$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: GJh6SRg5pAwIKKd3GpM+SRkvhaKtkBlNYASNuhKw/vM= Subject key identifier: B2:E6:B7:A6:44:24:47:84:9E:18:8A:69:08:73:EC:1C:31:C8:13:CE Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 0968 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 0950 Signing time: Sun 20 Jul 2025 20:20:33 +0000 Manifest this update: Sun 20 Jul 2025 20:20:32 +0000 Manifest next update: Sun 27 Jul 2025 20:20:32 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: mZxWs84hECdGRCCaYcGsdnYuBO0/wORbjGceQM87nYo=) 2: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: kvRrYXzDEb1knff7u5sMUOY0LST5MU2sRwL9Qq51bMI=) 3: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: 5xmx4EdtRdh7/raKFzoldytV08fzGVQ9tShtrjhxke0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 20:20:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2408 (0x968) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: Jul 20 20:20:32 2025 GMT Not After : Jul 27 20:20:32 2025 GMT Subject: CN=687d4f90-f10b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4f:39:51:77:28:aa:2c:c9:70:c8:cf:da:50: 8c:ed:e0:9f:77:c0:1e:ce:c1:d1:72:7a:84:a9:35: 76:41:4d:7a:f1:06:7d:8a:c4:c0:c5:b5:ce:e1:1a: 93:a7:24:12:ac:59:83:71:d4:fb:e0:23:ce:dc:67: ef:90:18:51:ce:b0:89:0f:3a:21:04:45:27:7e:c4: 91:c1:b6:fe:d8:a5:1a:8d:c0:51:05:9e:f7:60:1c: ff:26:0d:db:12:90:73:9a:ff:19:6a:3f:2a:cb:fa: 5e:c9:f3:2f:60:65:b0:6f:63:e9:9e:75:04:e1:fb: a1:6d:1f:35:22:b5:5a:16:37:1a:c4:8a:ba:91:7c: c6:9c:c6:9b:9a:c1:b8:ac:6c:0b:8a:97:7e:43:3a: 88:b1:c1:68:51:27:88:ae:71:0b:c0:7c:f9:75:a5: de:a1:af:06:18:4c:48:01:86:7a:66:e1:67:24:54: 16:89:85:6b:4a:8e:e7:b4:57:60:26:98:26:46:76: 33:6d:e0:22:c0:eb:08:23:8a:1b:44:2a:17:42:53: 0a:b2:9e:74:bb:ba:4e:a3:fc:ea:a9:80:f0:d9:89: 18:d8:5e:a8:33:e5:43:09:0c:ea:b7:ca:d0:e9:53: c7:f2:96:29:ec:cd:df:ba:c0:ba:b8:4f:ef:45:2a: 83:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E6:B7:A6:44:24:47:84:9E:18:8A:69:08:73:EC:1C:31:C8:13:CE X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:95:f8:df:d9:1a:84:fd:f5:d5:64:80:6b:ea:19:f2:4c:71: a2:1f:b7:30:36:ae:dc:76:be:7d:59:51:f4:4e:33:a7:12:93: 80:42:28:cd:e2:41:15:70:51:ed:98:ca:9f:7d:77:62:67:06: 8f:a8:83:1a:6a:be:ee:f2:4d:65:26:d8:f8:7b:fc:98:cc:e3: fa:eb:76:53:0e:c3:0e:12:5c:fe:72:33:ab:fa:51:84:39:b2: a6:bc:61:3d:c2:09:fc:26:00:28:d0:fa:dd:1a:98:f8:31:29: 2f:15:7c:9f:ac:8b:96:d4:be:d8:99:af:c1:30:c1:9e:b5:8a: c4:52:9e:43:53:b8:98:c6:c5:87:ec:36:47:dc:65:37:08:78: d5:9e:49:bd:e2:3d:17:9b:34:2b:4b:ad:48:2a:af:1b:16:8a: 20:79:0c:3f:17:82:59:21:f8:6e:c3:e7:52:d8:7b:0c:d7:44: 76:e2:ac:96:fb:64:4e:9b:f0:66:04:4d:10:77:7d:bc:05:c1: 12:f0:f8:92:60:5f:4d:ec:91:5a:32:8f:94:b6:64:1f:05:45: 17:bd:05:5b:3d:86:b1:81:45:2a:14:67:50:36:55:01:77:ae: e0:6d:4d:59:6a:1e:c1:f5:01:ef:e3:f3:e7:95:06:03:7f:46: 5b:47:9b:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjUwNzIwMjAyMDMyWhcNMjUwNzI3MjAyMDMyWjAYMRYwFAYD VQQDEw02ODdkNGY5MC1mMTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmk85UXcoqizJcMjP2lCM7eCfd8AezsHRcnqEqTV2QU168QZ9isTAxbXO4RqT pyQSrFmDcdT74CPO3GfvkBhRzrCJDzohBEUnfsSRwbb+2KUajcBRBZ73YBz/Jg3b EpBzmv8Zaj8qy/peyfMvYGWwb2PpnnUE4fuhbR81IrVaFjcaxIq6kXzGnMabmsG4 rGwLipd+QzqIscFoUSeIrnELwHz5daXeoa8GGExIAYZ6ZuFnJFQWiYVrSo7ntFdg JpgmRnYzbeAiwOsII4obRCoXQlMKsp50u7pOo/zqqYDw2YkY2F6oM+VDCQzqt8rQ 6VPH8pYp7M3fusC6uE/vRSqDCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLLmt6ZE JEeEnhiKaQhz7BwxyBPOMB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnlfjf2RqE/fXVZIBr6hnyTHGiH7cwNq7cdr59WVH0TjOnEpOAQijN 4kEVcFHtmMqffXdiZwaPqIMaar7u8k1lJtj4e/yYzOP663ZTDsMOElz+cjOr+lGE ObKmvGE9wgn8JgAo0PrdGpj4MSkvFXyfrIuW1L7Yma/BMMGetYrEUp5DU7iYxsWH 7DZH3GU3CHjVnkm94j0XmzQrS61IKq8bFoogeQw/F4JZIfhuw+dS2HsM10R24qyW +2ROm/BmBE0Qd328BcES8PiSYF9N7JFaMo+UtmQfBUUXvQVbPYaxgUUqFGdQNlUB d67gbU1Zah7B9QHv4/PnlQYDf0ZbR5sb -----END CERTIFICATE-----Generated at Mon Jul 21 12:43:35 2025 by rpki-client