$ rpki-client -vvf rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft File: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft (raw, json) Hash identifier: zNJJHfkO6uBMqVGrufS4mMXPjsA0qqRh3H3lmKKG0UY= Subject key identifier: 2B:AA:0A:DF:2B:80:10:AE:51:F0:F0:8F:AC:9F:C8:58:DA:49:6B:AC Authority key identifier: F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 Certificate issuer: /CN=A9144FDD/serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Certificate serial: 08D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft Manifest number: 08C2 Signing time: Fri 22 Aug 2025 20:35:44 +0000 Manifest this update: Fri 22 Aug 2025 20:35:43 +0000 Manifest next update: Fri 29 Aug 2025 20:35:43 +0000 Files and hashes: 1: 8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl (hash: UjDIhwQ3Byo2Du2rPybiFk2s5caMl8iEWmuwqvRTelM=) 2: E8053F36BC3011EA840E2A56C4F9AE02.roa (hash: eX1Jqzb/wvl6CH4yih7NF/ZllkUpoBKZivz1fQWZTFc=) 3: E89C37B0BC3011EA840E2A56C4F9AE02.roa (hash: u1VWd5IJTGCG//nYGKvxvoYAm+UMxol66g1kBC9OWXk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2256 (0x8d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144FDD, serialNumber=F16E080AEF193F5D59EA2A19ED5A6D75282A0C84 Validity Not Before: Aug 22 20:35:43 2025 GMT Not After : Aug 29 20:35:43 2025 GMT Subject: CN=68a8d4a0-ee36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fe:e3:ba:95:c0:a0:b7:bc:56:4a:ef:82:37: 28:91:b5:c7:44:61:f9:ee:f2:a7:35:8d:0f:bc:48: 55:3d:bb:c5:24:41:c9:36:b5:8c:09:7a:c4:a3:b9: 43:b8:04:7c:02:6a:98:48:08:6d:86:fe:47:ca:5d: 5b:74:aa:82:43:45:fd:31:f5:e6:60:8e:c0:3c:75: e6:1a:11:96:7a:bc:50:97:8a:5b:d2:ee:b3:59:1e: 1f:74:76:47:e9:2f:54:63:44:0d:36:bf:43:e6:b5: e2:af:21:ca:66:52:26:f0:7f:8e:6f:24:1f:5e:98: 59:1a:8f:1f:e5:cd:9b:cd:37:bd:d9:06:a5:bb:31: 7a:71:df:ca:b9:21:43:cf:fe:de:e7:cd:e8:c7:61: b6:49:28:3b:cc:a6:b0:0c:fa:53:37:63:8d:d1:ff: fb:9b:ae:1c:bf:3e:4c:f6:9b:96:04:a7:91:4a:42: 92:1b:31:c6:1d:d3:0f:93:3d:24:3c:83:b5:d8:93: 02:85:ca:1d:25:2b:c1:1b:df:12:ad:e8:d8:b7:ac: f5:2d:0d:43:61:46:42:83:bc:84:41:c1:d7:c0:00: f2:b0:4a:54:d2:dc:2b:a8:6e:e9:92:73:ba:91:8a: 69:9e:ab:55:f5:4e:d6:b3:e2:a3:f7:70:05:f7:25: 07:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AA:0A:DF:2B:80:10:AE:51:F0:F0:8F:AC:9F:C8:58:DA:49:6B:AC X509v3 Authority Key Identifier: keyid:F1:6E:08:0A:EF:19:3F:5D:59:EA:2A:19:ED:5A:6D:75:28:2A:0C:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144FDD/28FB2484BC3011EABBE0EC55C4F9AE02/8W4ICu8ZP11Z6ioZ7VptdSgqDIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:05:65:fa:62:90:21:da:20:af:fe:92:b5:68:43:ba:1b:2d: 64:9b:fe:14:65:5e:83:24:0a:9c:3a:b2:9a:ae:d1:ac:2f:fe: 28:80:25:34:28:d3:85:dc:21:64:bd:19:85:d6:48:19:84:90: 8a:83:c7:10:d8:2a:11:b5:06:ae:32:16:ca:6f:7e:04:af:59: 5a:6e:12:88:d1:a3:72:7f:f7:89:b1:74:2a:e3:56:f5:e5:a3: 33:3d:61:5c:fe:af:28:f9:cc:5d:33:0e:dc:92:a0:ff:f1:fa: e3:bd:d1:ca:22:78:3d:e0:1e:9d:ed:9e:5f:f2:3d:63:a9:9e: f2:c4:6a:79:84:a1:9a:15:31:bf:9d:3c:20:e7:e9:92:de:38: d1:cf:b9:67:fd:a5:56:43:cb:fa:81:96:01:15:4f:93:64:8b: 46:5e:fe:95:eb:8f:77:6c:16:0c:56:3b:b3:71:7b:94:5f:bf: 47:a8:36:59:f9:1b:f9:a9:a3:56:f1:92:d7:a6:02:2b:24:68: 7c:1b:09:96:05:56:5a:8f:7f:8c:a3:4a:07:28:dc:8b:1a:69: 16:b9:2b:ad:b4:a1:72:c2:2a:c2:b3:64:8f:36:bf:8b:82:59: cb:cc:9c:f4:02:d0:db:9b:aa:6e:39:11:aa:68:76:0d:27:a1: f0:16:5e:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGREQxMTAvBgNVBAUTKEYxNkUwODBBRUYxOTNGNUQ1OUVBMkExOUVENUE2RDc1 MjgyQTBDODQwHhcNMjUwODIyMjAzNTQzWhcNMjUwODI5MjAzNTQzWjAYMRYwFAYD VQQDEw02OGE4ZDRhMC1lZTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7v7jupXAoLe8VkrvgjcokbXHRGH57vKnNY0PvEhVPbvFJEHJNrWMCXrEo7lD uAR8AmqYSAhthv5Hyl1bdKqCQ0X9MfXmYI7APHXmGhGWerxQl4pb0u6zWR4fdHZH 6S9UY0QNNr9D5rXiryHKZlIm8H+ObyQfXphZGo8f5c2bzTe92QaluzF6cd/KuSFD z/7e583ox2G2SSg7zKawDPpTN2ON0f/7m64cvz5M9puWBKeRSkKSGzHGHdMPkz0k PIO12JMChcodJSvBG98SrejYt6z1LQ1DYUZCg7yEQcHXwADysEpU0twrqG7pknO6 kYppnqtV9U7Ws+Kj93AF9yUH4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuqCt8r gBCuUfDwj6yfyFjaSWusMB8GA1UdIwQYMBaAFPFuCArvGT9dWeoqGe1abXUoKgyE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEZERC8yOEZCMjQ4NEJD MzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAxMVo2aW9aN1ZwdGRTZ3FE SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhXNElDdThaUDExWjZpb1o3VnB0ZFNncURJUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NEZERC8yOEZCMjQ4NEJDMzAxMUVBQkJFMEVDNTVDNEY5QUUwMi84VzRJQ3U4WlAx MVo2aW9aN1ZwdGRTZ3FESVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEBWX6YpAh2iCv/pK1aEO6Gy1km/4UZV6DJAqcOrKartGsL/4ogCU0 KNOF3CFkvRmF1kgZhJCKg8cQ2CoRtQauMhbKb34Er1labhKI0aNyf/eJsXQq41b1 5aMzPWFc/q8o+cxdMw7ckqD/8frjvdHKIng94B6d7Z5f8j1jqZ7yxGp5hKGaFTG/ nTwg5+mS3jjRz7ln/aVWQ8v6gZYBFU+TZItGXv6V6493bBYMVjuzcXuUX79HqDZZ +Rv5qaNW8ZLXpgIrJGh8GwmWBVZaj3+Mo0oHKNyLGmkWuSuttKFywirCs2SPNr+L glnLzJz0AtDbm6puORGqaHYNJ6HwFl7l -----END CERTIFICATE-----Generated at Sun Aug 24 00:43:18 2025 by rpki-client