$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft File: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft (raw, json) Hash identifier: c854m5NJT4/keBZrUrzKl62DZKK3Me16bM0glu3AJYw= Subject key identifier: BE:4A:0F:DD:C6:38:5C:0A:F0:45:6C:C3:33:0E:3C:3B:D8:A8:13:23 Authority key identifier: F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 Certificate issuer: /CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Certificate serial: 0F96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft Manifest number: 0F76 Signing time: Fri 08 Aug 2025 17:47:47 +0000 Manifest this update: Fri 08 Aug 2025 17:47:46 +0000 Manifest next update: Fri 15 Aug 2025 17:47:46 +0000 Files and hashes: 1: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl (hash: Ww8svvuFA4tgDycDVdx8O7QcwT0gp3NK/yA9IG1EXlo=) 2: B1F01F2A025C11F0BCAB0F12C4F9AE02.roa (hash: wNl2vPAfQOmVBCkud9vffEnTL87IbN3lfDYFsp2wc4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3990 (0xf96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912963D, serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Validity Not Before: Aug 8 17:47:46 2025 GMT Not After : Aug 15 17:47:46 2025 GMT Subject: CN=68963842-0cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1f:8e:c9:19:77:9f:e3:26:77:e1:bc:18:b1: bd:37:2d:d3:f6:26:56:04:78:59:5e:e2:c7:7d:75: 47:67:d9:0e:4e:d6:bb:08:04:b1:99:4d:92:50:32: 9d:ed:0c:aa:df:ee:bf:5d:d5:0e:41:66:0d:66:f5: 8f:bd:16:06:fc:05:f4:2d:a3:84:16:b3:d1:9c:ea: 64:cf:c6:ab:e7:2f:d7:f2:4b:43:3e:ff:12:1c:bb: 68:e3:0f:b5:6f:aa:77:3f:bb:2f:98:a0:80:93:a8: 54:c6:74:55:38:81:4c:9d:88:47:95:4b:66:67:90: 61:30:14:79:03:3e:60:66:44:cd:3a:a3:fb:71:a2: 09:b6:fc:a6:f8:82:a7:7b:1b:76:38:c0:bb:fe:7d: 71:94:72:f7:43:77:ee:6d:e8:85:e1:9e:c6:4c:78: e7:94:45:87:8e:e2:6a:39:fc:29:2c:15:c4:45:a0: 8c:d1:bf:0b:b9:65:52:48:aa:25:f4:f7:04:84:46: 78:6f:d9:03:c4:f3:eb:27:37:a1:48:e5:03:b4:1a: c8:b9:4d:86:dd:14:6a:3d:11:40:5d:26:df:eb:67: e1:b3:79:2e:e3:d7:08:95:f7:f2:c7:3e:53:08:c5: f2:17:fd:36:34:31:d5:17:42:d2:80:cf:64:5a:c5: 81:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:4A:0F:DD:C6:38:5C:0A:F0:45:6C:C3:33:0E:3C:3B:D8:A8:13:23 X509v3 Authority Key Identifier: keyid:F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:3a:5b:55:90:fb:43:80:9b:a1:4d:98:71:a6:bf:30:15:5a: ac:af:72:12:b5:3e:72:1d:50:a4:2c:42:1d:60:34:07:0d:55: c0:10:cf:8d:e1:34:c4:a6:ba:d9:e1:03:f6:92:66:65:99:b0: a0:a1:f0:4f:78:5d:b1:a3:2f:43:97:7c:1e:26:8a:58:25:46: 81:36:8b:71:fc:12:06:a7:62:d1:ca:a2:cb:67:5a:4b:5e:ca: 34:cd:9f:6c:5a:be:dd:b7:9f:34:42:af:95:cb:50:88:5c:87: 7c:d3:69:85:1a:31:35:bf:6b:fc:ea:99:53:21:d7:58:fa:3b: 2b:dc:c4:dd:0e:9b:3e:d8:ec:c6:d0:15:7a:13:e7:97:47:e9: c7:7a:14:24:61:f5:e1:9e:2f:b6:27:55:7c:04:ab:71:6a:1b: 76:c5:fa:dd:59:3d:ab:92:35:0c:f3:9a:a8:d5:14:cf:4a:68: fd:60:0b:84:c9:3a:44:cb:13:0b:fe:90:3d:bf:5a:4a:cc:4e: 17:e7:25:1f:9f:a3:84:66:4b:8a:43:a3:91:ae:37:cf:3c:67: ef:f4:67:c9:99:fe:31:c2:7e:d6:17:6a:b3:ae:81:37:99:a1: da:cc:b8:64:1c:f5:cc:63:72:43:e2:7f:0c:05:4b:10:cc:9c: e5:49:f9:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2M0QxMTAvBgNVBAUTKEYyMjFFOTQzMkExOUYyODUwNzgzMUIxMkVEODZCQzRC QjU5NjM5ODEwHhcNMjUwODA4MTc0NzQ2WhcNMjUwODE1MTc0NzQ2WjAYMRYwFAYD VQQDEw02ODk2Mzg0Mi0wY2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9B+OyRl3n+Mmd+G8GLG9Ny3T9iZWBHhZXuLHfXVHZ9kOTta7CASxmU2SUDKd 7Qyq3+6/XdUOQWYNZvWPvRYG/AX0LaOEFrPRnOpkz8ar5y/X8ktDPv8SHLto4w+1 b6p3P7svmKCAk6hUxnRVOIFMnYhHlUtmZ5BhMBR5Az5gZkTNOqP7caIJtvym+IKn ext2OMC7/n1xlHL3Q3fubeiF4Z7GTHjnlEWHjuJqOfwpLBXERaCM0b8LuWVSSKol 9PcEhEZ4b9kDxPPrJzehSOUDtBrIuU2G3RRqPRFAXSbf62fhs3ku49cIlffyxz5T CMXyF/02NDHVF0LSgM9kWsWBOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5KD93G OFwK8EVswzMOPDvYqBMjMB8GA1UdIwQYMBaAFPIh6UMqGfKFB4MbEu2GvEu1ljmB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTYzRC9GOUM5NzY2Qzcy NjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhvVUhneHNTN1lhOFM3V1dP WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpSHBReW9aOG9VSGd4c1M3WWE4UzdXV09ZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTYzRC9GOUM5NzY2QzcyNjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhv VUhneHNTN1lhOFM3V1dPWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5OltVkPtDgJuhTZhxpr8wFVqsr3IStT5yHVCkLEIdYDQHDVXAEM+N 4TTEprrZ4QP2kmZlmbCgofBPeF2xoy9Dl3weJopYJUaBNotx/BIGp2LRyqLLZ1pL Xso0zZ9sWr7dt580Qq+Vy1CIXId802mFGjE1v2v86plTIddY+jsr3MTdDps+2OzG 0BV6E+eXR+nHehQkYfXhni+2J1V8BKtxaht2xfrdWT2rkjUM85qo1RTPSmj9YAuE yTpEyxML/pA9v1pKzE4X5yUfn6OEZkuKQ6ORrjfPPGfv9GfJmf4xwn7WF2qzroE3 maHazLhkHPXMY3JD4n8MBUsQzJzlSfnw -----END CERTIFICATE-----Generated at Sat Aug 9 23:26:18 2025 by rpki-client