$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft File: 8iRPqPsPyfURGt76wZeZwp88iFs.mft (raw, json) Hash identifier: LetK0YAMoPHO2FLzliFVU7eFaqShASs9NL1u9gLeuBc= Subject key identifier: AA:39:49:4A:7A:FE:87:61:FB:AB:86:5F:02:D1:88:E6:FA:AE:F3:72 Authority key identifier: F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B Certificate issuer: /CN=A9148C20/serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Certificate serial: 01C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft Manifest number: 01BC Signing time: Thu 07 Aug 2025 03:30:14 +0000 Manifest this update: Thu 07 Aug 2025 03:30:13 +0000 Manifest next update: Thu 14 Aug 2025 03:30:13 +0000 Files and hashes: 1: 8iRPqPsPyfURGt76wZeZwp88iFs.crl (hash: R7g4ppRj2g+hVajWRcqZpkx/TagBMOVc+r4knfEMB28=) 2: A8CCF2D4CC7A11EDA9430E31C4F9AE02.roa (hash: aeO1Mj/elW/xh7ym1J+KF848UMK5HdQa3I9hteU56q0=) 3: A9862EACCC7A11EDA9430E31C4F9AE02.roa (hash: pPZ9JIadC5wyaOareOX2satHOT6x5cmd8WRCUuxQZvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 03:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 450 (0x1c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C20, serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Validity Not Before: Aug 7 03:30:13 2025 GMT Not After : Aug 14 03:30:13 2025 GMT Subject: CN=68941dc6-afad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9f:39:36:06:12:c6:39:13:41:8b:c9:e1:17: 73:64:62:fd:56:7f:3c:c9:99:07:20:d3:b0:31:ab: 2e:d5:7f:77:71:11:f5:2e:ae:d6:82:6f:ae:ec:da: 7d:ee:0f:82:df:28:f9:b9:2b:68:83:06:47:4a:49: d5:47:f9:00:34:90:3b:80:b8:db:e5:db:b3:17:c6: 64:7f:94:07:0f:d3:7a:84:3e:cc:de:ee:b7:67:7b: 10:52:af:80:4f:56:3a:9e:bd:bb:5b:1e:22:6f:f0: b5:1a:c4:3b:de:7b:1d:82:19:df:8c:e2:d5:92:4d: ea:60:41:cc:aa:59:14:86:51:90:0c:93:c0:76:58: aa:ad:a1:5d:cd:88:34:57:3d:01:67:67:1c:aa:75: e8:e6:6e:96:9c:22:65:3d:2d:a3:c6:bd:68:a2:96: 4a:88:49:cb:6f:0e:95:0f:e5:7c:64:c6:9c:88:a8: 23:68:3c:78:ce:d3:71:e5:63:d9:a0:41:81:75:6d: 6c:2c:5d:e6:b7:e2:49:3e:2a:e7:a0:92:7b:1a:f7: be:20:65:38:c1:21:98:ac:63:51:a2:a5:a2:a4:53: 1b:a5:82:f2:ee:f5:43:20:c0:4c:f1:1e:a5:9e:1f: f9:7c:85:6f:29:2e:dc:bd:7d:65:3a:ef:6c:81:7f: 7b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:39:49:4A:7A:FE:87:61:FB:AB:86:5F:02:D1:88:E6:FA:AE:F3:72 X509v3 Authority Key Identifier: keyid:F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:20:25:0b:57:ef:78:b9:75:c7:88:a3:31:21:d6:58:af:df: 09:7b:6b:d9:42:14:90:17:db:4b:bf:76:c1:e5:e5:ab:5c:85: 57:2d:ae:89:6c:06:37:5f:fd:cd:80:7d:8a:32:15:25:1b:ec: 29:24:04:25:43:b6:81:78:62:47:b0:aa:1e:a6:6e:0a:58:d0: 50:8f:95:28:5b:c6:a5:ce:68:2f:a1:0a:2e:3e:09:1e:02:4c: ac:05:08:5d:cc:82:6e:3b:db:45:1c:53:e9:72:b0:ca:ba:83: f8:a2:b7:6c:4c:8f:5e:0e:de:bd:19:95:e3:32:3b:82:fe:8e: 0f:a2:b0:7d:d6:92:14:9b:e4:9b:33:02:c3:9d:c0:2d:a1:ee: 5c:cd:09:42:dc:d0:df:7c:aa:aa:4f:8f:00:16:c1:4b:6d:be: 83:80:f8:f0:2a:21:07:3b:15:b2:58:0f:14:a3:8b:b6:54:52: 15:83:27:a8:d2:0c:f9:cb:b7:d9:10:f6:4c:71:32:f1:46:67: d1:cd:b9:fd:58:e0:61:dd:c5:d1:27:7e:45:e6:5f:05:0f:64: 3f:68:6f:0f:74:5d:3e:7f:8e:97:db:3c:7a:e9:35:93:eb:56: 00:d6:7b:61:0e:a9:90:bc:63:04:9e:c2:6b:49:e9:df:ef:c2: 6c:bc:b7:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDMjAxMTAvBgNVBAUTKEYyMjQ0RkE4RkIwRkM5RjUxMTFBREVGQUMxOTc5OUMy OUYzQzg4NUIwHhcNMjUwODA3MDMzMDEzWhcNMjUwODE0MDMzMDEzWjAYMRYwFAYD VQQDEw02ODk0MWRjNi1hZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl585NgYSxjkTQYvJ4RdzZGL9Vn88yZkHINOwMasu1X93cRH1Lq7Wgm+u7Np9 7g+C3yj5uStogwZHSknVR/kANJA7gLjb5duzF8Zkf5QHD9N6hD7M3u63Z3sQUq+A T1Y6nr27Wx4ib/C1GsQ73nsdghnfjOLVkk3qYEHMqlkUhlGQDJPAdliqraFdzYg0 Vz0BZ2ccqnXo5m6WnCJlPS2jxr1oopZKiEnLbw6VD+V8ZMaciKgjaDx4ztNx5WPZ oEGBdW1sLF3mt+JJPirnoJJ7Gve+IGU4wSGYrGNRoqWipFMbpYLy7vVDIMBM8R6l nh/5fIVvKS7cvX1lOu9sgX97LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKo5SUp6 /odh+6uGXwLRiOb6rvNyMB8GA1UdIwQYMBaAFPIkT6j7D8n1ERre+sGXmcKfPIhb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEMyMC9BNUE0Q0QxMEND NzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlmVVJHdDc2d1plWndwODhp RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpUlBxUHNQeWZVUkd0NzZ3WmVad3A4OGlGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEMyMC9BNUE0Q0QxMENDNzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlm VVJHdDc2d1plWndwODhpRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYICULV+94uXXHiKMxIdZYr98Je2vZQhSQF9tLv3bB5eWrXIVXLa6J bAY3X/3NgH2KMhUlG+wpJAQlQ7aBeGJHsKoepm4KWNBQj5UoW8alzmgvoQouPgke AkysBQhdzIJuO9tFHFPpcrDKuoP4ordsTI9eDt69GZXjMjuC/o4PorB91pIUm+Sb MwLDncAtoe5czQlC3NDffKqqT48AFsFLbb6DgPjwKiEHOxWyWA8Uo4u2VFIVgyeo 0gz5y7fZEPZMcTLxRmfRzbn9WOBh3cXRJ35F5l8FD2Q/aG8PdF0+f46X2zx66TWT 61YA1nthDqmQvGMEnsJrSenf78JsvLcx -----END CERTIFICATE-----Generated at Fri Aug 8 20:46:14 2025 by rpki-client