$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft File: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft (raw, json) Hash identifier: JAcDIVmAb1mPIlH2tlFqvMEtNCYK8ypfCqUidSF1qy8= Subject key identifier: 13:F7:4F:B6:8B:D6:8E:01:31:E1:37:B4:10:4E:FC:2C:12:58:0B:DA Authority key identifier: F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 Certificate issuer: /CN=A913E8F3/serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Certificate serial: 1000 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft Manifest number: 0FE8 Signing time: Wed 02 Jul 2025 17:41:27 +0000 Manifest this update: Wed 02 Jul 2025 17:41:26 +0000 Manifest next update: Wed 09 Jul 2025 17:41:26 +0000 Files and hashes: 1: 9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl (hash: Rtd76S5gUyk5yRK7OO9dRikSnn0D2K4n46JX1o8jl6s=) 2: 641D4DF8302B11EAA1F5A16AC4F9AE02.roa (hash: nBMi/a8I+RV2Z/PiZj9be9QZEtWJuCuqsGfS6IxkLhU=) 3: 9B64D5BC5BD311ECAB122945C4F9AE02.roa (hash: dzJ3ZC5Hl5bYvc0rYBuqTlx1lY8wAUYvF1umXCXe+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:41:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4096 (0x1000) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F59FBC5C58803C0D7CAB8ABD42E14FD3821288A4 Validity Not Before: Jul 2 17:41:26 2025 GMT Not After : Jul 9 17:41:26 2025 GMT Subject: CN=68656f46-8afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:6e:3f:0f:89:cc:40:a1:be:0b:5c:6d:0a: bd:fe:ab:86:70:46:0e:4c:18:1e:5d:b4:99:5e:37: 17:ae:96:48:91:08:a3:f5:2f:96:9c:84:df:7d:02: 01:af:a7:e2:34:4e:0d:ec:89:e2:8e:5e:70:aa:fb: b0:c2:8f:ce:72:32:09:b2:99:6c:51:ad:6d:98:38: 14:14:87:21:60:97:7b:5e:93:ef:49:e4:e8:d7:00: eb:ce:20:c3:9d:2d:a9:a3:84:9f:e6:3b:1a:47:81: 1d:8f:e6:9a:c6:79:d6:ef:e2:2c:f2:8c:bd:0f:f0: 61:e0:df:41:6e:d0:05:de:02:90:d6:fb:b2:d8:2a: 72:c6:12:9b:35:b1:4e:fc:12:e7:da:d0:41:02:4e: 82:17:7d:7b:bd:2f:ef:e7:5e:f9:cd:44:a8:3c:54: c2:2a:3f:dc:15:aa:51:4d:85:0b:cc:4e:a6:ce:10: b2:50:6a:f7:a1:e4:88:30:cf:5c:16:07:59:31:f9: 64:f9:62:a3:23:65:97:ec:11:3c:dc:ea:ad:17:25: 4d:f4:0b:5a:84:9b:b8:37:c0:05:bb:84:14:96:bc: 1f:93:18:a8:36:f9:90:01:3f:80:e6:cc:32:9b:6f: 4d:c9:bd:a1:34:38:f2:c4:fe:c9:fe:6b:a4:b4:3d: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F7:4F:B6:8B:D6:8E:01:31:E1:37:B4:10:4E:FC:2C:12:58:0B:DA X509v3 Authority Key Identifier: keyid:F5:9F:BC:5C:58:80:3C:0D:7C:AB:8A:BD:42:E1:4F:D3:82:12:88:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9Z-8XFiAPA18q4q9QuFP04ISiKQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/12F4DF18549411E9B597E571C4F9AE02/9Z-8XFiAPA18q4q9QuFP04ISiKQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e7:d4:34:92:c6:04:77:be:53:db:56:2d:64:66:5e:d0:0f: a0:e2:5a:19:d2:f3:28:bb:3d:17:13:9b:5a:55:f4:17:a0:ea: 63:aa:67:30:12:57:32:cd:a2:fa:ea:5a:9a:5f:64:f8:3a:bc: 8d:6c:13:45:4e:a6:9f:fa:37:53:ae:dc:70:da:3d:0d:b3:ad: 39:38:a1:58:d0:83:e6:36:be:73:c6:01:91:5b:b9:fa:4a:37: db:26:7d:1f:d3:5f:a7:61:fb:ed:9a:c9:cd:1d:ac:16:40:b2: 94:ae:a6:c5:ef:66:89:70:50:8a:7b:ad:b8:7e:40:49:77:7c: ba:ae:10:cf:9d:25:ed:15:64:c4:01:bd:de:01:05:9c:a8:05: 08:71:43:34:17:46:c6:8b:68:ca:61:20:d3:03:83:33:d2:24: 21:e2:13:bf:92:3e:b5:9b:04:4d:82:b6:d5:03:aa:0c:ab:12: 39:74:7e:a5:9b:c0:02:31:94:14:26:78:46:d6:f8:78:7c:5a: 6d:57:45:2b:14:76:38:71:c7:bc:51:c5:13:a4:de:e3:27:e3: f9:bf:f6:86:70:3d:28:99:df:17:01:c5:28:6a:e6:60:8f:7c: c0:b4:bf:c1:84:58:9f:d4:77:ee:d6:26:69:9e:55:22:95:80: 5e:3f:ff:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEAAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY1OUZCQzVDNTg4MDNDMEQ3Q0FCOEFCRDQyRTE0RkQz ODIxMjg4QTQwHhcNMjUwNzAyMTc0MTI2WhcNMjUwNzA5MTc0MTI2WjAYMRYwFAYD VQQDEw02ODY1NmY0Ni04YWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr0puPw+JzEChvgtcbQq9/quGcEYOTBgeXbSZXjcXrpZIkQij9S+WnITffQIB r6fiNE4N7Inijl5wqvuwwo/OcjIJsplsUa1tmDgUFIchYJd7XpPvSeTo1wDrziDD nS2po4Sf5jsaR4Edj+aaxnnW7+Is8oy9D/Bh4N9BbtAF3gKQ1vuy2CpyxhKbNbFO /BLn2tBBAk6CF317vS/v5175zUSoPFTCKj/cFapRTYULzE6mzhCyUGr3oeSIMM9c FgdZMflk+WKjI2WX7BE83OqtFyVN9AtahJu4N8AFu4QUlrwfkxioNvmQAT+A5swy m29Nyb2hNDjyxP7J/muktD08HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBP3T7aL 1o4BMeE3tBBO/CwSWAvaMB8GA1UdIwQYMBaAFPWfvFxYgDwNfKuKvULhT9OCEoik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8xMkY0REYxODU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBBMThxNHE5UXVGUDA0SVNp S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlaLThYRmlBUEExOHE0cTlRdUZQMDRJU2lLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8xMkY0REYxODU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi85Wi04WEZpQVBB MThxNHE5UXVGUDA0SVNpS1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs59Q0ksYEd75T21YtZGZe0A+g4loZ0vMouz0XE5taVfQXoOpjqmcw ElcyzaL66lqaX2T4OryNbBNFTqaf+jdTrtxw2j0Ns605OKFY0IPmNr5zxgGRW7n6 SjfbJn0f01+nYfvtmsnNHawWQLKUrqbF72aJcFCKe624fkBJd3y6rhDPnSXtFWTE Ab3eAQWcqAUIcUM0F0bGi2jKYSDTA4Mz0iQh4hO/kj61mwRNgrbVA6oMqxI5dH6l m8ACMZQUJnhG1vh4fFptV0UrFHY4cce8UcUTpN7jJ+P5v/aGcD0omd8XAcUoauZg j3zAtL/BhFif1Hfu1iZpnlUilYBeP/9b -----END CERTIFICATE-----Generated at Thu Jul 3 06:32:54 2025 by rpki-client