$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json) Hash identifier: R9hUMxPFeL47lCK73xkBeAQyXT6idv0X57qmfRRrk6w= Subject key identifier: 9A:D7:6A:E7:78:BF:97:09:8B:01:FC:2F:F5:EB:80:45:9A:63:40:30 Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Certificate serial: 04BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft Manifest number: 04A1 Signing time: Wed 13 Aug 2025 00:34:29 +0000 Manifest this update: Wed 13 Aug 2025 00:34:28 +0000 Manifest next update: Wed 20 Aug 2025 00:34:28 +0000 Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: elJK6NL5kQCU+XNgqEBTHsifF8++XZLPZp5trvRNLy0=) 2: 26341238FB5011EF989C8143C4F9AE02.roa (hash: 6Gx+BiutQSrEbY8mFBzgAsNKgb1qIvA80j3THb6HaOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 00:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1212 (0x4bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Validity Not Before: Aug 13 00:34:28 2025 GMT Not After : Aug 20 00:34:28 2025 GMT Subject: CN=689bdd94-6a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5a:fe:79:60:cb:19:cc:d8:74:88:d6:d7:42: 11:5b:0b:e2:ca:3c:9d:6f:2e:01:ea:42:38:82:6c: bb:ce:9e:9b:0e:a5:ce:b7:f8:9e:e0:ed:3d:6a:af: ee:00:17:c0:0f:c7:16:af:06:13:45:9a:0f:96:91: f1:67:1e:bd:d5:a1:e9:0e:e0:24:bb:53:e9:02:5c: db:af:22:bd:4f:03:b1:8e:b0:40:ab:de:99:f9:2a: c2:58:f0:2f:93:e4:d1:fb:d9:5e:09:a6:3e:cc:fa: 10:02:8f:1b:4f:52:66:09:aa:1e:f6:f1:d8:6b:ed: df:88:6f:08:67:42:51:dc:8c:a7:e0:b7:ca:3c:c8: e1:01:96:14:64:2d:73:17:10:72:20:6c:1a:43:ce: fc:ad:a7:d3:4d:5d:61:33:f2:33:a8:b6:0b:64:28: 8e:4a:0a:9f:ea:0a:47:52:b0:ff:55:27:1f:ae:59: 50:81:fc:db:18:12:8d:09:71:d1:e6:c8:ed:be:4e: 32:cb:25:57:83:98:a0:17:ff:2d:85:c7:56:26:89: 62:cc:6d:70:37:e1:04:53:d5:d2:e0:be:b2:ca:62: c6:03:cb:8f:fb:3d:a8:a8:42:23:16:f0:5e:be:b8: 33:a4:a9:a5:69:46:88:31:b1:3b:27:68:b4:a2:7d: 2b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D7:6A:E7:78:BF:97:09:8B:01:FC:2F:F5:EB:80:45:9A:63:40:30 X509v3 Authority Key Identifier: keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:de:3e:01:89:81:9d:ee:7f:b0:60:16:c1:de:58:1a:ae:a2: c6:d2:58:c8:88:8b:ba:9f:17:db:0d:e9:4c:89:69:09:2d:12: 0e:3a:1d:83:a2:d6:ca:3c:f2:51:3f:b0:cc:fe:83:a1:f1:d1: 3d:f1:48:a9:24:69:e5:6f:56:b1:1d:c2:59:7c:a2:54:3b:a9: de:8b:1a:ce:f9:45:4e:0a:5e:44:8c:53:ef:f1:fb:5a:b7:40: 21:bf:62:5d:73:cb:01:a2:8b:43:6f:99:a1:dc:17:8b:b0:9e: 7a:f6:26:7d:20:7a:47:3f:c0:3d:47:9e:aa:21:9c:64:e0:f0: c9:17:29:e3:ba:b9:a4:71:da:8d:c1:22:20:f6:de:f4:84:98: a4:e2:f6:5d:7d:59:16:e1:a0:33:da:5c:80:8d:df:27:9c:a4: e5:96:f6:fb:4f:3a:2a:22:87:9c:de:a9:7b:21:45:1c:1e:73: 59:6a:89:88:83:e3:1e:4c:2d:94:ef:f1:82:bd:97:91:d8:4c: 58:3b:cd:e8:2c:cf:26:4e:cb:fe:bf:cf:5a:fa:25:31:2c:85: c1:4e:f0:ad:ce:e1:17:2b:ca:3b:79:62:e7:2d:44:30:cf:73: 65:e9:4b:c5:ac:61:79:9d:d3:9c:5b:2b:8c:54:f2:36:ef:d4: 9d:aa:a4:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFNDUxMTAvBgNVBAUTKEI3QzJCRUNDOTdCNDIzNzlDNDRBRDFBRUI1RTA3M0Uy QTNEQTUxMUUwHhcNMjUwODEzMDAzNDI4WhcNMjUwODIwMDAzNDI4WjAYMRYwFAYD VQQDEw02ODliZGQ5NC02YTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzFr+eWDLGczYdIjW10IRWwviyjydby4B6kI4gmy7zp6bDqXOt/ie4O09aq/u ABfAD8cWrwYTRZoPlpHxZx691aHpDuAku1PpAlzbryK9TwOxjrBAq96Z+SrCWPAv k+TR+9leCaY+zPoQAo8bT1JmCaoe9vHYa+3fiG8IZ0JR3Iyn4LfKPMjhAZYUZC1z FxByIGwaQ878rafTTV1hM/IzqLYLZCiOSgqf6gpHUrD/VScfrllQgfzbGBKNCXHR 5sjtvk4yyyVXg5igF/8thcdWJolizG1wN+EEU9XS4L6yymLGA8uP+z2oqEIjFvBe vrgzpKmlaUaIMbE7J2i0on0riQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrXaud4 v5cJiwH8L/XrgEWaY0AwMB8GA1UdIwQYMBaAFLfCvsyXtCN5xErRrrXgc+Kj2lEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U0NS81RjZBQjEwQzUy OTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkzbkVTdEd1dGVCejRxUGFV UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4Sy16SmUwSTNuRVN0R3V0ZUJ6NHFQYVVSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U0NS81RjZBQjEwQzUyOTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkz bkVTdEd1dGVCejRxUGFVUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA13j4BiYGd7n+wYBbB3lgarqLG0ljIiIu6nxfbDelMiWkJLRIOOh2D otbKPPJRP7DM/oOh8dE98UipJGnlb1axHcJZfKJUO6neixrO+UVOCl5EjFPv8fta t0Ahv2Jdc8sBootDb5mh3BeLsJ569iZ9IHpHP8A9R56qIZxk4PDJFynjurmkcdqN wSIg9t70hJik4vZdfVkW4aAz2lyAjd8nnKTllvb7TzoqIoec3ql7IUUcHnNZaomI g+MeTC2U7/GCvZeR2ExYO83oLM8mTsv+v89a+iUxLIXBTvCtzuEXK8o7eWLnLUQw z3Nl6UvFrGF5ndOcWyuMVPI279SdqqTD -----END CERTIFICATE-----Generated at Wed Aug 13 04:30:58 2025 by rpki-client