$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft File: m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft (raw, json) Hash identifier: 9Txd2AZoQZq8oEij9pxS5Qc2Zi6O4OiPZ0wp1RwgJA8= Subject key identifier: 34:4C:2E:45:21:6E:DA:6D:3E:19:A9:68:2D:E5:47:AC:1D:BF:E5:41 Authority key identifier: 9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 Certificate issuer: /CN=A9143DB0/serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Certificate serial: 26DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft Manifest number: 2659 Signing time: Fri 08 Aug 2025 15:47:56 +0000 Manifest this update: Fri 08 Aug 2025 15:47:55 +0000 Manifest next update: Fri 15 Aug 2025 15:47:55 +0000 Files and hashes: 1: m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl (hash: x4JRWvN4L6A1Bc/q52mF3pDF9vgzeX8QlZdWq2Uk4Sw=) 2: 1818C91A5C1611F0AEC3F02BC4F9AE02.roa (hash: inYPm2/qoWyhJvYPwsRqidJ8km0pHeal/3nb7zNYQCU=) 3: 8FC6588099D711EFB8A4757AC4F9AE02.roa (hash: unwOXbdTfZz7FftNdr0FctWsJH4pDCRSkIqFT/8g7b8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9950 (0x26de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143DB0, serialNumber=9BC7651AC4BABF8C4478534FADA610ACDA746BD4 Validity Not Before: Aug 8 15:47:55 2025 GMT Not After : Aug 15 15:47:55 2025 GMT Subject: CN=68961c2c-cc19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:df:14:98:f3:73:9b:5d:82:0c:39:ec:46:4a: 63:12:90:1c:7f:ea:63:15:7a:0b:70:45:57:e1:f6: 35:b1:44:14:73:72:0f:fc:3e:9f:8a:2c:82:5f:39: 72:20:ef:e6:c2:6c:da:79:8e:4f:f0:12:ec:f0:a1: 9c:00:21:f4:7c:78:43:47:97:73:f4:31:b3:52:f0: df:40:28:90:a5:4d:12:72:cd:f0:ec:8a:9f:4b:45: 0b:7a:c6:5d:21:d8:4c:2a:58:39:db:d6:72:ac:1b: 12:c3:4e:c6:94:4f:29:12:6f:b1:d0:27:aa:1d:59: 41:d0:ff:f7:10:a1:d5:ec:a5:a6:d6:2e:1b:80:08: 85:84:39:d1:9d:88:0b:2e:ea:fc:74:2d:3d:34:71: 52:14:56:1a:23:a7:fa:82:13:22:22:93:18:33:18: 87:02:a0:00:8e:99:81:10:de:2a:ea:f4:5a:5c:0b: 5b:a9:83:a3:32:38:c6:02:f9:ff:cd:c7:12:01:23: 3f:b3:f6:22:8b:84:cf:81:4e:7e:84:11:1e:f0:67: 0f:74:d6:97:e0:71:65:de:10:74:12:26:a6:42:60: 5a:35:ab:25:69:f9:d2:00:f0:45:85:c4:ed:b5:10: 03:fb:14:71:c8:6f:8e:c6:6f:ec:ca:7a:bb:cb:64: 08:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4C:2E:45:21:6E:DA:6D:3E:19:A9:68:2D:E5:47:AC:1D:BF:E5:41 X509v3 Authority Key Identifier: keyid:9B:C7:65:1A:C4:BA:BF:8C:44:78:53:4F:AD:A6:10:AC:DA:74:6B:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8dlGsS6v4xEeFNPraYQrNp0a9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DB0/B895AF74051511E58D49AE42C4F9AE02/m8dlGsS6v4xEeFNPraYQrNp0a9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:0a:d4:c1:a2:c7:43:93:9e:dc:de:07:29:34:7f:de:8e:88: 9b:b3:d0:ef:91:df:c1:a7:11:3d:d0:20:b6:1c:b5:75:1c:6e: af:ae:15:68:1b:f1:38:29:b7:cc:6a:86:4a:4c:b7:0b:35:62: 27:c1:90:46:4a:af:3c:9b:8a:9b:b0:a0:fd:6b:b2:b6:76:be: 7d:b9:39:67:3c:cf:d5:c8:45:05:40:b0:ef:7e:e4:ab:a9:86: 71:d9:18:bd:75:ac:8e:46:d8:a5:a7:06:a9:ef:18:96:ef:3d: ae:3b:ec:32:05:85:2b:31:4a:08:32:ae:ad:7e:9b:90:06:eb: 4c:b9:21:79:3c:25:84:45:e1:eb:0a:21:53:2c:80:52:5a:b7: ea:ff:08:1c:70:aa:83:fe:7d:fa:e3:ca:02:34:f5:be:35:a0: a1:91:9e:5c:52:f6:50:4f:96:42:d4:45:6c:52:ce:85:22:30: fb:53:f3:61:dd:21:5d:af:3d:f0:e7:9b:65:01:06:c5:ac:e8: 34:31:54:f1:00:1c:e1:ae:72:90:ab:f7:e3:72:89:26:c2:2e: 18:07:25:1a:9f:43:38:32:c7:b6:72:ea:e3:cd:e5:44:2f:d4: 78:82:72:3b:ba:28:3c:df:4d:a5:e9:c3:67:be:e3:67:31:26: 76:ad:09:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDNEQjAxMTAvBgNVBAUTKDlCQzc2NTFBQzRCQUJGOEM0NDc4NTM0RkFEQTYxMEFD REE3NDZCRDQwHhcNMjUwODA4MTU0NzU1WhcNMjUwODE1MTU0NzU1WjAYMRYwFAYD VQQDEw02ODk2MWMyYy1jYzE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyN8UmPNzm12CDDnsRkpjEpAcf+pjFXoLcEVX4fY1sUQUc3IP/D6fiiyCXzly IO/mwmzaeY5P8BLs8KGcACH0fHhDR5dz9DGzUvDfQCiQpU0Scs3w7IqfS0ULesZd IdhMKlg529ZyrBsSw07GlE8pEm+x0CeqHVlB0P/3EKHV7KWm1i4bgAiFhDnRnYgL Lur8dC09NHFSFFYaI6f6ghMiIpMYMxiHAqAAjpmBEN4q6vRaXAtbqYOjMjjGAvn/ zccSASM/s/Yii4TPgU5+hBEe8GcPdNaX4HFl3hB0EiamQmBaNaslafnSAPBFhcTt tRAD+xRxyG+Oxm/synq7y2QINQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRMLkUh btptPhmpaC3lR6wdv+VBMB8GA1UdIwQYMBaAFJvHZRrEur+MRHhTT62mEKzadGvU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0M0RCMC9CODk1QUY3NDA1 MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0eEVlRk5QcmFZUXJOcDBh OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204ZGxHc1M2djR4RWVGTlByYVlRck5wMGE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 M0RCMC9CODk1QUY3NDA1MTUxMUU1OEQ0OUFFNDJDNEY5QUUwMi9tOGRsR3NTNnY0 eEVlRk5QcmFZUXJOcDBhOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjCtTBosdDk57c3gcpNH/ejoibs9Dvkd/BpxE90CC2HLV1HG6vrhVo G/E4KbfMaoZKTLcLNWInwZBGSq88m4qbsKD9a7K2dr59uTlnPM/VyEUFQLDvfuSr qYZx2Ri9dayORtilpwap7xiW7z2uO+wyBYUrMUoIMq6tfpuQButMuSF5PCWEReHr CiFTLIBSWrfq/wgccKqD/n3648oCNPW+NaChkZ5cUvZQT5ZC1EVsUs6FIjD7U/Nh 3SFdrz3w55tlAQbFrOg0MVTxABzhrnKQq/fjcokmwi4YByUan0M4Mse2curjzeVE L9R4gnI7uig8302l6cNnvuNnMSZ2rQnN -----END CERTIFICATE-----Generated at Fri Aug 8 19:30:05 2025 by rpki-client