$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json) Hash identifier: J2tmX2whVAgxfZXGbokyruaHQzvKmqZNznYL7a9JJ4M= Subject key identifier: DC:48:0A:7C:91:91:7D:D1:A1:C9:E7:9C:38:1A:12:12:44:00:19:98 Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Certificate serial: 0CD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft Manifest number: 0CCB Signing time: Fri 08 Aug 2025 18:19:41 +0000 Manifest this update: Fri 08 Aug 2025 18:19:40 +0000 Manifest next update: Fri 15 Aug 2025 18:19:40 +0000 Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: NnzVIQ9NBkgW3geycCXMON1ifwFaRLLoxLDgq1qJAQM=) 2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: ag4btEEr8nwGBlqow86nAvtb1JX6B7t93yhnFSFUrc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3282 (0xcd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Validity Not Before: Aug 8 18:19:40 2025 GMT Not After : Aug 15 18:19:40 2025 GMT Subject: CN=68963fbc-a1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c9:63:fa:4c:fb:10:26:02:9c:9f:8d:3f:c4: 45:14:b7:8f:06:f5:73:4a:56:d0:2a:d7:ee:2e:94: 42:78:8d:79:f9:b2:3b:7d:16:78:51:23:32:5a:eb: 76:bd:2a:dc:3b:e0:01:0b:c7:bd:09:3b:57:10:eb: 1d:2f:15:4c:1d:27:f3:ba:b4:85:35:71:68:bd:02: 02:c4:54:c7:56:1a:d9:43:1d:ab:b1:96:e7:f2:52: cc:bb:8e:f4:41:57:1a:87:bd:1e:9b:82:5c:f0:24: a3:d6:c2:ff:69:cd:4f:ce:85:19:d0:f1:02:96:00: eb:16:9b:63:10:d0:64:c4:f9:01:9b:76:bf:23:23: b8:fd:a5:77:7f:2b:4d:bc:1d:aa:4f:47:3a:e5:f7: d3:94:e0:e2:24:b1:12:c2:3d:7a:13:f1:ca:bd:2f: b3:37:9b:cf:72:c5:be:9d:9e:bd:3c:f9:bc:f7:3d: 02:9c:bd:16:d7:9f:91:eb:b4:3a:c4:6f:11:ce:f4: 43:13:7d:5b:c2:97:39:aa:f7:b6:45:e9:a6:9d:5a: a7:cc:2a:c6:2c:e6:8d:4e:fe:ab:ef:2e:c0:3b:a7: 67:dd:9e:7b:af:d8:53:5b:ba:34:be:93:1b:ee:71: 1d:af:31:76:9c:d2:03:8d:e8:1d:84:f7:40:f8:8a: 7f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:48:0A:7C:91:91:7D:D1:A1:C9:E7:9C:38:1A:12:12:44:00:19:98 X509v3 Authority Key Identifier: keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:87:02:34:43:86:8c:c8:47:31:b5:2b:4e:e3:00:ad:d0:43: d4:68:e6:70:e6:56:79:0e:98:a1:32:82:85:12:68:0b:29:56: c6:44:1c:29:4d:62:3c:55:e1:d2:da:bb:87:5d:a9:c1:9f:ca: 76:2b:c8:3f:ee:68:93:7a:dd:a7:92:cd:ab:e4:5e:45:2f:c2: 96:56:b8:f1:7f:4a:d9:a5:61:e0:09:6d:2d:b1:1d:f8:7a:26: ae:fc:c9:ef:df:2e:17:33:d7:02:2d:48:da:87:9c:32:da:18: fc:d5:f8:0a:e7:9a:4e:62:20:88:5a:5b:5e:71:a1:5a:e6:9b: a8:e5:39:b4:78:00:71:44:10:38:92:2a:66:c2:83:3b:e3:8f: a7:27:8b:2e:af:72:5f:08:25:a1:0e:99:f4:01:d8:1e:e9:b0: a3:7e:3c:d8:9d:11:8c:ec:b3:cc:fd:58:bf:f0:96:49:82:4c: 44:33:0a:84:12:be:8e:60:dd:f7:03:e0:8e:bd:ae:0a:47:af: 30:33:46:3a:df:ac:59:36:47:78:b1:cc:3b:67:e5:6a:53:ee: 2a:7e:d3:9f:8c:c0:be:6e:8d:1a:dc:16:af:bc:46:27:1a:9d: db:13:ba:3d:13:dc:1a:69:2e:2f:f0:9e:cd:8e:5d:a9:4d:a1: 25:c4:be:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD Mjk1QzczNzkwHhcNMjUwODA4MTgxOTQwWhcNMjUwODE1MTgxOTQwWjAYMRYwFAYD VQQDEw02ODk2M2ZiYy1hMWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMlj+kz7ECYCnJ+NP8RFFLePBvVzSlbQKtfuLpRCeI15+bI7fRZ4USMyWut2 vSrcO+ABC8e9CTtXEOsdLxVMHSfzurSFNXFovQICxFTHVhrZQx2rsZbn8lLMu470 QVcah70em4Jc8CSj1sL/ac1PzoUZ0PEClgDrFptjENBkxPkBm3a/IyO4/aV3fytN vB2qT0c65ffTlODiJLESwj16E/HKvS+zN5vPcsW+nZ69PPm89z0CnL0W15+R67Q6 xG8RzvRDE31bwpc5qve2RemmnVqnzCrGLOaNTv6r7y7AO6dn3Z57r9hTW7o0vpMb 7nEdrzF2nNIDjegdhPdA+Ip/WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxICnyR kX3RocnnnDgaEhJEABmYMB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI ajJBcmN4SUFVVkhDbGNjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBphwI0Q4aMyEcxtStO4wCt0EPUaOZw5lZ5DpihMoKFEmgLKVbGRBwp TWI8VeHS2ruHXanBn8p2K8g/7miTet2nks2r5F5FL8KWVrjxf0rZpWHgCW0tsR34 eiau/Mnv3y4XM9cCLUjah5wy2hj81fgK55pOYiCIWltecaFa5puo5Tm0eABxRBA4 kipmwoM744+nJ4sur3JfCCWhDpn0Adge6bCjfjzYnRGM7LPM/Vi/8JZJgkxEMwqE Er6OYN33A+COva4KR68wM0Y636xZNkd4scw7Z+VqU+4qftOfjMC+bo0a3BavvEYn Gp3bE7o9E9waaS4v8J7Njl2pTaElxL5/ -----END CERTIFICATE-----Generated at Sat Aug 9 10:41:51 2025 by rpki-client