$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft File: J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json) Hash identifier: 7zm/hvW2sOPBtzM6w2+CwXrIm5pPEjwEEImV2s+1d1g= Subject key identifier: 1C:8F:17:EF:DD:D6:D9:D3:7E:A3:4D:29:0F:72:39:9B:ED:49:78:8D Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Certificate serial: 0C5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft Manifest number: 0C4E Signing time: Sun 10 Aug 2025 18:34:33 +0000 Manifest this update: Sun 10 Aug 2025 18:34:33 +0000 Manifest next update: Sun 17 Aug 2025 18:34:33 +0000 Files and hashes: 1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: Xhy5gQzBIlHOec2WhLZuFgcnkxtvwx7qJHyCn7D5xRQ=) 2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: fPyMz9KhC5TO2GXmYwuNL/8fF1nSLqleV8d4Bv+swGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3166 (0xc5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Validity Not Before: Aug 10 18:34:33 2025 GMT Not After : Aug 17 18:34:33 2025 GMT Subject: CN=6898e639-373c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fe:da:38:cc:8f:47:38:a1:e3:f7:c4:f4:7f: 07:79:44:02:81:06:ef:ee:6d:43:4e:7b:51:c8:22: 96:e3:7a:3d:bb:4c:7b:91:b7:02:38:fe:4f:46:eb: a5:12:3f:2d:90:99:cb:c5:5e:7d:7a:99:c4:16:23: 75:c2:20:0d:ff:56:d2:56:3b:aa:27:f4:4f:83:2d: 03:59:ab:88:58:b4:ef:b1:e2:b7:ce:33:84:7f:47: aa:ce:36:bd:e4:f1:8f:fb:69:cc:1e:0f:b2:57:73: e9:9b:d9:81:9c:31:28:99:37:0a:92:a5:68:a6:5c: 1a:67:8e:5d:4b:46:bf:f1:f8:15:b2:a4:fb:99:21: 45:75:62:6f:c3:81:9b:4c:1a:54:5d:0c:72:d7:3b: 32:ab:61:7b:2c:a1:00:6a:4f:96:7e:26:e6:16:e3: 33:04:c7:8c:6c:64:d5:44:8d:b3:cf:52:73:9e:ec: d2:8c:95:39:b5:f7:02:67:84:5c:ff:ef:ce:72:1e: e5:e1:67:71:61:0f:a0:bc:65:bf:de:a3:ef:04:c4: c4:1a:a6:e3:00:a8:7d:2d:da:02:2b:90:83:d4:5f: f6:0e:2d:50:8b:d0:25:07:c9:0e:32:1d:be:83:c6: e7:84:9a:ee:5f:09:81:b0:9a:e0:47:14:41:f9:3c: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8F:17:EF:DD:D6:D9:D3:7E:A3:4D:29:0F:72:39:9B:ED:49:78:8D X509v3 Authority Key Identifier: keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:65:20:e3:00:ed:e0:6e:4a:79:8b:2c:97:7a:02:8e:d0:ea: 08:e8:60:08:b4:91:ac:6d:a8:a2:d7:06:6f:2c:ce:ba:ea:70: 8d:1c:b9:b2:78:b5:98:ad:a4:96:f9:3b:c9:b9:37:3f:06:b6: 41:a2:71:00:8d:e0:43:1d:7c:ac:ae:1d:72:1f:ed:60:b5:20: f3:fc:cb:9b:9b:5b:04:f5:01:0b:8d:5d:11:27:72:5e:61:09: aa:68:dd:c7:a7:d5:50:2c:64:8b:de:fc:8d:0d:08:ee:99:09: 52:34:32:4e:89:57:4b:df:9e:19:c8:42:7e:9c:6b:38:fa:c6: 37:b0:36:39:42:1b:33:45:53:b2:e6:e1:93:d7:6d:47:e1:0e: dc:32:2b:ff:d9:7a:83:0b:3d:c0:1b:3c:57:21:56:79:e4:e2: 0d:03:c1:ec:bf:5a:ba:ec:36:e8:ab:36:b8:7f:00:b3:74:6d: 05:5d:23:7f:30:8f:71:8c:82:3c:0c:3b:7a:1e:1b:56:39:76: ce:85:55:28:9e:8c:40:29:f7:4f:6e:90:e6:1b:5b:79:17:d1: 5b:d9:9a:1d:a5:1a:a6:ce:30:49:b3:1e:d8:2c:a7:67:55:96: 57:d3:c3:e1:97:47:21:b1:8b:b3:4f:46:50:4f:67:e2:44:b4: e7:75:6f:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDRjYxMTAvBgNVBAUTKDI3Q0MxMjkxODQ1NTA3QUNBRkMyODdCNzdGRTk0RkVB NTNEREM5QzIwHhcNMjUwODEwMTgzNDMzWhcNMjUwODE3MTgzNDMzWjAYMRYwFAYD VQQDEw02ODk4ZTYzOS0zNzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvf7aOMyPRzih4/fE9H8HeUQCgQbv7m1DTntRyCKW43o9u0x7kbcCOP5PRuul Ej8tkJnLxV59epnEFiN1wiAN/1bSVjuqJ/RPgy0DWauIWLTvseK3zjOEf0eqzja9 5PGP+2nMHg+yV3Ppm9mBnDEomTcKkqVoplwaZ45dS0a/8fgVsqT7mSFFdWJvw4Gb TBpUXQxy1zsyq2F7LKEAak+WfibmFuMzBMeMbGTVRI2zz1JznuzSjJU5tfcCZ4Rc /+/Och7l4WdxYQ+gvGW/3qPvBMTEGqbjAKh9LdoCK5CD1F/2Di1Qi9AlB8kOMh2+ g8bnhJruXwmBsJrgRxRB+TwBPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFByPF+/d 1tnTfqNNKQ9yOZvtSXiNMB8GA1UdIwQYMBaAFCfMEpGEVQesr8KHt3/pT+pT3cnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENGNi9GRDI1MDE4QTBC N0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2eXZ3b2UzZi1sUDZsUGR5 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4d1NrWVJWQjZ5dndvZTNmLWxQNmxQZHljSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENGNi9GRDI1MDE4QTBCN0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2 eXZ3b2UzZi1sUDZsUGR5Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyZSDjAO3gbkp5iyyXegKO0OoI6GAItJGsbaii1wZvLM666nCNHLmy eLWYraSW+TvJuTc/BrZBonEAjeBDHXysrh1yH+1gtSDz/Mubm1sE9QELjV0RJ3Je YQmqaN3Hp9VQLGSL3vyNDQjumQlSNDJOiVdL354ZyEJ+nGs4+sY3sDY5QhszRVOy 5uGT121H4Q7cMiv/2XqDCz3AGzxXIVZ55OINA8Hsv1q67Dboqza4fwCzdG0FXSN/ MI9xjII8DDt6HhtWOXbOhVUonoxAKfdPbpDmG1t5F9Fb2ZodpRqmzjBJsx7YLKdn VZZX08Phl0chsYuzT0ZQT2fiRLTndW8k -----END CERTIFICATE-----Generated at Mon Aug 11 04:11:02 2025 by rpki-client