$ rpki-client -vvf rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft File: 8YSaZI2S1FeJDUfHIobNqWg6OuM.mft (raw, json) Hash identifier: JAiRz960n6jJzlbymTYFqopZ2mH4Kej/DyBJcD4idMI= Subject key identifier: FC:61:76:D1:65:74:8B:10:CE:1D:F5:17:69:4C:1C:69:55:45:4D:FE Authority key identifier: F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 Certificate issuer: /CN=A9148558/serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Certificate serial: 2651 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft Manifest number: 2639 Signing time: Fri 22 Aug 2025 15:44:25 +0000 Manifest this update: Fri 22 Aug 2025 15:44:25 +0000 Manifest next update: Fri 29 Aug 2025 15:44:25 +0000 Files and hashes: 1: 8YSaZI2S1FeJDUfHIobNqWg6OuM.crl (hash: MvTybmKk7I0aK/epywTSW9gFBzehJQmCHZfWuaOp21k=) 2: 26BB8306A4B111EC86D73A56C4F9AE02.roa (hash: l63wtygU10JOGHCzajVzJ9LClRNutyU2fhR2Mio026I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9809 (0x2651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148558, serialNumber=F1849A648D92D457890D47C72286CDA9683A3AE3 Validity Not Before: Aug 22 15:44:25 2025 GMT Not After : Aug 29 15:44:25 2025 GMT Subject: CN=68a89059-f2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a4:e8:0e:6f:38:6b:bc:74:51:c2:1a:5c:ff: 91:a4:59:89:33:46:a8:80:13:d4:28:2f:74:87:c3: f5:18:38:35:1f:e7:68:4e:94:1f:af:d6:48:76:8a: 8c:2e:a6:39:b1:32:4e:5a:d0:72:b9:c8:48:32:2d: d3:5a:f8:24:96:00:b8:a9:c7:91:8a:ba:55:f4:3e: 75:91:3e:5f:62:ea:2a:7a:44:55:99:5d:b0:82:b4: 2b:31:ca:b9:1d:2c:57:6c:46:f8:a5:19:1f:18:6b: 59:b4:c9:33:20:08:47:0f:8f:84:8d:6a:cc:dd:04: 7e:0c:a0:49:b6:75:a2:a4:da:ea:c0:3d:f4:cc:03: 63:c0:a8:06:3c:02:cf:11:50:02:2f:00:9e:c8:cc: b8:25:46:e5:86:19:a5:3b:08:5f:89:be:1f:f1:04: 7c:e2:d5:71:ed:aa:3b:97:7c:dd:02:b2:f2:8f:c5: f9:e5:86:de:9c:7f:10:94:3b:a1:fa:84:7d:1e:c2: 58:9e:8c:79:5b:92:f8:68:4f:86:ed:31:fc:1a:29: 74:45:d9:68:fe:8e:fa:e2:7a:ac:34:cc:85:c0:76: bb:c2:be:5e:de:46:41:ec:1f:eb:79:2e:f3:88:1a: e5:b4:80:14:47:b8:4a:2c:9a:4a:e0:81:31:8f:0e: 18:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:61:76:D1:65:74:8B:10:CE:1D:F5:17:69:4C:1C:69:55:45:4D:FE X509v3 Authority Key Identifier: keyid:F1:84:9A:64:8D:92:D4:57:89:0D:47:C7:22:86:CD:A9:68:3A:3A:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YSaZI2S1FeJDUfHIobNqWg6OuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148558/1FA3DAB8FAB911E4A7E1505EC4F9AE02/8YSaZI2S1FeJDUfHIobNqWg6OuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:57:d7:bf:96:8f:03:a7:14:f4:55:79:7f:66:a9:e0:6d:38: 8a:03:28:40:a4:d7:37:de:07:14:33:89:6b:75:f4:04:32:38: 46:d9:6f:69:cc:bc:59:41:a0:f5:c5:8c:62:84:13:65:06:e5: 3a:b7:46:e0:c2:61:f2:e3:55:34:10:10:df:8e:19:f7:4b:76: 1e:95:fc:c4:98:dd:68:1e:4c:51:2c:64:82:aa:7b:c1:15:ff: 4f:a3:b0:1b:65:61:9a:af:d0:e4:c8:52:75:d2:22:00:de:80: fb:5c:ce:0f:db:b5:08:d0:0c:50:06:52:97:e5:bf:0d:e9:18: 22:a5:61:52:8c:42:3d:92:a5:fa:ea:69:9a:b0:b0:a7:02:95: da:90:5f:60:6d:0d:87:ca:a0:a3:15:21:35:9a:90:0b:ff:fe: 1c:04:b0:37:5e:37:70:32:6a:3c:8b:75:10:68:ef:3f:4a:f4: 37:32:2c:51:f3:33:0e:8f:7a:90:c1:ff:5b:e1:6b:28:c3:99: 27:d2:17:5d:da:79:a0:6b:35:84:93:1d:72:34:e6:7b:7d:73: e5:c7:3e:ea:e5:fb:ed:fe:cb:a5:f4:f8:10:5e:49:46:37:bb: 2a:e6:bb:22:2e:59:e0:1e:c3:ff:29:59:1d:b9:8a:aa:52:7e: 88:2f:80:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg1NTgxMTAvBgNVBAUTKEYxODQ5QTY0OEQ5MkQ0NTc4OTBENDdDNzIyODZDREE5 NjgzQTNBRTMwHhcNMjUwODIyMTU0NDI1WhcNMjUwODI5MTU0NDI1WjAYMRYwFAYD VQQDEw02OGE4OTA1OS1mMmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA46ToDm84a7x0UcIaXP+RpFmJM0aogBPUKC90h8P1GDg1H+doTpQfr9ZIdoqM LqY5sTJOWtByuchIMi3TWvgklgC4qceRirpV9D51kT5fYuoqekRVmV2wgrQrMcq5 HSxXbEb4pRkfGGtZtMkzIAhHD4+EjWrM3QR+DKBJtnWipNrqwD30zANjwKgGPALP EVACLwCeyMy4JUblhhmlOwhfib4f8QR84tVx7ao7l3zdArLyj8X55YbenH8QlDuh +oR9HsJYnox5W5L4aE+G7TH8Gil0Rdlo/o764nqsNMyFwHa7wr5e3kZB7B/reS7z iBrltIAUR7hKLJpK4IExjw4Y8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxhdtFl dIsQzh31F2lMHGlVRU3+MB8GA1UdIwQYMBaAFPGEmmSNktRXiQ1HxyKGzaloOjrj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODU1OC8xRkEzREFCOEZB QjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFGZUpEVWZISW9iTnFXZzZP dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZU2FaSTJTMUZlSkRVZkhJb2JOcVdnNk91TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODU1OC8xRkEzREFCOEZBQjkxMUU0QTdFMTUwNUVDNEY5QUUwMi84WVNhWkkyUzFG ZUpEVWZISW9iTnFXZzZPdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUV9e/lo8DpxT0VXl/ZqngbTiKAyhApNc33gcUM4lrdfQEMjhG2W9p zLxZQaD1xYxihBNlBuU6t0bgwmHy41U0EBDfjhn3S3YelfzEmN1oHkxRLGSCqnvB Ff9Po7AbZWGar9DkyFJ10iIA3oD7XM4P27UI0AxQBlKX5b8N6RgipWFSjEI9kqX6 6mmasLCnApXakF9gbQ2HyqCjFSE1mpAL//4cBLA3XjdwMmo8i3UQaO8/SvQ3MixR 8zMOj3qQwf9b4Wsow5kn0hdd2nmgazWEkx1yNOZ7fXPlxz7q5fvt/sul9PgQXklG N7sq5rsiLlngHsP/KVkduYqqUn6IL4DB -----END CERTIFICATE-----Generated at Sat Aug 23 19:25:20 2025 by rpki-client