$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft File: 8_kp_1hV7SRPxYM-JezfVTpY-mc.mft (raw, json) Hash identifier: Yp675D90fXrwl7mPMoVir1SceaPObFNHyDtQpqF0ELE= Subject key identifier: 01:F9:8F:28:4B:E8:D4:13:0A:F4:36:E2:0C:70:BF:6B:D1:D2:E6:64 Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 Certificate issuer: /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Certificate serial: 0279 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft Manifest number: 026B Signing time: Sat 23 Aug 2025 02:00:41 +0000 Manifest this update: Sat 23 Aug 2025 02:00:40 +0000 Manifest next update: Sat 30 Aug 2025 02:00:40 +0000 Files and hashes: 1: 8_kp_1hV7SRPxYM-JezfVTpY-mc.crl (hash: 16lE6fvhcJ+sDhf6RBBArszslW+rQmJbaQDfcb9KIK0=) 2: 920C07EECA9B11EFA931D42DC4F9AE02.roa (hash: orsVYI0WPqRRwsJkvK9ISroiZMKS0a+gVuvh69buNNs=) 3: 44F77378729111F0844E9A71C4F9AE02.roa (hash: sgYStYICAsCeWQ5pRth69IzBnpHj2j1CH8+JdqomPBQ=) 4: 33471FD866EE11F09D3F3F84C4F9AE02.roa (hash: 0QIge9qVdWiYUccpaSzR0ATAUWXdicUdgJEiPZ4i2aA=) 5: 1B0B620C16C811EF93505027C4F9AE02.roa (hash: 2oEdY4ta3hN90rZpyN1SlR035NNb05Tx7U/Ur7N9XJo=) 6: 2DED090C18F211F0B4DFD036C4F9AE02.roa (hash: /C0qtTA5i0rVvnV/xAh9o5sYCzRTxWzn/hNOktwoiis=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 633 (0x279) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67 Validity Not Before: Aug 23 02:00:40 2025 GMT Not After : Aug 30 02:00:40 2025 GMT Subject: CN=68a920c8-3b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:47:b9:40:15:1d:67:61:e9:c0:86:6a:4a: 84:b8:bf:36:cc:a7:07:0b:e2:13:1c:9c:e6:5f:b0: 31:ab:9f:1c:8d:66:45:e8:e8:ae:80:03:54:e9:12: 2a:a1:7f:69:da:dc:c5:21:30:de:eb:e6:ee:39:b4: aa:c8:5d:b5:48:b4:ea:6a:99:57:c3:d9:9f:cf:ce: 05:9c:32:3a:33:88:ee:85:57:d2:c0:5c:7b:f9:05: 21:f2:c4:79:5c:2b:da:a1:eb:96:b8:1e:ab:56:9a: 55:77:d2:19:67:c9:89:dc:b2:97:af:23:b5:39:e9: d1:28:61:b4:04:f3:51:4f:d3:54:7f:33:6f:3b:07: be:ab:eb:60:c7:cd:59:65:81:0d:35:91:5a:69:f7: 02:19:ce:ac:b1:7a:74:81:b1:3b:34:b0:2b:e1:ec: 10:ed:7d:e9:9f:b7:f1:20:9c:7b:9d:a7:15:02:2f: ae:e6:7f:3b:e4:8b:75:f8:92:75:69:57:f3:5b:de: ff:1f:ce:28:fd:90:5f:67:ca:b1:74:27:ea:52:d0: 9b:2d:df:c3:c6:f8:c7:6b:d5:f5:7e:a7:54:9b:47: 4c:ca:62:87:e5:75:bd:c1:75:e0:16:21:45:0d:90: d5:0f:3d:ff:cb:3c:7f:fd:23:77:47:84:fe:61:b8: d5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F9:8F:28:4B:E8:D4:13:0A:F4:36:E2:0C:70:BF:6B:D1:D2:E6:64 X509v3 Authority Key Identifier: keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:97:8b:f1:89:78:ca:73:9a:b5:47:5d:3d:6c:23:0d:d7:6f: 8d:79:1e:fc:8c:aa:af:76:21:38:37:8b:fa:25:f8:1d:56:cb: 6c:5e:e2:ac:e9:cc:41:fc:a6:e7:b2:9b:31:86:a6:95:36:1c: d6:52:3b:0b:36:f0:8d:68:b1:87:5a:3f:a2:ac:83:e2:3d:e0: 14:05:8d:d6:e3:74:de:17:54:13:d8:f7:86:68:c1:3a:35:e2: 7d:69:c2:6c:5d:0a:ca:25:93:c2:79:2d:af:cf:71:0a:9a:ac: 7d:ce:6b:ae:86:e4:04:b3:65:f2:8d:37:e9:fb:54:8f:59:cb: 66:c1:b8:3b:ac:5c:e3:a4:17:14:a1:af:4e:39:f3:3e:e5:e2: 7f:2b:74:d4:75:c7:68:a0:67:23:43:48:a9:69:94:e7:2e:3c: b5:01:bb:3c:e4:4e:47:9f:85:fa:9c:fd:d8:99:2c:5d:c4:7a: 8f:54:07:f3:71:cd:bb:b0:67:82:d0:dc:1f:f9:2f:52:c4:1c: e4:8f:1e:08:f6:03:a7:89:97:aa:41:6b:e2:51:95:bb:ac:bb: 73:18:e7:34:23:87:f8:13:b2:24:cf:00:d3:4c:8f:b1:74:0d: 7e:51:71:6b:58:b7:6e:1c:7f:42:f1:6a:be:13:9b:ef:da:99: bd:a6:7b:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRFMzUxMTAvBgNVBAUTKEYzRjkyOUZGNTg1NUVEMjQ0RkM1ODMzRTI1RUNERjU1 M0E1OEZBNjcwHhcNMjUwODIzMDIwMDQwWhcNMjUwODMwMDIwMDQwWjAYMRYwFAYD VQQDEw02OGE5MjBjOC0zYjRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKtHuUAVHWdh6cCGakqEuL82zKcHC+ITHJzmX7Axq58cjWZF6OiugANU6RIq oX9p2tzFITDe6+buObSqyF21SLTqaplXw9mfz84FnDI6M4juhVfSwFx7+QUh8sR5 XCvaoeuWuB6rVppVd9IZZ8mJ3LKXryO1OenRKGG0BPNRT9NUfzNvOwe+q+tgx81Z ZYENNZFaafcCGc6ssXp0gbE7NLAr4ewQ7X3pn7fxIJx7nacVAi+u5n875It1+JJ1 aVfzW97/H84o/ZBfZ8qxdCfqUtCbLd/DxvjHa9X1fqdUm0dMymKH5XW9wXXgFiFF DZDVDz3/yzx//SN3R4T+YbjVrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAH5jyhL 6NQTCvQ24gxwv2vR0uZkMB8GA1UdIwQYMBaAFPP5Kf9YVe0kT8WDPiXs31U6WPpn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEUzNS8wRTdBQjMzMjI3 N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdTUlB4WU0tSmV6ZlZUcFkt bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfa3BfMWhWN1NSUHhZTS1KZXpmVlRwWS1tYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NEUzNS8wRTdBQjMzMjI3N0IxMUVEODBBMzgzMjhDNEY5QUUwMi84X2twXzFoVjdT UlB4WU0tSmV6ZlZUcFktbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAel4vxiXjKc5q1R109bCMN12+NeR78jKqvdiE4N4v6JfgdVstsXuKs 6cxB/KbnspsxhqaVNhzWUjsLNvCNaLGHWj+irIPiPeAUBY3W43TeF1QT2PeGaME6 NeJ9acJsXQrKJZPCeS2vz3EKmqx9zmuuhuQEs2XyjTfp+1SPWctmwbg7rFzjpBcU oa9OOfM+5eJ/K3TUdcdooGcjQ0ipaZTnLjy1Abs85E5Hn4X6nP3YmSxdxHqPVAfz cc27sGeC0Nwf+S9SxBzkjx4I9gOniZeqQWviUZW7rLtzGOc0I4f4E7IkzwDTTI+x dA1+UXFrWLduHH9C8Wq+E5vv2pm9pnsl -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:54 2025 by rpki-client