$ rpki-client -vvf rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft File: sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft (raw, json) Hash identifier: B/K//JsIA7u0ATcEg4f4hIJBRqQzgQkBSIz0/sgqnPw= Subject key identifier: 0E:87:EA:CF:39:2A:A3:17:FE:35:CD:6B:DD:20:33:5F:43:53:32:29 Authority key identifier: B1:52:4F:BE:46:5F:E4:FB:99:FE:61:1D:FC:04:0F:51:0C:11:68:FE Certificate issuer: /CN=A9176E5A/serialNumber=B1524FBE465FE4FB99FE611DFC040F510C1168FE Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft Manifest number: 07 Signing time: Fri 05 Sep 2025 08:38:43 +0000 Manifest this update: Fri 05 Sep 2025 08:38:42 +0000 Manifest next update: Fri 12 Sep 2025 08:38:42 +0000 Files and hashes: 1: sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl (hash: ZnA0TUQlgBmmCzd8qWnEcAPHQtUvQl2VSxk6PlSi+PQ=) 2: D9624ED082FD11F088ACD36DC4F9AE02.roa (hash: HOuEpvKZ0GdEdY0npcf+ynIRcDCsB00lu6CmVmYa5Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176E5A, serialNumber=B1524FBE465FE4FB99FE611DFC040F510C1168FE Validity Not Before: Sep 5 08:38:42 2025 GMT Not After : Sep 12 08:38:42 2025 GMT Subject: CN=68baa192-ed36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:13:7a:89:33:9a:01:7c:ce:89:e9:ea:be:22: 6d:55:8a:95:0e:64:a8:89:de:aa:fa:1d:2d:f6:0f: 5a:2b:ed:d8:ee:18:f5:c6:4f:8d:70:01:5a:4a:21: aa:36:5a:5f:73:f4:de:49:8e:a7:db:33:8a:08:cf: d7:a3:fb:17:9e:df:d9:26:56:5b:ec:a3:14:b9:0f: d4:85:75:24:ca:85:66:e4:2a:f7:2f:2a:54:f8:1b: b7:af:b2:a2:06:9f:af:07:ca:b9:a1:b8:3d:da:44: 94:b7:7b:3f:bd:42:94:4e:97:30:e2:05:f3:b1:87: ec:ef:63:b1:7e:dd:03:7c:c6:f8:60:8f:bf:ba:48: 12:e2:a8:fa:aa:e3:92:28:24:96:fc:0b:5a:45:2c: 27:d0:d6:cc:53:f4:8c:1f:03:9d:33:c2:77:9c:ff: 7e:42:ec:e9:c9:95:e4:a8:53:02:d9:0c:53:54:52: 21:36:7a:a2:ab:64:ab:ec:0c:29:97:c6:2e:a1:7a: ff:04:e8:18:d1:d8:fe:1e:ab:ce:0a:54:d5:4a:98: e2:67:0a:7b:cc:fc:4a:78:5e:6b:bb:0d:7c:0c:98: 2d:57:39:d8:43:a0:32:80:04:69:81:32:36:98:02: a2:f8:99:12:b0:ce:0d:c6:64:93:85:59:48:c6:af: a2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:87:EA:CF:39:2A:A3:17:FE:35:CD:6B:DD:20:33:5F:43:53:32:29 X509v3 Authority Key Identifier: keyid:B1:52:4F:BE:46:5F:E4:FB:99:FE:61:1D:FC:04:0F:51:0C:11:68:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176E5A/8037983882FD11F0AE0F876AC4F9AE02/sVJPvkZf5PuZ_mEd_AQPUQwRaP4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:db:c1:d9:30:8c:ee:e1:cc:e8:76:a9:ac:fc:44:3b:e0:20: 75:34:cc:c1:82:5b:19:db:06:8a:a8:dc:11:db:67:e5:89:ae: f5:62:78:44:bb:ad:7a:56:74:54:86:2d:26:9b:23:89:ae:c0: 12:3f:b4:56:7d:9c:39:35:ce:41:e6:28:15:2b:5d:ee:1c:67: e3:03:e2:40:64:76:b3:ea:64:1d:3e:b3:58:f7:35:4a:8a:07: 90:c4:56:c9:da:88:37:d0:32:82:9c:d4:fb:64:e9:2b:8f:9e: e5:88:be:fc:4a:0f:e6:0a:6c:5d:04:e2:f0:8c:29:2e:c3:e1: 6c:7c:ab:88:01:d6:82:3c:80:ee:81:b7:92:53:4f:c8:dd:57: 67:4d:fb:d6:7a:2b:dc:b8:57:b3:78:36:4b:a1:c1:47:72:36: b9:49:1f:d2:17:a3:42:ec:8f:26:42:19:38:0d:32:1d:36:e4: b3:68:e4:b8:13:e6:e2:18:cb:27:b1:e1:f3:0c:9f:c5:a7:d5: 77:35:6f:b0:f5:3a:e8:a2:e3:d8:69:8c:a4:04:6b:1e:41:f2: e8:42:91:53:cb:d0:0a:38:76:0b:30:02:bc:45:5f:c0:a9:bf: ed:84:34:76:97:2d:35:5a:a7:70:5d:f2:61:01:2c:86:94:49: 2f:05:17:2d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NkU1QTExMC8GA1UEBRMoQjE1MjRGQkU0NjVGRTRGQjk5RkU2MTFERkMwNDBGNTEw QzExNjhGRTAeFw0yNTA5MDUwODM4NDJaFw0yNTA5MTIwODM4NDJaMBgxFjAUBgNV BAMTDTY4YmFhMTkyLWVkMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAE3qJM5oBfM6J6eq+Im1VipUOZKiJ3qr6HS32D1or7djuGPXGT41wAVpKIao2 Wl9z9N5JjqfbM4oIz9ej+xee39kmVlvsoxS5D9SFdSTKhWbkKvcvKlT4G7evsqIG n68HyrmhuD3aRJS3ez+9QpROlzDiBfOxh+zvY7F+3QN8xvhgj7+6SBLiqPqq45Io JJb8C1pFLCfQ1sxT9IwfA50zwnec/35C7OnJleSoUwLZDFNUUiE2eqKrZKvsDCmX xi6hev8E6BjR2P4eq84KVNVKmOJnCnvM/Ep4Xmu7DXwMmC1XOdhDoDKABGmBMjaY AqL4mRKwzg3GZJOFWUjGr6INAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDofqzzkq oxf+Nc1r3SAzX0NTMikwHwYDVR0jBBgwFoAUsVJPvkZf5PuZ/mEd/AQPUQwRaP4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2RTVBLzgwMzc5ODM4ODJG RDExRjBBRTBGODc2QUM0RjlBRTAyL3NWSlB2a1pmNVB1Wl9tRWRfQVFQVVF3UmFQ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc1ZKUHZrWmY1UHVaX21FZF9BUVBVUXdSYVA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 RTVBLzgwMzc5ODM4ODJGRDExRjBBRTBGODc2QUM0RjlBRTAyL3NWSlB2a1pmNVB1 Wl9tRWRfQVFQVVF3UmFQNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFrbwdkwjO7hzOh2qaz8RDvgIHU0zMGCWxnbBoqo3BHbZ+WJrvVieES7 rXpWdFSGLSabI4muwBI/tFZ9nDk1zkHmKBUrXe4cZ+MD4kBkdrPqZB0+s1j3NUqK B5DEVsnaiDfQMoKc1Ptk6SuPnuWIvvxKD+YKbF0E4vCMKS7D4Wx8q4gB1oI8gO6B t5JTT8jdV2dN+9Z6K9y4V7N4NkuhwUdyNrlJH9IXo0LsjyZCGTgNMh025LNo5LgT 5uIYyyex4fMMn8Wn1Xc1b7D1Ouii49hpjKQEax5B8uhCkVPL0Ao4dgswArxFX8Cp v+2ENHaXLTVap3Bd8mEBLIaUSS8FFy0= -----END CERTIFICATE-----Generated at Sat Sep 6 13:33:54 2025 by rpki-client