$ rpki-client -vvf rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft File: hEvW0alyz9K2C4TeDLY-XVSvqM8.mft (raw, json) Hash identifier: X75yqeOn9Iix3bqTRSIG3JI5oQivxJhRjDWW0IDsZcI= Subject key identifier: 69:D5:80:96:4F:14:87:91:D1:53:95:05:5A:38:9D:DB:D3:B1:8B:BF Authority key identifier: 84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF Certificate issuer: /CN=A9161CEF/serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft Manifest number: 0B3E Signing time: Wed 20 Aug 2025 19:21:34 +0000 Manifest this update: Wed 20 Aug 2025 19:21:34 +0000 Manifest next update: Wed 27 Aug 2025 19:21:34 +0000 Files and hashes: 1: hEvW0alyz9K2C4TeDLY-XVSvqM8.crl (hash: XVsdzMMek51dv6VDjB3nvyHuaR34DvfZIlVUKq7iwa0=) 2: 42B2A584790C11F0BFDABE73C4F9AE02.roa (hash: rsXupeO8EVGQ/M7qesQZfS0Ho6k/jy/+B1i/0dc3Rfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:21:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161CEF, serialNumber=844BD6D1A972CFD2B60B84DE0CB63E5D54AFA8CF Validity Not Before: Aug 20 19:21:34 2025 GMT Not After : Aug 27 19:21:34 2025 GMT Subject: CN=68a6203e-35ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:da:78:49:51:18:f2:2b:5b:36:0e:63:4d:50: ff:52:f3:c7:8f:99:63:50:c9:c0:6a:01:64:20:d3: 22:6f:67:b8:16:82:0d:7b:b6:eb:d2:76:17:22:59: 5f:b3:fd:58:1d:d4:17:1e:12:d4:82:f8:bb:9d:ee: 1e:70:3a:f7:50:b0:7d:03:4f:8d:d9:a4:f3:64:50: f1:7f:ab:d0:8c:71:f7:04:0c:c5:8c:fd:82:c4:89: b5:84:5c:4d:bb:bc:53:e9:0c:f3:b8:bb:09:cc:ba: 6a:de:c7:2c:cd:19:60:64:08:6b:ae:8c:fc:bc:39: 28:2b:c0:f6:54:f2:7d:73:79:c9:6f:20:50:3c:0a: f1:b7:b2:3d:f8:ea:2e:f4:e1:5b:af:18:ed:a3:6e: 50:91:30:a0:be:8c:24:53:41:7a:aa:1b:d0:1f:12: da:fb:69:09:bb:88:7d:f1:c1:45:0c:08:c4:39:fe: 72:b9:03:12:80:95:79:7a:7b:f6:6e:35:dc:06:d7: e0:57:29:86:2f:c5:fd:c3:29:20:b0:b8:4a:b8:c6: df:c5:2f:f2:72:c9:04:6b:13:46:88:14:f5:33:f0: 73:a5:4c:49:74:63:83:2f:65:93:d6:10:86:0e:8d: 9d:44:8d:f5:66:f0:ac:2b:fe:a2:4f:a0:0e:a7:bb: 4e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D5:80:96:4F:14:87:91:D1:53:95:05:5A:38:9D:DB:D3:B1:8B:BF X509v3 Authority Key Identifier: keyid:84:4B:D6:D1:A9:72:CF:D2:B6:0B:84:DE:0C:B6:3E:5D:54:AF:A8:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEvW0alyz9K2C4TeDLY-XVSvqM8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161CEF/9CE51258459111EABE6B931BC4F9AE02/hEvW0alyz9K2C4TeDLY-XVSvqM8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:29:a4:43:51:98:6a:90:34:c1:57:33:80:66:b0:22:90:03: ca:cb:59:32:6c:cc:dd:67:b0:50:84:eb:55:a6:1a:34:96:34: 37:c0:dc:6a:ef:a5:1c:59:be:70:d0:80:57:94:f2:df:68:2d: 70:61:5a:43:44:98:82:42:f0:38:0b:ce:4d:1c:3c:76:60:0d: af:60:35:30:69:28:6a:cd:86:f1:ad:40:e8:e4:45:0f:6f:a7: ff:dc:d9:59:57:d0:56:25:7b:a1:d8:9a:15:74:85:12:6e:a6: 88:c4:b3:5e:1a:bf:a9:e8:ef:bc:4f:c1:93:cb:fa:63:78:17: f3:a2:dd:d5:56:d3:25:e9:38:50:45:5b:20:5f:d8:48:59:81: 93:0a:cf:21:60:79:66:2d:21:79:c3:da:62:d8:ed:92:67:96: 59:85:0a:2d:a0:a1:b6:c9:d3:14:31:a1:34:4b:e0:a0:90:61: eb:bc:22:dc:58:27:11:bd:fc:77:96:d5:0f:e6:20:a2:b9:ef: 9f:4a:67:19:96:74:20:d1:18:c9:fd:a6:32:00:0a:89:f3:08: 75:cb:aa:c8:8f:b6:3f:52:f2:d0:8a:d7:eb:9e:6e:f2:ee:be: 14:d6:c4:72:87:e5:7e:ff:e4:b4:22:1e:9f:47:73:b3:c3:b7: bf:02:71:81 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUNFRjExMC8GA1UEBRMoODQ0QkQ2RDFBOTcyQ0ZEMkI2MEI4NERFMENCNjNFNUQ1 NEFGQThDRjAeFw0yNTA4MjAxOTIxMzRaFw0yNTA4MjcxOTIxMzRaMBgxFjAUBgNV BAMTDTY4YTYyMDNlLTM1YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI2nhJURjyK1s2DmNNUP9S88ePmWNQycBqAWQg0yJvZ7gWgg17tuvSdhciWV+z /Vgd1BceEtSC+Lud7h5wOvdQsH0DT43ZpPNkUPF/q9CMcfcEDMWM/YLEibWEXE27 vFPpDPO4uwnMumrexyzNGWBkCGuujPy8OSgrwPZU8n1zeclvIFA8CvG3sj346i70 4VuvGO2jblCRMKC+jCRTQXqqG9AfEtr7aQm7iH3xwUUMCMQ5/nK5AxKAlXl6e/Zu NdwG1+BXKYYvxf3DKSCwuEq4xt/FL/JyyQRrE0aIFPUz8HOlTEl0Y4MvZZPWEIYO jZ1EjfVm8Kwr/qJPoA6nu06DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUadWAlk8U h5HRU5UFWjid29Oxi78wHwYDVR0jBBgwFoAUhEvW0alyz9K2C4TeDLY+XVSvqM8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQ0VGLzlDRTUxMjU4NDU5 MTExRUFCRTZCOTMxQkM0RjlBRTAyL2hFdlcwYWx5ejlLMkM0VGVETFktWFZTdnFN OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvaEV2VzBhbHl6OUsyQzRUZURMWS1YVlN2cU04LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYx Q0VGLzlDRTUxMjU4NDU5MTExRUFCRTZCOTMxQkM0RjlBRTAyL2hFdlcwYWx5ejlL MkM0VGVETFktWFZTdnFNOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAA4ppENRmGqQNMFXM4BmsCKQA8rLWTJszN1nsFCE61WmGjSWNDfA3Grv pRxZvnDQgFeU8t9oLXBhWkNEmIJC8DgLzk0cPHZgDa9gNTBpKGrNhvGtQOjkRQ9v p//c2VlX0FYle6HYmhV0hRJupojEs14av6no77xPwZPL+mN4F/Oi3dVW0yXpOFBF WyBf2EhZgZMKzyFgeWYtIXnD2mLY7ZJnllmFCi2gobbJ0xQxoTRL4KCQYeu8ItxY JxG9/HeW1Q/mIKK5759KZxmWdCDRGMn9pjIAConzCHXLqsiPtj9S8tCK1+uebvLu vhTWxHKH5X7/5LQiHp9Hc7PDt78CcYE= -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:00 2025 by rpki-client