$ rpki-client -vvf rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft File: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft (raw, json) Hash identifier: X0MmoaZCHrL7/+PzRVI+yx/AqcF3qkwo4Jn5hioQgTs= Subject key identifier: 53:9E:90:6C:76:81:0E:40:9C:45:3F:7F:98:0F:C1:F0:AC:93:35:7F Authority key identifier: F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 Certificate issuer: /CN=A9146A02/serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Certificate serial: 0C85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft Manifest number: 0C7E Signing time: Tue 16 Sep 2025 18:26:36 +0000 Manifest this update: Tue 16 Sep 2025 18:26:35 +0000 Manifest next update: Tue 23 Sep 2025 18:26:35 +0000 Files and hashes: 1: 8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl (hash: OkHjpyAjadnNxYy5cJ9WU8IrDeRfCYU6LhXwnkuo6AU=) 2: 3F1B0EF2045F11EA87A3BD3BC4F9AE02.roa (hash: QFXAssP53pMm/bFh5UJHCvk6JCuQJOPSQpSae2xtEZI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 23 Sep 2025 18:26:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3205 (0xc85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146A02, serialNumber=F0728EED2D4F8FFD8CFE5F87F61BEC0434514129 Validity Not Before: Sep 16 18:26:35 2025 GMT Not After : Sep 23 18:26:35 2025 GMT Subject: CN=68c9abdb-046c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:40:74:f4:82:3c:2a:cf:72:6c:d9:95:7f:c1: bf:67:3d:1c:3e:b1:b7:55:04:b8:0a:79:8d:0f:a7: d5:cc:2d:de:5c:c6:9c:08:1f:5d:bc:35:b0:6c:4f: 0c:cf:eb:4e:8f:c8:76:75:2d:47:38:80:d3:9e:e0: dc:69:a4:ce:b1:b2:c9:76:71:d9:f9:d8:f2:63:d5: 57:3a:c2:46:9a:d8:22:27:68:f3:5b:f2:3d:ec:d3: d3:2a:37:c8:3b:77:d0:cc:f1:02:6e:fa:fc:8c:87: 08:fc:1a:5b:14:96:10:9d:17:a1:70:7e:86:ea:f9: 68:88:02:51:5e:6d:20:58:43:0e:7e:01:77:82:4a: ee:ee:5f:da:e7:15:fd:f8:a6:af:c4:00:4d:89:40: 06:e1:41:50:24:0e:a4:1a:95:21:d5:a0:be:eb:5a: 45:d3:f9:9e:da:1e:80:9e:b1:b8:22:e0:95:59:a2: cb:7e:46:9c:8b:54:fd:b7:86:35:a4:22:af:7f:be: cc:a0:aa:b9:2c:1d:f3:84:2f:2d:03:e6:63:f2:6f: 5a:7c:8e:91:06:90:2e:02:3e:37:5a:8d:67:bd:17: 70:c7:df:8a:d2:db:3e:ed:42:ee:17:c9:52:61:7f: ea:1a:23:d7:ce:2e:f9:a2:6b:91:d0:50:65:f9:d1: 06:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9E:90:6C:76:81:0E:40:9C:45:3F:7F:98:0F:C1:F0:AC:93:35:7F X509v3 Authority Key Identifier: keyid:F0:72:8E:ED:2D:4F:8F:FD:8C:FE:5F:87:F6:1B:EC:04:34:51:41:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146A02/8DCEE9FC045E11EAADB7DF3AC4F9AE02/8HKO7S1Pj_2M_l-H9hvsBDRRQSk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:f3:fa:1c:39:20:4f:e4:03:d3:73:cb:ac:48:e5:ae:f3:2a: 30:1f:ca:82:ea:fd:26:25:9d:f6:4f:5b:f5:18:25:4a:db:bc: cd:28:f7:00:c3:f6:48:30:9e:b3:c3:ff:b1:68:c9:71:e4:04: 06:08:d4:5d:ee:8f:e3:53:20:72:66:75:e0:8c:34:ba:07:f2: 02:b1:04:6f:b4:d3:fb:da:1f:21:b1:60:ad:18:f0:a6:4b:33: 32:c3:1f:4d:10:3e:ed:14:54:a7:d7:1a:63:a2:24:5a:41:12: 41:7c:5e:aa:5f:e4:6c:df:fb:a1:dd:5d:22:4d:8a:38:b0:8a: 81:d1:89:2b:95:fd:e9:37:fc:04:32:cd:b5:dc:aa:0b:34:c8: 0e:7e:37:36:06:16:47:fc:71:46:7e:03:4d:ea:88:28:75:00: 78:3b:f8:69:82:fb:f1:f0:92:14:93:1d:0e:c4:53:42:0f:3f: 7d:87:7c:66:f6:40:26:63:12:df:bd:2b:c7:ca:a1:0a:6f:57: 13:c9:a5:a1:1e:a4:49:60:e2:93:83:0e:40:ef:ef:0e:eb:58: 98:0b:56:37:d8:c0:b3:83:0b:e5:91:b3:36:18:ad:08:d5:6c: 66:4c:9d:79:5d:86:29:a3:fc:e9:17:6f:30:c3:c0:30:be:20: 12:ca:d8:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBMDIxMTAvBgNVBAUTKEYwNzI4RUVEMkQ0RjhGRkQ4Q0ZFNUY4N0Y2MUJFQzA0 MzQ1MTQxMjkwHhcNMjUwOTE2MTgyNjM1WhcNMjUwOTIzMTgyNjM1WjAYMRYwFAYD VQQDEw02OGM5YWJkYi0wNDZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtEB09II8Ks9ybNmVf8G/Zz0cPrG3VQS4CnmND6fVzC3eXMacCB9dvDWwbE8M z+tOj8h2dS1HOIDTnuDcaaTOsbLJdnHZ+djyY9VXOsJGmtgiJ2jzW/I97NPTKjfI O3fQzPECbvr8jIcI/BpbFJYQnRehcH6G6vloiAJRXm0gWEMOfgF3gkru7l/a5xX9 +KavxABNiUAG4UFQJA6kGpUh1aC+61pF0/me2h6AnrG4IuCVWaLLfkaci1T9t4Y1 pCKvf77MoKq5LB3zhC8tA+Zj8m9afI6RBpAuAj43Wo1nvRdwx9+K0ts+7ULuF8lS YX/qGiPXzi75omuR0FBl+dEGyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFOekGx2 gQ5AnEU/f5gPwfCskzV/MB8GA1UdIwQYMBaAFPByju0tT4/9jP5fh/Yb7AQ0UUEp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkEwMi84RENFRTlGQzA0 NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpfMk1fbC1IOWh2c0JEUlJR U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhIS083UzFQal8yTV9sLUg5aHZzQkRSUlFTay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NkEwMi84RENFRTlGQzA0NUUxMUVBQURCN0RGM0FDNEY5QUUwMi84SEtPN1MxUGpf Mk1fbC1IOWh2c0JEUlJRU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA8/ocOSBP5APTc8usSOWu8yowH8qC6v0mJZ32T1v1GCVK27zNKPcA w/ZIMJ6zw/+xaMlx5AQGCNRd7o/jUyByZnXgjDS6B/ICsQRvtNP72h8hsWCtGPCm SzMywx9NED7tFFSn1xpjoiRaQRJBfF6qX+Rs3/uh3V0iTYo4sIqB0Ykrlf3pN/wE Ms213KoLNMgOfjc2BhZH/HFGfgNN6ogodQB4O/hpgvvx8JIUkx0OxFNCDz99h3xm 9kAmYxLfvSvHyqEKb1cTyaWhHqRJYOKTgw5A7+8O61iYC1Y32MCzgwvlkbM2GK0I 1WxmTJ15XYYpo/zpF28ww8AwviASytgS -----END CERTIFICATE-----Generated at Thu Sep 18 19:04:26 2025 by rpki-client