$ rpki-client -vvf rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft File: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft (raw, json) Hash identifier: q1ZhNPOYb947W+ZfxKA08XEDLZKbl7pcWdt+JbNtY2c= Subject key identifier: 44:05:FE:27:C5:BD:3D:34:24:D7:6E:3D:D3:F5:29:F7:52:A0:B4:69 Authority key identifier: F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 Certificate issuer: /CN=A912296A/serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft Manifest number: 0142 Signing time: Sat 23 Aug 2025 04:30:56 +0000 Manifest this update: Sat 23 Aug 2025 04:30:56 +0000 Manifest next update: Sat 30 Aug 2025 04:30:56 +0000 Files and hashes: 1: 8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl (hash: SSnUBhPU/7O348lw5T8x6HqVhfP4e7bZI9LGM6Fzvcg=) 2: 4A426668936C11EEBE0C2786C4F9AE02.roa (hash: 51Cgnd7L929YsdYeHMQakHz8pXfhQg7XBbfSBPJ2XYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:30:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912296A, serialNumber=F193604695146EBE1DBF73FDE0EB6621FD9FB8F9 Validity Not Before: Aug 23 04:30:56 2025 GMT Not After : Aug 30 04:30:56 2025 GMT Subject: CN=68a94400-9a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c8:9d:f0:0b:cf:da:11:8c:a8:d4:5e:dc:51: b1:bc:3a:78:e6:5b:3b:af:8c:5e:8d:fc:eb:24:c6: 86:76:55:7d:d1:22:ed:3b:f4:3e:73:a7:a1:85:84: 4e:db:a0:b8:c5:68:ea:60:5a:41:bb:8e:4e:24:2c: 70:db:2d:dd:b6:be:45:7d:2e:70:6a:7d:7f:3a:0a: f4:fd:1f:5a:b0:7d:a0:ce:99:96:6f:4e:63:6e:01: 89:cc:b2:4a:13:77:4b:95:7a:bc:cc:05:11:17:1c: 7d:ce:19:83:7c:8c:0f:01:4e:70:06:76:62:13:a2: 66:03:4a:74:68:0d:b4:61:3e:62:57:3e:6b:66:03: 7d:11:f1:56:ae:b3:22:8f:f5:1b:64:29:d7:09:53: e1:9f:3c:f6:89:78:68:e8:e3:d6:2b:2f:d4:52:32: a2:a3:1c:ae:48:ba:1e:08:e7:de:b5:c6:4d:b8:a1: 2e:44:22:a8:c7:9a:0c:e1:02:84:d3:d8:65:4f:8f: e8:1c:40:f4:34:d4:3a:a4:e6:e8:72:aa:12:f6:8c: 47:62:84:28:51:dc:f2:db:6c:e7:5f:b1:39:1f:5f: d8:b8:13:e0:02:32:90:1e:0a:fc:e4:65:0e:4a:9e: 82:1f:5e:58:54:67:75:12:fb:65:a1:41:e1:c5:4a: 61:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:05:FE:27:C5:BD:3D:34:24:D7:6E:3D:D3:F5:29:F7:52:A0:B4:69 X509v3 Authority Key Identifier: keyid:F1:93:60:46:95:14:6E:BE:1D:BF:73:FD:E0:EB:66:21:FD:9F:B8:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZNgRpUUbr4dv3P94OtmIf2fuPk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912296A/C59659B0936B11EE9E4C3885C4F9AE02/8ZNgRpUUbr4dv3P94OtmIf2fuPk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b4:e6:dc:54:86:15:de:aa:cd:31:1c:00:c2:e6:bb:2b:38:6b: 1d:89:3b:d6:50:98:39:c7:21:d0:6f:4a:fb:87:97:9e:8c:e4: ec:b8:23:0f:59:47:91:02:24:2e:de:6f:8c:e2:bf:ac:18:01: ce:36:ba:5a:8c:69:1f:8b:44:f5:e1:3c:8d:54:9d:4f:8f:76: 53:87:ed:ee:9f:fd:92:13:18:ef:b9:30:ff:84:eb:14:c5:b3: da:df:73:b3:0a:b0:7b:4b:47:b7:6c:24:68:ae:e0:ef:6e:4c: 19:95:54:c9:95:79:76:77:d0:65:b0:2b:e2:11:be:ae:59:20: b9:8f:4b:e8:dd:82:8b:e6:57:cd:ec:dc:53:4b:58:da:f2:a0: da:7f:7e:1e:60:bd:4a:0b:c8:e8:b6:d3:4a:2e:2a:8e:3f:7f: 1e:9e:95:aa:db:bb:39:c4:87:79:5c:b0:60:44:d3:74:61:10: 18:47:30:6f:5c:f8:2a:45:f0:ad:93:6c:65:d9:76:4a:27:4b: d5:a4:70:61:b7:59:d5:34:39:42:c8:15:c2:86:45:a7:58:28: 02:e6:95:20:07:96:01:c3:a2:92:61:8f:78:f9:ab:02:3f:6b: 5c:ff:48:c7:4a:b9:56:8f:26:15:cc:e4:59:2c:c6:59:22:a7: 76:38:7c:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5NkExMTAvBgNVBAUTKEYxOTM2MDQ2OTUxNDZFQkUxREJGNzNGREUwRUI2NjIx RkQ5RkI4RjkwHhcNMjUwODIzMDQzMDU2WhcNMjUwODMwMDQzMDU2WjAYMRYwFAYD VQQDEw02OGE5NDQwMC05YTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5cid8AvP2hGMqNRe3FGxvDp45ls7r4xejfzrJMaGdlV90SLtO/Q+c6ehhYRO 26C4xWjqYFpBu45OJCxw2y3dtr5FfS5wan1/Ogr0/R9asH2gzpmWb05jbgGJzLJK E3dLlXq8zAURFxx9zhmDfIwPAU5wBnZiE6JmA0p0aA20YT5iVz5rZgN9EfFWrrMi j/UbZCnXCVPhnzz2iXho6OPWKy/UUjKioxyuSLoeCOfetcZNuKEuRCKox5oM4QKE 09hlT4/oHED0NNQ6pObocqoS9oxHYoQoUdzy22znX7E5H1/YuBPgAjKQHgr85GUO Sp6CH15YVGd1EvtloUHhxUphWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQF/ifF vT00JNduPdP1KfdSoLRpMB8GA1UdIwQYMBaAFPGTYEaVFG6+Hb9z/eDrZiH9n7j5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjk2QS9DNTk2NTlCMDkz NkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJyNGR2M1A5NE90bUlmMmZ1 UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTmdScFVVYnI0ZHYzUDk0T3RtSWYyZnVQay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Mjk2QS9DNTk2NTlCMDkzNkIxMUVFOUU0QzM4ODVDNEY5QUUwMi84Wk5nUnBVVWJy NGR2M1A5NE90bUlmMmZ1UGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC05txUhhXeqs0xHADC5rsrOGsdiTvWUJg5xyHQb0r7h5eejOTsuCMP WUeRAiQu3m+M4r+sGAHONrpajGkfi0T14TyNVJ1Pj3ZTh+3un/2SExjvuTD/hOsU xbPa33OzCrB7S0e3bCRoruDvbkwZlVTJlXl2d9BlsCviEb6uWSC5j0vo3YKL5lfN 7NxTS1ja8qDaf34eYL1KC8jottNKLiqOP38enpWq27s5xId5XLBgRNN0YRAYRzBv XPgqRfCtk2xl2XZKJ0vVpHBht1nVNDlCyBXChkWnWCgC5pUgB5YBw6KSYY94+asC P2tc/0jHSrlWjyYVzORZLMZZIqd2OHze -----END CERTIFICATE-----Generated at Sat Aug 23 16:45:03 2025 by rpki-client