$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft File: 8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json) Hash identifier: TGGyvIIyyVX+SwcAkvoaeVNzyj73VR6hmfOYIobPVXI= Subject key identifier: 04:94:10:4E:16:0D:CD:B7:DB:68:35:93:B7:AB:F7:4B:79:4B:28:B3 Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Certificate serial: 2652 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft Manifest number: 263A Signing time: Sun 24 Aug 2025 15:39:35 +0000 Manifest this update: Sun 24 Aug 2025 15:39:35 +0000 Manifest next update: Sun 31 Aug 2025 15:39:35 +0000 Files and hashes: 1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: 3z4oVZFFYXcsGuz9IeM03/zkLiwXKjLPSJlZ5MsdUhI=) 2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: l63wtygU10JOGHCzajVzJ9LClRNutyU2fhR2Mio026I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9810 (0x2652) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148558, serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Validity Not Before: Aug 24 15:39:35 2025 GMT Not After : Aug 31 15:39:35 2025 GMT Subject: CN=68ab3237-5828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ec:e7:d2:c1:22:97:58:8c:47:99:8d:ae:9f: 82:fe:43:07:9c:63:1a:2b:6e:e0:46:d5:35:9f:5e: 44:35:c1:f6:f3:e8:7f:16:e6:e9:d8:7b:a6:41:04: 7b:b4:5e:ee:02:17:8a:0a:0c:6f:3d:f3:02:a3:5d: e4:2b:a1:16:c0:60:7a:6b:4b:6e:81:31:a5:50:bf: a6:43:0c:a7:72:65:cf:00:43:cc:eb:e7:4b:23:f6: c3:a9:7b:41:d4:eb:51:52:a2:e7:70:45:52:76:f6: c1:24:54:47:f5:a6:12:23:ef:99:aa:fb:b0:a4:8d: 7e:da:5d:a7:60:62:80:06:cb:e0:3f:eb:c5:e4:2f: c2:ba:e1:30:bc:73:22:2b:21:0c:bc:73:05:1c:de: 7a:78:64:34:83:f6:c2:65:6a:8c:69:3f:ad:74:88: 90:13:f5:64:22:ac:6f:ff:b9:fc:84:cc:e6:3a:b5: 2e:32:92:f5:94:59:64:4e:08:0d:4e:f1:9f:e8:3a: 76:b3:5c:a0:11:10:e9:96:1c:c4:e3:16:a8:fd:8f: 74:ce:40:cd:a8:4e:76:69:ab:65:ce:b8:bf:fa:2e: 78:87:12:9b:6a:fe:15:44:3b:92:51:23:35:eb:e5: dc:50:55:cf:d8:94:60:c0:ec:76:c8:aa:c1:e6:0c: 9f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:94:10:4E:16:0D:CD:B7:DB:68:35:93:B7:AB:F7:4B:79:4B:28:B3 X509v3 Authority Key Identifier: keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:14:4f:3b:c0:4e:7d:06:04:0f:05:f3:d9:e4:15:46:69:cb: f6:be:18:61:a8:48:61:72:e4:fa:49:49:6f:30:53:8a:b7:cb: 71:28:c6:c4:33:9b:52:cd:4c:d2:61:15:72:88:29:f0:00:9e: b4:88:7e:e4:e6:44:5a:0f:63:cc:96:8a:73:b5:bf:06:48:d1: 67:14:60:9e:8a:47:7b:69:1e:01:b2:cb:57:13:3b:d2:bb:50: 60:e4:80:26:43:61:2c:d5:ca:aa:82:7c:35:8d:19:f2:4e:be: d4:5b:ef:99:0a:43:9b:5c:ee:0a:af:bf:75:48:78:6f:14:e1: 21:5a:a0:9c:71:a1:59:7f:f8:8d:36:f0:e4:be:b1:e3:68:53: bd:11:b5:c2:f2:0f:e4:36:9e:d7:99:31:21:6c:1e:fd:36:eb: 58:95:5e:43:8a:6f:2d:0b:0a:6c:17:7e:60:46:88:91:8e:89: c7:e7:23:e6:f3:2e:0a:d8:2c:31:fb:04:77:31:3e:f7:48:6a: 37:01:33:85:52:e5:1e:0f:c3:4c:d6:b1:59:a6:bd:8c:55:61: 8f:20:cf:b1:41:c6:0b:b7:27:73:26:ad:d8:85:45:4d:b9:95: f8:bd:b0:dc:78:ec:76:7f:58:d8:ce:28:20:19:79:3a:5b:0e: 40:57:08:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5 NjgzQTNBRTMwHhcNMjUwODI0MTUzOTM1WhcNMjUwODMxMTUzOTM1WjAYMRYwFAYD VQQDEw02OGFiMzIzNy01ODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5+zn0sEil1iMR5mNrp+C/kMHnGMaK27gRtU1n15ENcH28+h/Fubp2HumQQR7 tF7uAheKCgxvPfMCo13kK6EWwGB6a0tugTGlUL+mQwyncmXPAEPM6+dLI/bDqXtB 1OtRUqLncEVSdvbBJFRH9aYSI++ZqvuwpI1+2l2nYGKABsvgP+vF5C/CuuEwvHMi KyEMvHMFHN56eGQ0g/bCZWqMaT+tdIiQE/VkIqxv/7n8hMzmOrUuMpL1lFlkTggN TvGf6Dp2s1ygERDplhzE4xao/Y90zkDNqE52aatlzri/+i54hxKbav4VRDuSUSM1 6+XcUFXP2JRgwOx2yKrB5gyfpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASUEE4W Dc2322g1k7er90t5SyizMB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODU1OC8xRkEzREFCOEZBQjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFG ZUpEVWZISW9iTnFXZzZPdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLFE87wE59BgQPBfPZ5BVGacv2vhhhqEhhcuT6SUlvMFOKt8txKMbE M5tSzUzSYRVyiCnwAJ60iH7k5kRaD2PMlopztb8GSNFnFGCeikd7aR4BsstXEzvS u1Bg5IAmQ2Es1cqqgnw1jRnyTr7UW++ZCkObXO4Kr791SHhvFOEhWqCccaFZf/iN NvDkvrHjaFO9EbXC8g/kNp7XmTEhbB79NutYlV5Dim8tCwpsF35gRoiRjonH5yPm 8y4K2Cwx+wR3MT73SGo3ATOFUuUeD8NM1rFZpr2MVWGPIM+xQcYLtydzJq3YhUVN uZX4vbDceOx2f1jYziggGXk6Ww5AVwgj -----END CERTIFICATE-----Generated at Sun Aug 24 22:02:55 2025 by rpki-client