$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft File: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json) Hash identifier: 1i/ueiblv70aVFNyXCtF1eqLu0CrDAP3mDHn6buApHU= Subject key identifier: 3B:67:DD:4D:95:A7:DB:8C:EE:70:30:99:16:A0:1A:A9:32:80:2C:4C Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 Certificate issuer: /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Certificate serial: 0133 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft Manifest number: 0130 Signing time: Sat 19 Jul 2025 04:47:02 +0000 Manifest this update: Sat 19 Jul 2025 04:47:01 +0000 Manifest next update: Sat 26 Jul 2025 04:47:01 +0000 Files and hashes: 1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: vw5IOnTX9LvVEzSTiag31Gsf+MJBsYMRzTFryyhV26w=) 2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: 51Cgnd7L929YsdYeHMQakHz8pXfhQg7XBbfSBPJ2XYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 04:47:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 307 (0x133) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912296A, serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Validity Not Before: Jul 19 04:47:01 2025 GMT Not After : Jul 26 04:47:01 2025 GMT Subject: CN=687b2346-58bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c1:bd:89:eb:30:fb:90:23:c8:74:1c:02:18: 23:99:ef:95:f8:ff:35:45:e7:d6:6e:8a:8d:9d:46: 75:59:0e:87:1e:a9:c9:e3:d6:f6:35:c6:17:cc:d5: c1:89:96:2d:62:ce:2f:96:2d:55:dd:14:57:05:b2: 7b:af:a8:89:fc:96:ca:09:6f:05:80:28:b6:55:77: 82:f2:1d:cf:36:7d:c2:70:13:dc:cb:bf:dd:16:4a: 17:20:b7:48:1b:8d:84:2a:12:37:c8:e8:8c:41:7b: ef:90:c2:61:fe:9e:df:a9:9d:c1:61:dd:42:8b:86: c0:5a:20:86:61:3d:6d:b8:0b:88:bf:59:26:ba:e8: 4f:ab:16:a7:05:67:09:6f:b9:bb:29:8f:c0:44:41: 18:b7:5e:87:5e:73:25:7f:41:1c:50:f2:c1:a4:db: 94:20:b4:5c:3c:94:2e:f1:6c:b5:ae:3b:9b:09:d2: 06:c0:20:0c:7f:25:57:00:c5:1d:78:40:55:3e:60: f7:92:33:e6:58:8b:1d:75:b6:bf:61:b1:81:6d:3b: 83:88:56:3d:66:01:85:b6:9c:cf:75:a9:9d:f9:00: 0c:9f:b0:bc:95:f7:dc:3d:b6:0c:e8:1a:cb:13:ce: 99:23:0e:25:7d:ea:88:3d:35:c7:98:64:ca:94:d4: f3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:67:DD:4D:95:A7:DB:8C:EE:70:30:99:16:A0:1A:A9:32:80:2C:4C X509v3 Authority Key Identifier: keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:21:6c:cf:60:f3:bc:9f:b9:a3:1f:cc:f6:4b:34:66:bd:28: 30:06:e9:25:e6:ec:d5:41:0d:af:f6:7b:66:42:09:bf:08:aa: 3e:13:7b:a5:50:dd:a9:71:13:19:02:07:a6:98:9b:9c:cb:80: 1b:e7:a9:48:76:20:cb:03:fd:da:25:b8:c4:90:b2:9a:d9:52: 7e:53:1d:28:08:a0:a7:29:b1:b7:e6:06:b2:83:79:24:cc:1a: b8:7c:3f:3a:ed:1c:21:4e:3b:ef:d4:e1:fd:69:df:da:72:6c: 21:e4:9e:0d:45:69:16:e5:da:90:66:c7:d9:3d:37:46:46:2f: 89:01:31:57:54:bf:8f:d0:ab:9e:30:4c:9d:42:7c:43:3c:f7: 6d:90:ab:5e:83:8b:61:0c:bf:5e:e8:10:a7:a1:7f:69:91:20: dc:4a:f4:ec:af:a5:37:f4:b3:d2:60:4b:57:96:ed:04:ff:37: a7:c6:b1:39:44:ea:a3:32:71:04:6f:2b:8e:f7:e0:49:c4:4f: 0c:f2:4a:27:4c:78:ae:85:1d:8b:f4:39:bf:73:7e:9e:2a:e1: ef:1e:88:1b:0f:ff:ad:fd:cd:ae:ea:62:82:49:b4:57:14:e9: d2:31:02:68:62:97:d8:2b:ed:ed:3d:6c:79:3c:2b:42:a4:62: e8:31:ad:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5NkExMTAvBgNVBAUTKEYxOTM2MDQ2OTUxNDZFQkUxREJGNzNGREUwRUI2NjIx RkQ5RkI4RjkwHhcNMjUwNzE5MDQ0NzAxWhcNMjUwNzI2MDQ0NzAxWjAYMRYwFAYD VQQDEw02ODdiMjM0Ni01OGJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4sG9iesw+5AjyHQcAhgjme+V+P81RefWboqNnUZ1WQ6HHqnJ49b2NcYXzNXB iZYtYs4vli1V3RRXBbJ7r6iJ/JbKCW8FgCi2VXeC8h3PNn3CcBPcy7/dFkoXILdI G42EKhI3yOiMQXvvkMJh/p7fqZ3BYd1Ci4bAWiCGYT1tuAuIv1kmuuhPqxanBWcJ b7m7KY/AREEYt16HXnMlf0EcUPLBpNuUILRcPJQu8Wy1rjubCdIGwCAMfyVXAMUd eEBVPmD3kjPmWIsddba/YbGBbTuDiFY9ZgGFtpzPdamd+QAMn7C8lffcPbYM6BrL E86ZIw4lfeqIPTXHmGTKlNTzuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtn3U2V p9uM7nAwmRagGqkygCxMMB8GA1UdIwQYMBaAFPGTYEaVFG6+Hb9z/eDrZiH9n7j5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjk2QS9DNTk2NTlCMDkz NkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJyNGR2M1A5NE90bUlmMmZ1 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTmdScFVVYnI0ZHYzUDk0T3RtSWYyZnVQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Mjk2QS9DNTk2NTlCMDkzNkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJy NGR2M1A5NE90bUlmMmZ1UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgIWzPYPO8n7mjH8z2SzRmvSgwBukl5uzVQQ2v9ntmQgm/CKo+E3ul UN2pcRMZAgemmJucy4Ab56lIdiDLA/3aJbjEkLKa2VJ+Ux0oCKCnKbG35gayg3kk zBq4fD867RwhTjvv1OH9ad/acmwh5J4NRWkW5dqQZsfZPTdGRi+JATFXVL+P0Kue MEydQnxDPPdtkKteg4thDL9e6BCnoX9pkSDcSvTsr6U39LPSYEtXlu0E/zenxrE5 ROqjMnEEbyuO9+BJxE8M8konTHiuhR2L9Dm/c36eKuHvHogbD/+t/c2u6mKCSbRX FOnSMQJoYpfYK+3tPWx5PCtCpGLoMa2m -----END CERTIFICATE-----Generated at Sun Jul 20 07:34:18 2025 by rpki-client