$ rpki-client -vvf rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft File: 8mzvyND2FJXOpWXLF0zPkuc6CJk.mft (raw, json) Hash identifier: kFCCQTDUn1D8Z8hdVgD9wNhGKsgq9dqalyq7WAqaTJM= Subject key identifier: 3A:FE:4A:DE:2D:D9:5C:DE:42:A8:72:F1:B7:75:62:D6:C4:4D:34:82 Authority key identifier: F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99 Certificate issuer: /CN=A9184A0A/serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft Manifest number: EF Signing time: Sat 09 Aug 2025 05:42:36 +0000 Manifest this update: Sat 09 Aug 2025 05:42:35 +0000 Manifest next update: Sat 16 Aug 2025 05:42:35 +0000 Files and hashes: 1: 8mzvyND2FJXOpWXLF0zPkuc6CJk.crl (hash: cNwilWEQ/2ShZFd2eAyf+ktkVVqoAipHIhVVevVGhiU=) 2: 81DED04C065411EFAAF0D25DC4F9AE02.roa (hash: KnA/iGGYoBgm/bcH9BItyxCBripYpEURjIllmAUmPC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184A0A, serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899 Validity Not Before: Aug 9 05:42:35 2025 GMT Not After : Aug 16 05:42:35 2025 GMT Subject: CN=6896dfcb-1768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:25:de:7d:1a:6f:3a:7f:15:4c:60:dd:0d:63: 49:33:b0:60:8d:b3:a3:eb:76:81:3c:de:21:a1:c8: 1d:00:8c:28:dd:4e:bb:3f:ca:bf:ea:40:3b:aa:75: 75:65:82:8b:09:e3:0f:5b:00:72:50:93:33:c9:3c: 5f:2a:f0:00:f3:02:75:0a:71:c6:24:bc:70:20:68: a8:d8:a7:3e:b6:25:a9:5f:d1:6c:5d:69:be:64:93: c9:fb:91:3c:4e:54:1c:97:52:16:90:dc:8c:c2:52: 92:73:7b:dd:9a:0d:31:d5:f8:ce:9f:4d:a2:29:b8: a7:8f:02:d0:47:bf:46:fc:f3:1b:5a:f8:03:52:99: 7d:20:50:74:8f:0f:9c:d2:05:9c:4e:5f:e1:e3:93: 83:80:70:39:31:ae:20:d3:eb:ed:2b:a2:f9:67:22: 2e:38:6d:b5:ca:1b:f6:78:08:18:00:ab:a4:9f:48: e5:34:0a:31:0d:88:b0:85:d4:63:fc:b4:fa:47:06: 0e:2d:f2:9e:9a:ef:7f:9b:90:ca:45:c3:4c:51:28: 07:56:61:fc:89:a1:08:f6:81:54:6d:08:b1:cd:0c: 39:4e:b3:09:0b:08:98:14:de:1d:9c:3b:c2:53:31: b4:1c:44:2c:47:73:d0:5e:d2:4c:c2:d3:07:35:31: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FE:4A:DE:2D:D9:5C:DE:42:A8:72:F1:B7:75:62:D6:C4:4D:34:82 X509v3 Authority Key Identifier: keyid:F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:4e:25:07:b8:da:c6:4d:90:0a:6b:5a:9b:7f:bf:78:7a:c6: 57:1f:a5:ce:5f:3e:49:5b:90:c7:b9:18:17:ba:4d:1d:61:86: 4f:fd:e3:aa:a9:70:f0:1b:22:28:7b:a5:f0:c0:48:5d:7a:ef: e0:4b:59:01:bd:7c:f2:7a:1f:31:7d:af:41:57:ac:ad:01:2e: 35:2d:75:ad:0b:3c:0a:23:c7:a7:2c:3b:69:ca:8e:13:97:c1: cc:8f:8f:d1:08:d9:16:c5:26:38:73:03:39:cb:fe:b2:a1:bb: 25:39:c4:f6:bf:ca:bd:70:8a:6c:ae:08:8c:f7:73:3a:2d:7a: b7:c0:97:e0:94:3a:a4:bc:67:23:9b:cd:24:99:45:14:3f:9e: 0e:9e:63:7c:1f:06:b1:e1:3f:49:88:d5:8f:91:76:f3:18:64: 3a:da:a6:b0:18:b1:55:b9:a6:0c:95:9d:ff:7f:06:b2:17:ea: 93:38:fe:4b:31:c5:03:ab:b8:2a:6a:bf:b8:1b:1d:20:46:22: 1c:44:a3:2b:1b:5a:b9:8b:38:87:60:fe:b7:e8:5f:8e:e5:f2: 3e:f8:38:90:b8:ef:a7:0d:17:95:9f:55:66:9d:0d:cb:74:04: 70:83:ec:3d:ad:5f:8e:90:c3:76:d5:76:21:66:5d:1b:3a:7d: ef:2d:e2:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRBMEExMTAvBgNVBAUTKEYyNkNFRkM4RDBGNjE0OTVDRUE1NjVDQjE3NENDRjky RTczQTA4OTkwHhcNMjUwODA5MDU0MjM1WhcNMjUwODE2MDU0MjM1WjAYMRYwFAYD VQQDEw02ODk2ZGZjYi0xNzY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyiXefRpvOn8VTGDdDWNJM7BgjbOj63aBPN4hocgdAIwo3U67P8q/6kA7qnV1 ZYKLCeMPWwByUJMzyTxfKvAA8wJ1CnHGJLxwIGio2Kc+tiWpX9FsXWm+ZJPJ+5E8 TlQcl1IWkNyMwlKSc3vdmg0x1fjOn02iKbinjwLQR79G/PMbWvgDUpl9IFB0jw+c 0gWcTl/h45ODgHA5Ma4g0+vtK6L5ZyIuOG21yhv2eAgYAKukn0jlNAoxDYiwhdRj /LT6RwYOLfKemu9/m5DKRcNMUSgHVmH8iaEI9oFUbQixzQw5TrMJCwiYFN4dnDvC UzG0HEQsR3PQXtJMwtMHNTFOdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDr+St4t 2VzeQqhy8bd1YtbETTSCMB8GA1UdIwQYMBaAFPJs78jQ9hSVzqVlyxdMz5LnOgiZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEEwQS9ENDkxRDg4MDA2 NTMxMUVGQjk2NzAzNTFDNEY5QUUwMi84bXp2eU5EMkZKWE9wV1hMRjB6UGt1YzZD SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhtenZ5TkQyRkpYT3BXWExGMHpQa3VjNkNKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEEwQS9ENDkxRDg4MDA2NTMxMUVGQjk2NzAzNTFDNEY5QUUwMi84bXp2eU5EMkZK WE9wV1hMRjB6UGt1YzZDSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmTiUHuNrGTZAKa1qbf794esZXH6XOXz5JW5DHuRgXuk0dYYZP/eOq qXDwGyIoe6XwwEhdeu/gS1kBvXzyeh8xfa9BV6ytAS41LXWtCzwKI8enLDtpyo4T l8HMj4/RCNkWxSY4cwM5y/6yobslOcT2v8q9cIpsrgiM93M6LXq3wJfglDqkvGcj m80kmUUUP54OnmN8Hwax4T9JiNWPkXbzGGQ62qawGLFVuaYMlZ3/fwayF+qTOP5L McUDq7gqar+4Gx0gRiIcRKMrG1q5iziHYP636F+O5fI++DiQuO+nDReVn1VmnQ3L dARwg+w9rV+OkMN21XYhZl0bOn3vLeLJ -----END CERTIFICATE-----Generated at Sun Aug 10 03:53:46 2025 by rpki-client