$ rpki-client -vvf rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft File: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft (raw, json) Hash identifier: 5YOAGftaTQKUqJZndMAxOceaB/+9p2bYEARnGjENGFM= Subject key identifier: 32:53:C6:3F:BF:FF:BC:8F:26:89:88:DE:29:2A:11:34:5D:63:38:D6 Authority key identifier: 87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9 Certificate issuer: /CN=A916B02F/serialNumber=87F31B201BDD187581540C5B8B864438C29990B9 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft Manifest number: 015F Signing time: Fri 19 Sep 2025 04:36:08 +0000 Manifest this update: Fri 19 Sep 2025 04:36:08 +0000 Manifest next update: Fri 26 Sep 2025 04:36:08 +0000 Files and hashes: 1: h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl (hash: QUn+NI2ZOZtRJBoyNWBFTwHwL8hP78F5G23UOC0HIVI=) 2: 27178D9E7FBC11EEAF80B825C4F9AE02.roa (hash: lQYmsDBc3UpFQI5bvRZLM1pLBA2w7erJcueIAfvmPc0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 04:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B02F, serialNumber=87F31B201BDD187581540C5B8B864438C29990B9 Validity Not Before: Sep 19 04:36:08 2025 GMT Not After : Sep 26 04:36:08 2025 GMT Subject: CN=68ccddb8-6d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9c:de:40:e5:cc:a5:8b:99:1e:bf:15:d1:2d: 66:ff:90:77:4f:fc:da:47:4c:a9:3b:a2:3a:a8:e7: e1:0f:62:63:4d:0a:88:f0:19:98:73:d4:d7:64:04: 4b:63:54:93:31:ba:73:c1:7d:33:8b:ea:18:80:51: 71:4c:34:35:8d:9e:cc:3b:b5:18:84:ad:9a:b4:57: 72:a4:3d:4b:89:b0:f5:ee:90:9d:f9:3b:2e:c1:b7: 31:1f:f1:a3:c4:28:1d:e4:e0:2c:22:f8:9a:d8:c0: 97:4e:d5:55:7a:5b:45:d0:e0:2c:37:49:f7:15:8a: f3:30:1e:a9:66:a6:22:03:11:b4:97:3f:5e:7b:32: dd:e7:95:7f:27:44:19:98:e6:94:98:79:d0:01:ef: ff:77:6f:f7:d9:92:50:9d:2b:07:b1:27:d2:d5:9a: 2a:5b:bf:6a:f2:3d:6b:a1:de:9c:c6:1d:d4:b3:11: 26:51:56:c6:b3:94:9b:73:65:16:4e:db:7f:93:f4: 59:1c:93:57:a6:4f:f5:ca:1a:0a:0d:f8:ed:eb:66: 39:31:e8:e3:f9:fe:d0:54:ce:3f:a8:77:1a:14:3d: c2:4f:44:e6:9a:56:d4:eb:7a:fe:b2:dd:20:76:89: b6:56:14:a7:21:05:7a:c8:24:fe:b1:12:1c:ef:82: ab:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:53:C6:3F:BF:FF:BC:8F:26:89:88:DE:29:2A:11:34:5D:63:38:D6 X509v3 Authority Key Identifier: keyid:87:F3:1B:20:1B:DD:18:75:81:54:0C:5B:8B:86:44:38:C2:99:90:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B02F/D7C33AB87FBB11EEA6983925C4F9AE02/h_MbIBvdGHWBVAxbi4ZEOMKZkLk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:c3:86:2e:fd:e6:36:c9:9b:7a:57:31:36:4e:43:fe:d6:aa: 9e:a5:e8:13:0e:f0:95:38:df:f0:f3:ae:98:57:83:e4:cc:f8: 0b:a8:44:76:d6:76:4a:04:2a:2a:d7:d2:c5:44:c3:49:9b:9d: 6e:71:9b:80:9f:88:e9:d8:7c:89:b1:21:86:f3:8d:b8:70:96: 41:85:6c:e2:f2:e8:d5:95:45:9d:77:ff:81:b7:c2:2f:ef:d3: 3d:eb:db:6f:86:29:08:51:6a:bc:2d:cc:75:0f:72:90:f9:1e: cd:57:84:f7:d1:87:56:15:e8:52:13:9d:a8:3f:0b:99:04:70: 8d:41:30:55:b7:0d:5c:ec:20:1e:18:4d:be:74:65:7a:b0:e1: 47:0a:c4:20:e7:77:e7:2b:bf:91:cc:cc:ed:dd:78:9c:f1:a5: 17:a5:3f:1e:c4:21:2b:7c:c3:13:2a:29:e5:61:46:6f:45:35: 54:b3:bb:12:c8:e2:86:df:98:78:f8:84:36:70:0b:00:5b:bd: 18:59:21:7e:8d:6f:5d:cf:7d:d1:4d:f4:4a:90:d1:b5:ca:60: b9:de:27:45:52:bd:fa:b7:53:5a:60:84:af:fa:02:41:42:b6: 9d:b4:eb:e5:1f:94:ed:8b:65:06:c2:ff:9c:88:76:c1:c2:03: d3:9e:0d:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIwMkYxMTAvBgNVBAUTKDg3RjMxQjIwMUJERDE4NzU4MTU0MEM1QjhCODY0NDM4 QzI5OTkwQjkwHhcNMjUwOTE5MDQzNjA4WhcNMjUwOTI2MDQzNjA4WjAYMRYwFAYD VQQDEw02OGNjZGRiOC02ZDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzZzeQOXMpYuZHr8V0S1m/5B3T/zaR0ypO6I6qOfhD2JjTQqI8BmYc9TXZARL Y1STMbpzwX0zi+oYgFFxTDQ1jZ7MO7UYhK2atFdypD1LibD17pCd+TsuwbcxH/Gj xCgd5OAsIvia2MCXTtVVeltF0OAsN0n3FYrzMB6pZqYiAxG0lz9eezLd55V/J0QZ mOaUmHnQAe//d2/32ZJQnSsHsSfS1ZoqW79q8j1rod6cxh3UsxEmUVbGs5Sbc2UW Ttt/k/RZHJNXpk/1yhoKDfjt62Y5Mejj+f7QVM4/qHcaFD3CT0TmmlbU63r+st0g dom2VhSnIQV6yCT+sRIc74Kr4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJTxj+/ /7yPJomI3ikqETRdYzjWMB8GA1UdIwQYMBaAFIfzGyAb3Rh1gVQMW4uGRDjCmZC5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjAyRi9EN0MzM0FCODdG QkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdIV0JWQXhiaTRaRU9NS1pr TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfTWJJQnZkR0hXQlZBeGJpNFpFT01LWmtMay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjAyRi9EN0MzM0FCODdGQkIxMUVFQTY5ODM5MjVDNEY5QUUwMi9oX01iSUJ2ZEdI V0JWQXhiaTRaRU9NS1prTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0w4Yu/eY2yZt6VzE2TkP+1qqepegTDvCVON/w866YV4PkzPgLqER2 1nZKBCoq19LFRMNJm51ucZuAn4jp2HyJsSGG8424cJZBhWzi8ujVlUWdd/+Bt8Iv 79M969tvhikIUWq8Lcx1D3KQ+R7NV4T30YdWFehSE52oPwuZBHCNQTBVtw1c7CAe GE2+dGV6sOFHCsQg53fnK7+RzMzt3Xic8aUXpT8exCErfMMTKinlYUZvRTVUs7sS yOKG35h4+IQ2cAsAW70YWSF+jW9dz33RTfRKkNG1ymC53idFUr36t1NaYISv+gJB QradtOvlH5Tti2UGwv+ciHbBwgPTng3L -----END CERTIFICATE-----Generated at Fri Sep 19 08:51:50 2025 by rpki-client