$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json) Hash identifier: rx0H5zPp4ODXgv5dU66yJg+837jd6W2sYZLsQn237/k= Subject key identifier: 93:65:11:9E:9B:64:D2:4C:C1:D7:37:49:6A:B0:CC:E9:61:82:E1:57 Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Certificate serial: 04CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft Manifest number: 04B4 Signing time: Fri 19 Sep 2025 00:23:07 +0000 Manifest this update: Fri 19 Sep 2025 00:23:07 +0000 Manifest next update: Fri 26 Sep 2025 00:23:07 +0000 Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: 89CLfqHuuyJYInMvmGHFzBYnVgnluIyjGPmIfuur4jQ=) 2: 26341238FB5011EF989C8143C4F9AE02.roa (hash: 6Gx+BiutQSrEbY8mFBzgAsNKgb1qIvA80j3THb6HaOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1231 (0x4cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Validity Not Before: Sep 19 00:23:07 2025 GMT Not After : Sep 26 00:23:07 2025 GMT Subject: CN=68cca26b-5827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:90:3d:73:35:82:7b:49:3d:bc:0b:79:38:7d: dc:c5:3a:8a:96:71:f8:dd:a1:c8:fb:88:37:51:c1: ad:d8:db:38:56:96:c7:2c:7c:7d:16:99:b7:15:ae: d7:2e:e6:ac:cd:26:bc:96:30:0c:9e:29:f0:62:14: 5b:00:aa:d4:6d:95:44:38:6a:06:ab:8f:5c:3b:e4: 13:6e:3d:3d:94:56:00:e3:60:6b:8d:70:a2:cd:fb: b4:00:b8:bd:17:32:0a:1b:a5:f1:3f:7a:dd:98:f7: d3:5b:cf:7c:81:63:94:b9:5c:bd:7b:5e:97:83:b3: 95:ae:f9:d2:32:29:30:10:f6:97:47:10:98:3a:c3: 3f:f7:57:cd:2f:06:65:34:77:70:61:e9:f2:ee:62: fa:61:47:11:f6:a1:02:f3:c9:3e:10:86:cf:4c:95: 9e:9c:b5:ab:8b:c2:a0:96:b8:3f:40:11:9a:c9:e4: d2:79:f8:da:91:3e:0e:f7:5e:0e:f1:08:70:50:74: 04:ef:7d:80:cb:8f:b3:39:4e:56:22:ac:f9:53:ad: 0a:5e:66:9a:8c:bb:92:42:5b:13:39:b2:f3:da:04: 20:8f:eb:d0:f6:2d:cc:bf:f1:48:4b:81:ad:f8:23: b6:59:e1:9c:e8:9c:a8:68:35:ac:bd:76:82:6e:32: 35:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:65:11:9E:9B:64:D2:4C:C1:D7:37:49:6A:B0:CC:E9:61:82:E1:57 X509v3 Authority Key Identifier: keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:04:a7:60:0c:f9:9c:de:8a:db:2b:bf:1d:d6:61:e7:87:44: e0:c6:77:fe:b5:c4:4b:12:d4:e9:b8:36:5c:d8:01:0e:27:38: 9e:d2:4d:5f:2e:04:64:5f:3e:66:37:02:7a:1a:9f:6c:2e:7e: 85:48:fd:80:38:36:9e:7e:bb:60:67:4a:f5:c2:c0:fd:f0:c5: f9:4f:62:17:d6:57:0c:74:62:18:f3:73:85:03:b3:04:b3:a4: cc:aa:1a:8d:a3:09:75:68:cf:81:fd:9c:98:8b:58:55:f7:92: 67:d7:a6:f9:5d:d8:3e:5f:8b:fb:e4:cd:90:aa:09:29:c5:71: 15:a2:df:1a:5d:66:f0:38:06:d3:1b:0f:a4:f5:5e:8b:7f:82: fa:86:1c:e1:5b:4c:e0:56:a6:c6:1a:c7:10:b9:ef:59:86:95: 8f:51:6b:38:31:6f:03:22:25:6b:1d:7e:0c:8a:74:9e:e2:4e: db:13:c0:91:8b:ad:7d:bc:6c:33:0d:96:84:57:ec:f9:94:fa: d4:42:31:58:0d:75:84:1e:b4:e3:61:78:50:82:7e:23:ba:5e: 84:1b:a6:80:0f:7b:2b:d7:63:a9:eb:38:53:64:32:81:3d:b3: c6:30:12:45:a2:12:6a:1d:a4:1c:cb:1c:79:03:90:75:52:69: d0:a5:e6:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFNDUxMTAvBgNVBAUTKEI3QzJCRUNDOTdCNDIzNzlDNDRBRDFBRUI1RTA3M0Uy QTNEQTUxMUUwHhcNMjUwOTE5MDAyMzA3WhcNMjUwOTI2MDAyMzA3WjAYMRYwFAYD VQQDEw02OGNjYTI2Yi01ODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pA9czWCe0k9vAt5OH3cxTqKlnH43aHI+4g3UcGt2Ns4VpbHLHx9Fpm3Fa7X LuaszSa8ljAMninwYhRbAKrUbZVEOGoGq49cO+QTbj09lFYA42BrjXCizfu0ALi9 FzIKG6XxP3rdmPfTW898gWOUuVy9e16Xg7OVrvnSMikwEPaXRxCYOsM/91fNLwZl NHdwYeny7mL6YUcR9qEC88k+EIbPTJWenLWri8Kglrg/QBGayeTSefjakT4O914O 8QhwUHQE732Ay4+zOU5WIqz5U60KXmaajLuSQlsTObLz2gQgj+vQ9i3Mv/FIS4Gt +CO2WeGc6JyoaDWsvXaCbjI1nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJNlEZ6b ZNJMwdc3SWqwzOlhguFXMB8GA1UdIwQYMBaAFLfCvsyXtCN5xErRrrXgc+Kj2lEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U0NS81RjZBQjEwQzUy OTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkzbkVTdEd1dGVCejRxUGFV UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4Sy16SmUwSTNuRVN0R3V0ZUJ6NHFQYVVSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U0NS81RjZBQjEwQzUyOTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkz bkVTdEd1dGVCejRxUGFVUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGBKdgDPmc3orbK78d1mHnh0Tgxnf+tcRLEtTpuDZc2AEOJzie0k1f LgRkXz5mNwJ6Gp9sLn6FSP2AODaefrtgZ0r1wsD98MX5T2IX1lcMdGIY83OFA7ME s6TMqhqNowl1aM+B/ZyYi1hV95Jn16b5Xdg+X4v75M2QqgkpxXEVot8aXWbwOAbT Gw+k9V6Lf4L6hhzhW0zgVqbGGscQue9ZhpWPUWs4MW8DIiVrHX4MinSe4k7bE8CR i619vGwzDZaEV+z5lPrUQjFYDXWEHrTjYXhQgn4jul6EG6aAD3sr12Op6zhTZDKB PbPGMBJFohJqHaQcyxx5A5B1UmnQpebH -----END CERTIFICATE-----Generated at Fri Sep 19 02:40:31 2025 by rpki-client