$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: fRHSWJBHzb1HEzHax4s1BPBx0ZLD8oMgN4MtnXLwUzE= Subject key identifier: 4A:80:82:AE:7D:31:84:94:16:68:22:02:58:65:1B:F5:CE:EB:E5:65 Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 08D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 08C9 Signing time: Thu 04 Sep 2025 20:41:20 +0000 Manifest this update: Thu 04 Sep 2025 20:41:20 +0000 Manifest next update: Thu 11 Sep 2025 20:41:20 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: HvUtDkR7VxEG+wRaF2c2XJb5NJYW7nFwFn2RS6xMRnA=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: eX1Jqzb/wvl6CH4yih7NF/ZllkUpoBKZivz1fQWZTFc=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: u1VWd5IJTGCG//nYGKvxvoYAm+UMxol66g1kBC9OWXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2263 (0x8d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Sep 4 20:41:20 2025 GMT Not After : Sep 11 20:41:20 2025 GMT Subject: CN=68b9f970-7ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a0:4c:26:49:84:c1:d7:78:be:cf:64:bf:e4: 86:61:c7:52:75:0b:c5:ab:f1:45:49:77:12:d2:7d: 06:c6:16:76:7a:99:3e:61:0e:00:7b:92:e4:c1:de: 90:60:3a:d3:69:11:bf:88:3b:37:22:f2:d3:55:6c: a0:c7:6a:0e:75:82:77:0e:3c:c3:51:f1:f9:e9:9f: 50:38:1f:6c:15:42:83:ae:0a:42:8a:16:00:38:95: 2e:fe:73:3c:a5:11:82:14:08:de:96:b4:b6:64:d0: c8:b4:6d:31:8e:96:07:64:ff:54:e1:7b:8c:c1:f4: c9:18:d8:e1:72:bf:12:e5:48:ee:4e:86:8e:4e:43: 69:f6:88:cf:fd:c0:b9:7d:5c:2d:a4:84:7b:42:38: 7a:13:a7:67:51:5b:82:e8:e1:a6:02:a9:72:8c:39: 57:4a:aa:32:b2:3d:f0:2c:72:a3:c4:bc:d2:25:b5: af:4a:b4:c9:39:16:92:a2:cb:07:99:77:35:e0:06: 0e:2a:c7:32:33:90:a6:f7:20:df:ba:68:a4:b9:30: 25:62:17:9d:f7:8c:f5:b0:73:3b:d7:23:8b:ad:97: 2b:2e:81:0d:59:70:f7:2a:d5:d0:23:21:88:1f:e2: 88:34:09:b4:d1:9e:c6:df:78:87:50:fb:1f:b3:62: 3d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:80:82:AE:7D:31:84:94:16:68:22:02:58:65:1B:F5:CE:EB:E5:65 X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:1d:86:fc:2f:52:f0:c4:d9:f1:92:9e:b2:1c:67:f9:58:7a: f9:98:51:e8:cf:2c:5f:cc:15:ec:06:b7:12:24:27:da:39:b6: de:83:7c:a0:70:70:1c:18:bf:88:63:8c:ae:1c:d7:25:f7:6d: 7e:f3:b0:3a:5c:75:0f:cc:44:a1:88:18:f0:f3:d6:49:15:ee: eb:c6:04:44:fc:95:44:ff:fa:07:a7:6f:8c:75:56:7f:ff:03: 1e:26:32:f3:b0:bd:aa:4e:b5:92:f7:82:e0:ae:4b:04:65:27: c9:02:2d:4e:9b:5a:77:73:81:4c:dd:09:6e:37:9f:46:8f:f3: 6f:a6:6f:84:4f:89:2c:0c:02:31:e6:3e:67:a9:f2:87:08:de: 27:3e:a5:e6:5b:20:29:5f:60:6b:9e:dd:e2:db:7c:e9:4c:bf: 91:62:5a:93:1c:03:71:3b:0b:dc:fb:18:25:cb:d2:eb:91:c9: b8:83:17:f6:4f:4e:05:fe:65:95:11:07:a6:82:38:49:b9:c7: 50:c6:4f:ee:e6:3b:15:3c:c8:bb:16:0f:d9:88:c3:9c:6d:16: 9a:d9:78:47:cc:26:bb:aa:84:5a:2d:5a:68:fd:f6:cb:a5:b1: bf:f0:40:c7:c4:ef:f7:94:7b:a8:da:bf:77:c3:05:64:13:46: 31:13:88:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjUwOTA0MjA0MTIwWhcNMjUwOTExMjA0MTIwWjAYMRYwFAYD VQQDEw02OGI5Zjk3MC03YWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7KBMJkmEwdd4vs9kv+SGYcdSdQvFq/FFSXcS0n0GxhZ2epk+YQ4Ae5Lkwd6Q YDrTaRG/iDs3IvLTVWygx2oOdYJ3DjzDUfH56Z9QOB9sFUKDrgpCihYAOJUu/nM8 pRGCFAjelrS2ZNDItG0xjpYHZP9U4XuMwfTJGNjhcr8S5UjuToaOTkNp9ojP/cC5 fVwtpIR7Qjh6E6dnUVuC6OGmAqlyjDlXSqoysj3wLHKjxLzSJbWvSrTJORaSossH mXc14AYOKscyM5Cm9yDfumikuTAlYhed94z1sHM71yOLrZcrLoENWXD3KtXQIyGI H+KINAm00Z7G33iHUPsfs2I97QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqAgq59 MYSUFmgiAlhlG/XO6+VlMB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxHYb8L1LwxNnxkp6yHGf5WHr5mFHozyxfzBXsBrcSJCfaObbeg3yg cHAcGL+IY4yuHNcl921+87A6XHUPzEShiBjw89ZJFe7rxgRE/JVE//oHp2+MdVZ/ /wMeJjLzsL2qTrWS94LgrksEZSfJAi1Om1p3c4FM3QluN59Gj/Nvpm+ET4ksDAIx 5j5nqfKHCN4nPqXmWyApX2Brnt3i23zpTL+RYlqTHANxOwvc+xgly9Lrkcm4gxf2 T04F/mWVEQemgjhJucdQxk/u5jsVPMi7Fg/ZiMOcbRaa2XhHzCa7qoRaLVpo/fbL pbG/8EDHxO/3lHuo2r93wwVkE0YxE4iJ -----END CERTIFICATE-----Generated at Sat Sep 6 16:04:12 2025 by rpki-client