$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft File: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json) Hash identifier: WGx1JY158pmfOQ56Ezugm0kKK++hFfHtlrlm75oxM44= Subject key identifier: 5D:7C:1D:58:96:38:20:21:08:6D:7C:B7:CC:33:58:85:85:A9:D0:FC Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 Certificate issuer: /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Certificate serial: 0152 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft Manifest number: 014F Signing time: Wed 17 Sep 2025 04:48:16 +0000 Manifest this update: Wed 17 Sep 2025 04:48:15 +0000 Manifest next update: Wed 24 Sep 2025 04:48:15 +0000 Files and hashes: 1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: VC+N5+iOVESrDvoL5G4ayw37m32xfXrUqdM3IE6xdRs=) 2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: 51Cgnd7L929YsdYeHMQakHz8pXfhQg7XBbfSBPJ2XYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:48:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 338 (0x152) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912296A, serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Validity Not Before: Sep 17 04:48:15 2025 GMT Not After : Sep 24 04:48:15 2025 GMT Subject: CN=68ca3d90-4849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a0:a2:4b:c6:60:42:71:10:70:c6:c9:53:99: 7a:fb:ec:49:3b:63:7d:5d:87:38:25:25:ce:e5:e7: f7:14:30:57:94:51:3b:2b:53:c2:ae:d0:41:82:69: 48:91:30:47:da:de:e0:cf:5b:c5:62:62:cc:51:ed: 41:55:ef:c8:87:36:d8:45:ae:29:d8:6e:9f:b7:a7: 2c:03:20:5a:0c:e7:9c:9d:1c:99:6e:03:cc:cc:76: ba:7d:20:f8:7d:fe:5d:7b:dd:d9:e5:d1:9f:68:4b: 82:c0:0b:be:08:3f:9f:a0:1a:ee:32:8a:99:18:ac: 41:0e:33:7c:a6:5e:49:6d:16:11:62:21:0e:1d:29: 86:ae:d8:93:b6:0a:1b:6b:87:58:44:d9:80:93:5b: 49:04:7e:ad:30:5d:e6:58:d0:ce:cc:6c:9e:c8:2e: 33:3b:e6:63:7a:08:9b:8e:dd:52:07:90:69:fc:c1: d4:11:ca:02:23:85:de:f9:51:2e:cc:28:e1:ab:a9: 40:07:7b:34:43:50:0f:2c:6b:11:85:5a:2b:38:42: 2a:8f:0d:bb:16:b3:8a:64:b6:46:d4:28:f5:dc:5e: 0a:27:90:c3:96:15:f0:d1:1e:06:c1:e7:0a:60:9a: 1c:2d:aa:25:e5:cd:bf:15:1b:7d:66:29:01:63:4c: 7f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7C:1D:58:96:38:20:21:08:6D:7C:B7:CC:33:58:85:85:A9:D0:FC X509v3 Authority Key Identifier: keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:df:0a:0e:50:bb:59:ad:3b:f5:c4:41:db:59:d7:3e:8c:01: 09:8b:2f:e1:a9:a1:ca:89:6f:f9:67:cc:cb:62:66:87:d9:fb: 31:62:7c:fa:5b:d0:a5:e5:8e:34:9f:ac:f6:e5:75:3f:7a:cd: bd:a7:fc:8c:12:9b:e5:ae:da:6e:bf:71:af:71:8c:6f:aa:f5: 4a:3d:a3:5e:09:f6:bb:5b:03:d9:15:d2:09:b2:ad:9c:b1:0b: d8:92:fa:be:ab:ea:cf:d0:5b:85:fe:ff:8e:b5:06:c7:00:1a: 41:09:aa:bd:76:86:9f:5f:9a:d2:b0:a0:6a:ab:4c:30:60:fe: ab:8d:ef:7a:c3:ba:3b:23:e8:5c:f7:ed:b5:2f:ba:9c:72:12: 77:1a:80:36:9d:04:29:89:62:f8:8f:84:cc:50:92:3b:5c:07: f8:ab:e9:e0:90:3a:96:83:7e:c4:65:4e:44:af:3c:52:b7:15: 01:77:46:43:b6:d1:a1:f7:ca:ff:f9:7e:57:78:04:17:3d:19: e0:c7:84:e2:a3:e3:ab:94:37:f0:ec:99:9d:62:49:39:d3:4c: bf:62:86:40:ed:98:e1:3d:60:5b:e0:55:53:ea:97:b8:99:7c: e9:57:3b:a6:07:dc:67:35:1e:63:88:23:54:52:96:f7:41:9e: 6a:7c:ca:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5NkExMTAvBgNVBAUTKEYxOTM2MDQ2OTUxNDZFQkUxREJGNzNGREUwRUI2NjIx RkQ5RkI4RjkwHhcNMjUwOTE3MDQ0ODE1WhcNMjUwOTI0MDQ0ODE1WjAYMRYwFAYD VQQDEw02OGNhM2Q5MC00ODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmqCiS8ZgQnEQcMbJU5l6++xJO2N9XYc4JSXO5ef3FDBXlFE7K1PCrtBBgmlI kTBH2t7gz1vFYmLMUe1BVe/IhzbYRa4p2G6ft6csAyBaDOecnRyZbgPMzHa6fSD4 ff5de93Z5dGfaEuCwAu+CD+foBruMoqZGKxBDjN8pl5JbRYRYiEOHSmGrtiTtgob a4dYRNmAk1tJBH6tMF3mWNDOzGyeyC4zO+Zjegibjt1SB5Bp/MHUEcoCI4Xe+VEu zCjhq6lAB3s0Q1APLGsRhVorOEIqjw27FrOKZLZG1Cj13F4KJ5DDlhXw0R4GwecK YJocLaol5c2/FRt9ZikBY0x/AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF18HViW OCAhCG18t8wzWIWFqdD8MB8GA1UdIwQYMBaAFPGTYEaVFG6+Hb9z/eDrZiH9n7j5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjk2QS9DNTk2NTlCMDkz NkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJyNGR2M1A5NE90bUlmMmZ1 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTmdScFVVYnI0ZHYzUDk0T3RtSWYyZnVQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Mjk2QS9DNTk2NTlCMDkzNkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJy NGR2M1A5NE90bUlmMmZ1UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAv3woOULtZrTv1xEHbWdc+jAEJiy/hqaHKiW/5Z8zLYmaH2fsxYnz6 W9Cl5Y40n6z25XU/es29p/yMEpvlrtpuv3GvcYxvqvVKPaNeCfa7WwPZFdIJsq2c sQvYkvq+q+rP0FuF/v+OtQbHABpBCaq9doafX5rSsKBqq0wwYP6rje96w7o7I+hc 9+21L7qcchJ3GoA2nQQpiWL4j4TMUJI7XAf4q+ngkDqWg37EZU5ErzxStxUBd0ZD ttGh98r/+X5XeAQXPRngx4Tio+OrlDfw7JmdYkk500y/YoZA7ZjhPWBb4FVT6pe4 mXzpVzumB9xnNR5jiCNUUpb3QZ5qfMqE -----END CERTIFICATE-----Generated at Fri Sep 19 00:56:59 2025 by rpki-client