$ rpki-client -vvf rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft File: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft (raw, json) Hash identifier: cIH7OZ84Vx83mH7dkFVn4YT/KPMrRjaAgkhnqgyCsDE= Subject key identifier: FD:35:5D:11:C6:EE:3C:11:DA:57:DE:BF:1E:55:0D:3D:87:31:35:FC Authority key identifier: F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 Certificate issuer: /CN=A9122ACB/serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Certificate serial: 3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft Manifest number: 3C Signing time: Sat 09 Aug 2025 08:02:27 +0000 Manifest this update: Sat 09 Aug 2025 08:02:27 +0000 Manifest next update: Sat 16 Aug 2025 08:02:27 +0000 Files and hashes: 1: 8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl (hash: mK21DT8GQSDLTSQFyp5lbIj633WoEf6q4WKj6YphQ2I=) 2: B5ACF6162FD811F0BCCB5C1DC4F9AE02.roa (hash: o/13AO8mPDvXBUbVg85hPilsA+v8uBO89/ms9/UgUgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62 (0x3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122ACB, serialNumber=F009233D8D087FC1D0F6425780E3A4D844A34F81 Validity Not Before: Aug 9 08:02:27 2025 GMT Not After : Aug 16 08:02:27 2025 GMT Subject: CN=68970093-1dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:8d:1d:58:a9:30:e7:6d:e3:f3:79:8a:a3: b7:5e:45:06:40:78:b7:36:d7:03:38:a2:3f:e2:c0: fe:d0:52:8f:6f:35:a6:5d:96:81:76:f3:94:3c:97: 41:82:e3:ba:c2:57:a8:ae:30:36:fa:3b:51:e4:20: 0d:81:1b:aa:10:c7:8f:50:32:ff:83:97:71:f4:a4: 84:83:d7:44:92:64:c9:db:c1:b0:ee:99:54:f9:01: a7:70:6c:7e:c6:b7:1f:ba:c6:73:df:c1:2c:fd:6b: b9:d1:de:ac:a8:e3:9e:4d:57:21:6b:8f:a8:6b:e1: 6e:b4:65:3f:fd:da:18:2f:c1:5c:17:71:37:ee:16: df:b1:60:44:6d:be:9c:df:36:bf:46:e6:c1:a3:3b: 09:17:f4:66:dc:12:30:67:7d:a6:36:44:16:d4:d4: 55:c2:1c:32:57:35:52:60:70:25:af:39:73:7d:ee: a2:94:9f:2c:12:7a:4e:07:19:51:7f:36:19:80:0c: 9e:40:23:d0:a4:dd:2d:fe:1f:18:b2:5a:45:e8:bb: a0:68:a7:f3:81:29:70:14:b0:6a:fc:81:69:0a:36: 01:88:9f:1b:05:01:2f:17:8d:56:b3:5f:38:98:06: ae:31:ee:9d:74:0e:00:27:e2:0f:93:7a:e0:5e:39: d5:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:35:5D:11:C6:EE:3C:11:DA:57:DE:BF:1E:55:0D:3D:87:31:35:FC X509v3 Authority Key Identifier: keyid:F0:09:23:3D:8D:08:7F:C1:D0:F6:42:57:80:E3:A4:D8:44:A3:4F:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8AkjPY0If8HQ9kJXgOOk2ESjT4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122ACB/74BD858A1B3D11F0A60C2226C4F9AE02/8AkjPY0If8HQ9kJXgOOk2ESjT4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:1e:e9:94:4b:00:d6:3e:2a:38:d1:b9:b3:b5:70:36:50:c5: 67:04:74:c5:5d:eb:a8:0b:1a:79:00:db:79:32:26:51:0c:da: 68:81:bd:bf:e7:d8:b2:66:3d:2d:e3:c3:48:bc:5a:a9:e4:7e: a0:68:5b:de:bf:9a:22:96:34:78:03:53:50:34:61:fc:48:b8: 36:a6:67:b4:0a:52:05:05:74:72:9d:21:d0:58:ee:2f:2c:da: 2b:aa:a5:5c:b3:ec:77:5b:87:ec:29:66:1b:aa:48:0f:92:94: 16:89:a4:2c:aa:2d:57:19:7b:23:cf:5f:1f:cd:33:46:19:ca: cb:32:4b:82:7e:4e:c2:e2:e0:c9:1f:d0:6b:58:f8:19:55:a4: 19:c2:2e:b4:c3:ad:07:51:df:2a:d8:05:11:3c:da:13:e8:12: 70:3c:ba:26:7e:79:62:3d:e3:34:d3:0c:1d:15:35:ec:94:85: 48:85:6d:30:e8:81:db:20:93:c2:6a:39:4e:cc:33:d1:c5:b0: 0d:de:ba:d4:ee:f0:af:d4:f4:48:e1:39:b3:a5:26:a7:9b:3e: 97:75:fd:cb:ef:c9:56:1f:cd:9c:e9:31:d4:2d:a7:5c:2c:60: 17:5f:a2:0d:fd:40:6f:61:5a:68:55:63:40:c0:74:4e:1a:7b: d2:6c:a9:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy MkFDQjExMC8GA1UEBRMoRjAwOTIzM0Q4RDA4N0ZDMUQwRjY0MjU3ODBFM0E0RDg0 NEEzNEY4MTAeFw0yNTA4MDkwODAyMjdaFw0yNTA4MTYwODAyMjdaMBgxFjAUBgNV BAMTDTY4OTcwMDkzLTFkZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5J40dWKkw523j83mKo7deRQZAeLc21wM4oj/iwP7QUo9vNaZdloF285Q8l0GC 47rCV6iuMDb6O1HkIA2BG6oQx49QMv+Dl3H0pISD10SSZMnbwbDumVT5AadwbH7G tx+6xnPfwSz9a7nR3qyo455NVyFrj6hr4W60ZT/92hgvwVwXcTfuFt+xYERtvpzf Nr9G5sGjOwkX9GbcEjBnfaY2RBbU1FXCHDJXNVJgcCWvOXN97qKUnywSek4HGVF/ NhmADJ5AI9Ck3S3+HxiyWkXou6Bop/OBKXAUsGr8gWkKNgGInxsFAS8XjVazXziY Bq4x7p10DgAn4g+TeuBeOdVrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/TVdEcbu PBHaV96/HlUNPYcxNfwwHwYDVR0jBBgwFoAU8AkjPY0If8HQ9kJXgOOk2ESjT4Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIyQUNCLzc0QkQ4NThBMUIz RDExRjBBNjBDMjIyNkM0RjlBRTAyLzhBa2pQWTBJZjhIUTlrSlhnT09rMkVTalQ0 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOEFralBZMElmOEhROWtKWGdPT2syRVNqVDRFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTIy QUNCLzc0QkQ4NThBMUIzRDExRjBBNjBDMjIyNkM0RjlBRTAyLzhBa2pQWTBJZjhI UTlrSlhnT09rMkVTalQ0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFAe6ZRLANY+KjjRubO1cDZQxWcEdMVd66gLGnkA23kyJlEM2miBvb/n 2LJmPS3jw0i8WqnkfqBoW96/miKWNHgDU1A0YfxIuDamZ7QKUgUFdHKdIdBY7i8s 2iuqpVyz7Hdbh+wpZhuqSA+SlBaJpCyqLVcZeyPPXx/NM0YZyssyS4J+TsLi4Mkf 0GtY+BlVpBnCLrTDrQdR3yrYBRE82hPoEnA8uiZ+eWI94zTTDB0VNeyUhUiFbTDo gdsgk8JqOU7MM9HFsA3eutTu8K/U9EjhObOlJqebPpd1/cvvyVYfzZzpMdQtp1ws YBdfog39QG9hWmhVY0DAdE4ae9JsqTI= -----END CERTIFICATE-----Generated at Sun Aug 10 18:49:54 2025 by rpki-client