$ rpki-client -vvf rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft File: 0fHal9jt-Zxl369uyp87Umxgq0E.mft (raw, json) Hash identifier: 8eGassrKeX3xk0qsr5uaZgu1Jm0WuGzvqNL5NEcPRSE= Subject key identifier: 1C:40:5D:88:48:97:08:DE:EC:0D:F2:6B:CB:63:C1:1F:E7:93:C6:8B Authority key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 Certificate issuer: /CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft Manifest number: C4 Signing time: Wed 17 Sep 2025 06:35:38 +0000 Manifest this update: Wed 17 Sep 2025 06:35:38 +0000 Manifest next update: Wed 24 Sep 2025 06:35:38 +0000 Files and hashes: 1: 0fHal9jt-Zxl369uyp87Umxgq0E.crl (hash: kej/WCYeG2ARDHqOv5jdEr2V9kprDXSRU4InQbKAdkI=) 2: F33FD8F8EA5611EF8C0DD984C4F9AE02.roa (hash: CyE/igdPfW2RYSF3wOEJ7cJivf90Ng4geSYtO0ZaU/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:35:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912185F, serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Validity Not Before: Sep 17 06:35:38 2025 GMT Not After : Sep 24 06:35:38 2025 GMT Subject: CN=68ca56ba-5117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c8:99:cc:fa:9a:91:6a:35:52:e7:16:d9:7d: 46:d5:40:a0:bd:aa:87:b0:1d:92:c2:4d:9f:a7:e4: ad:23:c9:8a:61:19:ba:84:a4:16:a4:d7:75:a7:09: 7f:e6:03:f9:6e:f8:ca:78:75:71:c3:28:7c:ee:c2: 41:a2:f7:67:94:cd:44:ea:c9:6a:4b:c6:4f:82:24: 5a:9d:9a:21:a6:2b:f4:78:f4:b3:a5:2a:87:cc:22: 7d:f2:3b:b4:d5:57:11:90:60:1b:83:08:cd:33:f5: da:7f:a2:29:d4:d6:64:b1:43:93:55:2b:d3:a5:ca: 32:d8:7c:74:00:99:56:c7:63:ba:dd:a1:41:50:d3: 76:08:27:3f:ec:7e:2b:13:ea:fc:4b:a2:d4:56:c0: c2:82:a2:3d:02:fd:b7:19:60:17:91:7d:af:3e:92: b5:eb:6f:cb:9a:bf:f1:e2:a1:4d:84:5b:ee:25:b0: 5e:6a:d8:de:c8:83:2b:0d:82:60:da:df:cc:06:0a: f0:e6:51:65:1b:ee:a8:ac:c3:8b:06:44:09:ef:b3: bd:59:64:b0:df:7d:af:0a:cd:18:57:b9:e1:85:7f: ac:bc:1d:d7:5b:37:71:28:2d:0a:d3:95:c3:9d:70: 0d:6d:50:0d:f0:3b:72:fb:cf:2e:09:79:f1:af:1f: 1c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:40:5D:88:48:97:08:DE:EC:0D:F2:6B:CB:63:C1:1F:E7:93:C6:8B X509v3 Authority Key Identifier: keyid:D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:d1:3a:2d:9d:64:7d:2f:20:f7:ad:08:e4:2e:08:4e:7d:80: 4d:eb:73:29:2c:77:e1:a9:25:35:fc:c0:a5:f8:2c:ff:9a:6e: 83:e5:91:f9:c0:62:12:c1:0c:25:92:90:f1:63:81:48:7f:b0: 2e:73:f9:22:20:b7:8b:3f:65:ee:15:63:95:cd:0a:f3:fe:34: 78:d1:13:18:2d:49:8e:53:83:d2:97:54:88:77:9f:18:df:17: cb:c6:a4:e9:bc:4a:4d:32:eb:ae:70:4e:8e:04:64:4f:b7:15: 7a:1c:03:27:f5:d7:c4:ae:9a:a7:5a:49:01:03:1a:ba:24:7f: d9:2f:ac:8d:d7:72:5c:94:1b:ca:2f:fa:7e:20:e6:ed:6f:4a: 0b:38:28:99:18:89:3b:69:28:b8:42:44:83:dc:ed:b2:88:2b: 28:33:ef:89:2a:3b:e9:be:38:a8:9e:f2:9e:3a:2c:57:32:e4: 27:ed:67:92:6e:64:77:ff:79:a7:f4:ed:e7:b7:3c:a4:b2:11: d1:38:b8:5d:e8:1c:c0:98:85:ef:c8:0d:d8:c8:c9:23:b2:fa: a0:23:59:3f:53:70:50:fb:6c:f9:e5:ad:96:51:d9:bb:b7:db: ee:57:e4:95:36:c8:86:11:60:b5:ec:a1:39:26:d8:3c:90:f6: 8b:19:a8:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4NUYxMTAvBgNVBAUTKEQxRjFEQTk3RDhFREY5OUM2NURGQUY2RUNBOUYzQjUy NkM2MEFCNDEwHhcNMjUwOTE3MDYzNTM4WhcNMjUwOTI0MDYzNTM4WjAYMRYwFAYD VQQDEw02OGNhNTZiYS01MTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MiZzPqakWo1UucW2X1G1UCgvaqHsB2Swk2fp+StI8mKYRm6hKQWpNd1pwl/ 5gP5bvjKeHVxwyh87sJBovdnlM1E6slqS8ZPgiRanZohpiv0ePSzpSqHzCJ98ju0 1VcRkGAbgwjNM/Xaf6Ip1NZksUOTVSvTpcoy2Hx0AJlWx2O63aFBUNN2CCc/7H4r E+r8S6LUVsDCgqI9Av23GWAXkX2vPpK162/Lmr/x4qFNhFvuJbBeatjeyIMrDYJg 2t/MBgrw5lFlG+6orMOLBkQJ77O9WWSw332vCs0YV7nhhX+svB3XWzdxKC0K05XD nXANbVAN8Dty+88uCXnxrx8coQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxAXYhI lwje7A3ya8tjwR/nk8aLMB8GA1UdIwQYMBaAFNHx2pfY7fmcZd+vbsqfO1JsYKtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg1Ri8yMEZCNkQyNjc1 NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1aeGwzNjl1eXA4N1VteGdx MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmSGFsOWp0LVp4bDM2OXV5cDg3VW14Z3EwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTg1Ri8yMEZCNkQyNjc1NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1a eGwzNjl1eXA4N1VteGdxMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl0TotnWR9LyD3rQjkLghOfYBN63MpLHfhqSU1/MCl+Cz/mm6D5ZH5 wGISwQwlkpDxY4FIf7Auc/kiILeLP2XuFWOVzQrz/jR40RMYLUmOU4PSl1SId58Y 3xfLxqTpvEpNMuuucE6OBGRPtxV6HAMn9dfErpqnWkkBAxq6JH/ZL6yN13JclBvK L/p+IObtb0oLOCiZGIk7aSi4QkSD3O2yiCsoM++JKjvpvjionvKeOixXMuQn7WeS bmR3/3mn9O3ntzykshHROLhd6BzAmIXvyA3YyMkjsvqgI1k/U3BQ+2z55a2WUdm7 t9vuV+SVNsiGEWC17KE5Jtg8kPaLGaiZ -----END CERTIFICATE-----Generated at Fri Sep 19 02:52:53 2025 by rpki-client