$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft File: 8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json) Hash identifier: gxq5fnSSW7Ne9dgO1nh3QiJkovwn/JbzsFSYbnjiHlQ= Subject key identifier: 0F:0C:C9:D5:B5:A6:BF:44:2C:D5:45:A6:84:7A:F1:F5:2C:E9:39:7A Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Certificate serial: 9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft Manifest number: 9B Signing time: Sat 19 Jul 2025 06:34:17 +0000 Manifest this update: Sat 19 Jul 2025 06:34:17 +0000 Manifest next update: Sat 26 Jul 2025 06:34:17 +0000 Files and hashes: 1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: vWWdPpDAEYle/jLOVlmEP1hEEvqjoM3RI4SaxO/vKIU=) 2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: XBKKNWAXn91g8U8p9IncnaKYMksmwYcj3BAK92xQbrY=) 3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: WqNZ01BJf912ER9E1SW1cMixBzAePTfawzNryqp3V6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:34:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 158 (0x9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Validity Not Before: Jul 19 06:34:17 2025 GMT Not After : Jul 26 06:34:17 2025 GMT Subject: CN=687b3c69-0853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:51:f5:03:d4:17:88:b0:79:bc:0f:1c:1b:94: 5f:15:27:4e:3e:11:3f:7d:a1:7a:5b:55:43:77:15: 76:64:12:cd:91:91:c8:02:f7:7d:63:d4:f8:07:e6: 87:e0:e5:87:84:c8:bd:68:d9:a4:8d:66:4d:f1:5b: f1:63:f1:c0:97:a8:20:6e:fe:9d:1c:d7:ce:52:57: 8f:2c:89:c9:c2:89:cb:6f:57:50:f5:e1:15:2f:6b: 9e:d2:94:df:87:b1:e8:16:fc:7b:38:9a:07:67:7a: e6:27:d7:3e:fb:dd:02:b5:4f:2d:19:ab:e7:32:66: bd:ac:d7:06:fd:21:59:a4:48:ff:db:59:77:09:cd: 34:ba:5e:fe:7f:a3:6e:13:d9:10:51:7f:10:71:8e: 02:12:e3:5a:a2:08:68:a4:41:da:43:e2:e6:b1:ff: bb:aa:14:bd:c9:4d:ae:b1:d3:6c:0e:85:3b:dc:a7: 1b:40:47:fc:43:10:a5:58:92:ab:35:46:a3:cc:cf: 91:bc:1d:c1:c7:29:d4:26:2e:be:97:54:bd:71:4a: 5e:fb:f8:10:f1:4f:68:d2:c0:1c:43:92:ed:39:fc: ec:38:d5:b1:52:9e:cf:7e:77:8a:46:86:58:bd:32: 74:92:60:f2:58:a2:ac:fe:9c:1e:4b:73:7a:ff:3c: d0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0C:C9:D5:B5:A6:BF:44:2C:D5:45:A6:84:7A:F1:F5:2C:E9:39:7A X509v3 Authority Key Identifier: keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:18:57:34:91:0b:64:33:af:bf:02:5c:c4:9b:0c:61:db:53: 14:2b:03:18:eb:88:d9:b2:0f:c6:67:68:44:95:23:96:33:60: a8:c4:d7:a6:a4:38:04:e7:0c:75:f3:e3:c5:c4:9d:96:75:05: e7:dc:c7:f2:b0:ba:20:20:0d:ce:d4:84:0a:a3:bc:0a:24:27: 0d:99:bb:f1:a9:37:70:e8:58:fa:63:0a:1c:a2:9d:3a:86:60: a4:96:75:b4:83:78:11:47:06:4b:e6:49:43:50:fb:39:64:08: 18:a1:de:8f:4b:c4:1c:4a:05:9a:7b:40:be:de:ea:8b:bd:e1: 69:5b:08:b6:b3:87:32:06:49:c5:f3:21:e6:94:38:27:c9:a6: 98:39:b1:87:53:21:bf:67:45:c3:06:09:d4:ba:43:2d:85:5b: 94:5f:53:c9:a3:7e:7f:eb:46:45:3a:97:a9:42:b6:38:78:20: 45:96:1d:c9:b4:3a:62:03:84:0f:e5:31:41:79:81:53:01:04: a4:35:7b:be:a3:82:6e:84:3b:39:42:cf:6c:be:29:27:1d:87: 62:a7:e6:11:a2:d6:f9:22:c7:05:a8:5d:f7:3b:85:8c:a4:77: 9e:cc:72:b5:46:82:f2:ab:ca:89:9a:d5:af:05:68:ce:6d:dc: ca:f5:c2:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKEYyNDdBRUJEMDc1RkM4Q0JGM0Q5QjgwNTU2OUVBQkJF RTc5NzVCMEIwHhcNMjUwNzE5MDYzNDE3WhcNMjUwNzI2MDYzNDE3WjAYMRYwFAYD VQQDEw02ODdiM2M2OS0wODUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11H1A9QXiLB5vA8cG5RfFSdOPhE/faF6W1VDdxV2ZBLNkZHIAvd9Y9T4B+aH 4OWHhMi9aNmkjWZN8VvxY/HAl6ggbv6dHNfOUlePLInJwonLb1dQ9eEVL2ue0pTf h7HoFvx7OJoHZ3rmJ9c++90CtU8tGavnMma9rNcG/SFZpEj/21l3Cc00ul7+f6Nu E9kQUX8QcY4CEuNaoghopEHaQ+Lmsf+7qhS9yU2usdNsDoU73KcbQEf8QxClWJKr NUajzM+RvB3BxynUJi6+l1S9cUpe+/gQ8U9o0sAcQ5LtOfzsONWxUp7PfneKRoZY vTJ0kmDyWKKs/pweS3N6/zzQBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8MydW1 pr9ELNVFpoR68fUs6Tl6MB8GA1UdIwQYMBaAFPJHrr0HX8jL89m4BVaeq77nl1sL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ENkYxMDUyMjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlNdnoyYmdGVnA2cnZ1ZVhX d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUE1OC9ENkYxMDUyMjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlN dnoyYmdGVnA2cnZ1ZVhXd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3GFc0kQtkM6+/AlzEmwxh21MUKwMY64jZsg/GZ2hElSOWM2CoxNem pDgE5wx18+PFxJ2WdQXn3MfysLogIA3O1IQKo7wKJCcNmbvxqTdw6Fj6Ywocop06 hmCklnW0g3gRRwZL5klDUPs5ZAgYod6PS8QcSgWae0C+3uqLveFpWwi2s4cyBknF 8yHmlDgnyaaYObGHUyG/Z0XDBgnUukMthVuUX1PJo35/60ZFOpepQrY4eCBFlh3J tDpiA4QP5TFBeYFTAQSkNXu+o4JuhDs5Qs9sviknHYdip+YRotb5IscFqF33O4WM pHeezHK1RoLyq8qJmtWvBWjObdzK9cJZ -----END CERTIFICATE-----Generated at Sun Jul 20 21:55:12 2025 by rpki-client