$ rpki-client -vvf rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft File: H8daraClG-4avm9zNZ95tqNG9qQ.mft (raw, json) Hash identifier: EJ+LorWt0ZsnPJ8ery5uiOVh1OYsP5+To7+8ldlTmr0= Subject key identifier: 50:28:15:F6:EF:06:19:94:39:0E:52:3E:D5:EA:2E:0A:54:77:B0:04 Authority key identifier: 1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 Certificate issuer: /CN=A912372F/serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft Manifest number: 0432 Signing time: Fri 19 Sep 2025 00:40:20 +0000 Manifest this update: Fri 19 Sep 2025 00:40:20 +0000 Manifest next update: Fri 26 Sep 2025 00:40:20 +0000 Files and hashes: 1: H8daraClG-4avm9zNZ95tqNG9qQ.crl (hash: kfyxiOK48qr+p/dyIFHa70i/MQ/+rtcACCZcp3BfjnE=) 2: FD8409A09C2611EC89DFBD46C4F9AE02.roa (hash: SNGQWMcRYXt1ox4JFFIvZZfuFD9w5cZeUSbmFmE9wug=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912372F, serialNumber=1FC75AADA0A51BEE1ABE6F73359F79B6A346F6A4 Validity Not Before: Sep 19 00:40:20 2025 GMT Not After : Sep 26 00:40:20 2025 GMT Subject: CN=68cca674-bdb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:29:b2:e3:b5:87:6e:37:ca:23:3d:9b:23:4d: 27:ef:88:d9:9b:e4:5e:8d:69:56:40:fe:19:a5:be: 6d:15:ce:6f:9b:64:c0:10:0b:b6:a5:b6:e1:d8:12: 89:f6:79:01:12:8e:61:ba:a7:bc:cd:17:1d:f4:57: 31:f6:b3:5f:0a:72:e4:36:9b:da:f4:b2:5d:d1:e2: 27:13:5a:61:bf:a8:21:0c:8a:30:e0:26:ae:d0:8f: f2:ac:67:c4:2f:13:3e:16:ee:86:f7:b7:8d:78:be: 0d:88:f8:32:0f:db:f4:bc:a7:2f:52:fd:88:9a:f8: 05:14:c8:b7:21:29:34:08:96:af:63:d9:17:97:a1: d1:95:82:73:79:bc:62:cd:ec:e0:32:20:d9:8b:ae: d7:89:b7:3f:66:ec:13:77:f3:03:de:8d:44:d7:e8: ee:65:df:f8:d8:2d:4c:06:b0:7e:0f:72:33:eb:92: 7b:d7:b6:19:bf:8a:c2:9e:9f:c6:78:58:58:12:e1: 6b:05:d5:0e:10:24:01:87:b7:bf:cf:60:d4:1f:94: 84:8f:4e:35:9f:46:f5:4c:cc:95:44:e0:dd:f4:9e: 8e:47:89:84:a5:cb:af:a9:4c:53:9d:af:98:1f:56: 53:c0:76:b9:73:59:55:b2:ff:a4:d3:6c:95:b3:e1: 90:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:28:15:F6:EF:06:19:94:39:0E:52:3E:D5:EA:2E:0A:54:77:B0:04 X509v3 Authority Key Identifier: keyid:1F:C7:5A:AD:A0:A5:1B:EE:1A:BE:6F:73:35:9F:79:B6:A3:46:F6:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8daraClG-4avm9zNZ95tqNG9qQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912372F/9326C790776F11EC82642461C4F9AE02/H8daraClG-4avm9zNZ95tqNG9qQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:5f:18:23:a9:10:93:c4:7f:c5:75:1f:c8:a4:97:e7:51:c8: 9e:fe:b6:ed:b7:2e:18:50:f8:99:0d:09:e9:e3:ef:88:22:97: a4:f5:b7:be:85:72:66:66:a7:45:d7:d9:38:14:63:91:bb:30: 88:23:1f:42:7e:49:c8:fe:0c:f7:f6:95:8c:04:a6:0f:a8:c3: b5:e9:d2:5b:8f:bb:f0:cf:44:82:93:99:49:a0:3c:da:2a:20: 3f:1f:ef:63:22:92:52:e8:4c:87:86:20:c5:e3:f4:b4:5d:68: a3:29:01:00:a5:9b:cf:76:9a:89:fa:d6:9d:45:4a:3b:70:d7: 56:a9:d4:d9:c2:ee:ea:5f:be:b5:3d:2a:f7:60:db:72:14:18: a0:3d:58:d6:e3:26:e2:6d:b9:4a:38:8b:de:db:fd:a6:94:b0: 94:23:d4:9d:1e:7e:1f:c9:f2:a8:a8:24:c9:91:c7:bf:a9:35: 43:71:c6:a2:00:f4:29:c6:4b:7d:17:49:76:19:e8:92:2e:67: fa:7c:f5:9b:ed:f2:2c:87:17:7b:56:c5:e5:08:ac:f1:aa:f8: e4:5c:6e:30:24:38:30:89:8a:21:3a:d3:52:85:cb:a1:80:c1: 50:dc:64:43:80:20:de:66:b9:90:68:df:f7:98:e9:74:40:e8: f9:30:f1:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjM3MkYxMTAvBgNVBAUTKDFGQzc1QUFEQTBBNTFCRUUxQUJFNkY3MzM1OUY3OUI2 QTM0NkY2QTQwHhcNMjUwOTE5MDA0MDIwWhcNMjUwOTI2MDA0MDIwWjAYMRYwFAYD VQQDEw02OGNjYTY3NC1iZGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Smy47WHbjfKIz2bI00n74jZm+RejWlWQP4Zpb5tFc5vm2TAEAu2pbbh2BKJ 9nkBEo5huqe8zRcd9Fcx9rNfCnLkNpva9LJd0eInE1phv6ghDIow4Cau0I/yrGfE LxM+Fu6G97eNeL4NiPgyD9v0vKcvUv2ImvgFFMi3ISk0CJavY9kXl6HRlYJzebxi zezgMiDZi67Xibc/ZuwTd/MD3o1E1+juZd/42C1MBrB+D3Iz65J717YZv4rCnp/G eFhYEuFrBdUOECQBh7e/z2DUH5SEj041n0b1TMyVRODd9J6OR4mEpcuvqUxTna+Y H1ZTwHa5c1lVsv+k02yVs+GQ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAoFfbv BhmUOQ5SPtXqLgpUd7AEMB8GA1UdIwQYMBaAFB/HWq2gpRvuGr5vczWfebajRvak MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzcyRi85MzI2Qzc5MDc3 NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEctNGF2bTl6Tlo5NXRxTkc5 cVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0g4ZGFyYUNsRy00YXZtOXpOWjk1dHFORzlxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MzcyRi85MzI2Qzc5MDc3NkYxMUVDODI2NDI0NjFDNEY5QUUwMi9IOGRhcmFDbEct NGF2bTl6Tlo5NXRxTkc5cVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSXxgjqRCTxH/FdR/IpJfnUcie/rbtty4YUPiZDQnp4++IIpek9be+ hXJmZqdF19k4FGORuzCIIx9CfknI/gz39pWMBKYPqMO16dJbj7vwz0SCk5lJoDza KiA/H+9jIpJS6EyHhiDF4/S0XWijKQEApZvPdpqJ+tadRUo7cNdWqdTZwu7qX761 PSr3YNtyFBigPVjW4ybibblKOIve2/2mlLCUI9SdHn4fyfKoqCTJkce/qTVDccai APQpxkt9F0l2GeiSLmf6fPWb7fIshxd7VsXlCKzxqvjkXG4wJDgwiYohOtNShcuh gMFQ3GRDgCDeZrmQaN/3mOl0QOj5MPGC -----END CERTIFICATE-----Generated at Fri Sep 19 06:14:35 2025 by rpki-client