$ rpki-client -vvf rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft File: n82PZ2ktvYIee95qb7vWfHgHV_k.mft (raw, json) Hash identifier: hG5eQ0q4SOLyOEQDf5I8t+AElMNZuFqvT8IA3EBIlXk= Subject key identifier: A9:8F:C6:AE:03:2A:8B:E2:70:AF:33:B6:0C:4E:D4:D9:17:46:C8:6C Authority key identifier: 9F:CD:8F:67:69:2D:BD:82:1E:7B:DE:6A:6F:BB:D6:7C:78:07:57:F9 Certificate issuer: /CN=A9196780/serialNumber=9FCD8F67692DBD821E7BDE6A6FBBD67C780757F9 Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft Manifest number: 27 Signing time: Wed 03 Sep 2025 08:29:15 +0000 Manifest this update: Wed 03 Sep 2025 08:29:15 +0000 Manifest next update: Wed 10 Sep 2025 08:29:14 +0000 Files and hashes: 1: n82PZ2ktvYIee95qb7vWfHgHV_k.crl (hash: 8E6P7Pb3HvOyMPpB8HMygy1JMz+lK4JPTrpSJJDAitU=) 2: 8CB6031052AB11F0BFD3D952C4F9AE02.roa (hash: 7wTyCg/0wP3GL3JeAUaulyMMeddiOEV7adzs5N2hvf8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.crl rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196780, serialNumber=9FCD8F67692DBD821E7BDE6A6FBBD67C780757F9 Validity Not Before: Sep 3 08:29:15 2025 GMT Not After : Sep 10 08:29:14 2025 GMT Subject: CN=68b7fc5b-c997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:06:95:b1:56:7f:f3:1d:0f:1f:ad:30:09:66: b8:75:44:1c:2c:ac:1d:44:25:ef:c7:b7:c1:42:a1: 19:ac:7f:93:b4:19:e5:a6:14:da:ee:b6:5f:15:08: 8b:d7:7a:e9:02:4b:06:cf:19:32:e3:6a:cd:9c:73: 95:60:e2:3a:48:52:37:08:fa:fa:3d:14:06:af:35: 7b:60:2f:f8:7b:9b:a7:7e:73:f1:60:10:c7:3b:02: 68:ee:4d:20:e6:6a:7a:80:e9:8b:fd:d2:9a:34:63: 2c:7e:1b:14:4f:0c:70:41:ff:3c:de:f7:4c:89:ac: 0e:2a:9d:f0:1f:ef:c7:dd:f1:4e:55:98:01:e5:b5: 33:37:bc:a7:3c:98:0e:cd:91:80:d1:33:02:b3:98: ff:30:79:cd:4b:80:89:30:83:81:c8:82:54:bb:31: ad:1a:43:20:d4:ad:4f:90:86:9a:c2:67:fd:4c:6d: e7:1d:0c:3c:d1:d1:90:89:18:a3:64:fc:30:75:db: 0f:c8:68:d5:5e:0a:2d:83:f5:28:1b:f8:ae:a3:02: 25:4c:4d:aa:f2:7e:79:49:c8:a4:e8:a9:f3:4c:47: 8a:20:e1:ab:72:38:06:3e:c4:b4:5f:e3:0d:1e:7e: d2:15:7d:f2:32:bd:a8:bc:ce:c3:4a:68:43:76:41: 0c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8F:C6:AE:03:2A:8B:E2:70:AF:33:B6:0C:4E:D4:D9:17:46:C8:6C X509v3 Authority Key Identifier: keyid:9F:CD:8F:67:69:2D:BD:82:1E:7B:DE:6A:6F:BB:D6:7C:78:07:57:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/n82PZ2ktvYIee95qb7vWfHgHV_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196780/E61DC08C525B11F0A8362240C4F9AE02/n82PZ2ktvYIee95qb7vWfHgHV_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:fe:87:89:2a:67:7c:cf:47:52:29:bc:7d:bb:fc:c2:ff:4a: c7:a5:d6:fb:66:b0:24:b7:a5:1c:cd:29:a2:67:f2:20:ad:35: 00:29:94:2e:c5:0a:5b:88:5b:ff:4a:fc:ce:f5:4e:95:87:15: fd:6b:68:de:5b:5b:e2:e7:42:74:61:cb:b0:c6:cc:f5:9c:3d: 02:54:a4:30:b1:1a:d8:65:0c:0f:bd:67:50:8f:3b:81:73:d3: fd:f3:dc:93:0b:38:25:5b:e9:a0:c8:6a:d0:31:1f:3a:fc:ed: c8:09:a0:44:e9:ac:ea:7f:69:d5:1f:44:a6:1f:52:05:31:f5: b0:b9:86:e8:a7:25:17:25:df:83:33:3b:2a:78:89:c3:cb:36: 9e:5d:24:a5:4d:a0:e9:79:53:89:ad:e6:a5:37:8f:c3:9e:f5: 4b:a3:68:86:db:f6:3e:1a:d6:9d:73:96:50:46:37:f2:f3:7d: 40:9a:f4:4d:ad:61:b8:34:aa:59:d6:73:42:22:54:fd:d1:11: 7f:48:38:97:b3:50:83:18:64:d9:2d:ff:d3:b3:dd:a0:90:02: 4c:dd:a8:bb:00:b8:25:30:63:4a:e5:c4:d5:58:77:68:cf:21: 82:c6:b1:39:9e:73:9f:2c:07:cc:61:3e:57:51:09:41:9d:3f: 77:3e:bc:ba -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 Njc4MDExMC8GA1UEBRMoOUZDRDhGNjc2OTJEQkQ4MjFFN0JERTZBNkZCQkQ2N0M3 ODA3NTdGOTAeFw0yNTA5MDMwODI5MTVaFw0yNTA5MTAwODI5MTRaMBgxFjAUBgNV BAMTDTY4YjdmYzViLWM5OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDBpWxVn/zHQ8frTAJZrh1RBwsrB1EJe/Ht8FCoRmsf5O0GeWmFNrutl8VCIvX eukCSwbPGTLjas2cc5Vg4jpIUjcI+vo9FAavNXtgL/h7m6d+c/FgEMc7AmjuTSDm anqA6Yv90po0Yyx+GxRPDHBB/zze90yJrA4qnfAf78fd8U5VmAHltTM3vKc8mA7N kYDRMwKzmP8wec1LgIkwg4HIglS7Ma0aQyDUrU+QhprCZ/1MbecdDDzR0ZCJGKNk /DB12w/IaNVeCi2D9Sgb+K6jAiVMTaryfnlJyKToqfNMR4og4atyOAY+xLRf4w0e ftIVffIyvai8zsNKaEN2QQypAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqY/GrgMq i+JwrzO2DE7U2RdGyGwwHwYDVR0jBBgwFoAUn82PZ2ktvYIee95qb7vWfHgHV/kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2NzgwL0U2MURDMDhDNTI1 QjExRjBBODM2MjI0MEM0RjlBRTAyL244MlBaMmt0dllJZWU5NXFiN3ZXZkhnSFZf ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbjgyUFoya3R2WUllZTk1cWI3dldmSGdIVl9rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 NzgwL0U2MURDMDhDNTI1QjExRjBBODM2MjI0MEM0RjlBRTAyL244MlBaMmt0dllJ ZWU5NXFiN3ZXZkhnSFZfay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABf+h4kqZ3zPR1IpvH27/ML/Ssel1vtmsCS3pRzNKaJn8iCtNQAplC7F CluIW/9K/M71TpWHFf1raN5bW+LnQnRhy7DGzPWcPQJUpDCxGthlDA+9Z1CPO4Fz 0/3z3JMLOCVb6aDIatAxHzr87cgJoETprOp/adUfRKYfUgUx9bC5huinJRcl34Mz Oyp4icPLNp5dJKVNoOl5U4mt5qU3j8Oe9UujaIbb9j4a1p1zllBGN/LzfUCa9E2t Ybg0qlnWc0IiVP3REX9IOJezUIMYZNkt/9Oz3aCQAkzdqLsAuCUwY0rlxNVYd2jP IYLGsTmec58sB8xhPldRCUGdP3c+vLo= -----END CERTIFICATE-----Generated at Thu Sep 4 14:20:06 2025 by rpki-client