$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft File: t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft (raw, json) Hash identifier: ktDfjD7QikbvOhCFnyFyfM6irRjsqK7Fx9EoVwTV7eg= Subject key identifier: 86:4C:8E:A3:27:BA:D3:39:46:A3:27:20:FC:19:79:A7:1A:E9:3E:B4 Authority key identifier: B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C Certificate issuer: /CN=A9142DB4/serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Certificate serial: 0161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft Manifest number: 015E Signing time: Sat 09 Aug 2025 04:24:15 +0000 Manifest this update: Sat 09 Aug 2025 04:24:15 +0000 Manifest next update: Sat 16 Aug 2025 04:24:15 +0000 Files and hashes: 1: t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl (hash: CF1f4Ocjg5GEQEt3xRMPHBBLn2MJIGkSN8rB5izHBJI=) 2: 9ADC9C8A5CE211EEBA4DBD15C4F9AE02.roa (hash: icEjBAvtyS7bBSn0NXrfM0VKf/GFl7OVPnJ58XOd/T8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 353 (0x161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142DB4, serialNumber=B7C9795FFF7F69CF33B7651C6B9926A730D9759C Validity Not Before: Aug 9 04:24:15 2025 GMT Not After : Aug 16 04:24:15 2025 GMT Subject: CN=6896cd6f-bb60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:67:a8:e1:24:0f:5a:8a:e0:62:4b:ad:fa:6e: 31:2d:23:73:be:4d:48:35:7c:29:36:9d:7b:7b:e2: 8d:3a:04:d5:f4:b9:b7:59:e7:b9:73:a0:64:a8:ae: 6c:58:d1:0c:1a:fb:f5:50:20:8c:b7:b6:e7:72:fe: 64:d9:62:ec:1e:97:df:42:c7:df:ee:22:25:4a:fd: ec:30:6d:10:5d:b1:d3:3e:bd:de:09:9a:07:80:9e: ac:1f:fd:f2:ba:59:a5:b1:4c:2d:f9:45:f1:51:ba: 67:c1:d7:b7:59:02:ed:0e:62:2b:b1:8a:60:8e:b1: 26:aa:ff:38:a4:63:75:d9:6b:4d:f3:e1:14:86:c6: 57:23:e8:48:ce:55:ba:b8:81:06:5a:a4:30:e2:88: f3:c5:0f:fa:3e:6d:ba:9c:08:7c:23:df:23:41:a7: a2:38:d9:c3:89:b3:fd:cd:8b:fe:99:20:bc:31:b0: a4:5c:0b:1b:af:1e:f6:db:58:00:e9:9c:d7:21:bd: 52:6c:ec:cc:7c:f2:2e:71:fe:bc:fc:87:6c:81:6c: 22:e9:40:eb:68:09:99:ab:4e:d3:1b:d4:5f:52:37: 0f:45:e1:f2:d0:42:f7:a3:36:d5:a5:13:0f:72:66: 01:38:1a:a1:f4:9a:cb:ca:0e:31:c5:c1:92:a6:70: 19:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4C:8E:A3:27:BA:D3:39:46:A3:27:20:FC:19:79:A7:1A:E9:3E:B4 X509v3 Authority Key Identifier: keyid:B7:C9:79:5F:FF:7F:69:CF:33:B7:65:1C:6B:99:26:A7:30:D9:75:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8l5X_9_ac8zt2Uca5kmpzDZdZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DB4/3C09B3FA5CE211EEAF42DE62C4F9AE02/t8l5X_9_ac8zt2Uca5kmpzDZdZw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:1c:f1:e7:22:6a:6a:25:c1:ce:42:14:32:56:4d:8b:e2:74: 0b:06:fe:c6:82:bd:1b:75:a7:86:11:5d:72:52:65:01:03:26: 9f:a2:39:3c:66:e2:6b:7c:08:cf:4f:ce:9a:f2:fe:11:9f:21: da:91:0b:81:3d:bd:7a:c5:f6:d7:70:e9:47:36:48:8d:52:3a: 6b:08:76:bd:fd:4c:82:ef:bb:dc:5e:e4:a5:0f:c6:62:4d:cd: ae:02:73:bd:dd:75:30:dc:04:8b:b3:a1:c3:f1:67:0e:0a:95: 5d:6e:4f:62:87:3d:53:fb:c4:a4:76:fd:49:45:0e:d0:6c:dc: b4:64:86:c8:1e:c7:13:4b:15:3b:75:9c:f6:67:89:63:bd:0e: 22:d4:04:2a:45:15:a6:8a:d6:46:1e:ed:0c:a3:1d:e7:91:69: 2a:a7:89:1b:a8:32:4e:30:6a:71:3a:ca:3a:77:7d:2a:6f:ea: fc:f6:28:72:2f:16:a2:ae:af:ea:82:17:c0:30:aa:70:39:1d: 88:45:6f:de:37:ca:e6:60:27:94:58:46:c7:09:93:98:68:cb: b2:dc:17:c7:d0:61:33:44:8a:12:e6:ec:a8:42:2f:1a:cf:a7: 5a:85:05:71:0a:19:5f:6c:1d:47:63:64:ec:bb:6e:ee:2e:ce: 48:29:68:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJEQjQxMTAvBgNVBAUTKEI3Qzk3OTVGRkY3RjY5Q0YzM0I3NjUxQzZCOTkyNkE3 MzBEOTc1OUMwHhcNMjUwODA5MDQyNDE1WhcNMjUwODE2MDQyNDE1WjAYMRYwFAYD VQQDEw02ODk2Y2Q2Zi1iYjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWeo4SQPWorgYkut+m4xLSNzvk1INXwpNp17e+KNOgTV9Lm3Wee5c6BkqK5s WNEMGvv1UCCMt7bncv5k2WLsHpffQsff7iIlSv3sMG0QXbHTPr3eCZoHgJ6sH/3y ulmlsUwt+UXxUbpnwde3WQLtDmIrsYpgjrEmqv84pGN12WtN8+EUhsZXI+hIzlW6 uIEGWqQw4ojzxQ/6Pm26nAh8I98jQaeiONnDibP9zYv+mSC8MbCkXAsbrx7221gA 6ZzXIb1SbOzMfPIucf68/IdsgWwi6UDraAmZq07TG9RfUjcPReHy0EL3ozbVpRMP cmYBOBqh9JrLyg4xxcGSpnAZMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZMjqMn utM5RqMnIPwZeaca6T60MB8GA1UdIwQYMBaAFLfJeV//f2nPM7dlHGuZJqcw2XWc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkRCNC8zQzA5QjNGQTVD RTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2FjOHp0MlVjYTVrbXB6RFpk WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4bDVYXzlfYWM4enQyVWNhNWttcHpEWmRady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkRCNC8zQzA5QjNGQTVDRTIxMUVFQUY0MkRFNjJDNEY5QUUwMi90OGw1WF85X2Fj OHp0MlVjYTVrbXB6RFpkWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHHPHnImpqJcHOQhQyVk2L4nQLBv7Ggr0bdaeGEV1yUmUBAyafojk8 ZuJrfAjPT86a8v4RnyHakQuBPb16xfbXcOlHNkiNUjprCHa9/UyC77vcXuSlD8Zi Tc2uAnO93XUw3ASLs6HD8WcOCpVdbk9ihz1T+8Skdv1JRQ7QbNy0ZIbIHscTSxU7 dZz2Z4ljvQ4i1AQqRRWmitZGHu0Mox3nkWkqp4kbqDJOMGpxOso6d30qb+r89ihy Lxairq/qghfAMKpwOR2IRW/eN8rmYCeUWEbHCZOYaMuy3BfH0GEzRIoS5uyoQi8a z6dahQVxChlfbB1HY2Tsu27uLs5IKWjH -----END CERTIFICATE-----Generated at Sat Aug 9 10:50:11 2025 by rpki-client