:1c:af:e7:96: c4:fd:4b:e4:d9:6c:f8:b9:ef:b2:a1:49:7c:41:9b: 57:d5:90:0b:73:90:8b:a3:4d:a6:59:32:47:ee:d5: 2f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:42:F2:38:DD:7C:13:B9:84:ED:B6:6D:E3:69:6D:BF:07:F7:B9:DD X509v3 Authority Key Identifier: keyid:85:29:9F:0D:B1:4C:8F:0A:53:D2:44:6E:FD:B0:CC:05:9C:15:24:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hSmfDbFMjwpT0kRu_bDMBZwVJL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C9E8/FDF6730658FD11EE9D2D2376C4F9AE02/hSmfDbFMjwpT0kRu_bDMBZwVJL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:98:db:b3:14:2a:33:67:c1:f6:d4:6c:32:9a:ff:55:2c:10: 10:7e:5a:67:4b:d5:71:ba:88:02:ce:db:f3:22:8b:5a:48:fd: a0:65:ff:e2:44:53:02:70:bf:0a:b1:33:a7:14:44:52:ef:20: 40:41:50:b3:a8:78:11:86:71:2c:80:a2:bb:83:07:9c:6b:94: 81:4b:a9:cd:af:ea:da:5e:b6:e4:7a:c8:6f:17:fd:6f:76:58: b2:07:7c:46:33:77:41:19:08:18:18:a1:1e:8f:9c:fe:c0:65: fa:3d:c5:e9:ee:2d:10:b8:cb:c8:fa:fc:03:6b:5c:dd:1d:c9: 74:c7:92:31:d9:08:05:cb:6e:d1:21:81:98:8b:e0:76:b8:2b: 1e:5b:1b:a1:cd:c2:08:68:0c:ac:50:76:79:1c:a0:1a:e6:1f: cf:5d:b1:ce:00:0d:4e:df:c6:f1:ed:92:04:aa:26:a8:9d:68: d4:4c:3f:aa:8c:db:b5:32:39:32:d3:f1:1a:7f:0e:e3:58:f0: fd:c5:0c:9c:f7:4d:b8:d5:6b:e1:63:03:5c:5a:72:5b:5b:5c: d4:4f:0c:db:06:a5:57:d7:2f:69:4d:11:08:0e:23:d2:bc:e2: 86:fe:a0:f8:a4:64:92:79:b5:73:58:3e:86:5b:16:9c:8a:29: d6:69:4b:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM5RTgxMTAvBgNVBAUTKDg1Mjk5RjBEQjE0QzhGMEE1M0QyNDQ2RUZEQjBDQzA1 OUMxNTI0QkYwHhcNMjUwOTE3MDQxOTA2WhcNMjUwOTI0MDQxOTA2WjAYMRYwFAYD VQQDEw02OGNhMzZiYS1hNWY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwV3KrpExZCy2PwBinLDrdE0Z2yvu323FtSepiYDi3IvPPtJ7a5xBcIl3lsyN iuqo9yW82AmFXAXbGxxZDv5rvoXLRXcs+LmWSgwm2rDeDoSA5lXAN6iU1M/4lHPX DaFYaTPHW1KqfuiL+9SGJIh9JLxNLwA0H3/BhzOTZmU7KgDu7tCFvF20KiX+12bF TPUeXusCv2HcVZqY9Ks7G9aSF6hwmETRcpwqFBoq3woSWeSFc5BzRCxElCiC8mg8 vl5Y/SFzBVB4uwGDdAM8eZCzNKcRKSHQZew0xyjfMxyv55bE/Uvk2Wz4ue+yoUl8 QZtX1ZALc5CLo02mWTJH7tUv3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZC8jjd fBO5hO22beNpbb8H97ndMB8GA1UdIwQYMBaAFIUpnw2xTI8KU9JEbv2wzAWcFSS/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzlFOC9GREY2NzMwNjU4 RkQxMUVFOUQyRDIzNzZDNEY5QUUwMi9oU21mRGJGTWp3cFQwa1J1X2JETUJad1ZK TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hTbWZEYkZNandwVDBrUnVfYkRNQlp3VkpMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzlFOC9GREY2NzMwNjU4RkQxMUVFOUQyRDIzNzZDNEY5QUUwMi9oU21mRGJGTWp3 cFQwa1J1X2JETUJad1ZKTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLmNuzFCozZ8H21Gwymv9VLBAQflpnS9VxuogCztvzIotaSP2gZf/i RFMCcL8KsTOnFERS7yBAQVCzqHgRhnEsgKK7gweca5SBS6nNr+raXrbkeshvF/1v dliyB3xGM3dBGQgYGKEej5z+wGX6PcXp7i0QuMvI+vwDa1zdHcl0x5Ix2QgFy27R IYGYi+B2uCseWxuhzcIIaAysUHZ5HKAa5h/PXbHOAA1O38bx7ZIEqiaonWjUTD+q jNu1Mjky0/Eafw7jWPD9xQyc90241WvhYwNcWnJbW1zUTwzbBqVX1y9pTREIDiPS vOKG/qD4pGSSebVzWD6GWxaciinWaUtF -----END CERTIFICATE-----Generated at Fri Sep 19 03:36:39 2025 by rpki-client