$ rpki-client -vvf rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft File: 8iRPqPsPyfURGt76wZeZwp88iFs.mft (raw, json) Hash identifier: J6J8c4q+DRVlRC0KQmWzkEEIyFXOJ0Sv4E7IiJbu2Sg= Subject key identifier: 1B:98:63:D3:45:BD:BC:61:85:47:A2:9C:56:22:3A:23:E4:81:9A:72 Authority key identifier: F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B Certificate issuer: /CN=A9148C20/serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft Manifest number: 01C4 Signing time: Sat 23 Aug 2025 03:05:05 +0000 Manifest this update: Sat 23 Aug 2025 03:05:05 +0000 Manifest next update: Sat 30 Aug 2025 03:05:05 +0000 Files and hashes: 1: 8iRPqPsPyfURGt76wZeZwp88iFs.crl (hash: QgMBekv3HpQMnhy14TbWPJSNqcTgq3kKorwx8jKK5l0=) 2: A8CCF2D4CC7A11EDA9430E31C4F9AE02.roa (hash: aeO1Mj/elW/xh7ym1J+KF848UMK5HdQa3I9hteU56q0=) 3: A9862EACCC7A11EDA9430E31C4F9AE02.roa (hash: pPZ9JIadC5wyaOareOX2satHOT6x5cmd8WRCUuxQZvg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:05:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9148C20, serialNumber=F2244FA8FB0FC9F5111ADEFAC19799C29F3C885B Validity Not Before: Aug 23 03:05:05 2025 GMT Not After : Aug 30 03:05:05 2025 GMT Subject: CN=68a92fe1-3444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d1:53:63:fc:9a:76:74:c2:1c:d2:a4:25:8b: e2:63:41:89:07:65:c8:40:0d:b4:9e:49:d0:01:1f: e5:61:72:47:ad:cd:d6:99:e9:0d:25:4b:ff:a7:95: 59:38:11:03:60:ec:68:cc:a7:f7:4d:00:3d:87:f0: 9c:fe:6e:8f:dc:2d:d9:3c:2d:58:4d:ca:df:bd:1f: 2c:e0:c1:ae:72:ee:4e:06:b8:81:a9:14:6f:87:30: 0a:ff:85:43:be:b4:e5:ad:a0:e6:e5:f9:01:8b:13: 5a:33:88:0d:79:22:d4:c0:7a:1f:d5:28:c4:22:f1: c0:56:51:3a:b9:dc:3f:7b:fb:eb:86:ea:5c:57:6d: 0f:9b:90:ac:92:74:25:de:e8:c3:21:29:44:40:49: 80:be:7a:8d:25:99:6c:3d:1e:cd:bf:40:02:e7:90: 60:ec:e3:bf:f3:02:aa:14:6e:20:8e:c1:6e:80:31: 39:5a:dd:34:d2:17:b1:ee:95:92:39:59:25:59:99: 27:d4:59:16:99:b8:81:2b:06:72:0d:3a:c1:1f:26: 4d:f6:44:d0:b0:c5:36:85:0b:22:13:92:54:b3:93: 35:17:d6:a7:1b:8b:60:b3:c4:3d:be:72:cb:25:fa: f0:c5:70:35:76:d2:f8:5f:c7:79:0f:ec:6d:cf:18: 71:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:98:63:D3:45:BD:BC:61:85:47:A2:9C:56:22:3A:23:E4:81:9A:72 X509v3 Authority Key Identifier: keyid:F2:24:4F:A8:FB:0F:C9:F5:11:1A:DE:FA:C1:97:99:C2:9F:3C:88:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8iRPqPsPyfURGt76wZeZwp88iFs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148C20/A5A4CD10CC7611ED93CEAD7EC4F9AE02/8iRPqPsPyfURGt76wZeZwp88iFs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:a5:8d:ec:76:7e:03:f5:0b:93:b2:11:17:8b:d9:a6:a8:e5: 6d:59:18:73:78:9e:4d:30:cd:96:28:c2:a9:ab:29:4c:3d:ba: c7:07:2d:1a:a2:1b:f3:66:50:63:0e:8c:a7:7d:21:62:4f:bf: 8b:7a:70:74:e7:09:82:35:e2:8d:d6:61:ed:9e:9b:d4:1e:ad: e9:d8:46:b9:12:19:87:b4:f6:bf:e6:72:75:e8:a9:6d:b9:4b: 53:9e:ab:10:e8:60:a7:42:67:98:28:64:4a:81:8b:75:52:b2: 03:42:9b:da:f8:b5:34:98:bc:f3:c8:32:9e:42:3b:f9:2c:6e: 3a:ca:e5:4d:0b:20:40:95:f9:e5:08:93:18:37:24:eb:8e:cc: 9a:46:9d:df:30:2a:85:85:ac:f9:9c:ec:dd:35:96:2d:06:98: 19:fa:e2:0f:f6:70:69:cc:37:34:c8:62:57:10:5d:54:2d:33: f0:56:be:78:60:14:fd:1a:d2:68:ab:d2:bf:39:2c:d5:aa:10: d8:ce:eb:0b:22:51:de:29:7b:28:56:57:36:89:e3:8f:45:4b: 63:3f:a3:ea:14:39:24:79:0a:2d:bc:38:ab:2e:c9:47:e7:c2: b1:f0:fe:2c:36:a5:0b:ed:fa:ff:88:67:40:23:e4:a8:6e:72: 45:47:5a:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDhDMjAxMTAvBgNVBAUTKEYyMjQ0RkE4RkIwRkM5RjUxMTFBREVGQUMxOTc5OUMy OUYzQzg4NUIwHhcNMjUwODIzMDMwNTA1WhcNMjUwODMwMDMwNTA1WjAYMRYwFAYD VQQDEw02OGE5MmZlMS0zNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdFTY/yadnTCHNKkJYviY0GJB2XIQA20nknQAR/lYXJHrc3WmekNJUv/p5VZ OBEDYOxozKf3TQA9h/Cc/m6P3C3ZPC1YTcrfvR8s4MGucu5OBriBqRRvhzAK/4VD vrTlraDm5fkBixNaM4gNeSLUwHof1SjEIvHAVlE6udw/e/vrhupcV20Pm5CsknQl 3ujDISlEQEmAvnqNJZlsPR7Nv0AC55Bg7OO/8wKqFG4gjsFugDE5Wt000hex7pWS OVklWZkn1FkWmbiBKwZyDTrBHyZN9kTQsMU2hQsiE5JUs5M1F9anG4tgs8Q9vnLL JfrwxXA1dtL4X8d5D+xtzxhxuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBuYY9NF vbxhhUeinFYiOiPkgZpyMB8GA1UdIwQYMBaAFPIkT6j7D8n1ERre+sGXmcKfPIhb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEMyMC9BNUE0Q0QxMEND NzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlmVVJHdDc2d1plWndwODhp RnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhpUlBxUHNQeWZVUkd0NzZ3WmVad3A4OGlGcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OEMyMC9BNUE0Q0QxMENDNzYxMUVEOTNDRUFEN0VDNEY5QUUwMi84aVJQcVBzUHlm VVJHdDc2d1plWndwODhpRnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASpY3sdn4D9QuTshEXi9mmqOVtWRhzeJ5NMM2WKMKpqylMPbrHBy0a ohvzZlBjDoynfSFiT7+LenB05wmCNeKN1mHtnpvUHq3p2Ea5EhmHtPa/5nJ16Klt uUtTnqsQ6GCnQmeYKGRKgYt1UrIDQpva+LU0mLzzyDKeQjv5LG46yuVNCyBAlfnl CJMYNyTrjsyaRp3fMCqFhaz5nOzdNZYtBpgZ+uIP9nBpzDc0yGJXEF1ULTPwVr54 YBT9GtJoq9K/OSzVqhDYzusLIlHeKXsoVlc2ieOPRUtjP6PqFDkkeQotvDirLslH 58Kx8P4sNqUL7fr/iGdAI+SobnJFR1rt -----END CERTIFICATE-----Generated at Sat Aug 23 23:58:25 2025 by rpki-client