$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json) Hash identifier: 9v8faesR5iS12diNWvlUtGaQZASAnEwl22u88iIZsqo= Subject key identifier: 27:D3:A0:62:30:B9:28:56:B3:F6:47:FD:B7:76:B0:A0:16:37:50:29 Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Certificate serial: 0CE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft Manifest number: 0CDB Signing time: Mon 08 Sep 2025 18:07:39 +0000 Manifest this update: Mon 08 Sep 2025 18:07:39 +0000 Manifest next update: Mon 15 Sep 2025 18:07:39 +0000 Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: KcOb98dYbwyiX+zR77dZUzF7at9WgSlcXHf2z2MLNE0=) 2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: ag4btEEr8nwGBlqow86nAvtb1JX6B7t93yhnFSFUrc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:07:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3298 (0xce2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Validity Not Before: Sep 8 18:07:39 2025 GMT Not After : Sep 15 18:07:39 2025 GMT Subject: CN=68bf1b6b-abad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ff:d1:ef:3d:f0:c7:cb:d0:cd:b3:31:dc:26: 36:86:bb:76:3e:5c:da:34:8e:50:63:bc:88:41:a4: b9:d0:cd:7a:57:5c:32:1e:c7:ad:c9:4d:8c:0d:54: 77:38:f2:55:5a:74:ab:f2:89:0f:de:35:49:f1:6a: dc:42:19:5c:c0:c9:58:b7:90:56:a1:1a:7e:af:33: 98:30:bd:30:c3:24:0a:67:2b:8a:b8:52:d9:8b:75: 19:60:7e:55:9e:2d:ec:62:7c:e2:57:b6:b8:6c:36: d7:3a:38:08:b3:72:3f:6f:6a:b9:b4:ac:17:fe:25: 21:08:37:a3:4f:4d:5d:9c:85:bc:06:4b:13:8c:2f: 7f:22:66:76:39:50:3e:fc:5c:e8:17:43:4d:1e:98: 1a:0d:c3:7f:d2:44:4e:93:6d:5c:db:38:9c:77:72: 70:9d:f0:ba:2d:97:02:91:ed:9a:9a:d6:83:7a:41: 5a:19:7e:c6:aa:0d:bb:0d:ba:ba:1c:aa:bd:21:8c: dc:3e:75:d2:90:9d:f0:94:a4:df:f6:31:e3:ea:49: 05:ec:15:c6:79:0e:b8:75:cd:c9:9c:ba:7e:7d:f2: e1:dc:73:95:c7:36:5f:a2:e9:83:79:4a:b7:8d:62: a2:f7:fd:aa:14:91:7a:8c:ed:6c:38:6c:2b:7c:b2: 55:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D3:A0:62:30:B9:28:56:B3:F6:47:FD:B7:76:B0:A0:16:37:50:29 X509v3 Authority Key Identifier: keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:72:32:ff:52:b4:71:e5:06:a9:ef:45:16:78:18:e6:8a:8f: 10:ae:be:15:b1:ec:e3:19:2c:9a:83:4d:33:cb:80:12:63:79: cf:30:f9:3e:ba:5e:a6:0f:1e:d0:7f:98:f8:36:d9:e8:de:b6: e2:dd:bb:2c:a3:00:a1:99:78:4f:c6:a4:25:12:95:3f:f1:4d: b1:31:84:bc:5f:c4:aa:ac:f1:47:c0:7f:c5:c8:fd:61:b2:3e: 62:27:3e:c4:f7:16:8b:ce:95:01:29:fb:51:e3:e0:07:22:44: 8e:a7:14:8c:a7:75:08:4c:cc:96:fe:2d:6e:e1:a0:78:59:43: f8:08:d5:c1:87:ef:38:21:57:e8:d7:c7:35:a2:f3:d9:ba:39: 8f:22:62:75:12:b5:7b:e8:e0:d5:fd:d3:47:fa:da:f5:98:cb: e0:f1:19:21:83:01:ae:0e:b0:92:82:45:99:91:d4:5b:e9:37: 81:8d:86:4a:d8:70:b5:4a:04:86:ee:2c:4e:b7:96:bc:f4:ea: 77:de:b3:5c:93:83:bc:6c:04:4b:96:4f:dc:a4:dd:83:56:9d: cf:b5:6c:51:c2:3d:99:55:ba:7b:36:72:f8:67:31:3d:28:b6: 02:01:05:dc:e9:9b:e4:d6:b6:8c:d9:bb:af:9a:17:d9:2e:bb: ea:bf:1b:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD Mjk1QzczNzkwHhcNMjUwOTA4MTgwNzM5WhcNMjUwOTE1MTgwNzM5WjAYMRYwFAYD VQQDEw02OGJmMWI2Yi1hYmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuP/R7z3wx8vQzbMx3CY2hrt2PlzaNI5QY7yIQaS50M16V1wyHsetyU2MDVR3 OPJVWnSr8okP3jVJ8WrcQhlcwMlYt5BWoRp+rzOYML0wwyQKZyuKuFLZi3UZYH5V ni3sYnziV7a4bDbXOjgIs3I/b2q5tKwX/iUhCDejT01dnIW8BksTjC9/ImZ2OVA+ /FzoF0NNHpgaDcN/0kROk21c2zicd3JwnfC6LZcCke2amtaDekFaGX7Gqg27Dbq6 HKq9IYzcPnXSkJ3wlKTf9jHj6kkF7BXGeQ64dc3JnLp+ffLh3HOVxzZfoumDeUq3 jWKi9/2qFJF6jO1sOGwrfLJVowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfToGIw uShWs/ZH/bd2sKAWN1ApMB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI ajJBcmN4SUFVVkhDbGNjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChcjL/UrRx5Qap70UWeBjmio8Qrr4VsezjGSyag00zy4ASY3nPMPk+ ul6mDx7Qf5j4Ntno3rbi3bssowChmXhPxqQlEpU/8U2xMYS8X8SqrPFHwH/FyP1h sj5iJz7E9xaLzpUBKftR4+AHIkSOpxSMp3UITMyW/i1u4aB4WUP4CNXBh+84IVfo 18c1ovPZujmPImJ1ErV76ODV/dNH+tr1mMvg8RkhgwGuDrCSgkWZkdRb6TeBjYZK 2HC1SgSG7ixOt5a89Op33rNck4O8bARLlk/cpN2DVp3PtWxRwj2ZVbp7NnL4ZzE9 KLYCAQXc6Zvk1raM2buvmhfZLrvqvxtP -----END CERTIFICATE-----Generated at Wed Sep 10 13:34:00 2025 by rpki-client