$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json) Hash identifier: pRBaTkvexpGrNs5EI+Hj8k5LV3VtmAbSOpjShUpktWY= Subject key identifier: BF:A9:99:03:72:ED:19:D6:66:36:34:4C:5C:4C:33:EE:FE:36:8F:A6 Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Certificate serial: 029B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft Manifest number: 028B Signing time: Thu 23 Oct 2025 03:04:01 +0000 Manifest this update: Thu 23 Oct 2025 03:04:00 +0000 Manifest next update: Thu 30 Oct 2025 03:04:00 +0000 Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: aJrwkf2/JR6iwVAd+piU0jrn3FsJ/5hZIAcSrLtkhaE=) 2: 6E295F30822811F0B49CB378C4F9AE02.roa (hash: 6sLu3BEdx9/7hIQ0xnLxfwDmYeLLmzHWwmPjiKZ/kzE=) 3: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: orsVYI0WPqRRwsJkvK9ISroiZMKS0a+gVuvh69buNNs=) 4: 33471FD866EE11F09D3F3F84C4F9AE02.roa (hash: 0QIge9qVdWiYUccpaSzR0ATAUWXdicUdgJEiPZ4i2aA=) 5: 5BE6AFEE822811F0A0F1A878C4F9AE02.roa (hash: V8FSzYBLLsXQQnxTAHA6zEryNBNGiFUPQmH0Cpz+QYg=) 6: 1B0B620C16C811EF93505027C4F9AE02.roa (hash: 2oEdY4ta3hN90rZpyN1SlR035NNb05Tx7U/Ur7N9XJo=) 7: 2DED090C18F211F0B4DFD036C4F9AE02.roa (hash: /C0qtTA5i0rVvnV/xAh9o5sYCzRTxWzn/hNOktwoiis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 03:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 667 (0x29b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Validity Not Before: Oct 23 03:04:00 2025 GMT Not After : Oct 30 03:04:00 2025 GMT Subject: CN=68f99b21-e294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bd:c0:12:1c:2c:3b:72:32:42:fd:f4:9f:99: b5:4e:c8:92:a7:4a:33:39:97:af:cd:24:45:6b:ee: a5:3c:cc:08:bb:5a:84:3a:95:e8:c6:55:1b:33:d6: cc:02:f5:00:33:7a:c0:5d:20:85:f5:c4:70:32:57: 94:b0:01:9d:45:a1:9f:ec:dd:0e:6c:97:fa:09:eb: 01:d8:7b:af:24:45:92:14:d6:f6:5a:63:5b:17:9c: ce:8b:bd:9c:fe:3c:e8:a3:53:cb:de:31:f6:cc:fb: e9:9d:f9:ba:e3:9d:02:a5:0b:b8:7c:0c:06:67:18: 2b:8f:42:6c:1b:64:10:04:51:bb:45:be:2e:30:e9: bb:a8:ad:5c:04:9e:da:72:5c:15:00:0b:26:e4:f2: ab:5e:ae:3a:a2:05:45:44:76:a2:d6:27:aa:86:c9: e0:29:7e:cf:96:15:eb:7b:02:5c:fc:e0:ba:26:88: db:84:78:0b:52:09:71:81:4c:e9:7e:ac:2e:ab:18: bb:4f:e9:00:92:25:8b:98:bc:3e:06:5b:5e:64:66: 47:a1:c7:34:e2:30:de:dd:0d:9b:50:fb:9a:61:ef: fc:be:04:57:1c:d4:24:28:8f:28:5c:c6:15:bc:0b: 03:a1:2c:a1:7d:05:43:7a:79:19:ac:61:f4:79:44: 31:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A9:99:03:72:ED:19:D6:66:36:34:4C:5C:4C:33:EE:FE:36:8F:A6 X509v3 Authority Key Identifier: keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:9a:3d:ef:44:70:a5:a6:9d:b3:51:36:24:ef:f9:94:50:9d: 2c:cf:3f:59:35:6f:67:81:68:db:2c:8c:66:90:91:2c:3b:8e: 4f:db:5e:1a:dd:ae:89:25:0c:b8:82:7d:75:78:1a:46:2f:1a: cc:34:28:1c:57:96:f6:e4:4f:b2:b8:dd:a9:b2:98:cf:2c:8e: c0:4a:5a:70:63:f9:b8:03:7c:0b:60:c7:8f:1e:68:7f:d2:85: 16:2b:11:57:52:ee:46:6a:d3:ed:73:ab:2f:ea:55:45:6c:63: c6:42:94:e9:e7:fa:be:e7:c9:0e:63:b7:62:63:3b:80:9b:d5: 8c:74:7f:60:56:c1:6d:c8:e0:eb:11:6d:f8:34:e6:f0:8a:65: c2:2f:c1:6a:5c:1c:11:f3:ff:d4:cc:f0:e7:92:79:d4:a3:cd: 34:98:f9:f3:93:cf:c9:cd:df:2e:70:1d:22:1f:3e:c8:6f:fe: b3:7e:6f:7b:c7:7f:f3:61:5d:84:d0:2c:0f:48:5a:9a:4a:8b: a0:88:d4:bc:fa:a0:52:c7:8b:ab:b5:83:2c:55:a1:8e:0d:cd: 76:81:0b:aa:cd:6c:21:75:1c:a9:c3:ab:39:b3:69:ff:dc:e3: 53:77:a9:f5:55:c6:7f:72:3f:ef:d1:fb:38:5d:ba:ee:cf:c1: ec:17:1a:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRFMzUxMTAvBgNVBAUTKEYzRjkyOUZGNTg1NUVEMjQ0RkM1ODMzRTI1RUNERjU1 M0E1OEZBNjcwHhcNMjUxMDIzMDMwNDAwWhcNMjUxMDMwMDMwNDAwWjAYMRYwFAYD VQQDEw02OGY5OWIyMS1lMjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtL3AEhwsO3IyQv30n5m1TsiSp0ozOZevzSRFa+6lPMwIu1qEOpXoxlUbM9bM AvUAM3rAXSCF9cRwMleUsAGdRaGf7N0ObJf6CesB2HuvJEWSFNb2WmNbF5zOi72c /jzoo1PL3jH2zPvpnfm6450CpQu4fAwGZxgrj0JsG2QQBFG7Rb4uMOm7qK1cBJ7a clwVAAsm5PKrXq46ogVFRHai1ieqhsngKX7PlhXrewJc/OC6JojbhHgLUglxgUzp fqwuqxi7T+kAkiWLmLw+BlteZGZHocc04jDe3Q2bUPuaYe/8vgRXHNQkKI8oXMYV vAsDoSyhfQVDenkZrGH0eUQxPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+pmQNy 7RnWZjY0TFxMM+7+No+mMB8GA1UdIwQYMBaAFPP5Kf9YVe0kT8WDPiXs31U6WPpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEUzNS8wRTdBQjMzMjI3 N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdTUlB4WU0tSmV6ZlZUcFkt bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfa3BfMWhWN1NSUHhZTS1KZXpmVlRwWS1tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEUzNS8wRTdBQjMzMjI3N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdT UlB4WU0tSmV6ZlZUcFktbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAamj3vRHClpp2zUTYk7/mUUJ0szz9ZNW9ngWjbLIxmkJEsO45P214a 3a6JJQy4gn11eBpGLxrMNCgcV5b25E+yuN2pspjPLI7ASlpwY/m4A3wLYMePHmh/ 0oUWKxFXUu5GatPtc6sv6lVFbGPGQpTp5/q+58kOY7diYzuAm9WMdH9gVsFtyODr EW34NObwimXCL8FqXBwR8//UzPDnknnUo800mPnzk8/Jzd8ucB0iHz7Ib/6zfm97 x3/zYV2E0CwPSFqaSougiNS8+qBSx4urtYMsVaGODc12gQuqzWwhdRypw6s5s2n/ 3ONTd6n1VcZ/cj/v0fs4Xbruz8HsFxpm -----END CERTIFICATE-----Generated at Thu Oct 23 19:25:45 2025 by rpki-client