$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: Eki7TkWf5B2bx/PVNpIK01W/nhFehOro1Gl9xG4SyIc= Subject key identifier: 25:9E:E4:72:E5:73:E8:3F:5F:D3:FA:7C:BB:52:C7:A0:99:BE:FE:FD Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 08CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 08BC Signing time: Sun 10 Aug 2025 20:29:21 +0000 Manifest this update: Sun 10 Aug 2025 20:29:21 +0000 Manifest next update: Sun 17 Aug 2025 20:29:21 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: GIPjK3zCS4IqMSTKcHRZ5zhcbm8GUlHV2YlnMXrE7GI=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: eX1Jqzb/wvl6CH4yih7NF/ZllkUpoBKZivz1fQWZTFc=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: u1VWd5IJTGCG//nYGKvxvoYAm+UMxol66g1kBC9OWXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2250 (0x8ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Aug 10 20:29:21 2025 GMT Not After : Aug 17 20:29:21 2025 GMT Subject: CN=68990121-25ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4f:e6:6c:32:92:d2:9b:23:b7:31:d3:5f:99: 62:bd:f0:1c:e9:5c:da:5e:c0:c4:81:46:fd:c9:bf: 5f:38:fb:b1:25:10:87:b3:0a:ed:ae:7a:9d:97:ee: 22:ad:11:f9:ed:e8:e7:8a:c8:d2:17:bc:c9:5b:b6: b9:f4:59:46:00:de:94:34:8f:12:12:45:a0:83:e7: 60:1e:1c:7c:03:73:80:0f:fd:8c:c4:f2:2a:8c:78: 32:6e:d6:e9:e3:c7:50:f2:4f:45:d1:6f:26:8f:79: 0f:87:10:b1:f7:83:5e:8d:f6:fb:94:43:5d:56:b9: df:94:66:07:19:e4:ec:67:83:89:43:11:7c:0c:ca: 97:3c:9d:7f:45:42:c3:75:2d:29:d4:ea:bd:37:54: 1c:75:f5:c5:b1:44:f3:0f:5c:94:e7:a6:76:e3:2e: 13:03:73:af:f1:36:17:67:9c:b1:ad:fe:75:75:e4: 86:2b:cd:b1:f5:73:4e:b2:3b:aa:28:5f:e1:3c:31: be:d6:55:b6:7c:cb:2d:1c:74:7e:77:04:ad:5b:5d: 54:55:23:47:c6:27:60:4d:21:7d:38:d5:fb:a5:3d: d2:f3:39:19:a5:fa:69:37:7c:07:d0:92:86:d3:5e: 2f:0e:c7:25:43:cc:c6:ad:ae:4e:0d:dc:b5:e0:ce: 45:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:9E:E4:72:E5:73:E8:3F:5F:D3:FA:7C:BB:52:C7:A0:99:BE:FE:FD X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:64:fc:5a:87:6e:2a:bf:25:54:8f:b7:a5:e0:69:52:34:e0: 30:b1:23:99:53:82:e4:07:26:0e:a9:49:a2:cc:d2:f4:b9:4a: aa:f4:ce:76:92:06:aa:06:9a:b0:77:ae:15:cf:73:6b:ea:ff: 2a:30:60:a7:7e:d2:59:09:62:f3:6a:c9:58:9e:1d:3c:b6:e2: 8c:ba:f9:21:41:f9:4b:4c:17:77:7b:b5:1c:cd:72:7b:28:b3: a4:56:57:6a:47:7f:5a:08:71:7b:5e:2d:3a:4b:d5:b8:cb:d0: ca:11:ac:fc:88:c7:2b:f6:ed:3d:19:b2:60:50:71:a7:bc:94: 9d:67:1d:58:53:15:ea:46:61:b5:e2:fe:8c:32:c6:7f:b0:10: 54:15:a5:2f:02:00:5a:4f:db:0f:55:dd:25:8b:81:e6:ee:0c: c5:f1:c1:f4:df:8d:3e:a8:9b:5b:c9:47:b7:ed:61:c8:4c:71: ab:87:3d:7e:63:e3:27:ea:6f:50:a2:ef:e4:bf:0c:c8:e1:0c: 0e:8d:16:c4:e3:f9:06:e2:62:e0:f3:c9:0d:49:d1:c7:b3:11: 90:b3:35:82:df:c8:ce:d7:b0:46:cf:f8:14:fe:93:34:87:ec: ed:29:4f:c1:05:d2:81:f6:df:f1:7a:73:98:58:4e:67:76:03: d9:94:33:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjUwODEwMjAyOTIxWhcNMjUwODE3MjAyOTIxWjAYMRYwFAYD VQQDEw02ODk5MDEyMS0yNWVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE/mbDKS0psjtzHTX5livfAc6VzaXsDEgUb9yb9fOPuxJRCHswrtrnqdl+4i rRH57ejnisjSF7zJW7a59FlGAN6UNI8SEkWgg+dgHhx8A3OAD/2MxPIqjHgybtbp 48dQ8k9F0W8mj3kPhxCx94Nejfb7lENdVrnflGYHGeTsZ4OJQxF8DMqXPJ1/RULD dS0p1Oq9N1QcdfXFsUTzD1yU56Z24y4TA3Ov8TYXZ5yxrf51deSGK82x9XNOsjuq KF/hPDG+1lW2fMstHHR+dwStW11UVSNHxidgTSF9ONX7pT3S8zkZpfppN3wH0JKG 014vDsclQ8zGra5ODdy14M5FYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCWe5HLl c+g/X9P6fLtSx6CZvv79MB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6ZPxah24qvyVUj7el4GlSNOAwsSOZU4LkByYOqUmizNL0uUqq9M52 kgaqBpqwd64Vz3Nr6v8qMGCnftJZCWLzaslYnh08tuKMuvkhQflLTBd3e7UczXJ7 KLOkVldqR39aCHF7Xi06S9W4y9DKEaz8iMcr9u09GbJgUHGnvJSdZx1YUxXqRmG1 4v6MMsZ/sBBUFaUvAgBaT9sPVd0li4Hm7gzF8cH0340+qJtbyUe37WHITHGrhz1+ Y+Mn6m9Qou/kvwzI4QwOjRbE4/kG4mLg88kNSdHHsxGQszWC38jO17BGz/gU/pM0 h+ztKU/BBdKB9t/xenOYWE5ndgPZlDPD -----END CERTIFICATE-----Generated at Mon Aug 11 04:15:15 2025 by rpki-client