$ rpki-client -vvf rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft File: 0fHal9jt-Zxl369uyp87Umxgq0E.mft (raw, json) Hash identifier: Pk3bfEWvQgM3VeN/HyzQhrvmnk1neq8b+HPUwGRzYhY= Subject key identifier: E6:A7:40:65:47:D8:C3:7F:A0:94:58:38:99:FE:3A:C2:C7:5E:42:C4 Authority key identifier: D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 Certificate issuer: /CN=A912185F/serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft Manifest number: 8C Signing time: Sat 31 May 2025 06:10:30 +0000 Manifest this update: Sat 31 May 2025 06:10:30 +0000 Manifest next update: Sat 07 Jun 2025 06:10:30 +0000 Files and hashes: 1: 0fHal9jt-Zxl369uyp87Umxgq0E.crl (hash: rkOqugGIL2oMWTHH4c5IPNp0V60iWnMpvb9sQl8SoIM=) 2: F33FD8F8EA5611EF8C0DD984C4F9AE02.roa (hash: CyE/igdPfW2RYSF3wOEJ7cJivf90Ng4geSYtO0ZaU/4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912185F, serialNumber=D1F1DA97D8EDF99C65DFAF6ECA9F3B526C60AB41 Validity Not Before: May 31 06:10:30 2025 GMT Not After : Jun 7 06:10:30 2025 GMT Subject: CN=683a9d56-f4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:55:5c:44:a8:12:40:a5:f2:48:ac:8b:0d:81: ab:72:d8:3b:ee:76:e9:ef:8d:a2:a9:28:7c:2b:52: 81:96:23:d3:67:28:22:9d:65:59:b8:62:ee:c6:cf: e7:44:5f:bc:a8:85:1f:00:6d:0d:b4:01:fa:76:34: f7:70:8d:2c:42:c2:c6:bc:f9:f3:50:95:6c:51:c9: f4:41:df:b0:87:08:8d:fd:82:3a:26:56:2a:e4:4b: c7:0a:b9:12:de:78:3d:5d:0e:0a:5f:74:e5:ca:5c: 96:b1:dd:e1:ee:89:65:2b:ad:e5:5d:34:06:ea:f7: 1b:f9:56:4f:f0:d9:7c:95:d5:85:4b:c0:4b:ae:3a: fc:ab:0d:02:b2:58:66:60:d1:83:7c:0f:85:9e:48: b8:00:5d:ac:35:f2:70:75:a3:5d:95:df:32:79:1e: 4a:00:e5:8e:9b:ad:4e:8c:2e:ec:de:9c:90:a3:ed: 43:41:a4:4b:c1:bc:ac:e5:2c:87:25:5c:08:8a:5f: a5:8b:a8:e3:d6:b6:40:08:a4:9f:82:6d:7b:d8:00: 61:aa:ca:3b:f2:d9:2e:e4:75:90:a4:bb:45:04:58: f9:27:a2:c1:63:04:9f:a0:9a:59:33:c9:55:64:a2: de:ed:8f:a4:7c:67:f0:0a:9e:69:6f:ba:db:c4:26: 59:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:A7:40:65:47:D8:C3:7F:A0:94:58:38:99:FE:3A:C2:C7:5E:42:C4 X509v3 Authority Key Identifier: keyid:D1:F1:DA:97:D8:ED:F9:9C:65:DF:AF:6E:CA:9F:3B:52:6C:60:AB:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fHal9jt-Zxl369uyp87Umxgq0E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912185F/20FB6D26754E11EF9C79AF6EC4F9AE02/0fHal9jt-Zxl369uyp87Umxgq0E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:63:5a:e1:d2:af:71:46:2b:60:37:fc:c2:6c:be:30:c0:4f: 19:5b:cf:1c:43:e1:05:18:7a:4b:86:62:3d:06:a4:e8:5d:e5: 26:8a:58:ef:f0:70:75:3c:80:0a:b6:3b:17:ce:f6:85:f9:74: f6:5d:fb:b7:1f:dc:e8:72:d3:74:d0:0a:c5:8b:39:9f:17:2a: c0:94:99:a1:27:d7:23:09:54:99:c5:dc:7c:bd:a6:16:86:26: 11:27:ab:8a:29:bc:a7:2d:5c:cd:fc:36:d4:81:e9:56:56:71: 9b:79:8c:fb:9b:74:67:36:4f:ca:5f:df:77:32:38:9c:ab:8e: 3e:d9:01:12:52:92:7c:64:9f:78:33:2c:26:aa:b3:90:e8:20: 15:9c:0f:7c:ce:d6:e3:bd:3b:cf:8e:3f:fb:39:84:84:fc:ca: 25:3a:80:9d:e7:11:91:24:fe:09:6b:91:40:02:fb:a8:b6:3f: ea:3a:3e:fe:8b:d4:38:02:b7:fc:20:02:c8:f9:f0:a2:a5:6f: d6:db:d1:44:24:6c:fa:f6:da:82:d4:48:51:47:ee:e3:a8:f9: 26:67:a1:e5:e1:52:cf:5a:f9:a3:15:7f:29:c4:0a:9c:5a:a2: 2f:51:07:85:68:fe:a7:ac:4f:66:79:f3:a2:22:b2:73:a9:e6: ed:20:2c:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4NUYxMTAvBgNVBAUTKEQxRjFEQTk3RDhFREY5OUM2NURGQUY2RUNBOUYzQjUy NkM2MEFCNDEwHhcNMjUwNTMxMDYxMDMwWhcNMjUwNjA3MDYxMDMwWjAYMRYwFAYD VQQDEw02ODNhOWQ1Ni1mNGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA81VcRKgSQKXySKyLDYGrctg77nbp742iqSh8K1KBliPTZyginWVZuGLuxs/n RF+8qIUfAG0NtAH6djT3cI0sQsLGvPnzUJVsUcn0Qd+whwiN/YI6JlYq5EvHCrkS 3ng9XQ4KX3TlylyWsd3h7ollK63lXTQG6vcb+VZP8Nl8ldWFS8BLrjr8qw0Cslhm YNGDfA+Fnki4AF2sNfJwdaNdld8yeR5KAOWOm61OjC7s3pyQo+1DQaRLwbys5SyH JVwIil+li6jj1rZACKSfgm172ABhqso78tku5HWQpLtFBFj5J6LBYwSfoJpZM8lV ZKLe7Y+kfGfwCp5pb7rbxCZZowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOanQGVH 2MN/oJRYOJn+OsLHXkLEMB8GA1UdIwQYMBaAFNHx2pfY7fmcZd+vbsqfO1JsYKtB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg1Ri8yMEZCNkQyNjc1 NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1aeGwzNjl1eXA4N1VteGdx MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBmSGFsOWp0LVp4bDM2OXV5cDg3VW14Z3EwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTg1Ri8yMEZCNkQyNjc1NEUxMUVGOUM3OUFGNkVDNEY5QUUwMi8wZkhhbDlqdC1a eGwzNjl1eXA4N1VteGdxMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoY1rh0q9xRitgN/zCbL4wwE8ZW88cQ+EFGHpLhmI9BqToXeUmiljv 8HB1PIAKtjsXzvaF+XT2Xfu3H9zoctN00ArFizmfFyrAlJmhJ9cjCVSZxdx8vaYW hiYRJ6uKKbynLVzN/DbUgelWVnGbeYz7m3RnNk/KX993Mjicq44+2QESUpJ8ZJ94 MywmqrOQ6CAVnA98ztbjvTvPjj/7OYSE/MolOoCd5xGRJP4Ja5FAAvuotj/qOj7+ i9Q4Arf8IALI+fCipW/W29FEJGz69tqC1EhRR+7jqPkmZ6Hl4VLPWvmjFX8pxAqc WqIvUQeFaP6nrE9mefOiIrJzqebtICw9 -----END CERTIFICATE-----Generated at Sat May 31 17:26:17 2025 by rpki-client