$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: 0oLE5FXFuOSml1MfmIQpShN6PvPjTxr5HueiviYUNKw= Subject key identifier: 88:54:3F:C6:C0:96:C1:E2:AB:4A:3F:EE:D8:42:77:6D:49:F1:CF:C7 Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 098F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 0973 Signing time: Thu 18 Sep 2025 20:24:07 +0000 Manifest this update: Thu 18 Sep 2025 20:24:06 +0000 Manifest next update: Thu 25 Sep 2025 20:24:06 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: IUxUM2Wn7JdTgJ0miQniKcXNFaSpg4OGHB//ITyAzYU=) 2: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: xcMGwOENkpgW2mMW9g8QUOtjynFGqmXhiODYH8mlbPs=) 3: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: qICrQwIHICjNb5ciKPL/CPmev59XQIMgZMKlYhMpE7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 20:24:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2447 (0x98f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: Sep 18 20:24:06 2025 GMT Not After : Sep 25 20:24:06 2025 GMT Subject: CN=68cc6a66-aac3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b8:99:77:9f:22:bf:bf:8b:4c:50:f0:15:ef: 60:ae:74:4f:86:0c:e3:42:57:f4:7b:1b:d5:0f:22: fb:1c:da:25:3f:00:1c:42:c8:4f:b2:28:ba:9c:3e: 52:ad:f3:e7:44:6b:75:d6:d9:59:dd:80:51:58:67: 2c:0b:b9:38:04:39:73:48:90:f9:1e:2c:4d:a9:1f: 2a:ca:01:9e:bb:4f:9c:61:a9:ed:ef:d1:00:06:e4: c2:a5:40:99:c0:b6:55:f6:b7:05:ca:3f:a8:10:03: be:fe:69:10:b7:e2:6c:69:a7:d1:19:7d:6a:94:a6: 9c:66:45:90:ef:d0:dd:8e:99:fd:ec:fe:06:9e:70: b3:b9:65:fa:e0:df:10:9b:5b:c3:fd:9b:8e:6a:90: 5f:fa:a2:95:1b:af:0c:ea:75:8a:83:8e:16:81:2c: 3e:44:06:99:7f:1c:1f:d9:52:b1:58:d4:d2:7b:7d: f2:09:68:59:cd:e2:80:63:bb:b5:c7:90:30:35:d2: d9:5c:42:47:04:82:09:bf:32:39:04:b5:1c:f8:ff: c9:14:c6:d5:23:36:c6:0a:70:3a:45:7a:43:1c:84: 88:49:70:fe:b1:41:db:23:92:d7:4b:9e:85:60:ec: 12:6e:12:27:3c:4a:ee:00:8d:9b:1c:0b:98:28:ad: 2c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:54:3F:C6:C0:96:C1:E2:AB:4A:3F:EE:D8:42:77:6D:49:F1:CF:C7 X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:88:da:92:9d:44:4c:34:d7:9a:c4:c8:48:41:f8:b7:20:24: c1:bb:da:09:24:72:f7:bb:5c:e1:61:c5:9d:81:3e:d0:ec:de: 93:c4:c5:95:78:d4:34:0e:b5:63:2a:c9:74:42:1c:f3:42:ed: 71:52:b9:16:fe:cd:6b:db:ac:51:0f:a0:c5:17:cd:d3:07:7f: b5:69:22:ce:c6:fb:2a:a4:58:f2:a8:19:76:6f:7e:fd:9a:a7: 88:a8:e3:54:a3:91:bc:da:fe:90:33:7d:19:51:b7:47:05:90: 01:17:f7:da:42:eb:ed:77:46:70:d3:96:4e:a5:b3:90:ca:df: 18:07:41:fe:7b:d0:ab:4d:c4:12:bc:0a:ad:72:2b:8f:0c:4f: 95:bd:2a:80:3a:f1:e4:2b:19:81:26:5e:85:11:11:29:60:3c: cd:f7:74:67:a7:b9:e5:7f:b6:18:11:b2:05:be:07:12:34:cd: 66:e7:77:cc:05:6d:90:8e:1f:a8:7d:a9:cc:61:1c:f1:a1:6f: eb:8e:60:ee:0f:42:ef:0f:84:23:64:8e:45:f5:d7:d8:9a:38: 97:d6:20:b4:fe:5e:65:eb:f7:6d:f9:fa:9e:e8:c8:45:bc:cd: 7e:9c:2a:00:4e:99:b6:06:37:85:14:3f:f6:2d:fd:0a:08:d0: 80:fb:5b:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCY8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjUwOTE4MjAyNDA2WhcNMjUwOTI1MjAyNDA2WjAYMRYwFAYD VQQDEw02OGNjNmE2Ni1hYWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA87iZd58iv7+LTFDwFe9grnRPhgzjQlf0exvVDyL7HNolPwAcQshPsii6nD5S rfPnRGt11tlZ3YBRWGcsC7k4BDlzSJD5HixNqR8qygGeu0+cYant79EABuTCpUCZ wLZV9rcFyj+oEAO+/mkQt+JsaafRGX1qlKacZkWQ79Ddjpn97P4GnnCzuWX64N8Q m1vD/ZuOapBf+qKVG68M6nWKg44WgSw+RAaZfxwf2VKxWNTSe33yCWhZzeKAY7u1 x5AwNdLZXEJHBIIJvzI5BLUc+P/JFMbVIzbGCnA6RXpDHISISXD+sUHbI5LXS56F YOwSbhInPEruAI2bHAuYKK0sTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIhUP8bA lsHiq0o/7thCd21J8c/HMB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChiNqSnURMNNeaxMhIQfi3ICTBu9oJJHL3u1zhYcWdgT7Q7N6TxMWV eNQ0DrVjKsl0QhzzQu1xUrkW/s1r26xRD6DFF83TB3+1aSLOxvsqpFjyqBl2b379 mqeIqONUo5G82v6QM30ZUbdHBZABF/faQuvtd0Zw05ZOpbOQyt8YB0H+e9CrTcQS vAqtciuPDE+VvSqAOvHkKxmBJl6FEREpYDzN93Rnp7nlf7YYEbIFvgcSNM1m53fM BW2Qjh+ofanMYRzxoW/rjmDuD0LvD4QjZI5F9dfYmjiX1iC0/l5l6/dt+fqe6MhF vM1+nCoATpm2BjeFFD/2Lf0KCNCA+1sa -----END CERTIFICATE-----Generated at Fri Sep 19 05:28:04 2025 by rpki-client