$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft File: R8vvcL1VuVMzMbi8wumClWOizpQ.mft (raw, json) Hash identifier: 8jm/rC6WqLhKH83weTxLRe54LPjj+VYiCP5Qj4/Jyuo= Subject key identifier: 78:20:6B:BD:3E:3D:3B:27:F6:21:A7:9B:CD:E0:B3:88:B1:38:4E:8A Authority key identifier: 47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94 Certificate issuer: /CN=A9142A1D/serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94 Certificate serial: 0663 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft Manifest number: 064F Signing time: Fri 22 Aug 2025 22:50:32 +0000 Manifest this update: Fri 22 Aug 2025 22:50:31 +0000 Manifest next update: Fri 29 Aug 2025 22:50:31 +0000 Files and hashes: 1: R8vvcL1VuVMzMbi8wumClWOizpQ.crl (hash: Uu3TBp6VbgPpCcwt0f0WkXlVcUf1c9lP/UR1tNlLF1Q=) 2: 440BBCC8D50411EB8AB09711C4F9AE02.roa (hash: qO/kt1cMyB8zrA4ykFY3E6NDvsrSs/t7vGIuj96fEPU=) 3: 0C65AFCECE8511ECAEF2C52BC4F9AE02.roa (hash: 5VW5u5nV4cWkOhmuhHmaXAMAI+xByp0pPJ4g2dPBTqE=) 4: 2C9AF3A2659411EDA3257D0AC4F9AE02.roa (hash: l5U4Aj0G/of9H3Qhhfeqyo1Zivkl+XdCF8RMvmc+X6E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1635 (0x663) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142A1D, serialNumber=47CBEF70BD55B9533331B8BCC2E9829563A2CE94 Validity Not Before: Aug 22 22:50:31 2025 GMT Not After : Aug 29 22:50:31 2025 GMT Subject: CN=68a8f437-7cdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:42:1d:d4:90:76:be:90:b4:11:cc:2e:dc:35: f4:7b:58:8f:2c:34:c0:96:f8:c2:37:92:2e:31:9a: 12:7b:93:9d:fd:d5:7f:fa:1c:bb:de:49:b0:d7:d2: 55:bf:b3:32:ef:18:37:a7:ce:82:8e:34:2d:8d:84: b2:83:58:be:bf:22:57:44:ef:59:d7:f6:00:81:d6: d7:a6:90:77:93:c3:b8:3f:51:45:92:1e:8d:21:00: 55:4e:9a:64:d7:f6:85:70:cc:7c:1a:57:b4:ea:af: 10:88:4d:89:ff:20:a9:82:a2:14:a4:4b:ab:5f:01: b2:d3:28:29:9b:53:f2:82:55:35:b4:7d:4d:f7:48: a6:cb:b1:af:8d:3b:bc:29:e0:57:68:b3:5e:9d:b6: c1:fa:20:d5:e9:04:99:d6:ed:f9:91:ac:d7:4f:80: 8f:11:68:0b:e0:0d:87:a5:84:5e:88:39:45:5c:7f: 00:1e:8e:7f:b5:c6:86:43:ef:9a:e3:bc:b6:3e:f3: 36:7b:4a:e1:8d:85:fc:95:c3:83:2e:45:73:3b:f6: 3e:9e:55:e7:dd:f8:15:b8:0b:a0:2f:71:52:d5:83: af:54:f4:56:a1:0b:d9:92:0d:a9:e5:08:90:4a:46: 15:b7:50:9b:12:3f:af:56:59:ad:3c:f3:8b:1e:31: bf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:20:6B:BD:3E:3D:3B:27:F6:21:A7:9B:CD:E0:B3:88:B1:38:4E:8A X509v3 Authority Key Identifier: keyid:47:CB:EF:70:BD:55:B9:53:33:31:B8:BC:C2:E9:82:95:63:A2:CE:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R8vvcL1VuVMzMbi8wumClWOizpQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A1D/454BCDA49E9411EBBC80DF20C4F9AE02/R8vvcL1VuVMzMbi8wumClWOizpQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:67:af:c0:19:43:69:1a:04:2d:34:ed:3a:2e:af:a5:17:d9: a4:79:0e:10:b9:bd:0e:6f:a9:48:8d:e1:4d:34:cb:b4:93:84: 11:6b:a0:5e:71:94:10:6f:83:ff:ed:65:f1:14:39:86:cb:39: 6b:d2:93:82:9a:fe:57:16:99:cd:a2:7d:45:16:ee:92:f8:31: d1:14:8d:70:bd:6a:a2:06:f8:f9:74:02:6d:56:98:c6:9e:94: 36:00:71:bb:92:ce:cf:9a:79:49:42:52:28:a6:cc:4f:36:fe: 97:dd:c5:be:6d:64:88:fb:06:46:42:a8:c4:f7:95:06:7e:10: f1:31:d4:65:93:c0:84:ba:7a:1c:f2:30:29:ed:2e:92:87:c4: 6f:37:78:38:0b:f9:c7:b9:b8:67:8c:82:51:15:28:6e:e2:d9: 39:2e:a3:38:f3:7e:ec:cc:40:2f:69:50:9f:d4:b0:de:c6:dd: e6:86:88:e8:b6:1e:ed:a8:db:10:58:d7:df:80:03:12:4a:48: 42:cf:a4:0d:f4:68:2c:af:39:02:bf:13:ba:e6:ce:bf:34:48: 3a:dc:e7:13:bd:2b:9a:81:0e:58:68:04:35:eb:51:47:c6:66: 89:2f:18:a0:54:9c:27:44:a5:41:c2:85:ea:63:56:68:15:15: b3:f2:0f:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJBMUQxMTAvBgNVBAUTKDQ3Q0JFRjcwQkQ1NUI5NTMzMzMxQjhCQ0MyRTk4Mjk1 NjNBMkNFOTQwHhcNMjUwODIyMjI1MDMxWhcNMjUwODI5MjI1MDMxWjAYMRYwFAYD VQQDEw02OGE4ZjQzNy03Y2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6kId1JB2vpC0Ecwu3DX0e1iPLDTAlvjCN5IuMZoSe5Od/dV/+hy73kmw19JV v7My7xg3p86CjjQtjYSyg1i+vyJXRO9Z1/YAgdbXppB3k8O4P1FFkh6NIQBVTppk 1/aFcMx8Gle06q8QiE2J/yCpgqIUpEurXwGy0ygpm1PyglU1tH1N90imy7GvjTu8 KeBXaLNenbbB+iDV6QSZ1u35kazXT4CPEWgL4A2HpYReiDlFXH8AHo5/tcaGQ++a 47y2PvM2e0rhjYX8lcODLkVzO/Y+nlXn3fgVuAugL3FS1YOvVPRWoQvZkg2p5QiQ SkYVt1CbEj+vVlmtPPOLHjG/UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHgga70+ PTsn9iGnm83gs4ixOE6KMB8GA1UdIwQYMBaAFEfL73C9VblTMzG4vMLpgpVjos6U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkExRC80NTRCQ0RBNDlF OTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVWTXpNYmk4d3VtQ2xXT2l6 cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I4dnZjTDFWdVZNek1iaTh3dW1DbFdPaXpwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MkExRC80NTRCQ0RBNDlFOTQxMUVCQkM4MERGMjBDNEY5QUUwMi9SOHZ2Y0wxVnVW TXpNYmk4d3VtQ2xXT2l6cFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Z6/AGUNpGgQtNO06Lq+lF9mkeQ4Qub0Ob6lIjeFNNMu0k4QRa6Be cZQQb4P/7WXxFDmGyzlr0pOCmv5XFpnNon1FFu6S+DHRFI1wvWqiBvj5dAJtVpjG npQ2AHG7ks7PmnlJQlIopsxPNv6X3cW+bWSI+wZGQqjE95UGfhDxMdRlk8CEunoc 8jAp7S6Sh8RvN3g4C/nHubhnjIJRFShu4tk5LqM4837szEAvaVCf1LDext3mhojo th7tqNsQWNffgAMSSkhCz6QN9GgsrzkCvxO65s6/NEg63OcTvSuagQ5YaAQ161FH xmaJLxigVJwnRKVBwoXqY1ZoFRWz8g83 -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:07 2025 by rpki-client