$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft File: 8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json) Hash identifier: Wgyf8s3AJa/b86YocUMsQpXXGJC2jCl9DPitwf46vNI= Subject key identifier: 0D:BF:82:90:48:AD:5B:89:51:18:DA:82:13:D0:49:F0:0E:FB:87:C3 Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft Manifest number: B3 Signing time: Wed 03 Sep 2025 06:40:50 +0000 Manifest this update: Wed 03 Sep 2025 06:40:49 +0000 Manifest next update: Wed 10 Sep 2025 06:40:49 +0000 Files and hashes: 1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: mqbfOTjGBXjvbgB7fSyh2SMOSRB9GOqhOGZ9nZN8hhw=) 2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: XBKKNWAXn91g8U8p9IncnaKYMksmwYcj3BAK92xQbrY=) 3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: WqNZ01BJf912ER9E1SW1cMixBzAePTfawzNryqp3V6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 06:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Validity Not Before: Sep 3 06:40:49 2025 GMT Not After : Sep 10 06:40:49 2025 GMT Subject: CN=68b7e2f2-900c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cb:db:31:12:47:a6:56:e3:e4:9f:bb:68:ad: 05:bd:d3:96:b6:cb:96:ac:3f:a0:9c:82:d2:3d:0d: 6f:b6:06:cb:de:37:aa:e6:41:2e:77:c0:86:82:91: a2:18:7f:ca:30:95:c2:c5:7b:bf:c6:5b:fe:84:c6: 21:e8:6f:f3:e8:ae:c4:3e:ef:4c:61:0a:9f:84:fc: 52:fd:cd:dc:a9:c7:56:51:74:a2:5c:84:ec:bf:59: 66:22:65:ef:8f:77:ba:61:cd:42:3d:82:3d:34:06: 7f:bb:10:6a:c5:ce:30:b7:12:ce:59:a5:b1:f6:10: f0:9b:d5:08:ba:7f:9d:09:c6:32:97:44:f9:0a:fd: 32:ea:0c:40:5f:8c:70:ae:68:ee:96:7e:30:35:4e: e0:64:fa:42:08:62:c9:40:a0:17:38:64:d2:8f:3b: ed:34:bd:30:db:e7:d7:7b:ec:98:cc:81:25:74:1e: 11:26:3e:2a:fe:23:9a:34:c8:4a:9e:ef:d1:47:b4: f4:d5:af:58:70:c3:31:a3:b2:c7:cc:4c:8d:da:60: da:ba:32:0f:fa:7d:cd:30:27:06:76:bd:57:5a:a4: c9:95:57:4e:c8:02:0b:e3:b1:7b:22:fb:48:0f:2d: 9a:30:9f:23:31:e2:c6:9a:d6:4e:81:2f:67:3a:f4: b1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BF:82:90:48:AD:5B:89:51:18:DA:82:13:D0:49:F0:0E:FB:87:C3 X509v3 Authority Key Identifier: keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:7d:50:76:f5:5a:66:b2:3c:0a:c9:ba:a3:1e:6e:e4:ab:06: ea:3c:ea:72:57:fc:9e:bc:e4:05:78:95:68:d7:44:eb:40:db: 66:2e:a0:f3:31:8e:bb:3d:78:15:55:a9:9b:c1:4e:7d:c2:14: 59:1a:cd:1b:9a:9e:db:df:d1:79:49:1b:0f:5b:36:63:6f:ed: 92:29:65:37:45:0c:1a:69:39:c4:03:a5:43:15:31:02:de:8f: 7d:4f:a7:87:03:48:c4:95:9a:2c:ed:a6:c7:9c:c1:11:d6:3e: 4d:0d:eb:59:66:de:d7:01:b6:93:ca:92:ef:23:1f:d8:4c:20: f4:de:df:a8:d3:17:12:f0:d0:01:64:90:58:ce:d9:6d:fe:2c: 74:88:01:26:ef:33:3c:9a:f5:c3:88:07:25:85:fd:07:26:5a: 0c:be:0d:be:ee:94:f7:45:ad:ec:74:85:b3:87:41:19:48:2e: 92:da:f9:19:ae:6b:4c:2a:23:44:88:68:78:94:23:12:77:b4: d6:d4:85:f9:2a:2b:a8:23:db:4f:33:2b:a9:a1:fe:db:08:bd: f2:5d:a3:f3:60:29:7e:1c:3e:4c:55:ec:14:0b:f0:24:d1:51: d2:b0:fb:a8:71:a0:a4:b7:d8:08:aa:4b:82:e8:bf:30:0e:e4: 6d:26:cd:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKEYyNDdBRUJEMDc1RkM4Q0JGM0Q5QjgwNTU2OUVBQkJF RTc5NzVCMEIwHhcNMjUwOTAzMDY0MDQ5WhcNMjUwOTEwMDY0MDQ5WjAYMRYwFAYD VQQDEw02OGI3ZTJmMi05MDBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3MvbMRJHplbj5J+7aK0FvdOWtsuWrD+gnILSPQ1vtgbL3jeq5kEud8CGgpGi GH/KMJXCxXu/xlv+hMYh6G/z6K7EPu9MYQqfhPxS/c3cqcdWUXSiXITsv1lmImXv j3e6Yc1CPYI9NAZ/uxBqxc4wtxLOWaWx9hDwm9UIun+dCcYyl0T5Cv0y6gxAX4xw rmjuln4wNU7gZPpCCGLJQKAXOGTSjzvtNL0w2+fXe+yYzIEldB4RJj4q/iOaNMhK nu/RR7T01a9YcMMxo7LHzEyN2mDaujIP+n3NMCcGdr1XWqTJlVdOyAIL47F7IvtI Dy2aMJ8jMeLGmtZOgS9nOvSxwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA2/gpBI rVuJURjaghPQSfAO+4fDMB8GA1UdIwQYMBaAFPJHrr0HX8jL89m4BVaeq77nl1sL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ENkYxMDUyMjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlNdnoyYmdGVnA2cnZ1ZVhX d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUE1OC9ENkYxMDUyMjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlN dnoyYmdGVnA2cnZ1ZVhXd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6fVB29VpmsjwKybqjHm7kqwbqPOpyV/yevOQFeJVo10TrQNtmLqDz MY67PXgVVambwU59whRZGs0bmp7b39F5SRsPWzZjb+2SKWU3RQwaaTnEA6VDFTEC 3o99T6eHA0jElZos7abHnMER1j5NDetZZt7XAbaTypLvIx/YTCD03t+o0xcS8NAB ZJBYztlt/ix0iAEm7zM8mvXDiAclhf0HJloMvg2+7pT3Ra3sdIWzh0EZSC6S2vkZ rmtMKiNEiGh4lCMSd7TW1IX5KiuoI9tPMyupof7bCL3yXaPzYCl+HD5MVewUC/Ak 0VHSsPuocaCkt9gIqkuC6L8wDuRtJs1P -----END CERTIFICATE-----Generated at Thu Sep 4 15:54:27 2025 by rpki-client