$ rpki-client -vvf rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft File: L__8o-ZL11oIXmx2cyYl8iTHRDI.mft (raw, json) Hash identifier: kODnV0FSri2DaWU9+u99kA2v7VmfTTZH4PRlODIChfQ= Subject key identifier: 1B:6E:8C:3A:53:BB:AB:05:3A:CB:24:DF:A4:D3:91:95:B9:20:91:57 Authority key identifier: 2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 Certificate issuer: /CN=A9193604/serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Certificate serial: 0138 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft Manifest number: 0135 Signing time: Sat 09 Aug 2025 04:55:38 +0000 Manifest this update: Sat 09 Aug 2025 04:55:38 +0000 Manifest next update: Sat 16 Aug 2025 04:55:38 +0000 Files and hashes: 1: L__8o-ZL11oIXmx2cyYl8iTHRDI.crl (hash: XaB9p7OLsp7DjipfsXsaMmTHNbdhwxX186umooa7ekQ=) 2: 4578BBA89F4E11EEB293B87EC4F9AE02.roa (hash: 3yiW508L3oftd11FyXYrUNBNgcv/84LhY7x8tmbtRS4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9193604, serialNumber=2FFFFCA3E64BD75A085E6C76732625F224C74432 Validity Not Before: Aug 9 04:55:38 2025 GMT Not After : Aug 16 04:55:38 2025 GMT Subject: CN=6896d4ca-88c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8a:00:cb:93:32:de:6d:5a:84:3e:f6:36:54: 73:d8:ba:a5:78:a4:bb:4c:5a:88:6b:f9:19:ef:4e: 80:0b:16:67:7d:54:89:3d:d5:45:8f:9e:1b:ca:f0: a3:fe:d6:29:eb:1d:5a:25:63:1c:dc:69:da:fa:12: a3:e9:60:c5:9b:a8:f2:43:93:00:c6:38:fc:10:2e: e7:5a:57:21:a2:81:58:93:c2:84:04:a2:98:29:c0: af:58:f5:59:c5:72:de:24:be:64:4f:ab:33:bb:24: a2:61:6f:6f:2f:80:00:17:be:1a:4d:2f:7c:36:ea: 97:d9:90:0f:ae:19:13:bb:90:5d:e3:d3:98:ba:a4: 08:69:c0:0c:21:c8:2b:d8:3f:a6:ff:1d:bd:96:c1: 2d:ad:67:87:fc:53:3a:c7:ba:ba:a3:c5:b7:97:e9: 56:da:5b:73:35:91:a7:49:86:d4:51:89:ae:79:eb: 17:46:d4:0e:37:a6:d8:18:14:82:95:43:39:6c:c8: fa:3c:86:56:4a:cf:f0:65:70:2c:ec:3e:cc:48:4a: f8:37:57:99:d0:ea:73:f6:f8:88:f4:2a:a1:86:52: 52:4d:bc:b0:e0:90:3d:6e:45:74:96:5d:c3:4b:9a: c1:4a:c7:66:92:16:a7:15:16:18:b7:89:59:ae:48: 0c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6E:8C:3A:53:BB:AB:05:3A:CB:24:DF:A4:D3:91:95:B9:20:91:57 X509v3 Authority Key Identifier: keyid:2F:FF:FC:A3:E6:4B:D7:5A:08:5E:6C:76:73:26:25:F2:24:C7:44:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L__8o-ZL11oIXmx2cyYl8iTHRDI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193604/B595FDA29F4D11EE84DB0F7DC4F9AE02/L__8o-ZL11oIXmx2cyYl8iTHRDI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:96:f0:dc:ec:ff:f4:d1:28:9c:d3:d5:9f:2f:80:67:76:9b: 32:1d:2f:4c:f5:a9:46:c8:1d:b2:96:1b:b3:d3:a4:44:d9:f9: 4b:0c:52:df:33:00:fe:9e:7f:1f:f7:2c:fb:53:3e:5b:bb:f3: 43:e7:7a:37:2e:8a:26:14:d8:e3:fa:71:23:89:f5:2f:a4:d3: ad:ac:74:f2:1f:97:3b:21:a5:ea:75:a5:92:80:77:cb:ca:11: 19:22:7d:54:1f:00:26:fe:dd:54:83:cf:51:97:46:f5:96:95: 9d:2e:bb:5e:ae:f2:a7:5f:61:f1:34:8f:01:c2:47:d1:d8:32: 2d:6e:22:73:c1:5b:0f:85:ee:13:f7:01:a4:61:e9:7b:b6:70: 85:4a:2e:80:93:ac:8b:ed:30:7e:fe:b5:fa:de:93:d2:1b:25: d4:d0:6f:b8:5b:73:85:f7:db:11:2d:88:9d:0a:96:1b:64:c7: 22:79:0a:9f:e6:a0:6c:15:08:9c:c4:95:ac:4a:f8:66:37:b2: d2:e6:70:9f:18:a4:97:48:13:6a:47:e5:de:c7:b5:f0:94:eb: ca:a9:23:5c:43:c1:75:16:84:68:c3:d8:c1:0a:ca:b0:3e:25: 61:4f:f4:21:af:01:62:2e:68:50:55:9c:b7:64:f9:ee:9b:fc: 6b:e2:13:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTM2MDQxMTAvBgNVBAUTKDJGRkZGQ0EzRTY0QkQ3NUEwODVFNkM3NjczMjYyNUYy MjRDNzQ0MzIwHhcNMjUwODA5MDQ1NTM4WhcNMjUwODE2MDQ1NTM4WjAYMRYwFAYD VQQDEw02ODk2ZDRjYS04OGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ooAy5My3m1ahD72NlRz2LqleKS7TFqIa/kZ706ACxZnfVSJPdVFj54byvCj /tYp6x1aJWMc3Gna+hKj6WDFm6jyQ5MAxjj8EC7nWlchooFYk8KEBKKYKcCvWPVZ xXLeJL5kT6szuySiYW9vL4AAF74aTS98NuqX2ZAPrhkTu5Bd49OYuqQIacAMIcgr 2D+m/x29lsEtrWeH/FM6x7q6o8W3l+lW2ltzNZGnSYbUUYmueesXRtQON6bYGBSC lUM5bMj6PIZWSs/wZXAs7D7MSEr4N1eZ0Opz9viI9CqhhlJSTbyw4JA9bkV0ll3D S5rBSsdmkhanFRYYt4lZrkgMuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtujDpT u6sFOssk36TTkZW5IJFXMB8GA1UdIwQYMBaAFC///KPmS9daCF5sdnMmJfIkx0Qy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzYwNC9CNTk1RkRBMjlG NEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDExb0lYbXgyY3lZbDhpVEhS REkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xfXzhvLVpMMTFvSVhteDJjeVlsOGlUSFJESS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzYwNC9CNTk1RkRBMjlGNEQxMUVFODREQjBGN0RDNEY5QUUwMi9MX184by1aTDEx b0lYbXgyY3lZbDhpVEhSREkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+lvDc7P/00Sic09WfL4BndpsyHS9M9alGyB2ylhuz06RE2flLDFLf MwD+nn8f9yz7Uz5bu/ND53o3LoomFNjj+nEjifUvpNOtrHTyH5c7IaXqdaWSgHfL yhEZIn1UHwAm/t1Ug89Rl0b1lpWdLrtervKnX2HxNI8BwkfR2DItbiJzwVsPhe4T 9wGkYel7tnCFSi6Ak6yL7TB+/rX63pPSGyXU0G+4W3OF99sRLYidCpYbZMcieQqf 5qBsFQicxJWsSvhmN7LS5nCfGKSXSBNqR+Xex7XwlOvKqSNcQ8F1FoRow9jBCsqw PiVhT/QhrwFiLmhQVZy3ZPnum/xr4hOk -----END CERTIFICATE-----Generated at Sat Aug 9 10:39:41 2025 by rpki-client