$ rpki-client -vvf rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft File: 9h8SEEhjH7do1VXDv6mwIGhej0k.mft (raw, json) Hash identifier: A3uCdareld+ADgFm1B9rydXrjLAdVBWxX0ykhZTD09w= Subject key identifier: FA:87:DA:ED:67:A6:2E:EF:84:8A:30:11:77:D7:66:45:00:D1:C0:B6 Authority key identifier: F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 Certificate issuer: /CN=A912CF99/serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Certificate serial: 0C75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft Manifest number: 0C6B Signing time: Sun 10 Aug 2025 18:24:27 +0000 Manifest this update: Sun 10 Aug 2025 18:24:27 +0000 Manifest next update: Sun 17 Aug 2025 18:24:27 +0000 Files and hashes: 1: 9h8SEEhjH7do1VXDv6mwIGhej0k.crl (hash: YbvGGwFAPRZm9aVfTYnHnKJZGfcqissqupKeQiJ4qYQ=) 2: BC19A604053E11EABC1E707AC4F9AE02.roa (hash: YkdaufQKgLmZNVY5l1QIovl6Z82cSg5d5l7gPKlvt34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3189 (0xc75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CF99, serialNumber=F61F121048631FB768D555C3BFA9B020685E8F49 Validity Not Before: Aug 10 18:24:27 2025 GMT Not After : Aug 17 18:24:27 2025 GMT Subject: CN=6898e3db-c369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:71:9b:4e:f8:95:ec:f1:b0:84:99:7c:c9:85: ce:d2:74:15:42:3c:c1:18:58:c8:31:9a:41:bd:57: be:c3:19:24:75:66:dd:34:ab:fe:a4:fb:3f:a4:3f: 43:aa:6c:9e:6c:59:af:62:e7:e0:e5:67:2b:76:86: b7:a5:b5:37:b3:73:79:e8:ff:86:f2:2d:3f:c6:4f: 48:b2:35:a9:94:de:12:63:0f:35:0f:30:eb:90:01: b9:5b:a6:e9:9d:90:88:d5:c9:57:da:27:0d:de:95: 41:1d:1a:e1:0e:dc:02:50:06:8a:65:ad:92:a6:84: d9:6f:6e:66:c5:52:ce:ef:42:0d:af:25:29:16:91: d9:35:af:02:6e:8f:b9:dc:09:00:a7:cf:d4:77:ac: 8e:f6:59:c0:27:37:0d:1d:a5:a2:87:83:56:8c:b9: b4:61:56:78:63:7b:2d:ca:cc:b9:d2:52:31:cc:4e: a4:89:6f:08:c1:24:97:7f:9d:e5:60:00:50:38:6c: 91:c4:cb:7e:3a:01:bc:34:5e:aa:22:71:15:64:27: f1:3f:95:d2:50:5c:1b:89:7e:d1:b0:b9:63:68:68: 3d:00:c0:e8:e8:98:be:88:c7:70:00:d1:8e:e1:46: ee:cd:a4:b1:c8:4b:68:84:75:93:c7:28:77:aa:22: e7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:87:DA:ED:67:A6:2E:EF:84:8A:30:11:77:D7:66:45:00:D1:C0:B6 X509v3 Authority Key Identifier: keyid:F6:1F:12:10:48:63:1F:B7:68:D5:55:C3:BF:A9:B0:20:68:5E:8F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9h8SEEhjH7do1VXDv6mwIGhej0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CF99/B7384010053D11EA9B66BE78C4F9AE02/9h8SEEhjH7do1VXDv6mwIGhej0k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:f1:8b:4d:d4:a4:ae:3c:1b:cc:a3:14:6f:ac:cd:84:1f:4f: 7e:e1:27:c0:58:1f:d8:4d:6d:7f:d9:4e:b5:5f:39:d3:41:53: d3:5c:f4:fd:d4:9a:90:2e:b7:45:7e:b8:10:6f:d9:d1:03:21: 8b:2f:14:03:e0:b0:9a:2a:51:f5:e4:4a:f9:10:e9:cd:ae:99: 0c:72:4b:1a:83:90:16:05:34:9b:8c:19:56:34:3d:93:00:af: 30:b7:9f:c4:7f:4e:58:f6:37:6b:12:94:14:94:88:b3:e7:b4: 26:57:d3:df:8e:8e:94:ac:c9:c4:e5:1a:1f:f9:ad:8b:7e:ad: 5f:69:ef:1c:28:2f:b4:25:db:29:3e:3c:07:58:37:1d:b8:08: 2d:a5:9a:03:54:13:d7:26:62:56:0c:23:37:9b:58:7e:a0:ca: b8:b6:a1:a2:8f:76:2f:a4:88:81:31:9e:d6:85:a0:39:75:35: 5e:6e:b4:f4:12:3d:de:c0:06:fe:af:94:20:ea:aa:11:19:c0: d0:d1:8e:08:cd:3c:cd:75:0f:32:da:b2:76:ac:b7:26:3a:9b: 6c:b9:04:36:40:c4:bd:8b:cc:d7:7e:82:52:99:22:47:89:a9: f7:fc:24:2c:6b:2a:2c:03:78:29:e2:91:fc:f1:00:a6:6d:6b: 39:f6:b5:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNGOTkxMTAvBgNVBAUTKEY2MUYxMjEwNDg2MzFGQjc2OEQ1NTVDM0JGQTlCMDIw Njg1RThGNDkwHhcNMjUwODEwMTgyNDI3WhcNMjUwODE3MTgyNDI3WjAYMRYwFAYD VQQDEw02ODk4ZTNkYi1jMzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzHGbTviV7PGwhJl8yYXO0nQVQjzBGFjIMZpBvVe+wxkkdWbdNKv+pPs/pD9D qmyebFmvYufg5Wcrdoa3pbU3s3N56P+G8i0/xk9IsjWplN4SYw81DzDrkAG5W6bp nZCI1clX2icN3pVBHRrhDtwCUAaKZa2SpoTZb25mxVLO70INryUpFpHZNa8Cbo+5 3AkAp8/Ud6yO9lnAJzcNHaWih4NWjLm0YVZ4Y3stysy50lIxzE6kiW8IwSSXf53l YABQOGyRxMt+OgG8NF6qInEVZCfxP5XSUFwbiX7RsLljaGg9AMDo6Ji+iMdwANGO 4UbuzaSxyEtohHWTxyh3qiLnRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPqH2u1n pi7vhIowEXfXZkUA0cC2MB8GA1UdIwQYMBaAFPYfEhBIYx+3aNVVw7+psCBoXo9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0Y5OS9CNzM4NDAxMDA1 M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3ZG8xVlhEdjZtd0lHaGVq MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzloOFNFRWhqSDdkbzFWWER2Nm13SUdoZWoway5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0Y5OS9CNzM4NDAxMDA1M0QxMUVBOUI2NkJFNzhDNEY5QUUwMi85aDhTRUVoakg3 ZG8xVlhEdjZtd0lHaGVqMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB58YtN1KSuPBvMoxRvrM2EH09+4SfAWB/YTW1/2U61XznTQVPTXPT9 1JqQLrdFfrgQb9nRAyGLLxQD4LCaKlH15Er5EOnNrpkMcksag5AWBTSbjBlWND2T AK8wt5/Ef05Y9jdrEpQUlIiz57QmV9Pfjo6UrMnE5Rof+a2Lfq1fae8cKC+0Jdsp PjwHWDcduAgtpZoDVBPXJmJWDCM3m1h+oMq4tqGij3YvpIiBMZ7WhaA5dTVebrT0 Ej3ewAb+r5Qg6qoRGcDQ0Y4IzTzNdQ8y2rJ2rLcmOptsuQQ2QMS9i8zXfoJSmSJH ian3/CQsayosA3gp4pH88QCmbWs59rVZ -----END CERTIFICATE-----Generated at Sun Aug 10 21:13:36 2025 by rpki-client