$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: 5L4C9qibH68SWFnKTOMazhTpsuBe24NiQHo37guQgB0= Subject key identifier: FF:A5:60:61:60:15:02:24:E7:9A:9F:9E:44:07:91:A2:2A:EA:03:17 Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 1023 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 100B Signing time: Mon 08 Sep 2025 17:29:56 +0000 Manifest this update: Mon 08 Sep 2025 17:29:55 +0000 Manifest next update: Mon 15 Sep 2025 17:29:55 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: 0ewgAPWfuxLm3q9GMTcVQwVGJy3YzCl5+icJhmaDjYk=) 2: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: nBMi/a8I+RV2Z/PiZj9be9QZEtWJuCuqsGfS6IxkLhU=) 3: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: dzJ3ZC5Hl5bYvc0rYBuqTlx1lY8wAUYvF1umXCXe+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 17:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4131 (0x1023) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: Sep 8 17:29:55 2025 GMT Not After : Sep 15 17:29:55 2025 GMT Subject: CN=68bf1293-cbfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8d:96:c5:54:b2:bb:f0:32:36:8b:40:f8:5b: 72:51:ed:b4:4e:79:24:4b:43:d2:5d:4e:7f:18:6e: d3:91:f3:fe:fa:ca:e7:89:ed:29:b3:73:86:9d:4d: 6d:d0:d4:27:0d:49:9d:62:eb:9b:4e:21:00:be:1d: 32:ee:8f:75:e8:96:23:bb:60:76:14:2b:34:0c:60: 1b:2d:eb:df:c7:fd:1f:22:4d:65:cf:1c:0d:fc:1d: ae:0f:12:b9:6f:44:19:ed:63:f0:1e:7b:08:18:b4: 70:2a:8e:c6:44:a1:9f:f8:23:90:ed:57:5c:8f:6c: 4a:62:9c:d2:ae:5a:83:88:85:63:7b:41:8e:0a:76: e7:cb:fa:99:6b:87:c3:9a:d8:1c:da:5a:dd:a9:b9: 56:05:87:61:04:6e:92:ce:20:bb:4f:35:e0:78:3e: 17:b0:f1:2a:bc:04:6b:61:5b:c8:55:7a:9a:3a:9c: 67:0a:43:39:5d:df:a3:d7:fd:8e:2b:12:b0:5e:26: d8:df:29:47:de:26:0a:7c:96:be:32:f3:76:85:73: 09:40:8d:f1:ad:23:05:50:bd:37:79:f6:1c:bd:2a: 9d:ce:82:03:96:36:d1:02:48:a5:dd:84:5b:a4:cb: 6e:72:f8:7c:d4:9c:53:99:09:70:b5:20:43:3f:1e: a0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A5:60:61:60:15:02:24:E7:9A:9F:9E:44:07:91:A2:2A:EA:03:17 X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:49:22:16:cd:c9:a1:30:3f:86:0a:1b:d7:d9:83:43:dd:39: 76:b1:ec:07:31:41:cd:d0:72:18:64:44:0b:4c:9c:56:5d:ba: b4:5a:88:26:69:0d:4e:d0:e9:07:a5:ca:1a:85:21:00:79:1c: 04:78:26:12:e3:aa:e9:5f:72:15:31:4f:bb:9e:26:63:f3:ba: 5e:b5:65:21:12:83:f5:24:3f:b0:85:f9:c9:7e:19:20:59:f0: d1:88:c6:c5:e5:e3:7e:04:cd:81:7f:02:ad:b1:74:97:61:73: 06:14:fb:b0:76:0f:06:9d:8d:bb:c0:2a:ca:2d:e9:01:07:e5: 6e:62:fb:30:b5:88:74:60:ee:eb:c2:d2:f1:49:b8:66:ad:ca: 0d:a3:24:17:0d:cf:b0:68:da:03:ea:e5:8d:5a:3c:ce:18:ad: 6c:19:1c:4e:47:2b:73:2b:e1:20:b3:b1:53:db:f9:ef:85:95: 03:da:0d:92:ea:dc:1d:cb:16:fe:9e:3b:72:e6:5e:4b:45:18: ff:e4:c1:cd:57:9e:4f:79:a6:34:24:db:51:61:a3:91:ef:7a: da:21:34:fe:f4:2f:2c:1a:10:5a:1f:8e:fe:3a:c4:22:98:8f: db:a4:2e:8f:28:98:9d:54:ee:ab:2a:7b:4a:6b:28:36:28:21: 8e:8c:57:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjUwOTA4MTcyOTU1WhcNMjUwOTE1MTcyOTU1WjAYMRYwFAYD VQQDEw02OGJmMTI5My1jYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqo2WxVSyu/AyNotA+FtyUe20TnkkS0PSXU5/GG7TkfP++srnie0ps3OGnU1t 0NQnDUmdYuubTiEAvh0y7o916JYju2B2FCs0DGAbLevfx/0fIk1lzxwN/B2uDxK5 b0QZ7WPwHnsIGLRwKo7GRKGf+COQ7Vdcj2xKYpzSrlqDiIVje0GOCnbny/qZa4fD mtgc2lrdqblWBYdhBG6SziC7TzXgeD4XsPEqvARrYVvIVXqaOpxnCkM5Xd+j1/2O KxKwXibY3ylH3iYKfJa+MvN2hXMJQI3xrSMFUL03efYcvSqdzoIDljbRAkil3YRb pMtucvh81JxTmQlwtSBDPx6g/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP+lYGFg FQIk55qfnkQHkaIq6gMXMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA1SSIWzcmhMD+GChvX2YND3Tl2sewHMUHN0HIYZEQLTJxWXbq0Wogm aQ1O0OkHpcoahSEAeRwEeCYS46rpX3IVMU+7niZj87petWUhEoP1JD+whfnJfhkg WfDRiMbF5eN+BM2BfwKtsXSXYXMGFPuwdg8GnY27wCrKLekBB+VuYvswtYh0YO7r wtLxSbhmrcoNoyQXDc+waNoD6uWNWjzOGK1sGRxORytzK+Egs7FT2/nvhZUD2g2S 6twdyxb+njty5l5LRRj/5MHNV55PeaY0JNtRYaOR73raITT+9C8sGhBaH47+OsQi mI/bpC6PKJidVO6rKntKayg2KCGOjFeU -----END CERTIFICATE-----Generated at Tue Sep 9 13:24:33 2025 by rpki-client