$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json) Hash identifier: ff/XZ06WZt9oiEMW4K2BwGgNrTlzmKALi5nqFrHpfr0= Subject key identifier: FE:C3:6A:20:FA:73:FB:66:3D:DD:9D:26:14:5C:C5:6B:6F:6C:A1:E7 Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Certificate serial: 0284 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft Manifest number: 0274 Signing time: Fri 05 Sep 2025 02:06:38 +0000 Manifest this update: Fri 05 Sep 2025 02:06:38 +0000 Manifest next update: Fri 12 Sep 2025 02:06:38 +0000 Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: jNqK7ofV2I3djULpCszFY1qg735u7uYCalAiXPlQh6w=) 2: 6E295F30822811F0B49CB378C4F9AE02.roa (hash: 6sLu3BEdx9/7hIQ0xnLxfwDmYeLLmzHWwmPjiKZ/kzE=) 3: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: orsVYI0WPqRRwsJkvK9ISroiZMKS0a+gVuvh69buNNs=) 4: 33471FD866EE11F09D3F3F84C4F9AE02.roa (hash: 0QIge9qVdWiYUccpaSzR0ATAUWXdicUdgJEiPZ4i2aA=) 5: 5BE6AFEE822811F0A0F1A878C4F9AE02.roa (hash: V8FSzYBLLsXQQnxTAHA6zEryNBNGiFUPQmH0Cpz+QYg=) 6: 1B0B620C16C811EF93505027C4F9AE02.roa (hash: 2oEdY4ta3hN90rZpyN1SlR035NNb05Tx7U/Ur7N9XJo=) 7: 2DED090C18F211F0B4DFD036C4F9AE02.roa (hash: /C0qtTA5i0rVvnV/xAh9o5sYCzRTxWzn/hNOktwoiis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 644 (0x284) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Validity Not Before: Sep 5 02:06:38 2025 GMT Not After : Sep 12 02:06:38 2025 GMT Subject: CN=68ba45ae-948d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f9:97:79:88:d4:36:32:1e:64:6b:e2:d3:54: 39:74:67:b8:4d:9b:08:59:e3:d8:f8:69:cf:f8:55: 31:ac:f7:0d:d4:82:75:77:ec:73:fe:03:0e:24:23: f5:88:18:1e:86:c5:ca:37:5a:ae:06:a7:a1:e0:2a: bf:d6:bc:05:38:81:63:cd:85:b3:42:c9:7a:d3:1e: 2e:42:1f:6b:93:96:2e:e9:9d:50:f6:96:e1:63:85: 13:e5:a8:06:6d:a3:d4:8f:a1:ef:bc:23:bb:f8:09: 26:0e:11:75:05:5e:d1:59:d1:54:c8:e7:18:3a:a3: 26:e5:52:df:00:54:9e:b5:3b:3d:e6:a6:ae:58:09: 77:25:02:2e:db:d6:a6:95:07:b9:82:8c:16:cb:e5: 32:c1:ff:04:f8:a3:84:55:e8:af:01:2e:95:59:df: 0b:19:6b:3f:ba:a7:3c:34:3b:d2:77:cc:39:6d:45: 67:43:6c:79:d6:c2:cb:d1:60:d0:0a:07:4d:dc:93: 87:83:7f:25:fb:0a:d1:d6:67:9d:09:5c:59:7e:a0: 8d:74:3a:59:1d:47:c9:63:21:6c:6d:2e:67:c9:04: fe:bb:78:51:1f:6f:e6:1e:a6:be:5f:16:fc:26:e3: ed:f3:9f:94:31:3c:e2:76:a4:0d:d2:a9:b6:a3:ef: d8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C3:6A:20:FA:73:FB:66:3D:DD:9D:26:14:5C:C5:6B:6F:6C:A1:E7 X509v3 Authority Key Identifier: keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:18:5a:74:44:56:1a:f4:01:1a:0a:14:8c:c2:da:ce:47:85: 0e:89:fb:94:55:0c:3f:20:db:34:84:f5:a3:26:07:9c:36:e7: 4d:b5:6f:73:96:79:8f:c6:96:6f:db:7d:29:1e:ea:1a:77:ee: d6:96:b0:6c:79:82:a7:c6:64:cb:9a:f6:41:13:5f:ee:cb:b7: 99:e3:19:f9:3b:15:28:c9:1d:7e:8d:06:19:aa:42:26:46:9d: 38:00:f5:39:55:39:e2:82:eb:4c:50:47:31:2c:aa:f0:e3:71: f4:bd:23:da:e6:68:87:30:27:f7:b0:7d:cb:85:9f:e6:a7:ee: b1:7a:87:96:1a:22:b7:5a:7d:8a:72:7c:7d:b2:b8:f1:15:d2: 3b:d0:da:0b:6c:ba:34:4e:81:23:05:57:75:82:c2:75:28:0b: a9:c4:81:3c:cd:ad:31:1d:a6:e7:ac:54:b0:3a:f1:61:2f:8d: 48:57:de:c7:48:19:45:c6:54:2d:b9:fe:88:ed:d8:a0:61:22: e1:39:6a:35:98:c2:4a:a6:f9:53:89:86:50:9d:d4:25:53:bf: 00:df:34:72:80:88:a0:5c:a5:ae:29:81:75:de:66:94:6d:69: 6a:23:f9:34:3f:e5:02:7f:6e:57:9e:88:d2:90:f9:99:d7:d9: 34:49:01:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRFMzUxMTAvBgNVBAUTKEYzRjkyOUZGNTg1NUVEMjQ0RkM1ODMzRTI1RUNERjU1 M0E1OEZBNjcwHhcNMjUwOTA1MDIwNjM4WhcNMjUwOTEyMDIwNjM4WjAYMRYwFAYD VQQDEw02OGJhNDVhZS05NDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmvmXeYjUNjIeZGvi01Q5dGe4TZsIWePY+GnP+FUxrPcN1IJ1d+xz/gMOJCP1 iBgehsXKN1quBqeh4Cq/1rwFOIFjzYWzQsl60x4uQh9rk5Yu6Z1Q9pbhY4UT5agG baPUj6HvvCO7+AkmDhF1BV7RWdFUyOcYOqMm5VLfAFSetTs95qauWAl3JQIu29am lQe5gowWy+Uywf8E+KOEVeivAS6VWd8LGWs/uqc8NDvSd8w5bUVnQ2x51sLL0WDQ CgdN3JOHg38l+wrR1medCVxZfqCNdDpZHUfJYyFsbS5nyQT+u3hRH2/mHqa+Xxb8 JuPt85+UMTzidqQN0qm2o+/YIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7DaiD6 c/tmPd2dJhRcxWtvbKHnMB8GA1UdIwQYMBaAFPP5Kf9YVe0kT8WDPiXs31U6WPpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEUzNS8wRTdBQjMzMjI3 N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdTUlB4WU0tSmV6ZlZUcFkt bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfa3BfMWhWN1NSUHhZTS1KZXpmVlRwWS1tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEUzNS8wRTdBQjMzMjI3N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdT UlB4WU0tSmV6ZlZUcFktbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9GFp0RFYa9AEaChSMwtrOR4UOifuUVQw/INs0hPWjJgecNudNtW9z lnmPxpZv230pHuoad+7WlrBseYKnxmTLmvZBE1/uy7eZ4xn5OxUoyR1+jQYZqkIm Rp04APU5VTnigutMUEcxLKrw43H0vSPa5miHMCf3sH3LhZ/mp+6xeoeWGiK3Wn2K cnx9srjxFdI70NoLbLo0ToEjBVd1gsJ1KAupxIE8za0xHabnrFSwOvFhL41IV97H SBlFxlQtuf6I7digYSLhOWo1mMJKpvlTiYZQndQlU78A3zRygIigXKWuKYF13maU bWlqI/k0P+UCf25XnojSkPmZ19k0SQEC -----END CERTIFICATE-----Generated at Sat Sep 6 07:02:50 2025 by rpki-client