$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: BtzUKO5ODWWSWSIcewddixpiYi4DwKmTgWkpOzuyd2A= Subject key identifier: 71:40:63:31:61:3C:2C:2F:BA:62:36:AF:81:51:0B:4F:44:E8:BD:0B Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 101A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 1002 Signing time: Fri 22 Aug 2025 17:35:39 +0000 Manifest this update: Fri 22 Aug 2025 17:35:38 +0000 Manifest next update: Fri 29 Aug 2025 17:35:38 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: v3kDEaIKavqvjVKoUiNsvVvDPNU1uwtKPpmyIlhuqc4=) 2: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: nBMi/a8I+RV2Z/PiZj9be9QZEtWJuCuqsGfS6IxkLhU=) 3: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: dzJ3ZC5Hl5bYvc0rYBuqTlx1lY8wAUYvF1umXCXe+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:35:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4122 (0x101a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: Aug 22 17:35:38 2025 GMT Not After : Aug 29 17:35:38 2025 GMT Subject: CN=68a8aa6b-6783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:50:ce:99:2b:4d:8b:87:9c:56:9e:57:9c: 29:54:bf:25:fd:40:16:23:5f:ea:18:33:51:68:6b: cd:db:61:d3:df:b6:44:b8:ce:2b:e3:a1:97:3f:6e: b9:2d:1d:1c:68:d9:2a:92:01:71:bd:6b:2e:1c:ce: 95:5e:0a:38:bb:4a:44:cf:2a:af:7c:f5:96:c3:99: 77:1b:84:12:dc:4f:ff:61:d5:b9:7c:28:f9:68:09: 2b:ad:6b:e2:9f:8a:c0:bc:1d:d6:35:3f:1b:ca:39: 0e:e1:bb:f9:2d:dc:99:64:d3:45:71:d3:e3:b9:1a: 70:be:61:44:bf:03:73:7e:1e:48:ba:aa:00:ab:bd: 91:42:a6:96:61:22:71:4c:6b:0f:48:2c:4c:ea:39: 88:97:0f:d4:bf:69:af:2f:fe:14:1d:0b:98:6c:2e: ff:57:4c:a4:a2:08:35:5a:26:b6:86:4e:3e:f9:66: e6:96:70:5a:f2:33:70:1c:81:5d:d9:d6:18:ba:72: 76:53:5d:a7:1d:23:a8:6d:a9:73:60:60:6a:9a:f0: 33:02:d1:b3:80:af:30:b6:24:73:03:63:f8:b0:9b: fc:6a:70:f0:56:3b:7d:82:c3:27:ea:f1:51:88:fc: 02:e8:ce:25:04:e0:82:43:24:b3:a7:8b:af:f5:a2: ce:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:40:63:31:61:3C:2C:2F:BA:62:36:AF:81:51:0B:4F:44:E8:BD:0B X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:ef:21:87:84:e4:c5:c1:5f:42:48:25:27:7b:5e:40:e9:b9: 38:88:9b:5f:ec:f9:d4:fc:18:cc:69:42:81:99:4e:aa:81:c4: fb:34:f8:89:f6:42:d1:26:4f:51:d3:52:e9:29:4a:b3:b7:f0: 4f:68:da:50:c1:4b:10:15:c9:e0:84:81:c4:f1:fd:8a:fc:c5: 8e:30:b8:84:52:32:af:58:cc:2d:9b:0d:36:bb:67:79:4f:c8: b7:3e:c2:4f:d1:e0:9d:5d:db:cb:ad:03:26:c9:e6:04:00:50: 06:c6:96:d6:f2:3f:71:8a:dd:2a:3e:02:4a:dd:fc:10:49:18: 8c:90:4f:87:6d:da:8f:b0:df:f3:10:57:ab:40:7e:ba:10:e4: a4:7c:c0:55:e7:43:29:df:a4:61:4c:53:d4:4d:81:52:31:22: 22:a3:b7:7c:60:84:aa:8f:33:63:c0:48:1b:99:af:99:c6:87: f0:09:e9:48:07:0a:5c:38:30:6c:bc:45:92:2d:10:fb:c5:19: 53:1f:88:18:5f:7f:ca:65:2f:87:4a:5f:26:a1:66:38:1e:52: d2:14:99:40:19:7d:2a:0f:7d:2b:59:e8:b6:f8:3a:32:15:e6: 19:f5:55:e7:1c:55:37:a2:3f:b6:ef:e2:91:c2:16:55:ce:4d: 99:36:9e:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjUwODIyMTczNTM4WhcNMjUwODI5MTczNTM4WjAYMRYwFAYD VQQDEw02OGE4YWE2Yi02NzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAugpQzpkrTYuHnFaeV5wpVL8l/UAWI1/qGDNRaGvN22HT37ZEuM4r46GXP265 LR0caNkqkgFxvWsuHM6VXgo4u0pEzyqvfPWWw5l3G4QS3E//YdW5fCj5aAkrrWvi n4rAvB3WNT8byjkO4bv5LdyZZNNFcdPjuRpwvmFEvwNzfh5IuqoAq72RQqaWYSJx TGsPSCxM6jmIlw/Uv2mvL/4UHQuYbC7/V0ykogg1Wia2hk4++WbmlnBa8jNwHIFd 2dYYunJ2U12nHSOobalzYGBqmvAzAtGzgK8wtiRzA2P4sJv8anDwVjt9gsMn6vFR iPwC6M4lBOCCQySzp4uv9aLOYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFAYzFh PCwvumI2r4FRC09E6L0LMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW7yGHhOTFwV9CSCUne15A6bk4iJtf7PnU/BjMaUKBmU6qgcT7NPiJ 9kLRJk9R01LpKUqzt/BPaNpQwUsQFcnghIHE8f2K/MWOMLiEUjKvWMwtmw02u2d5 T8i3PsJP0eCdXdvLrQMmyeYEAFAGxpbW8j9xit0qPgJK3fwQSRiMkE+HbdqPsN/z EFerQH66EOSkfMBV50Mp36RhTFPUTYFSMSIio7d8YISqjzNjwEgbma+ZxofwCelI BwpcODBsvEWSLRD7xRlTH4gYX3/KZS+HSl8moWY4HlLSFJlAGX0qD30rWei2+Doy FeYZ9VXnHFU3oj+27+KRwhZVzk2ZNp4m -----END CERTIFICATE-----Generated at Sat Aug 23 20:22:37 2025 by rpki-client