$ rpki-client -vvf rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft File: p8GCywxW7MaNdJGikUFEtHdPdzI.mft (raw, json) Hash identifier: lvYhdO2tNht1BhAhsAWyKzglEw6rSqJNBHp5YNULG94= Subject key identifier: B4:B3:CF:CA:96:BC:03:78:58:BF:67:E1:DA:C3:D1:F0:23:22:9B:2B Authority key identifier: A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 Certificate issuer: /CN=A9133C64/serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft Manifest number: 01D9 Signing time: Fri 05 Sep 2025 03:01:31 +0000 Manifest this update: Fri 05 Sep 2025 03:01:31 +0000 Manifest next update: Fri 12 Sep 2025 03:01:31 +0000 Files and hashes: 1: p8GCywxW7MaNdJGikUFEtHdPdzI.crl (hash: +zwbJSuEqkhTUskGsIqhToraYhPabaK9b8kRf9dO0Ik=) 2: 4E2597ACB30F11EDA610E01FC4F9AE02.roa (hash: 5g7RrFvBwgNiKlK3rQGnarO7ApLyrSM6Xg9ERGMGz5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 03:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133C64, serialNumber=A7C182CB0C56ECC68D7491A2914144B4774F7732 Validity Not Before: Sep 5 03:01:31 2025 GMT Not After : Sep 12 03:01:31 2025 GMT Subject: CN=68ba528b-85a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:37:d7:56:89:e4:9e:b1:41:72:b2:b9:b6:15: 70:8f:93:71:9b:f4:14:7c:1b:ec:84:a6:71:2c:98: b4:3b:b0:21:3c:c3:58:16:47:e4:e2:ef:5a:40:2c: 87:ff:cd:8b:a0:72:04:fe:2a:69:fc:44:32:1e:d9: 1b:c6:78:a9:9c:40:1a:c4:7e:5b:46:1c:9d:d4:d4: 13:99:fd:e3:42:fe:22:81:51:f5:4a:74:e8:f0:d7: 75:5f:c4:bd:1b:2a:d8:b1:fa:8f:e7:2a:ab:52:c6: f9:23:a1:ca:0c:22:c4:b5:1c:77:55:39:cf:92:c7: bc:4c:51:e8:a8:08:8b:c1:d8:f0:4e:8b:26:68:03: e0:74:af:60:a0:20:51:a0:9e:a3:1c:1a:23:2c:f9: a1:db:18:1f:84:99:61:9b:47:6e:c0:8b:b3:86:fe: 2f:1c:b3:7a:8d:eb:6c:c6:f5:f2:3b:e1:27:b1:33: c3:00:7f:f0:dd:d6:14:34:c5:ba:8e:ac:4c:16:44: 25:68:53:b3:1c:23:46:02:6c:d4:95:cb:cf:51:91: 3e:be:61:b9:71:0f:fc:f3:bf:e0:cd:3c:eb:ab:44: 17:ff:0d:66:63:86:70:d5:96:3d:21:68:b4:25:d6: f5:d4:29:fd:7f:9b:f5:4c:51:38:5d:be:99:37:00: b7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B3:CF:CA:96:BC:03:78:58:BF:67:E1:DA:C3:D1:F0:23:22:9B:2B X509v3 Authority Key Identifier: keyid:A7:C1:82:CB:0C:56:EC:C6:8D:74:91:A2:91:41:44:B4:77:4F:77:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p8GCywxW7MaNdJGikUFEtHdPdzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133C64/A6DEF1EEB30B11ED9E84DF19C4F9AE02/p8GCywxW7MaNdJGikUFEtHdPdzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:ef:89:da:b5:55:8c:c1:fa:e5:c4:73:b2:7e:0e:30:85:a1: 19:14:c5:17:72:6d:b5:68:34:03:1c:d2:72:9f:7a:f9:82:f6: 9c:d6:94:f2:5d:78:1b:7f:c9:e9:d2:28:05:c3:2d:b7:08:33: a3:73:90:56:74:54:31:48:49:f0:75:ef:42:44:68:01:09:bf: dc:19:84:6d:49:bf:0a:86:34:70:f4:5d:e7:4e:b5:81:ad:10: aa:c9:af:a0:73:76:2c:4d:d7:a1:8e:f3:0f:7e:9c:7e:4c:93: 45:7a:f7:a8:a5:b6:75:86:42:b7:1c:0d:c4:32:48:dc:31:4c: fd:83:49:7f:4a:c0:23:9a:cf:71:6c:a9:cb:a4:6d:27:04:5c: 9e:e9:ee:28:75:05:9b:8e:98:05:ef:ac:d0:37:d7:61:fc:3c: cc:60:03:50:35:44:3d:5d:ea:4c:c3:ad:e2:65:b4:0b:72:d0: 65:df:9e:d5:c2:74:92:57:ac:ef:eb:83:f4:a3:5e:66:30:c9: 69:46:59:9b:29:e7:34:17:be:b7:95:81:62:c4:4f:f8:07:cc: 89:02:43:b7:d2:9c:2f:e8:a8:95:27:95:be:6c:d5:40:b9:60: 2c:5f:1d:09:bb:af:06:ca:04:85:ed:0c:0c:f4:56:67:6e:2c: 5f:2b:8a:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzNDNjQxMTAvBgNVBAUTKEE3QzE4MkNCMEM1NkVDQzY4RDc0OTFBMjkxNDE0NEI0 Nzc0Rjc3MzIwHhcNMjUwOTA1MDMwMTMxWhcNMjUwOTEyMDMwMTMxWjAYMRYwFAYD VQQDEw02OGJhNTI4Yi04NWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAljfXVonknrFBcrK5thVwj5Nxm/QUfBvshKZxLJi0O7AhPMNYFkfk4u9aQCyH /82LoHIE/ipp/EQyHtkbxnipnEAaxH5bRhyd1NQTmf3jQv4igVH1SnTo8Nd1X8S9 GyrYsfqP5yqrUsb5I6HKDCLEtRx3VTnPkse8TFHoqAiLwdjwTosmaAPgdK9goCBR oJ6jHBojLPmh2xgfhJlhm0duwIuzhv4vHLN6jetsxvXyO+EnsTPDAH/w3dYUNMW6 jqxMFkQlaFOzHCNGAmzUlcvPUZE+vmG5cQ/887/gzTzrq0QX/w1mY4Zw1ZY9IWi0 Jdb11Cn9f5v1TFE4Xb6ZNwC3XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSzz8qW vAN4WL9n4drD0fAjIpsrMB8GA1UdIwQYMBaAFKfBgssMVuzGjXSRopFBRLR3T3cy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzM0M2NC9BNkRFRjFFRUIz MEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdNYU5kSkdpa1VGRXRIZFBk ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A4R0N5d3hXN01hTmRKR2lrVUZFdEhkUGR6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz M0M2NC9BNkRFRjFFRUIzMEIxMUVEOUU4NERGMTlDNEY5QUUwMi9wOEdDeXd4VzdN YU5kSkdpa1VGRXRIZFBkekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAU74natVWMwfrlxHOyfg4whaEZFMUXcm21aDQDHNJyn3r5gvac1pTy XXgbf8np0igFwy23CDOjc5BWdFQxSEnwde9CRGgBCb/cGYRtSb8KhjRw9F3nTrWB rRCqya+gc3YsTdehjvMPfpx+TJNFeveopbZ1hkK3HA3EMkjcMUz9g0l/SsAjms9x bKnLpG0nBFye6e4odQWbjpgF76zQN9dh/DzMYANQNUQ9XepMw63iZbQLctBl357V wnSSV6zv64P0o15mMMlpRlmbKec0F763lYFixE/4B8yJAkO30pwv6KiVJ5W+bNVA uWAsXx0Ju68GygSF7QwM9FZnbixfK4rV -----END CERTIFICATE-----Generated at Sat Sep 6 13:31:01 2025 by rpki-client