$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: MRfngI1KE6zWxdH1jPqDYB+jf/wBt/Aun/O4SajV+eQ= Subject key identifier: B4:32:54:FE:C2:57:04:8E:13:32:33:02:91:30:85:F8:3F:3E:48:13 Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 100B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 0FF3 Signing time: Thu 24 Jul 2025 17:37:39 +0000 Manifest this update: Thu 24 Jul 2025 17:37:38 +0000 Manifest next update: Thu 31 Jul 2025 17:37:38 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: 5AZBjeooaKpjHYPQPvbKy0yZnZRW1MB//GHQcUJ+/9U=) 2: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: nBMi/a8I+RV2Z/PiZj9be9QZEtWJuCuqsGfS6IxkLhU=) 3: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: dzJ3ZC5Hl5bYvc0rYBuqTlx1lY8wAUYvF1umXCXe+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 17:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4107 (0x100b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: Jul 24 17:37:38 2025 GMT Not After : Jul 31 17:37:38 2025 GMT Subject: CN=68826f62-402f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:48:95:32:41:43:86:31:a5:55:9f:90:f9: f0:b7:31:2e:ba:89:5e:5c:3f:90:e9:c0:93:79:fb: 74:8d:ea:44:25:1f:d4:f9:7b:d2:49:37:81:5a:8f: 4d:0b:14:7c:ab:2a:2f:f9:31:9f:44:37:60:2a:88: fb:1f:fe:ef:1b:1c:9b:61:9f:e8:b6:a4:24:62:8a: ee:c9:6d:98:08:7c:e0:2f:88:b3:8f:c9:ea:34:2e: 84:c3:08:06:70:04:35:98:ae:ec:34:68:fd:a3:e2: c4:0f:fc:cb:34:28:0a:04:fd:3d:0a:3a:13:6e:62: 95:99:aa:ba:28:fe:4d:64:71:3a:85:45:13:54:6c: 08:28:1c:74:3c:b8:1e:c4:86:05:b8:72:1a:35:cd: 1c:73:4d:3c:61:5a:2e:2b:28:a2:27:c4:7f:dc:89: f8:6a:a8:58:9c:b2:9e:d9:d7:19:97:12:19:5e:7e: a5:cb:d8:e6:37:75:20:7a:fe:e4:27:1f:6f:d4:58: 7c:8a:b9:30:e6:3a:9a:b2:13:8a:5d:c4:69:55:aa: fa:d2:eb:61:fc:51:a5:ab:fd:ef:f4:ea:62:36:6e: e1:28:c5:1a:cb:68:d0:36:03:31:cd:77:07:7c:18: 95:67:ad:5b:21:cc:9b:55:8d:93:7b:14:25:50:66: 08:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:32:54:FE:C2:57:04:8E:13:32:33:02:91:30:85:F8:3F:3E:48:13 X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:24:bc:86:f3:d6:87:b0:e9:7e:f8:ae:f3:21:63:3d:76:5f: 64:7e:d1:b9:85:e8:5d:5c:ee:f1:24:7a:ae:dc:68:c6:92:d9: 54:6e:92:2e:c4:eb:42:7e:2a:2f:78:69:4a:57:2f:46:40:f8: c1:6f:24:48:f4:8e:12:86:53:cc:fd:3b:41:4f:a4:6a:cb:d4: d5:00:cd:5b:1e:7b:3c:f6:9b:8d:4e:4c:b6:cc:46:07:b9:0e: dc:4a:bd:49:5c:cf:55:24:82:73:61:3e:42:ba:e9:10:2a:3c: 1d:d8:84:3c:b0:60:53:58:12:e0:eb:ad:06:2c:e7:56:29:3d: 16:ca:5c:aa:da:95:a6:be:58:2f:e5:fd:0e:76:cc:68:f1:95: 70:49:22:da:be:62:f8:7a:f8:1f:85:82:49:48:5c:aa:6e:4d: 37:45:22:79:44:ee:11:34:49:34:06:d2:39:ce:c7:ea:a8:e5: 45:41:55:95:9b:13:d1:95:23:7a:c8:65:84:c6:13:0f:71:41: 2e:c3:c4:92:64:9e:15:34:73:ba:4c:ce:09:1a:3d:fe:4f:01: c9:aa:bf:08:6f:48:8e:76:6f:fe:11:a9:21:9e:56:d0:f9:ab: 3b:21:28:9c:0a:af:a2:94:ad:f9:10:4c:61:06:2e:5e:d7:0e: 50:b2:9d:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjUwNzI0MTczNzM4WhcNMjUwNzMxMTczNzM4WjAYMRYwFAYD VQQDEw02ODgyNmY2Mi00MDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTVIlTJBQ4YxpVWfkPnwtzEuuoleXD+Q6cCTeft0jepEJR/U+XvSSTeBWo9N CxR8qyov+TGfRDdgKoj7H/7vGxybYZ/otqQkYoruyW2YCHzgL4izj8nqNC6EwwgG cAQ1mK7sNGj9o+LED/zLNCgKBP09CjoTbmKVmaq6KP5NZHE6hUUTVGwIKBx0PLge xIYFuHIaNc0cc008YVouKyiiJ8R/3In4aqhYnLKe2dcZlxIZXn6ly9jmN3Ugev7k Jx9v1Fh8irkw5jqashOKXcRpVar60uth/FGlq/3v9OpiNm7hKMUay2jQNgMxzXcH fBiVZ61bIcybVY2TexQlUGYIRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLQyVP7C VwSOEzIzApEwhfg/PkgTMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJJLyG89aHsOl++K7zIWM9dl9kftG5hehdXO7xJHqu3GjGktlUbpIu xOtCfioveGlKVy9GQPjBbyRI9I4ShlPM/TtBT6Rqy9TVAM1bHns89puNTky2zEYH uQ7cSr1JXM9VJIJzYT5CuukQKjwd2IQ8sGBTWBLg660GLOdWKT0Wylyq2pWmvlgv 5f0Odsxo8ZVwSSLavmL4evgfhYJJSFyqbk03RSJ5RO4RNEk0BtI5zsfqqOVFQVWV mxPRlSN6yGWExhMPcUEuw8SSZJ4VNHO6TM4JGj3+TwHJqr8Ib0iOdm/+EakhnlbQ +as7ISicCq+ilK35EExhBi5e1w5Qsp2n -----END CERTIFICATE-----Generated at Sat Jul 26 02:04:09 2025 by rpki-client