$ rpki-client -vvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft File: m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json) Hash identifier: J/kQMCV6R0NhOGaQTz3CW2rT1pbtU498Uhw6FHktt3Y= Subject key identifier: 95:7D:82:2B:8D:2F:E3:D7:96:03:33:DA:2E:44:3D:83:87:2F:56:5A Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 Certificate issuer: /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Certificate serial: 0A3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft Manifest number: 0A2D Signing time: Fri 08 Aug 2025 20:05:50 +0000 Manifest this update: Fri 08 Aug 2025 20:05:50 +0000 Manifest next update: Fri 15 Aug 2025 20:05:50 +0000 Files and hashes: 1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: jUY5f39yoL9xMhTYXiywC7WxgST6hKKoASdXhV+avuw=) 2: 87C1A5F8245711F083602A0BC4F9AE02.roa (hash: 3SdLflE7QNKZukodJvPP0+VEXx4PpxcKaoT3DVdeoho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2622 (0xa3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173780, serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Validity Not Before: Aug 8 20:05:50 2025 GMT Not After : Aug 15 20:05:50 2025 GMT Subject: CN=6896589e-a5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f1:b1:23:73:7f:ea:c6:c3:ce:14:2c:a7:ed: 9d:a0:9a:f8:cf:27:d7:51:25:26:06:60:dd:73:01: b3:54:3d:18:95:f3:f4:86:64:9c:67:4d:71:4e:35: ad:a8:3b:ba:62:6e:98:41:88:f1:cc:dd:21:bd:52: 24:3d:9f:13:30:73:b6:1c:7d:6b:21:8d:bb:cc:77: 4a:f9:87:fa:96:8d:cb:09:9d:c5:7f:ce:51:ca:89: f9:e6:f3:63:84:d3:07:e1:06:38:6a:e4:e8:61:a8: b5:55:be:c3:19:7a:81:f9:c6:20:ec:f0:fa:7a:c8: 5a:10:2a:52:10:89:aa:71:22:2d:9f:08:04:34:51: d5:27:1b:a3:cf:cb:51:eb:44:2f:5a:be:74:a9:f3: 66:36:e1:f8:9d:8e:c8:8c:42:8a:9f:9c:fc:7c:76: 18:30:13:58:1b:8d:73:7f:59:89:c1:0b:af:6c:7c: e8:30:0d:11:74:e0:8f:3d:b1:16:fa:87:ff:9b:84: 4c:05:b7:9d:10:98:fe:15:a8:10:46:52:e5:50:a9: dc:78:fc:9b:f8:20:7c:34:27:22:32:86:1b:07:6d: b9:f8:c3:b4:a3:d5:7a:f7:37:ea:53:3d:95:68:cb: 59:fc:97:0f:68:39:be:07:e2:07:e2:85:8f:a7:f6: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7D:82:2B:8D:2F:E3:D7:96:03:33:DA:2E:44:3D:83:87:2F:56:5A X509v3 Authority Key Identifier: keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:e2:5a:08:4f:9b:a9:96:78:9c:ba:83:53:6f:97:f7:cb:2e: 96:c1:7d:00:31:43:98:0f:cc:89:e4:7d:57:64:0b:42:68:b7: d0:0d:41:9d:8b:25:28:41:13:b3:f6:3f:1e:85:a3:69:5f:2c: ef:a7:e4:e8:0b:36:a9:5f:3d:73:d2:63:db:7e:6f:54:c1:aa: 8f:7d:5a:65:a6:fb:c0:5f:b4:54:76:ba:d3:09:79:45:77:26: 73:34:bd:20:33:f5:08:06:c5:36:06:ba:a7:7c:68:05:54:2b: 5e:7a:c8:69:97:4e:ec:1d:94:48:e6:97:50:4e:1a:de:b8:a3: c5:fb:5d:fb:1c:04:1f:33:9c:ba:34:8f:aa:c7:95:16:7a:26: a6:fa:2b:e0:c9:11:9e:3c:37:fe:7d:c9:99:42:54:c1:71:7c: cf:2c:7c:a8:ba:5f:31:c3:8b:e7:cc:c3:dc:fe:a9:d7:e3:7c: 48:5e:2f:ad:5b:bc:80:1f:8f:f5:64:a0:ec:37:7a:64:7b:8b: 05:b8:07:d8:aa:d9:df:a6:5f:c9:0a:bf:03:9b:16:6e:ff:63: 27:67:c0:a6:c5:ad:05:6d:fd:94:79:37:39:ea:8b:8b:7e:c5: f1:f3:9f:77:49:15:9b:5c:a0:87:66:5c:e7:be:02:c0:fe:69: 8a:9f:a3:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM3ODAxMTAvBgNVBAUTKDlCQzY2Q0ZGODA5QThBNzEyMTIwMDVERDlDMjcwNDdB QjQxOEM4QTcwHhcNMjUwODA4MjAwNTUwWhcNMjUwODE1MjAwNTUwWjAYMRYwFAYD VQQDEw02ODk2NTg5ZS1hNWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/GxI3N/6sbDzhQsp+2doJr4zyfXUSUmBmDdcwGzVD0YlfP0hmScZ01xTjWt qDu6Ym6YQYjxzN0hvVIkPZ8TMHO2HH1rIY27zHdK+Yf6lo3LCZ3Ff85Ryon55vNj hNMH4QY4auToYai1Vb7DGXqB+cYg7PD6eshaECpSEImqcSItnwgENFHVJxujz8tR 60QvWr50qfNmNuH4nY7IjEKKn5z8fHYYMBNYG41zf1mJwQuvbHzoMA0RdOCPPbEW +of/m4RMBbedEJj+FagQRlLlUKncePyb+CB8NCciMoYbB225+MO0o9V69zfqUz2V aMtZ/JcPaDm+B+IH4oWPp/b4qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJV9giuN L+PXlgMz2i5EPYOHL1ZaMB8GA1UdIwQYMBaAFJvGbP+AmopxISAF3ZwnBHq0GMin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mzc4MC84RUI2MkRGQTc3 RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWluRWhJQVhkbkNjRWVyUVl5 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204WnNfNENhaW5FaElBWGRuQ2NFZXJRWXlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mzc4MC84RUI2MkRGQTc3RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWlu RWhJQVhkbkNjRWVyUVl5S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv4loIT5uplnicuoNTb5f3yy6WwX0AMUOYD8yJ5H1XZAtCaLfQDUGd iyUoQROz9j8ehaNpXyzvp+ToCzapXz1z0mPbfm9UwaqPfVplpvvAX7RUdrrTCXlF dyZzNL0gM/UIBsU2BrqnfGgFVCteeshpl07sHZRI5pdQThreuKPF+137HAQfM5y6 NI+qx5UWeiam+ivgyRGePDf+fcmZQlTBcXzPLHyoul8xw4vnzMPc/qnX43xIXi+t W7yAH4/1ZKDsN3pke4sFuAfYqtnfpl/JCr8DmxZu/2MnZ8Cmxa0Fbf2UeTc56ouL fsXx8593SRWbXKCHZlznvgLA/mmKn6N1 -----END CERTIFICATE-----Generated at Sun Aug 10 10:47:32 2025 by rpki-client