$ rpki-client -vvf rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft File: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft (raw, json) Hash identifier: FOAzvYnp89LoQIoLhFRO/XgYK9jDNEuOIK2N539wsN8= Subject key identifier: 0E:78:CE:E7:95:B1:40:59:16:76:E1:B1:36:1C:32:D0:3F:43:C2:54 Authority key identifier: F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 Certificate issuer: /CN=A912963D/serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Certificate serial: 0FA8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft Manifest number: 0F87 Signing time: Sat 06 Sep 2025 17:42:00 +0000 Manifest this update: Sat 06 Sep 2025 17:42:00 +0000 Manifest next update: Sat 13 Sep 2025 17:42:00 +0000 Files and hashes: 1: 8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl (hash: 6ZePfNYr6LmRtP8XBzWukOX9U3Lt0lRxctTro8jkWJk=) 2: B1F01F2A025C11F0BCAB0F12C4F9AE02.roa (hash: +Ut5WlY4tLzmqYC0jkELWtzN6twFYtYwRVK0QW4TmG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 17:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4008 (0xfa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912963D, serialNumber=F221E9432A19F28507831B12ED86BC4BB5963981 Validity Not Before: Sep 6 17:42:00 2025 GMT Not After : Sep 13 17:42:00 2025 GMT Subject: CN=68bc7268-38a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:64:ab:75:bc:50:19:1d:89:be:89:12:99: d0:4a:fb:21:46:63:1f:74:92:74:2a:b0:c5:05:ba: 48:0d:e6:38:4c:4f:f2:ce:86:94:66:8a:39:46:d7: af:4f:77:58:d1:ee:af:d5:d6:c8:32:6a:14:cb:24: 21:3e:02:ec:24:fb:c7:1c:d8:e5:38:75:64:9c:f0: 41:23:3b:c8:ed:12:98:85:e2:3b:cb:bc:38:c6:07: 21:1c:07:0c:fd:99:ee:57:03:92:20:39:0d:fb:92: 8a:dc:c2:5c:4b:b8:c1:f2:e0:80:d0:d7:72:b6:1d: e8:42:9a:fc:05:b5:3c:26:a2:6b:ec:52:b6:65:28: ee:3e:3e:75:c2:93:34:63:6b:3d:93:df:7c:b3:b4: 36:80:64:4c:4d:d0:9c:be:ed:10:9c:8b:0f:ee:0c: 30:ab:d9:15:1c:1f:4c:f6:fa:a6:8d:91:ee:1a:98: 1d:9f:3b:1d:45:b8:76:20:a3:b1:87:a0:cb:21:43: 9c:d6:6c:21:06:20:03:50:d8:7f:a6:1a:04:dc:7b: b6:d4:79:f5:31:da:c9:92:79:db:a8:a6:35:8a:1e: 62:3c:aa:75:be:4b:bf:3e:18:19:b7:f7:d0:30:f0: a8:8a:0b:fa:c3:12:36:b8:d2:ad:12:c7:0a:9d:c6: 37:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:78:CE:E7:95:B1:40:59:16:76:E1:B1:36:1C:32:D0:3F:43:C2:54 X509v3 Authority Key Identifier: keyid:F2:21:E9:43:2A:19:F2:85:07:83:1B:12:ED:86:BC:4B:B5:96:39:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912963D/F9C9766C726511E98B71BB34C4F9AE02/8iHpQyoZ8oUHgxsS7Ya8S7WWOYE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:28:40:2c:e1:67:41:3b:d9:cd:94:fc:f8:3c:29:99:20:92: 72:54:6c:6e:08:0b:58:f8:1b:f8:9b:42:d6:c4:a5:2b:12:eb: 0c:5d:3b:6e:f9:a5:46:ce:97:25:4e:46:a9:58:99:ba:74:e8: 74:ee:50:49:34:c3:ff:b2:90:da:ad:ce:f9:58:53:c1:65:23: 6b:7d:73:ef:16:e8:29:8c:61:d9:e7:10:6a:80:35:c4:d0:37: ce:77:51:16:bf:60:f5:55:2d:9c:cd:a9:8e:f5:92:c8:59:3e: 72:9c:91:df:77:e3:4a:a5:2d:4a:3a:78:01:6e:19:7d:9d:38: e8:08:15:d5:52:61:61:32:24:14:d6:3f:0e:15:74:81:00:7b: 32:1c:b4:5a:db:2e:f7:a9:43:6d:dc:07:90:8b:7e:52:97:5f: f7:23:09:4e:bb:27:11:e3:ae:29:c2:31:23:38:16:02:a9:ed: 01:29:77:7d:f4:6f:62:21:35:5d:ec:58:09:1a:03:7a:ec:c2: 6a:05:94:ac:59:55:fe:12:de:1b:1b:6c:4d:15:0a:d8:13:1f: 48:21:d3:20:f4:e4:8a:e6:17:8c:10:5b:80:78:82:31:d7:55: 84:0c:cf:90:e1:45:2e:e3:6a:6b:58:c0:2d:62:3c:74:0d:5e: 90:9c:5d:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjk2M0QxMTAvBgNVBAUTKEYyMjFFOTQzMkExOUYyODUwNzgzMUIxMkVEODZCQzRC QjU5NjM5ODEwHhcNMjUwOTA2MTc0MjAwWhcNMjUwOTEzMTc0MjAwWjAYMRYwFAYD VQQDEw02OGJjNzI2OC0zOGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtWBkq3W8UBkdib6JEpnQSvshRmMfdJJ0KrDFBbpIDeY4TE/yzoaUZoo5Rtev T3dY0e6v1dbIMmoUyyQhPgLsJPvHHNjlOHVknPBBIzvI7RKYheI7y7w4xgchHAcM /ZnuVwOSIDkN+5KK3MJcS7jB8uCA0Ndyth3oQpr8BbU8JqJr7FK2ZSjuPj51wpM0 Y2s9k998s7Q2gGRMTdCcvu0QnIsP7gwwq9kVHB9M9vqmjZHuGpgdnzsdRbh2IKOx h6DLIUOc1mwhBiADUNh/phoE3Hu21Hn1MdrJknnbqKY1ih5iPKp1vku/PhgZt/fQ MPCoigv6wxI2uNKtEscKncY3SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA54zueV sUBZFnbhsTYcMtA/Q8JUMB8GA1UdIwQYMBaAFPIh6UMqGfKFB4MbEu2GvEu1ljmB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTYzRC9GOUM5NzY2Qzcy NjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhvVUhneHNTN1lhOFM3V1dP WUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpSHBReW9aOG9VSGd4c1M3WWE4UzdXV09ZRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTYzRC9GOUM5NzY2QzcyNjUxMUU5OEI3MUJCMzRDNEY5QUUwMi84aUhwUXlvWjhv VUhneHNTN1lhOFM3V1dPWUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWKEAs4WdBO9nNlPz4PCmZIJJyVGxuCAtY+Bv4m0LWxKUrEusMXTtu +aVGzpclTkapWJm6dOh07lBJNMP/spDarc75WFPBZSNrfXPvFugpjGHZ5xBqgDXE 0DfOd1EWv2D1VS2czamO9ZLIWT5ynJHfd+NKpS1KOngBbhl9nTjoCBXVUmFhMiQU 1j8OFXSBAHsyHLRa2y73qUNt3AeQi35Sl1/3IwlOuycR464pwjEjOBYCqe0BKXd9 9G9iITVd7FgJGgN67MJqBZSsWVX+Et4bG2xNFQrYEx9IIdMg9OSK5heMEFuAeIIx 11WEDM+Q4UUu42prWMAtYjx0DV6QnF1N -----END CERTIFICATE-----Generated at Mon Sep 8 17:36:38 2025 by rpki-client