$ rpki-client -vvf rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft File: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft (raw, json) Hash identifier: vOHWW8MqXrAG6q+wWqxeo8bPNAkmSSC8bwrNeHD7snY= Subject key identifier: F7:BD:E2:8B:8C:AB:77:8A:89:93:7E:B5:FA:F0:1C:56:2F:55:C1:F4 Authority key identifier: F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 Certificate issuer: /CN=A9156DB4/serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Certificate serial: 03C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft Manifest number: 03B9 Signing time: Sat 09 Aug 2025 01:11:33 +0000 Manifest this update: Sat 09 Aug 2025 01:11:32 +0000 Manifest next update: Sat 16 Aug 2025 01:11:32 +0000 Files and hashes: 1: 8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl (hash: aEDIktjIvSYORMG4R+gQpnLaeQgYi9FGDeABgFcJTfg=) 2: 688C6AC29D9D11EC958A216AC4F9AE02.roa (hash: rQCKwpVXSCN9Y75hhPwPDo9+AXfNNoLzfRi82A6bdSI=) 3: 854ACCD2DFEA11ECB7DF0A2EC4F9AE02.roa (hash: C6Z/IfRVQV8LxL1Oc2uDTt0509ENzUWPGHXpk7TwKNY=) 4: 695DB5289D9D11EC958A216AC4F9AE02.roa (hash: c9fr6KD/Ih6e5aCRy3Bruof+Va6iYKpCGv8u+/ETzK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 965 (0x3c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156DB4, serialNumber=F2D126F142086A26E3C584A70AB3E527B3038182 Validity Not Before: Aug 9 01:11:32 2025 GMT Not After : Aug 16 01:11:32 2025 GMT Subject: CN=6896a044-4604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:96:61:b8:6d:78:dd:49:5a:70:da:67:36: d9:8d:c1:43:8c:fb:67:98:c4:23:b1:ea:b5:6a:21: 80:d8:37:d1:9b:43:7e:0d:43:95:ec:e3:10:38:84: 02:62:dc:09:12:bf:0b:1f:7d:c5:92:bd:49:99:86: 1b:e8:93:c8:79:bb:cc:cc:54:05:27:a0:78:8c:cd: d5:47:2f:16:2d:8a:12:9e:8a:ff:c1:77:25:52:7d: b5:9f:76:d5:7c:7b:ff:3b:d6:27:d4:e2:73:33:b2: 01:a5:58:b7:6a:53:bb:c6:4f:88:41:14:f1:ee:ba: 0e:4c:d4:20:9d:58:f6:f8:27:2a:d1:40:2f:43:e6: c4:1e:16:32:74:68:6a:24:61:fd:4e:88:71:f4:76: e6:ac:8c:24:7b:c7:3a:da:fa:ff:b0:5a:34:7b:11: e3:39:e3:93:35:f5:72:34:09:7c:20:71:63:a2:14: a7:39:79:f0:b4:6d:b2:e4:12:5e:a0:26:82:c3:1b: a6:3e:29:d1:d4:03:c6:75:4a:30:fe:93:cb:cd:e2: 27:bf:cd:d6:65:bf:ad:f4:6f:6e:63:3b:ce:1e:f4: f1:b0:69:90:6f:c9:53:40:60:b2:6a:b0:29:58:15: 89:80:1e:2b:bd:fc:bb:50:17:5e:02:98:48:b9:16: ad:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BD:E2:8B:8C:AB:77:8A:89:93:7E:B5:FA:F0:1C:56:2F:55:C1:F4 X509v3 Authority Key Identifier: keyid:F2:D1:26:F1:42:08:6A:26:E3:C5:84:A7:0A:B3:E5:27:B3:03:81:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8tEm8UIIaibjxYSnCrPlJ7MDgYI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156DB4/E84DB98A9D9A11ECBA928F45C4F9AE02/8tEm8UIIaibjxYSnCrPlJ7MDgYI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9c:51:95:99:f7:c6:f9:35:6d:f3:df:2c:7e:02:a9:b9:58: a6:f2:9c:ec:dc:74:a6:0b:95:f0:60:38:f4:83:7b:aa:da:92: f7:c0:15:b5:7b:35:92:af:1a:8e:7c:20:4c:be:aa:1b:5e:8b: b8:bc:06:0e:73:4a:a3:6d:2e:c4:c0:23:a5:d0:e5:52:c9:fd: 42:d9:be:64:4f:da:87:1f:35:72:9a:c3:ca:c5:e8:73:c6:19: 04:05:22:76:e9:f1:89:d2:11:f8:76:4d:39:e9:29:17:05:1d: 39:cc:79:b2:33:2a:2b:ff:f5:84:b3:cd:48:dc:d2:62:11:91: 55:22:01:af:ad:4c:42:ec:4b:5e:5d:e7:79:49:91:91:71:83: cf:6e:61:8a:26:bc:e5:78:04:47:15:22:04:24:de:86:a8:ee: 1e:9c:20:2d:af:06:95:d6:05:5a:8a:a3:10:00:f4:2d:ae:e0: 51:40:65:43:a4:1a:07:61:3c:91:32:b0:2b:86:59:b6:a6:62: eb:10:09:03:13:3e:4e:bd:7f:a8:29:26:36:a7:00:de:1a:63: cb:67:94:40:49:20:46:19:52:d2:4b:2f:5f:7b:86:14:2f:a8: be:04:10:e1:87:5d:48:30:46:02:79:b0:9d:70:88:98:ac:1f: 45:fa:e2:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZEQjQxMTAvBgNVBAUTKEYyRDEyNkYxNDIwODZBMjZFM0M1ODRBNzBBQjNFNTI3 QjMwMzgxODIwHhcNMjUwODA5MDExMTMyWhcNMjUwODE2MDExMTMyWjAYMRYwFAYD VQQDEw02ODk2YTA0NC00NjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnXyWYbhteN1JWnDaZzbZjcFDjPtnmMQjseq1aiGA2DfRm0N+DUOV7OMQOIQC YtwJEr8LH33Fkr1JmYYb6JPIebvMzFQFJ6B4jM3VRy8WLYoSnor/wXclUn21n3bV fHv/O9Yn1OJzM7IBpVi3alO7xk+IQRTx7roOTNQgnVj2+Ccq0UAvQ+bEHhYydGhq JGH9Tohx9HbmrIwke8c62vr/sFo0exHjOeOTNfVyNAl8IHFjohSnOXnwtG2y5BJe oCaCwxumPinR1APGdUow/pPLzeInv83WZb+t9G9uYzvOHvTxsGmQb8lTQGCyarAp WBWJgB4rvfy7UBdeAphIuRatjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPe94ouM q3eKiZN+tfrwHFYvVcH0MB8GA1UdIwQYMBaAFPLRJvFCCGom48WEpwqz5SezA4GC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkRCNC9FODREQjk4QTlE OUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFpYmp4WVNuQ3JQbEo3TURn WUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh0RW04VUlJYWlianhZU25DclBsSjdNRGdZSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkRCNC9FODREQjk4QTlEOUExMUVDQkE5MjhGNDVDNEY5QUUwMi84dEVtOFVJSWFp Ymp4WVNuQ3JQbEo3TURnWUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBunFGVmffG+TVt898sfgKpuVim8pzs3HSmC5XwYDj0g3uq2pL3wBW1 ezWSrxqOfCBMvqobXou4vAYOc0qjbS7EwCOl0OVSyf1C2b5kT9qHHzVymsPKxehz xhkEBSJ26fGJ0hH4dk056SkXBR05zHmyMyor//WEs81I3NJiEZFVIgGvrUxC7Ete Xed5SZGRcYPPbmGKJrzleARHFSIEJN6GqO4enCAtrwaV1gVaiqMQAPQtruBRQGVD pBoHYTyRMrArhlm2pmLrEAkDEz5OvX+oKSY2pwDeGmPLZ5RASSBGGVLSSy9fe4YU L6i+BBDhh11IMEYCebCdcIiYrB9F+uI7 -----END CERTIFICATE-----Generated at Sun Aug 10 18:32:30 2025 by rpki-client