$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft File: J8wSkYRVB6yvwoe3f-lP6lPdycI.mft (raw, json) Hash identifier: Ma3G3uN0mdLSqmDLcFLUzWovoIBxYZcOpi+JH8fjCas= Subject key identifier: B9:E1:44:6E:67:F0:51:F0:32:73:6B:03:17:DC:CD:CE:6D:6E:05:81 Authority key identifier: 27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 Certificate issuer: /CN=A9134CF6/serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Certificate serial: 0C65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft Manifest number: 0C55 Signing time: Sun 24 Aug 2025 18:31:52 +0000 Manifest this update: Sun 24 Aug 2025 18:31:52 +0000 Manifest next update: Sun 31 Aug 2025 18:31:52 +0000 Files and hashes: 1: J8wSkYRVB6yvwoe3f-lP6lPdycI.crl (hash: GHL0biRx1C7wkCAe7ertEq7NhZrwVeMqP/JKwhSgjhA=) 2: 4A6A598EDB1311EB9B223B40C4F9AE02.roa (hash: fPyMz9KhC5TO2GXmYwuNL/8fF1nSLqleV8d4Bv+swGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3173 (0xc65) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CF6, serialNumber=27CC1291845507ACAFC287B77FE94FEA53DDC9C2 Validity Not Before: Aug 24 18:31:52 2025 GMT Not After : Aug 31 18:31:52 2025 GMT Subject: CN=68ab5a98-bb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:34:c5:3a:5a:59:d3:a5:1f:db:fb:fe:7d:8d: de:4d:22:b2:78:72:66:91:e3:67:1b:a6:48:ad:8b: 05:40:6a:47:b3:79:20:79:76:b0:96:b5:f0:ed:6c: 95:7b:30:f2:8d:e2:bd:db:3d:a3:a0:72:71:0f:aa: 4c:ba:7d:13:a7:ca:62:5e:ce:a3:6d:1c:43:56:75: 64:20:d8:79:fd:de:84:bf:42:5f:0d:4a:5d:bb:65: 08:ea:76:69:87:04:89:92:ad:7b:71:36:63:ce:1b: 81:1a:59:f5:e5:ac:16:59:7a:f2:6b:b5:b3:eb:81: 0b:64:22:24:87:b7:57:be:97:01:a8:97:f5:2f:4b: 8e:09:bc:36:38:51:e4:bc:b9:c5:61:94:57:94:26: 87:fb:21:98:58:d5:ac:fb:65:a4:72:62:3b:13:52: 0e:50:73:6f:c0:66:05:91:fa:ff:66:a4:03:eb:3b: 81:b5:fa:ed:bd:1c:93:d2:80:c9:47:a3:1f:0f:d1: 45:82:eb:a7:88:19:58:40:9d:bd:e3:4d:c2:b6:c0: 0f:fa:2d:40:ad:05:3b:91:cb:de:b9:e2:0c:6c:88: 61:e4:ca:06:2d:3b:eb:ea:18:02:29:31:04:84:00: 09:73:25:47:cb:38:f2:31:7d:1e:20:96:2b:cc:53: 59:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E1:44:6E:67:F0:51:F0:32:73:6B:03:17:DC:CD:CE:6D:6E:05:81 X509v3 Authority Key Identifier: keyid:27:CC:12:91:84:55:07:AC:AF:C2:87:B7:7F:E9:4F:EA:53:DD:C9:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J8wSkYRVB6yvwoe3f-lP6lPdycI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CF6/FD25018A0B7D11EA98E8FA3CC4F9AE02/J8wSkYRVB6yvwoe3f-lP6lPdycI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:0d:bd:2d:98:ca:40:dd:b3:2f:35:b9:ab:6e:c8:5f:61:d1: 21:ca:f1:cc:1d:f1:7c:7b:cf:fd:2c:62:74:f4:ac:67:9d:7e: 1c:b0:b1:5d:3b:d7:4a:53:61:1d:e0:4b:1c:c9:63:fc:48:85: 1c:9f:7c:ee:46:08:f8:51:05:2b:91:19:77:06:e1:38:70:06: 98:89:93:72:27:41:22:b2:c7:b4:28:4f:b7:d2:23:59:d2:5b: 05:0d:b7:fc:ba:cf:e0:73:1c:64:63:98:55:1d:03:8a:77:bb: 8c:85:fa:8b:73:71:5e:6b:8a:e4:83:56:59:1e:cc:f7:72:7b: d7:28:4c:9f:51:64:2c:11:98:6c:10:9d:93:4a:bf:c8:c5:0d: b6:f8:5b:5b:c2:54:db:fa:ab:8a:46:51:77:9c:d8:38:b5:10: e6:6f:fd:c7:ce:35:33:2b:e5:48:b7:32:6d:2e:94:fc:7d:34: 70:5f:2d:ef:7f:05:20:91:1a:98:02:32:22:d6:ba:0f:53:4d: 8f:8c:01:2d:70:a7:f6:f7:d5:71:65:93:74:0e:c4:e3:25:13: cf:7d:02:ac:0b:16:d8:59:03:31:5d:dd:d3:f2:cb:28:43:0d: 82:8e:b4:96:25:ea:96:ac:72:fa:7d:f9:34:8c:85:7f:1a:0e: 19:dc:60:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDRjYxMTAvBgNVBAUTKDI3Q0MxMjkxODQ1NTA3QUNBRkMyODdCNzdGRTk0RkVB NTNEREM5QzIwHhcNMjUwODI0MTgzMTUyWhcNMjUwODMxMTgzMTUyWjAYMRYwFAYD VQQDEw02OGFiNWE5OC1iYjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTTFOlpZ06Uf2/v+fY3eTSKyeHJmkeNnG6ZIrYsFQGpHs3kgeXawlrXw7WyV ezDyjeK92z2joHJxD6pMun0Tp8piXs6jbRxDVnVkINh5/d6Ev0JfDUpdu2UI6nZp hwSJkq17cTZjzhuBGln15awWWXrya7Wz64ELZCIkh7dXvpcBqJf1L0uOCbw2OFHk vLnFYZRXlCaH+yGYWNWs+2WkcmI7E1IOUHNvwGYFkfr/ZqQD6zuBtfrtvRyT0oDJ R6MfD9FFguuniBlYQJ29403CtsAP+i1ArQU7kcveueIMbIhh5MoGLTvr6hgCKTEE hAAJcyVHyzjyMX0eIJYrzFNZkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnhRG5n 8FHwMnNrAxfczc5tbgWBMB8GA1UdIwQYMBaAFCfMEpGEVQesr8KHt3/pT+pT3cnC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENGNi9GRDI1MDE4QTBC N0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2eXZ3b2UzZi1sUDZsUGR5 Y0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o4d1NrWVJWQjZ5dndvZTNmLWxQNmxQZHljSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENGNi9GRDI1MDE4QTBCN0QxMUVBOThFOEZBM0NDNEY5QUUwMi9KOHdTa1lSVkI2 eXZ3b2UzZi1sUDZsUGR5Y0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAADb0tmMpA3bMvNbmrbshfYdEhyvHMHfF8e8/9LGJ09KxnnX4csLFd O9dKU2Ed4EscyWP8SIUcn3zuRgj4UQUrkRl3BuE4cAaYiZNyJ0Eisse0KE+30iNZ 0lsFDbf8us/gcxxkY5hVHQOKd7uMhfqLc3Fea4rkg1ZZHsz3cnvXKEyfUWQsEZhs EJ2TSr/IxQ22+FtbwlTb+quKRlF3nNg4tRDmb/3HzjUzK+VItzJtLpT8fTRwXy3v fwUgkRqYAjIi1roPU02PjAEtcKf299VxZZN0DsTjJRPPfQKsCxbYWQMxXd3T8sso Qw2CjrSWJeqWrHL6ffk0jIV/Gg4Z3GCO -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:15 2025 by rpki-client