$ rpki-client -vvf rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft File: 8mzvyND2FJXOpWXLF0zPkuc6CJk.mft (raw, json) Hash identifier: C4eTwLQEpjzLN35Xnja10t32pnqv8T1eam0pMbHqB7E= Subject key identifier: E0:87:9E:39:AA:E4:5B:C6:57:F5:4E:AA:9F:0A:AF:75:D7:1D:9E:B7 Authority key identifier: F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99 Certificate issuer: /CN=A9184A0A/serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899 Certificate serial: F7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft Manifest number: F5 Signing time: Thu 21 Aug 2025 05:23:23 +0000 Manifest this update: Thu 21 Aug 2025 05:23:22 +0000 Manifest next update: Thu 28 Aug 2025 05:23:22 +0000 Files and hashes: 1: 8mzvyND2FJXOpWXLF0zPkuc6CJk.crl (hash: rfivMUqgQ1UaAnxm8fKpj7qVzarGGepMgPYpyPl+ywY=) 2: 81DED04C065411EFAAF0D25DC4F9AE02.roa (hash: KnA/iGGYoBgm/bcH9BItyxCBripYpEURjIllmAUmPC4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:23:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 247 (0xf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184A0A, serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899 Validity Not Before: Aug 21 05:23:22 2025 GMT Not After : Aug 28 05:23:22 2025 GMT Subject: CN=68a6ad4a-f8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:84:a7:33:00:37:3b:e8:d1:35:19:2a:3d:22: c9:5c:31:50:28:95:a5:e5:96:e8:5b:5e:aa:c3:22: f9:a9:6b:ac:1c:fb:4f:28:7d:a3:31:26:48:01:ab: 92:f3:27:0d:93:35:b2:3a:2d:3c:ff:55:55:62:dd: 24:ca:ee:7c:74:60:1c:b2:e3:7f:63:24:de:24:71: 50:59:43:64:4b:f2:16:b2:2a:67:32:d3:1c:54:62: 4e:50:18:d1:47:94:90:cb:7c:11:f1:d6:07:da:a8: b7:14:88:6d:a4:7b:f8:eb:15:51:40:ea:bc:24:15: ae:15:16:5d:c7:03:e6:c3:3c:d8:b0:a0:e6:11:e7: 03:a5:2b:74:53:77:fd:34:70:69:7d:a1:27:a2:d2: 2d:1e:9c:3e:b0:62:3f:16:e8:f5:cf:b1:75:04:ec: 21:7e:68:b0:e4:84:e5:b2:84:02:6b:b2:e6:de:a4: 98:d6:f9:3c:01:87:c4:53:fa:10:1b:dd:87:86:33: 42:fc:fe:56:4a:04:14:6c:5f:ce:02:37:da:48:3c: 07:29:b5:9e:f5:56:6d:f2:af:35:0e:0c:2f:95:86: 2e:3d:e1:ce:2b:4c:e5:d8:60:a3:ad:aa:ce:28:c1: 89:06:7f:02:e9:b8:5b:cd:a7:2d:5a:c3:95:f0:22: 6c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:87:9E:39:AA:E4:5B:C6:57:F5:4E:AA:9F:0A:AF:75:D7:1D:9E:B7 X509v3 Authority Key Identifier: keyid:F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:8b:6e:e4:78:9e:31:3d:87:98:95:22:d1:1e:e0:20:8d:a5: 12:dd:4f:a5:f3:b9:52:8f:ee:1f:a8:bf:ea:c0:ac:2a:8b:51: 3e:25:18:77:0b:12:f5:0d:7f:bf:fd:ec:cd:aa:00:c2:2f:22: fe:72:a8:92:3e:8b:1c:d9:42:a2:c5:2c:bf:67:81:fd:f0:e6: 1a:14:6f:c9:d2:ae:e8:58:98:60:e9:41:d9:f1:f0:66:a1:45: 99:53:e8:bc:ae:92:3f:73:69:6d:64:96:53:ac:b1:6e:ce:b4: 80:99:01:b6:f0:27:98:e0:cb:4a:39:fe:6f:01:96:aa:76:e6: 23:ee:0f:cf:e6:3d:cb:e1:35:49:96:3b:78:65:ae:cb:4c:18: 04:8c:55:01:47:2e:46:bb:84:93:af:d9:3f:8a:a9:05:fc:8e: e6:9d:bf:57:76:c1:20:d8:48:ef:98:66:af:db:25:9b:69:49: c9:cc:ea:cc:34:6d:3b:12:b6:17:48:f3:32:9e:c0:29:70:a4: 6d:ed:ae:08:ab:7a:33:31:eb:4b:38:4a:89:cf:fa:97:cc:8e: b7:0c:31:aa:60:63:f0:68:6f:67:aa:67:8d:cb:fb:11:47:f6: df:11:69:3a:a8:73:43:1e:80:a8:74:96:f3:c9:3d:ca:5f:af: 6d:3f:89:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODRBMEExMTAvBgNVBAUTKEYyNkNFRkM4RDBGNjE0OTVDRUE1NjVDQjE3NENDRjky RTczQTA4OTkwHhcNMjUwODIxMDUyMzIyWhcNMjUwODI4MDUyMzIyWjAYMRYwFAYD VQQDEw02OGE2YWQ0YS1mOGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYSnMwA3O+jRNRkqPSLJXDFQKJWl5ZboW16qwyL5qWusHPtPKH2jMSZIAauS 8ycNkzWyOi08/1VVYt0kyu58dGAcsuN/YyTeJHFQWUNkS/IWsipnMtMcVGJOUBjR R5SQy3wR8dYH2qi3FIhtpHv46xVRQOq8JBWuFRZdxwPmwzzYsKDmEecDpSt0U3f9 NHBpfaEnotItHpw+sGI/Fuj1z7F1BOwhfmiw5ITlsoQCa7Lm3qSY1vk8AYfEU/oQ G92HhjNC/P5WSgQUbF/OAjfaSDwHKbWe9VZt8q81DgwvlYYuPeHOK0zl2GCjrarO KMGJBn8C6bhbzactWsOV8CJsvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOCHnjmq 5FvGV/VOqp8Kr3XXHZ63MB8GA1UdIwQYMBaAFPJs78jQ9hSVzqVlyxdMz5LnOgiZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEEwQS9ENDkxRDg4MDA2 NTMxMUVGQjk2NzAzNTFDNEY5QUUwMi84bXp2eU5EMkZKWE9wV1hMRjB6UGt1YzZD SmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhtenZ5TkQyRkpYT3BXWExGMHpQa3VjNkNKay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NEEwQS9ENDkxRDg4MDA2NTMxMUVGQjk2NzAzNTFDNEY5QUUwMi84bXp2eU5EMkZK WE9wV1hMRjB6UGt1YzZDSmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1i27keJ4xPYeYlSLRHuAgjaUS3U+l87lSj+4fqL/qwKwqi1E+JRh3 CxL1DX+//ezNqgDCLyL+cqiSPosc2UKixSy/Z4H98OYaFG/J0q7oWJhg6UHZ8fBm oUWZU+i8rpI/c2ltZJZTrLFuzrSAmQG28CeY4MtKOf5vAZaqduYj7g/P5j3L4TVJ ljt4Za7LTBgEjFUBRy5Gu4STr9k/iqkF/I7mnb9XdsEg2EjvmGav2yWbaUnJzOrM NG07ErYXSPMynsApcKRt7a4Iq3ozMetLOEqJz/qXzI63DDGqYGPwaG9nqmeNy/sR R/bfEWk6qHNDHoCodJbzyT3KX69tP4kK -----END CERTIFICATE-----Generated at Fri Aug 22 16:20:36 2025 by rpki-client