$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft File: 8q-Rix8UisrksDlFAoTeSQ15Dlk.mft (raw, json) Hash identifier: LowHm+IhXmgdo1Edr8sPdX8XcW478nIMCs9qRZXX0lc= Subject key identifier: 3A:95:D8:7A:E7:58:A0:18:75:3C:FB:D4:66:35:BF:45:6C:CE:CF:1D Authority key identifier: F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 Certificate issuer: /CN=A9114EF6/serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft Manifest number: 73 Signing time: Sat 23 Aug 2025 07:04:45 +0000 Manifest this update: Sat 23 Aug 2025 07:04:44 +0000 Manifest next update: Sat 30 Aug 2025 07:04:44 +0000 Files and hashes: 1: 8q-Rix8UisrksDlFAoTeSQ15Dlk.crl (hash: qQlFzwpXinRpq1/UEIzxlUlPFeJAT+li4LngMKGwXlU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114EF6, serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59 Validity Not Before: Aug 23 07:04:44 2025 GMT Not After : Aug 30 07:04:44 2025 GMT Subject: CN=68a9680c-a8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a8:99:9d:c3:9a:23:31:e6:67:8d:c6:04:1c: f7:08:bd:06:73:6a:a2:88:b2:a9:30:92:1e:9b:07: 18:ce:4e:cb:86:e6:76:0b:c2:fe:c1:aa:5d:1d:c0: e7:57:15:d5:0f:84:69:93:dc:3a:12:bb:f3:37:30: e2:77:87:57:fe:7d:4a:c3:46:38:b7:8a:66:02:fb: 99:0e:af:00:a1:9a:3a:a0:0c:ea:12:e1:cb:c9:02: 76:15:d0:fa:c1:e8:0c:a7:73:bd:ae:23:d2:32:ac: 5e:d9:31:e3:94:2e:2b:b0:ae:6a:a0:4d:3a:ea:ee: 3a:10:fc:4b:62:c5:f0:a2:8a:0a:5a:9a:a2:14:8a: b4:89:5c:c0:48:01:54:0c:73:5e:18:13:2e:2f:26: 5c:1b:c6:05:f5:2c:59:31:02:49:82:3b:30:22:97: c1:ac:e1:c8:fd:92:88:bd:6d:14:89:08:05:51:1d: 7b:59:09:e1:5f:44:17:70:1a:6e:ec:13:2b:b4:38: a9:62:96:3b:6a:33:4a:db:a1:63:af:31:3f:07:b1: c8:71:d1:26:9f:e1:59:73:6d:98:6d:aa:ab:17:35: a8:00:08:2d:13:04:d6:04:92:39:69:6f:88:ac:50: 18:51:44:75:49:cd:1b:7f:07:98:e5:b0:37:cb:e7: b8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:95:D8:7A:E7:58:A0:18:75:3C:FB:D4:66:35:BF:45:6C:CE:CF:1D X509v3 Authority Key Identifier: keyid:F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:50:14:84:d7:5b:1b:6b:49:80:7d:8a:d7:27:22:d0:bf:84: b8:e0:fa:0a:93:bd:05:4f:5c:fe:8d:be:9d:9f:f6:4e:62:10: 09:41:e3:e4:3b:4c:b1:9b:41:92:ee:4a:8e:74:7b:e0:d3:53: 4d:24:3b:4b:32:6b:93:7e:f1:aa:dc:77:a6:67:52:4b:5a:1d: 19:b0:ab:c2:98:34:3b:3f:c0:87:81:76:cd:09:c8:90:45:29: 7b:20:0c:e2:db:95:66:d1:74:f4:f6:12:34:21:c2:02:0f:0c: 43:bb:15:d5:0c:18:17:64:22:be:41:b1:cd:4b:78:53:a9:d7: 4f:84:e6:c0:7b:f5:9c:0f:1b:b9:d8:41:05:9e:cb:5b:c1:e3: 2c:06:67:90:3a:18:4a:2b:22:c9:b2:d5:91:9c:17:07:b1:d4: 83:90:1c:63:ec:a7:1f:8b:fb:a6:80:a2:6b:a5:2e:f6:73:ad: ec:38:b4:3b:5e:72:cd:53:17:51:44:09:aa:2d:13:28:c3:5d: 43:f8:ce:70:37:13:28:ee:7f:ba:ae:15:01:0a:40:98:97:e9: 89:71:00:f0:c0:33:9f:b3:7a:6c:ed:73:f2:d2:83:ca:00:66: 0f:81:e2:21:c6:d9:3f:75:45:20:15:5b:13:6b:3c:09:92:9f: 07:35:9f:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEVGNjExMC8GA1UEBRMoRjJBRjkxOEIxRjE0OEFDQUU0QjAzOTQ1MDI4NERFNDkw RDc5MEU1OTAeFw0yNTA4MjMwNzA0NDRaFw0yNTA4MzAwNzA0NDRaMBgxFjAUBgNV BAMTDTY4YTk2ODBjLWE4YjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCmqJmdw5ojMeZnjcYEHPcIvQZzaqKIsqkwkh6bBxjOTsuG5nYLwv7Bql0dwOdX FdUPhGmT3DoSu/M3MOJ3h1f+fUrDRji3imYC+5kOrwChmjqgDOoS4cvJAnYV0PrB 6Aync72uI9IyrF7ZMeOULiuwrmqgTTrq7joQ/EtixfCiigpamqIUirSJXMBIAVQM c14YEy4vJlwbxgX1LFkxAkmCOzAil8Gs4cj9koi9bRSJCAVRHXtZCeFfRBdwGm7s Eyu0OKliljtqM0rboWOvMT8Hschx0Saf4VlzbZhtqqsXNagACC0TBNYEkjlpb4is UBhRRHVJzRt/B5jlsDfL57jNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOpXYeudY oBh1PPvUZjW/RWzOzx0wHwYDVR0jBBgwFoAU8q+Rix8UisrksDlFAoTeSQ15Dlkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RUY2Lzk2NDYzNDU4RDBE NDExRUZCQ0Q1MTIzRUM0RjlBRTAyLzhxLVJpeDhVaXNya3NEbEZBb1RlU1ExNURs ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHEtUml4OFVpc3Jrc0RsRkFvVGVTUTE1RGxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RUY2Lzk2NDYzNDU4RDBENDExRUZCQ0Q1MTIzRUM0RjlBRTAyLzhxLVJpeDhVaXNy a3NEbEZBb1RlU1ExNURsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFRQFITXWxtrSYB9itcnItC/hLjg+gqTvQVPXP6Nvp2f9k5iEAlB4+Q7 TLGbQZLuSo50e+DTU00kO0sya5N+8arcd6ZnUktaHRmwq8KYNDs/wIeBds0JyJBF KXsgDOLblWbRdPT2EjQhwgIPDEO7FdUMGBdkIr5Bsc1LeFOp10+E5sB79ZwPG7nY QQWey1vB4ywGZ5A6GEorIsmy1ZGcFwex1IOQHGPspx+L+6aAomulLvZzrew4tDte cs1TF1FECaotEyjDXUP4znA3Eyjuf7quFQEKQJiX6YlxAPDAM5+zemztc/LSg8oA Zg+B4iHG2T91RSAVWxNrPAmSnwc1n44= -----END CERTIFICATE-----Generated at Sun Aug 24 00:15:52 2025 by rpki-client