$ rpki-client -vvf rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft File: 8ZLUrYbOEPyWgn_JNIDz-9716mE.mft (raw, json) Hash identifier: yF6PehP40AJq06EzO53Laxa30hxQX+2WT1K9f1gLWu4= Subject key identifier: 84:E3:18:2A:D6:8A:53:21:5E:46:58:BE:4B:2F:AF:01:76:14:D2:45 Authority key identifier: F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 Certificate issuer: /CN=A91E78E8/serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Certificate serial: 04D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft Manifest number: 04CC Signing time: Fri 19 Sep 2025 00:12:51 +0000 Manifest this update: Fri 19 Sep 2025 00:12:50 +0000 Manifest next update: Fri 26 Sep 2025 00:12:50 +0000 Files and hashes: 1: 8ZLUrYbOEPyWgn_JNIDz-9716mE.crl (hash: pK0THxfC4dYzOeMGxv7mCcga2uUTFisaeUKcZSeILvQ=) 2: 32E40EFC6D6D11ED879E8878C4F9AE02.roa (hash: N7zAF6qotCb0ywjS2VK9+Nbg9CvfxH2mHM6x46+8gNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1235 (0x4d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E78E8, serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Validity Not Before: Sep 19 00:12:50 2025 GMT Not After : Sep 26 00:12:50 2025 GMT Subject: CN=68cca003-2d38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:4c:b0:0d:00:b8:f1:a0:6b:a6:a9:3a:7f: 75:92:20:75:5a:1a:84:41:6b:0d:47:86:08:af:89: 94:f5:eb:b8:00:02:b3:74:46:29:66:6b:e3:02:9a: a2:84:a1:90:39:26:50:50:c1:fd:48:58:4a:75:03: 96:ce:11:03:d9:11:da:a8:00:41:68:1c:4a:9a:61: ef:5d:7a:56:d6:ab:0b:6f:0b:d2:74:46:c1:98:9e: 39:29:48:52:2f:f7:db:a2:46:b3:35:a8:16:3f:34: 88:fc:e9:c7:98:5c:7b:58:00:73:e3:2c:1a:0a:5d: 90:f7:a0:5c:76:bb:7d:9c:2d:cc:68:25:c1:38:2d: 80:0a:ca:38:4c:f3:f9:3d:3e:bd:ec:76:23:1b:db: cf:50:fd:ee:43:5e:97:d2:03:1c:ec:f5:ae:45:fa: 0a:2f:f4:c7:82:db:29:e2:48:d3:6c:3b:1d:15:67: 12:af:ee:7c:f0:51:67:88:5a:0c:74:78:09:28:06: 94:8e:16:e6:ab:6c:4f:96:16:df:3d:91:69:2c:d4: e8:e5:49:f2:35:fa:ca:cd:b2:8c:56:2a:cc:86:e5: 31:0b:c5:41:d3:25:4d:15:ec:a4:e5:94:1e:40:43: 07:f0:2d:e4:18:a0:1b:03:8b:88:9f:57:b1:3a:74: 67:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:E3:18:2A:D6:8A:53:21:5E:46:58:BE:4B:2F:AF:01:76:14:D2:45 X509v3 Authority Key Identifier: keyid:F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:97:77:61:8a:18:69:97:bc:6a:09:ac:a7:46:7e:17:02:45: d8:c5:c4:99:2d:10:fb:fe:5f:0e:22:d4:98:6a:9f:18:98:76: 94:4d:35:38:17:be:01:37:ab:08:8c:c9:dd:62:aa:0a:c6:b7: 55:cb:f1:fe:23:d4:06:84:f6:fb:17:ac:3d:52:c5:28:f0:79: c0:40:96:94:00:de:9d:1d:45:5c:1e:9d:a4:0e:f9:a9:91:bc: 03:c1:1d:8b:70:41:e6:6e:bd:cb:6d:80:03:43:95:f7:65:c4: 06:22:c9:82:98:98:55:be:4b:bd:d2:5b:86:95:51:9a:78:ff: 8e:bc:16:c8:52:31:be:4b:92:04:74:8e:32:f7:6b:52:00:07: 92:22:73:77:76:79:48:72:44:29:6c:b2:0e:8f:71:bb:b8:ad: 3a:da:2b:b1:47:2b:2c:40:03:c5:ec:5c:86:09:a1:a5:4a:cc: ae:10:46:35:bd:af:90:3b:f0:aa:6b:1b:c7:ac:11:51:42:ab: 60:60:df:79:04:b6:be:61:7b:f2:cd:29:54:2b:ec:d6:24:ab: d4:61:2e:ee:0a:63:89:62:0e:bd:7c:48:a5:9e:23:77:26:40: bf:b7:3d:b1:02:29:32:da:76:e6:77:98:d4:3f:82:c0:3d:d4: 4e:01:bb:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4RTgxMTAvBgNVBAUTKEYxOTJENEFEODZDRTEwRkM5NjgyN0ZDOTM0ODBGM0ZC REVGNUVBNjEwHhcNMjUwOTE5MDAxMjUwWhcNMjUwOTI2MDAxMjUwWjAYMRYwFAYD VQQDEw02OGNjYTAwMy0yZDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHxMsA0AuPGga6apOn91kiB1WhqEQWsNR4YIr4mU9eu4AAKzdEYpZmvjApqi hKGQOSZQUMH9SFhKdQOWzhED2RHaqABBaBxKmmHvXXpW1qsLbwvSdEbBmJ45KUhS L/fbokazNagWPzSI/OnHmFx7WABz4ywaCl2Q96Bcdrt9nC3MaCXBOC2ACso4TPP5 PT697HYjG9vPUP3uQ16X0gMc7PWuRfoKL/THgtsp4kjTbDsdFWcSr+588FFniFoM dHgJKAaUjhbmq2xPlhbfPZFpLNTo5UnyNfrKzbKMVirMhuUxC8VB0yVNFeyk5ZQe QEMH8C3kGKAbA4uIn1exOnRn2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFITjGCrW ilMhXkZYvksvrwF2FNJFMB8GA1UdIwQYMBaAFPGS1K2GzhD8loJ/yTSA8/ve9eph MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzhFOC9CODlFQjY5MDNF MUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQeVdnbl9KTklEei05NzE2 bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTFVyWWJPRVB5V2duX0pOSUR6LTk3MTZtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzhFOC9CODlFQjY5MDNFMUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQ eVdnbl9KTklEei05NzE2bUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbl3dhihhpl7xqCaynRn4XAkXYxcSZLRD7/l8OItSYap8YmHaUTTU4 F74BN6sIjMndYqoKxrdVy/H+I9QGhPb7F6w9UsUo8HnAQJaUAN6dHUVcHp2kDvmp kbwDwR2LcEHmbr3LbYADQ5X3ZcQGIsmCmJhVvku90luGlVGaeP+OvBbIUjG+S5IE dI4y92tSAAeSInN3dnlIckQpbLIOj3G7uK062iuxRyssQAPF7FyGCaGlSsyuEEY1 va+QO/CqaxvHrBFRQqtgYN95BLa+YXvyzSlUK+zWJKvUYS7uCmOJYg69fEilniN3 JkC/tz2xAiky2nbmd5jUP4LAPdROAbs4 -----END CERTIFICATE-----Generated at Fri Sep 19 10:42:59 2025 by rpki-client