$ rpki-client -vvf rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft File: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft (raw, json) Hash identifier: UIaYSuCImQyFtQiXg5Zighbys7mD1ZdmrGNCkNo4BHU= Subject key identifier: 29:F9:9E:2B:62:E9:27:7F:2E:F2:82:55:91:DC:A0:D7:D5:98:B3:8E Authority key identifier: F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C Certificate issuer: /CN=A914E1F1/serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C Certificate serial: 02C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft Manifest number: 02BD Signing time: Tue 09 Sep 2025 01:35:08 +0000 Manifest this update: Tue 09 Sep 2025 01:35:08 +0000 Manifest next update: Tue 16 Sep 2025 01:35:08 +0000 Files and hashes: 1: 8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl (hash: tmJlt8UJLb9vuChFHVVXMRBtgOu5KsvsBlAfi2bp1rg=) 2: 1E00C58C145C11F094FADD38C4F9AE02.roa (hash: XjpAhwEE1pSxcomjAf7JGmGOWyetZlZpCZkZjy+8eHs=) 3: 33074190145C11F0B91D7C47C4F9AE02.roa (hash: W+0s4kjB+OuXJgXiiXNsuYivZOGCT1if/fS87MXGYI0=) 4: 4192339AF6A311EFBACC274CC4F9AE02.roa (hash: iecsMWv0SpxgWtsHLyW8Kxy2wH4QvRHyfn9HSIK1Az4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 01:35:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 713 (0x2c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914E1F1, serialNumber=F3F273F3EFCE551EE33C844D440AA30EDA087E2C Validity Not Before: Sep 9 01:35:08 2025 GMT Not After : Sep 16 01:35:08 2025 GMT Subject: CN=68bf844c-8943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0c:72:b6:9f:63:d6:ad:bd:1a:60:a0:61:f9: d2:97:14:12:f1:ce:53:b4:98:a3:62:ab:e0:ed:52: 04:16:16:be:23:ed:a7:b0:58:b3:f8:da:10:96:fe: 55:5e:a4:8c:f6:ef:24:eb:bd:91:50:8b:ec:75:fa: e5:6f:af:bb:bd:42:24:90:55:c6:24:4b:d2:8c:6f: a9:a7:02:2b:5c:63:e2:5d:1f:2f:a9:1d:47:e5:ab: 16:dd:f6:0d:bc:cc:8b:79:d8:fd:10:b2:e4:b0:67: f7:83:3a:9a:82:86:31:36:10:64:80:9a:09:62:a7: 7a:f7:66:15:c6:ac:68:20:57:af:86:22:dd:16:8a: 41:6d:6c:04:92:0c:b6:e7:ff:42:c1:66:11:ea:37: 96:02:8f:72:e8:bc:a7:ba:64:8f:02:e0:a9:f5:65: 3d:e0:eb:2c:ca:c3:96:8c:c3:aa:2b:dd:9e:92:6d: 36:1f:55:9a:b0:6c:3c:c6:3c:a3:a4:bb:ae:9f:f9: a7:67:e7:7d:fe:88:da:98:df:7d:17:7a:17:83:4d: 28:c6:45:4e:c5:4d:06:15:f9:70:3c:0a:7d:a9:e5: 15:3d:4f:a3:e4:1b:2a:39:b8:ac:6b:c2:41:63:bc: 3f:89:13:22:1e:00:0c:9b:37:51:11:26:7c:ee:e1: 40:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F9:9E:2B:62:E9:27:7F:2E:F2:82:55:91:DC:A0:D7:D5:98:B3:8E X509v3 Authority Key Identifier: keyid:F3:F2:73:F3:EF:CE:55:1E:E3:3C:84:4D:44:0A:A3:0E:DA:08:7E:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E1F1/4FEBF24A09DA11EDA03C9817C4F9AE02/8_Jz8-_OVR7jPIRNRAqjDtoIfiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:fb:c9:55:87:90:e3:fc:50:a6:14:80:13:01:fa:af:c9:22: 1f:03:60:06:94:9a:8f:6e:d8:93:81:57:86:af:1c:ed:94:63: 64:d0:72:07:cd:9f:1a:c5:86:00:b1:97:46:f6:64:11:01:fa: 2f:dc:3b:f3:57:6f:a1:a4:81:01:00:e0:84:6b:5e:e7:7b:42: 55:36:f6:83:94:d1:5c:a3:1e:a3:92:48:58:66:25:f4:01:06: 99:9b:94:36:3e:2c:51:5e:20:aa:15:84:4e:10:f5:e3:02:06: 84:cf:5f:4f:be:4f:61:a1:e6:ce:3a:83:a4:63:05:cb:d4:29: 78:f5:f5:64:b4:07:14:7b:a6:80:5c:36:4e:82:96:76:af:70: c7:c4:fb:8b:a3:2a:8b:0e:5b:ce:13:c6:f4:36:03:c6:2b:f2: aa:4e:2f:44:a2:46:26:6a:fa:e5:d0:23:f0:08:a1:4b:3a:86: 1a:4a:78:1e:c1:f4:a1:2e:ef:60:16:a8:0c:56:ce:2d:f9:07: 44:35:d3:b5:94:e1:48:c3:48:d5:1e:44:e2:f3:34:2e:b4:41: a9:80:b7:ee:94:34:a2:f5:c8:6a:0a:70:14:f3:9b:06:2a:d0: ad:ca:bf:f3:a9:b2:49:ff:e7:43:fb:0f:7f:3e:21:01:31:a4: d3:74:e8:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEUxRjExMTAvBgNVBAUTKEYzRjI3M0YzRUZDRTU1MUVFMzNDODQ0RDQ0MEFBMzBF REEwODdFMkMwHhcNMjUwOTA5MDEzNTA4WhcNMjUwOTE2MDEzNTA4WjAYMRYwFAYD VQQDEw02OGJmODQ0Yy04OTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApAxytp9j1q29GmCgYfnSlxQS8c5TtJijYqvg7VIEFha+I+2nsFiz+NoQlv5V XqSM9u8k672RUIvsdfrlb6+7vUIkkFXGJEvSjG+ppwIrXGPiXR8vqR1H5asW3fYN vMyLedj9ELLksGf3gzqagoYxNhBkgJoJYqd692YVxqxoIFevhiLdFopBbWwEkgy2 5/9CwWYR6jeWAo9y6LynumSPAuCp9WU94OssysOWjMOqK92ekm02H1WasGw8xjyj pLuun/mnZ+d9/ojamN99F3oXg00oxkVOxU0GFflwPAp9qeUVPU+j5BsqObisa8JB Y7w/iRMiHgAMmzdRESZ87uFAeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCn5niti 6Sd/LvKCVZHcoNfVmLOOMB8GA1UdIwQYMBaAFPPyc/PvzlUe4zyETUQKow7aCH4s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTFGMS80RkVCRjI0QTA5 REExMUVEQTAzQzk4MTdDNEY5QUUwMi84X0p6OC1fT1ZSN2pQSVJOUkFxakR0b0lm aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfSno4LV9PVlI3alBJUk5SQXFqRHRvSWZpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RTFGMS80RkVCRjI0QTA5REExMUVEQTAzQzk4MTdDNEY5QUUwMi84X0p6OC1fT1ZS N2pQSVJOUkFxakR0b0lmaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ+8lVh5Dj/FCmFIATAfqvySIfA2AGlJqPbtiTgVeGrxztlGNk0HIH zZ8axYYAsZdG9mQRAfov3DvzV2+hpIEBAOCEa17ne0JVNvaDlNFcox6jkkhYZiX0 AQaZm5Q2PixRXiCqFYROEPXjAgaEz19Pvk9hoebOOoOkYwXL1Cl49fVktAcUe6aA XDZOgpZ2r3DHxPuLoyqLDlvOE8b0NgPGK/KqTi9EokYmavrl0CPwCKFLOoYaSnge wfShLu9gFqgMVs4t+QdENdO1lOFIw0jVHkTi8zQutEGpgLfulDSi9chqCnAU85sG KtCtyr/zqbJJ/+dD+w9/PiEBMaTTdOhN -----END CERTIFICATE-----Generated at Tue Sep 9 05:59:33 2025 by rpki-client