$ rpki-client -vvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft File: m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json) Hash identifier: uNXTbiXQzciRVvQUcWH89AdcMPrPb3rnTo5Hpqa3e70= Subject key identifier: F1:66:56:71:94:93:4B:D2:50:C4:DA:F6:D4:2C:64:8D:EC:21:72:2D Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 Certificate issuer: /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Certificate serial: 0A33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft Manifest number: 0A22 Signing time: Fri 18 Jul 2025 20:02:20 +0000 Manifest this update: Fri 18 Jul 2025 20:02:19 +0000 Manifest next update: Fri 25 Jul 2025 20:02:19 +0000 Files and hashes: 1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: RtKG6ZKS/hPcNxrxRK5BmdJgCfpbtGPBtzb0CS7c4ME=) 2: 87C1A5F8245711F083602A0BC4F9AE02.roa (hash: 3SdLflE7QNKZukodJvPP0+VEXx4PpxcKaoT3DVdeoho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2611 (0xa33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173780, serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Validity Not Before: Jul 18 20:02:19 2025 GMT Not After : Jul 25 20:02:19 2025 GMT Subject: CN=687aa84c-6196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:d6:4e:91:16:27:c8:25:03:44:61:0d:de: 52:c3:12:89:7d:16:25:49:7d:2e:2b:a9:69:87:81: 06:38:91:55:30:d4:54:d0:b2:12:89:a7:e9:02:e9: 68:7a:85:a0:0e:05:a9:7b:05:60:94:d1:8b:2a:5c: 69:69:9a:e1:1f:8f:cf:18:a7:ac:34:8c:cd:46:c3: f0:b7:b5:59:8c:9b:d4:c7:fb:8e:1b:a9:89:df:fb: 93:3c:cf:f2:60:4a:08:de:90:26:2c:99:9b:0d:8c: bc:19:3a:c9:7f:9c:57:19:a2:63:f3:b9:43:38:73: 8c:c6:af:79:d8:e8:83:87:8d:bf:4b:cc:48:89:9d: 3f:04:f2:83:48:d5:c7:d5:ce:b2:b9:7a:9a:2e:ec: ee:c5:dd:a9:5f:a8:1a:1f:d2:06:dd:1e:e9:a0:30: 04:9e:24:6b:3a:9e:97:5c:3a:61:7a:e0:b6:a0:85: 16:58:63:89:3f:f9:75:37:0b:f1:ae:d1:48:8a:fb: d0:81:45:e6:d0:02:e6:b4:c7:1d:a0:3c:ef:62:94: d8:cf:5f:23:db:a9:79:36:86:61:76:72:59:14:78: 1e:9a:17:e2:5c:d0:e1:c6:f5:28:86:b3:ac:d1:ac: 6a:17:3e:b6:fd:d0:c8:ed:c2:89:e7:7c:f0:97:38: 2b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:66:56:71:94:93:4B:D2:50:C4:DA:F6:D4:2C:64:8D:EC:21:72:2D X509v3 Authority Key Identifier: keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:68:1e:83:a4:fe:84:46:ef:e7:17:23:d1:84:6a:05:23:ac: ee:db:3d:62:e0:20:e6:69:f8:a2:d0:15:67:c5:1f:10:62:eb: 37:54:53:9e:96:e5:d0:10:24:8e:c0:f3:9d:f5:f7:71:29:ca: e4:45:97:f0:06:f8:01:eb:76:9a:a0:51:7e:da:88:6f:5b:25: 84:1f:28:81:de:0c:67:9c:47:37:7d:43:cc:fb:1d:16:28:7d: 22:e0:af:04:ed:57:ee:b6:36:8c:2c:d3:75:7a:9b:0e:0a:a9: 91:95:69:6c:11:b0:b8:9c:00:2b:99:32:81:3e:51:dd:2b:3e: 55:1b:52:05:95:31:db:31:ad:58:88:30:78:1e:76:cf:83:04: ff:74:b6:68:34:ec:9e:80:e9:7a:e2:3f:5b:cc:ec:09:a5:12: 0c:4c:ab:88:9e:9e:98:15:5d:67:0c:9c:ba:f5:4c:93:ad:8b: 0c:d5:23:0d:b5:68:10:67:a2:fe:5d:7d:e3:6f:f0:85:72:a3: 25:b5:70:7d:39:a5:d4:00:88:c2:bf:64:42:76:d1:e6:23:fb: 66:28:72:7d:fa:12:3a:1b:fa:9d:93:57:e6:46:77:fa:34:b9: a7:4c:04:0d:2e:3d:46:0b:c4:f9:dd:1d:2c:8a:1c:24:48:23: e8:f5:1a:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM3ODAxMTAvBgNVBAUTKDlCQzY2Q0ZGODA5QThBNzEyMTIwMDVERDlDMjcwNDdB QjQxOEM4QTcwHhcNMjUwNzE4MjAwMjE5WhcNMjUwNzI1MjAwMjE5WjAYMRYwFAYD VQQDEw02ODdhYTg0Yy02MTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwyzWTpEWJ8glA0RhDd5SwxKJfRYlSX0uK6lph4EGOJFVMNRU0LISiafpAulo eoWgDgWpewVglNGLKlxpaZrhH4/PGKesNIzNRsPwt7VZjJvUx/uOG6mJ3/uTPM/y YEoI3pAmLJmbDYy8GTrJf5xXGaJj87lDOHOMxq952OiDh42/S8xIiZ0/BPKDSNXH 1c6yuXqaLuzuxd2pX6gaH9IG3R7poDAEniRrOp6XXDpheuC2oIUWWGOJP/l1Nwvx rtFIivvQgUXm0ALmtMcdoDzvYpTYz18j26l5NoZhdnJZFHgemhfiXNDhxvUohrOs 0axqFz62/dDI7cKJ53zwlzgrwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFmVnGU k0vSUMTa9tQsZI3sIXItMB8GA1UdIwQYMBaAFJvGbP+AmopxISAF3ZwnBHq0GMin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mzc4MC84RUI2MkRGQTc3 RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWluRWhJQVhkbkNjRWVyUVl5 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204WnNfNENhaW5FaElBWGRuQ2NFZXJRWXlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mzc4MC84RUI2MkRGQTc3RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWlu RWhJQVhkbkNjRWVyUVl5S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/aB6DpP6ERu/nFyPRhGoFI6zu2z1i4CDmafii0BVnxR8QYus3VFOe luXQECSOwPOd9fdxKcrkRZfwBvgB63aaoFF+2ohvWyWEHyiB3gxnnEc3fUPM+x0W KH0i4K8E7VfutjaMLNN1epsOCqmRlWlsEbC4nAArmTKBPlHdKz5VG1IFlTHbMa1Y iDB4HnbPgwT/dLZoNOyegOl64j9bzOwJpRIMTKuInp6YFV1nDJy69UyTrYsM1SMN tWgQZ6L+XX3jb/CFcqMltXB9OaXUAIjCv2RCdtHmI/tmKHJ9+hI6G/qdk1fmRnf6 NLmnTAQNLj1GC8T53R0sihwkSCPo9Rqc -----END CERTIFICATE-----Generated at Sun Jul 20 10:04:18 2025 by rpki-client