$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft File: v1g_8H2jVv3igoGfR7zuJHUTEZo.mft (raw, json) Hash identifier: dNKqlghjwLY8BJModSB0Ml9VJ/zRNxeUvtmtqwIV7lg= Subject key identifier: 52:91:A9:CF:E3:D4:82:A2:A9:6E:08:38:F8:7F:47:A6:6E:61:12:08 Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A Certificate issuer: /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A Certificate serial: 34EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft Manifest number: 34D5 Signing time: Mon 08 Sep 2025 14:27:33 +0000 Manifest this update: Mon 08 Sep 2025 14:27:32 +0000 Manifest next update: Mon 15 Sep 2025 14:27:32 +0000 Files and hashes: 1: v1g_8H2jVv3igoGfR7zuJHUTEZo.crl (hash: CrGST7e7hBOEidbJM78hwOh+HjFkL5d8OL9BGPseZVY=) 2: 6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa (hash: st0pVxpUqrAEUwj53Z+GQXs6wx4AnLeV6lm/Wqla7jI=) 3: F73D1642F30B11EFA86D9348C4F9AE02.roa (hash: NAzmMf7NVE534MnJBMzFOT2rLSzUZpBo5WpxUwTckK0=) 4: 60629332FE4611EFB15A9D48C4F9AE02.roa (hash: /zfwzDG7n6E2JjaivpDdu+dOVBIaawCIeVKdcfBcPXY=) 5: 671CE4B2EF5911EFB8C93F62C4F9AE02.roa (hash: 8VK+APK/5itIVHmFKGjT+lEuTWBUnDuSseayGMqo1ag=) 6: B3C4F6FCC8E811EFA15E172AC4F9AE02.roa (hash: 7X3op8FxLKCInR/9TSODy+LRMH6+i0DMcG4PbSJZGR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 14:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13550 (0x34ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A Validity Not Before: Sep 8 14:27:32 2025 GMT Not After : Sep 15 14:27:32 2025 GMT Subject: CN=68bee7d4-116a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:45:bd:98:68:18:63:85:7f:2a:b7:c7:9d:ed: 90:87:10:40:a2:1d:31:27:c4:57:56:88:14:b3:92: a7:53:64:65:e8:90:c1:c3:c1:5a:32:64:9b:5f:aa: 25:98:a9:2e:30:e9:22:22:dd:85:e5:55:f8:29:79: be:f2:32:b1:07:62:29:7a:31:1e:7e:fa:f4:c8:f0: a7:8f:22:5f:45:a2:02:bb:a8:82:54:49:a2:ea:ce: f4:3d:e8:da:06:4d:71:52:f7:53:a6:ba:42:10:94: 26:e8:57:1b:58:60:21:21:37:b9:ce:c1:82:c9:a9: 21:76:4c:3f:e1:ea:3b:38:52:c4:c8:aa:2a:4a:e8: 7b:8e:2f:33:55:95:0a:46:4f:51:4a:52:c1:8b:d8: b2:97:22:0c:98:cb:d0:02:36:85:85:49:96:de:d2: 76:8a:22:85:44:dd:78:43:38:50:20:2a:5d:df:09: b5:4b:cc:2a:d8:27:83:1c:17:e1:23:6a:7f:c4:ba: f7:de:4b:e1:ce:4e:37:24:a5:8b:28:8a:73:cb:05: 94:c6:b4:18:ad:31:39:f5:f9:75:e8:ce:29:b1:cc: 79:57:22:a4:88:3b:ac:3b:44:44:28:f6:8e:3a:c7: 16:6d:35:02:0b:44:85:24:77:9f:88:b0:59:fc:32: f3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:91:A9:CF:E3:D4:82:A2:A9:6E:08:38:F8:7F:47:A6:6E:61:12:08 X509v3 Authority Key Identifier: keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:d6:1e:ca:6f:f9:3f:8e:f8:17:aa:5e:b3:7a:18:73:c3:2c: d2:86:a3:05:54:cf:a4:7a:11:65:44:81:94:aa:e3:f5:30:28: 3f:da:9f:b1:c6:9c:79:82:3d:a4:97:af:c4:4f:68:e7:a4:b8: b0:21:81:11:40:65:ce:7c:ee:42:22:e7:45:d1:80:78:da:d3: 31:0a:c5:3a:8c:45:30:30:fe:97:bf:89:11:6c:6b:26:ce:d5: ad:be:ed:43:e3:55:23:6e:f3:91:85:9e:6b:9c:9b:e2:0b:50: 10:56:96:fb:96:7d:e5:ca:24:66:26:ea:fe:d7:8c:7f:46:07: 67:b6:43:34:a4:aa:19:43:ea:b3:73:92:9d:ae:ee:7a:c0:59: 33:5b:af:3a:19:a2:37:92:50:de:a6:ed:e6:3f:36:d1:f6:2d: f3:5c:10:1c:19:1f:e6:58:25:c8:e3:1d:df:8d:09:79:90:33: 82:75:b0:ba:f6:61:9d:91:1e:9e:44:bd:cc:ca:63:45:48:99: c0:b3:7f:00:85:1b:e7:b0:23:42:6a:b1:71:cd:87:68:b1:ca: 90:f4:9f:56:69:a4:9c:4e:96:ba:d0:1b:04:fb:e4:4f:78:48: 12:47:cc:f6:1f:46:c0:68:a5:7d:01:b8:51:a7:29:e7:14:7f: e1:3c:e5:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0MkMxMTAvBgNVBAUTKEJGNTgzRkYwN0RBMzU2RkRFMjgyODE5RjQ3QkNFRTI0 NzUxMzExOUEwHhcNMjUwOTA4MTQyNzMyWhcNMjUwOTE1MTQyNzMyWjAYMRYwFAYD VQQDEw02OGJlZTdkNC0xMTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsEW9mGgYY4V/KrfHne2QhxBAoh0xJ8RXVogUs5KnU2Rl6JDBw8FaMmSbX6ol mKkuMOkiIt2F5VX4KXm+8jKxB2IpejEefvr0yPCnjyJfRaICu6iCVEmi6s70Peja Bk1xUvdTprpCEJQm6FcbWGAhITe5zsGCyakhdkw/4eo7OFLEyKoqSuh7ji8zVZUK Rk9RSlLBi9iylyIMmMvQAjaFhUmW3tJ2iiKFRN14QzhQICpd3wm1S8wq2CeDHBfh I2p/xLr33kvhzk43JKWLKIpzywWUxrQYrTE59fl16M4pscx5VyKkiDusO0REKPaO OscWbTUCC0SFJHefiLBZ/DLzOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKRqc/j 1IKiqW4IOPh/R6ZuYRIIMB8GA1UdIwQYMBaAFL9YP/B9o1b94oKBn0e87iR1ExGa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yMEIzN0NGRTFE ODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2M2lnb0dmUjd6dUpIVVRF Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxZ184SDJqVnYzaWdvR2ZSN3p1SkhVVEVaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MTQyQy8yMEIzN0NGRTFEODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2 M2lnb0dmUjd6dUpIVVRFWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCV1h7Kb/k/jvgXql6zehhzwyzShqMFVM+kehFlRIGUquP1MCg/2p+x xpx5gj2kl6/ET2jnpLiwIYERQGXOfO5CIudF0YB42tMxCsU6jEUwMP6Xv4kRbGsm ztWtvu1D41UjbvORhZ5rnJviC1AQVpb7ln3lyiRmJur+14x/RgdntkM0pKoZQ+qz c5Kdru56wFkzW686GaI3klDepu3mPzbR9i3zXBAcGR/mWCXI4x3fjQl5kDOCdbC6 9mGdkR6eRL3MymNFSJnAs38AhRvnsCNCarFxzYdoscqQ9J9WaaScTpa60BsE++RP eEgSR8z2H0bAaKV9AbhRpynnFH/hPOXS -----END CERTIFICATE-----Generated at Tue Sep 9 20:51:18 2025 by rpki-client