$ rpki-client -vvf rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft File: 8reSQiqNuXlUdjz-iRZuki5jGYQ.mft (raw, json) Hash identifier: ZZY/rKEt46Jux8OzR/JeiTqEHGPRNfkk3h7EGpjji1A= Subject key identifier: 11:31:D1:79:6F:60:30:5D:79:46:4B:F3:27:80:57:1E:49:2A:8A:D5 Authority key identifier: F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84 Certificate issuer: /CN=A9131AB9/serialNumber=F2B792422A8DB97954763CFE89166E922E631984 Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft Manifest number: 013D Signing time: Sat 23 Aug 2025 04:35:23 +0000 Manifest this update: Sat 23 Aug 2025 04:35:23 +0000 Manifest next update: Sat 30 Aug 2025 04:35:23 +0000 Files and hashes: 1: 8reSQiqNuXlUdjz-iRZuki5jGYQ.crl (hash: yJSJxQtt/sl4hvylna1SRgV16dxirAru2AITOmrRG7Q=) 2: F609B0309D5F11EE94076E6FC4F9AE02.roa (hash: uMIbIaAd2q/fAdMbL/3IffciHlHLKK1YHyqz9FvJ9Xw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9131AB9, serialNumber=F2B792422A8DB97954763CFE89166E922E631984 Validity Not Before: Aug 23 04:35:23 2025 GMT Not After : Aug 30 04:35:23 2025 GMT Subject: CN=68a9450b-0d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c3:bf:3a:9a:9c:62:0c:fb:b3:4f:5e:53:6a: c2:d8:a4:8d:2c:4f:91:a0:af:65:6e:4e:32:9d:b1: 2b:78:bb:f4:46:df:55:92:72:69:4c:6a:8a:f5:6e: 4e:8b:a9:fd:7f:3d:e0:78:17:6d:37:a7:1d:67:5d: f0:56:a4:25:81:31:e1:26:ae:38:51:37:87:66:fc: 2f:a2:bd:a3:48:f7:5b:d3:76:f6:28:b3:a2:31:92: a2:a4:f7:a8:04:59:7f:3a:ef:10:09:87:7b:f2:57: 86:ac:81:b9:81:1b:f0:2d:cc:9a:26:36:07:78:fc: 9d:60:d7:37:1c:77:90:e8:ee:ba:96:4c:45:28:b9: b0:65:1b:ba:f4:20:f1:b9:3c:92:e5:7b:02:99:6c: 97:79:88:ff:41:21:ae:d4:0e:83:db:2f:d9:12:fd: 6d:49:2f:ae:b3:99:73:2a:e8:fe:94:14:7a:60:fc: 19:d8:1d:33:63:f9:25:7a:f9:b6:12:c8:70:a0:88: 92:5a:ca:f2:63:3b:3a:4f:b6:2c:22:99:58:7c:e7: 52:9e:f2:79:ec:73:eb:ed:23:81:77:e0:e7:8b:04: 55:1d:02:63:07:b7:86:e2:e9:c1:ff:cd:2f:84:4f: 92:ea:56:c4:75:fb:2a:d3:b8:8b:d3:42:88:d6:e3: db:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:31:D1:79:6F:60:30:5D:79:46:4B:F3:27:80:57:1E:49:2A:8A:D5 X509v3 Authority Key Identifier: keyid:F2:B7:92:42:2A:8D:B9:79:54:76:3C:FE:89:16:6E:92:2E:63:19:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8reSQiqNuXlUdjz-iRZuki5jGYQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131AB9/FB074F469CC611EE9FC65A23C4F9AE02/8reSQiqNuXlUdjz-iRZuki5jGYQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:77:19:82:7b:4d:1c:d3:ac:c6:a6:1a:e5:b4:7c:5d:c3:93: 6a:19:44:f4:29:9a:36:4d:3b:7f:44:f7:17:38:78:1f:8b:c9: 14:77:d5:33:a1:a8:69:22:fa:58:f8:65:5f:af:7a:f1:8b:a6: aa:e0:54:71:4d:fc:2d:3f:f8:f0:a0:a4:7d:84:18:b1:4e:6e: ca:26:1c:41:ff:c2:14:ed:e9:2f:83:4b:13:8e:6b:a2:d5:21: 5c:40:6f:41:ca:bf:09:9c:93:43:4a:67:a2:70:d6:50:2e:80: 8a:e4:bf:34:80:f8:d7:d0:78:2f:55:ce:96:55:ad:0e:45:d4: c9:3a:69:74:40:a1:0d:75:d7:05:7d:5e:39:15:80:4b:bf:d0: 01:6a:0d:72:9d:bb:87:c8:f2:e6:56:45:9b:7f:81:df:6f:44: 7e:93:60:cc:a7:e5:92:2f:9e:d3:5b:71:fd:10:fd:4b:26:21: f2:06:64:79:e3:1b:c8:46:ff:51:fb:97:58:b2:ec:45:8d:80: 76:de:93:94:d0:0a:42:b2:a2:3d:08:63:67:45:ea:71:09:83: 73:ed:38:33:b8:29:bc:31:cb:52:a8:66:ce:41:7a:21:95:04: f7:f0:a7:28:79:d4:4f:a1:9b:ba:e1:38:55:b6:e5:81:00:2a: 2d:fe:8c:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzFBQjkxMTAvBgNVBAUTKEYyQjc5MjQyMkE4REI5Nzk1NDc2M0NGRTg5MTY2RTky MkU2MzE5ODQwHhcNMjUwODIzMDQzNTIzWhcNMjUwODMwMDQzNTIzWjAYMRYwFAYD VQQDEw02OGE5NDUwYi0wZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0MO/OpqcYgz7s09eU2rC2KSNLE+RoK9lbk4ynbEreLv0Rt9VknJpTGqK9W5O i6n9fz3geBdtN6cdZ13wVqQlgTHhJq44UTeHZvwvor2jSPdb03b2KLOiMZKipPeo BFl/Ou8QCYd78leGrIG5gRvwLcyaJjYHePydYNc3HHeQ6O66lkxFKLmwZRu69CDx uTyS5XsCmWyXeYj/QSGu1A6D2y/ZEv1tSS+us5lzKuj+lBR6YPwZ2B0zY/klevm2 EshwoIiSWsryYzs6T7YsIplYfOdSnvJ57HPr7SOBd+DniwRVHQJjB7eG4unB/80v hE+S6lbEdfsq07iL00KI1uPbZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEx0Xlv YDBdeUZL8yeAVx5JKorVMB8GA1UdIwQYMBaAFPK3kkIqjbl5VHY8/okWbpIuYxmE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMUFCOS9GQjA3NEY0NjlD QzYxMUVFOUZDNjVBMjNDNEY5QUUwMi84cmVTUWlxTnVYbFVkanotaVJadWtpNWpH WVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyZVNRaXFOdVhsVWRqei1pUlp1a2k1akdZUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MUFCOS9GQjA3NEY0NjlDQzYxMUVFOUZDNjVBMjNDNEY5QUUwMi84cmVTUWlxTnVY bFVkanotaVJadWtpNWpHWVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYdxmCe00c06zGphrltHxdw5NqGUT0KZo2TTt/RPcXOHgfi8kUd9Uz oahpIvpY+GVfr3rxi6aq4FRxTfwtP/jwoKR9hBixTm7KJhxB/8IU7ekvg0sTjmui 1SFcQG9Byr8JnJNDSmeicNZQLoCK5L80gPjX0HgvVc6WVa0ORdTJOml0QKENddcF fV45FYBLv9ABag1ynbuHyPLmVkWbf4Hfb0R+k2DMp+WSL57TW3H9EP1LJiHyBmR5 4xvIRv9R+5dYsuxFjYB23pOU0ApCsqI9CGNnRepxCYNz7TgzuCm8MctSqGbOQXoh lQT38KcoedRPoZu64ThVtuWBACot/oyB -----END CERTIFICATE-----Generated at Sat Aug 23 20:41:04 2025 by rpki-client