$ rpki-client -vvf rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft File: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft (raw, json) Hash identifier: if1p0d79ckDme7hx/baGDwEcQl2mnS+ikFDzaW0IR4M= Subject key identifier: EF:3F:A5:EA:7F:77:0D:1B:C2:8C:15:2A:0F:A2:DE:8E:E6:98:50:A9 Authority key identifier: F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E Certificate issuer: /CN=A9118CA7/serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Certificate serial: 095F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft Manifest number: 0947 Signing time: Wed 02 Jul 2025 20:29:55 +0000 Manifest this update: Wed 02 Jul 2025 20:29:55 +0000 Manifest next update: Wed 09 Jul 2025 20:29:55 +0000 Files and hashes: 1: 8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl (hash: Phdy9LI5Gyqn9p9Ad6ZhIqpEZVUcgm4pXJxLjp7UwLo=) 2: FFFE56DEDEF111EF8EE4AE37C4F9AE02.roa (hash: kvRrYXzDEb1knff7u5sMUOY0LST5MU2sRwL9Qq51bMI=) 3: E76F99C60FDB11ED9718606AC4F9AE02.roa (hash: 5xmx4EdtRdh7/raKFzoldytV08fzGVQ9tShtrjhxke0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2399 (0x95f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118CA7, serialNumber=F1998A475E92DE8A6C7D4094556A0DA67D5D4D0E Validity Not Before: Jul 2 20:29:55 2025 GMT Not After : Jul 9 20:29:55 2025 GMT Subject: CN=686596c3-e104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f7:ff:f5:b2:de:ef:6f:c3:65:56:e8:64:0b: d9:2d:83:05:cb:d5:c9:1c:1b:2c:3b:22:f2:00:31: b0:52:b9:bb:34:95:bf:88:ca:1b:ae:e7:c8:ec:da: 6e:4a:fc:c6:2c:6b:b3:40:bb:28:fe:29:cf:64:5c: 1d:ab:5f:5c:1c:c1:9a:51:2c:61:d0:ec:d6:d0:79: f0:25:5e:b2:9d:8a:e2:57:12:0f:63:6a:26:15:a0: ae:fb:2e:5f:2c:7c:20:ff:6b:56:ed:e8:46:d4:07: 3c:b4:7f:15:5c:42:f2:fe:47:19:4a:68:a4:72:e7: a6:d6:e0:4b:2f:15:dc:4c:95:3d:43:a5:13:de:ba: 58:27:20:29:6a:04:49:53:cb:ba:2f:f2:68:97:56: 5f:86:33:c3:bb:d3:81:f1:40:f8:1c:41:5e:46:93: af:e6:d5:39:94:9c:5f:5b:ed:5b:75:38:5f:97:cc: 23:ed:59:9e:3b:ac:88:b9:82:9e:28:7d:43:f3:91: 06:1e:6d:2e:ea:9d:52:64:a9:8e:e2:a2:69:c2:be: 84:7d:28:a5:3a:6f:95:a6:3c:47:12:61:58:7c:e9: 09:43:ca:af:b9:30:cf:7b:72:fe:1f:c9:7b:1a:cc: 8d:d2:39:3b:e2:ef:12:9a:0a:bc:05:60:ad:15:05: 9e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3F:A5:EA:7F:77:0D:1B:C2:8C:15:2A:0F:A2:DE:8E:E6:98:50:A9 X509v3 Authority Key Identifier: keyid:F1:99:8A:47:5E:92:DE:8A:6C:7D:40:94:55:6A:0D:A6:7D:5D:4D:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZmKR16S3opsfUCUVWoNpn1dTQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118CA7/2FC70A24A0D511EAA7FFDF29C4F9AE02/8ZmKR16S3opsfUCUVWoNpn1dTQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:d3:1d:ef:03:3f:cd:d3:c0:39:a4:c8:c0:6a:1a:76:14:45: d8:e7:20:56:ff:a5:71:96:ca:ad:f1:66:42:1e:2d:14:2e:ba: f7:14:7c:b2:c4:81:86:f3:6e:8a:69:61:11:4c:e5:93:41:ea: 31:2e:1a:4f:54:0b:3d:4a:3a:71:02:94:a7:a5:9e:76:27:fd: 60:72:35:a1:6d:f3:b7:cf:35:33:dd:e2:31:1c:f1:37:d6:77: 05:e1:a8:c6:bd:d2:37:7b:c5:ed:59:cf:0b:f0:c2:d5:0e:90: 49:fb:50:e3:46:d0:01:dd:7d:d1:7c:ee:c8:78:33:32:e0:33: 0b:9a:df:25:04:97:be:58:a3:db:99:9d:9e:04:6e:a1:73:8a: 17:7d:f2:7d:96:ac:e0:71:06:26:a8:34:df:e2:7d:20:fb:28: 90:2c:1a:54:39:2a:4c:e9:3f:b6:72:54:f7:12:27:a8:81:e7: 9f:9e:21:47:70:0a:08:0e:00:98:34:07:ca:33:12:18:97:ae: dc:cb:89:fc:de:61:cd:30:df:2f:04:d9:39:08:42:09:a2:2a: b9:5e:6f:c6:c2:21:8e:a7:e6:63:2d:4e:6f:7f:ea:08:97:70: 14:ab:ec:ae:47:91:39:58:5a:e5:02:e2:c9:c2:b6:f1:2d:e7: d6:6a:b7:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MThDQTcxMTAvBgNVBAUTKEYxOTk4QTQ3NUU5MkRFOEE2QzdENDA5NDU1NkEwREE2 N0Q1RDREMEUwHhcNMjUwNzAyMjAyOTU1WhcNMjUwNzA5MjAyOTU1WjAYMRYwFAYD VQQDEw02ODY1OTZjMy1lMTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwPf/9bLe72/DZVboZAvZLYMFy9XJHBssOyLyADGwUrm7NJW/iMobrufI7Npu SvzGLGuzQLso/inPZFwdq19cHMGaUSxh0OzW0HnwJV6ynYriVxIPY2omFaCu+y5f LHwg/2tW7ehG1Ac8tH8VXELy/kcZSmikcuem1uBLLxXcTJU9Q6UT3rpYJyApagRJ U8u6L/Jol1ZfhjPDu9OB8UD4HEFeRpOv5tU5lJxfW+1bdThfl8wj7VmeO6yIuYKe KH1D85EGHm0u6p1SZKmO4qJpwr6EfSilOm+VpjxHEmFYfOkJQ8qvuTDPe3L+H8l7 GsyN0jk74u8Smgq8BWCtFQWe/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO8/pep/ dw0bwowVKg+i3o7mmFCpMB8GA1UdIwQYMBaAFPGZikdekt6KbH1AlFVqDaZ9XU0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOENBNy8yRkM3MEEyNEEw RDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNvcHNmVUNVVldvTnBuMWRU UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhabUtSMTZTM29wc2ZVQ1VWV29OcG4xZFRRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OENBNy8yRkM3MEEyNEEwRDUxMUVBQTdGRkRGMjlDNEY5QUUwMi84Wm1LUjE2UzNv cHNmVUNVVldvTnBuMWRUUTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo0x3vAz/N08A5pMjAahp2FEXY5yBW/6Vxlsqt8WZCHi0ULrr3FHyy xIGG826KaWERTOWTQeoxLhpPVAs9SjpxApSnpZ52J/1gcjWhbfO3zzUz3eIxHPE3 1ncF4ajGvdI3e8XtWc8L8MLVDpBJ+1DjRtAB3X3RfO7IeDMy4DMLmt8lBJe+WKPb mZ2eBG6hc4oXffJ9lqzgcQYmqDTf4n0g+yiQLBpUOSpM6T+2clT3EieogeefniFH cAoIDgCYNAfKMxIYl67cy4n83mHNMN8vBNk5CEIJoiq5Xm/GwiGOp+ZjLU5vf+oI l3AUq+yuR5E5WFrlAuLJwrbxLefWarcG -----END CERTIFICATE-----Generated at Thu Jul 3 16:52:03 2025 by rpki-client