$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft File: 8keuvQdfyMvz2bgFVp6rvueXWws.mft (raw, json) Hash identifier: kk3dldv2XDDrQ1YPS4iNlpAviTveyH0vcHskleBEe1Y= Subject key identifier: 0D:24:A1:5E:0A:17:A4:41:84:7F:77:37:D1:12:88:49:D1:42:AD:29 Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft Manifest number: AD Signing time: Sat 23 Aug 2025 06:21:32 +0000 Manifest this update: Sat 23 Aug 2025 06:21:31 +0000 Manifest next update: Sat 30 Aug 2025 06:21:31 +0000 Files and hashes: 1: 8keuvQdfyMvz2bgFVp6rvueXWws.crl (hash: U7naoLhRMULyOfTEPP855KZKVWV8751NdxGF06QnQrc=) 2: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (hash: XBKKNWAXn91g8U8p9IncnaKYMksmwYcj3BAK92xQbrY=) 3: 3EEBC4867BFF11EFA2839E45C4F9AE02.roa (hash: WqNZ01BJf912ER9E1SW1cMixBzAePTfawzNryqp3V6U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Validity Not Before: Aug 23 06:21:31 2025 GMT Not After : Aug 30 06:21:31 2025 GMT Subject: CN=68a95deb-06f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2f:9e:2c:ba:fa:23:ce:e1:94:2d:7a:93:a0: fe:34:21:23:f4:bc:10:1a:8f:cb:21:c5:06:75:fc: 65:da:eb:fa:89:db:59:39:ae:ec:85:9a:01:d6:fe: 9d:0a:13:63:8a:f8:eb:7e:e4:f7:22:20:79:d4:98: 92:84:9e:32:8a:63:c1:d8:3b:02:a3:a0:60:ba:38: 0e:10:07:04:d9:03:fa:96:b5:62:dd:1e:5e:fa:6f: 4d:ce:7b:98:a5:53:6c:67:f1:e2:73:2f:23:20:18: ec:53:d2:4b:91:54:8d:00:fe:da:f9:de:72:c1:dc: 05:57:7c:48:fe:11:27:18:4d:c9:bf:49:8c:99:74: 45:0b:be:76:08:e4:55:7b:6a:43:9a:0d:dd:63:d5: ea:5b:65:31:df:dc:98:7d:52:a6:6d:0d:b2:4d:82: 69:9c:92:75:92:23:8e:6e:88:44:e8:c8:a7:60:e5: 65:59:38:31:07:a2:5e:9a:aa:73:b6:9e:71:de:b7: 12:d6:a3:43:58:81:b1:63:68:1c:ad:d1:16:b8:28: 01:a5:e8:71:3f:8a:f4:02:a0:2a:52:b4:31:c7:63: 4c:0c:54:1f:fe:8f:cf:90:a2:35:ca:06:01:5a:e5: 93:7d:92:6e:68:e7:81:56:56:a9:63:9f:4a:f5:5f: eb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:24:A1:5E:0A:17:A4:41:84:7F:77:37:D1:12:88:49:D1:42:AD:29 X509v3 Authority Key Identifier: keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:69:76:eb:6f:16:89:56:4f:2a:22:a8:cc:36:22:af:a1:e2: 2c:29:0c:b9:b1:e5:13:cf:05:d0:41:68:e4:3f:1a:73:31:f8: 3b:eb:13:39:32:fd:21:9e:00:dc:dd:a0:8d:ca:50:5e:68:8c: 91:ed:bd:6c:1f:47:16:d3:39:7d:07:1b:aa:12:bf:2d:23:12: 08:4b:d5:d8:f2:72:ee:7d:f8:64:97:d6:2c:51:b0:52:d1:85: af:39:a6:dc:c9:38:33:12:59:56:50:b2:95:c9:a8:fa:a8:cf: e5:48:8f:e9:a5:e1:61:b1:02:56:54:e7:50:02:b5:de:28:5a: 52:fc:2b:0d:0d:4c:4f:d2:bb:77:de:b4:71:ad:46:e2:7a:3c: 5d:08:af:14:b6:ca:1e:a6:d2:3f:93:41:26:92:35:0d:11:0b: 13:c9:ef:b7:4a:3d:31:73:20:d6:ee:23:32:14:b8:05:f1:48: 94:91:78:35:5a:d1:1d:d3:b4:e0:73:c7:99:b8:dd:33:3d:fa: ef:8d:ce:d6:57:53:84:20:56:65:f9:ed:1b:bf:ba:76:69:02: 47:f8:f3:82:f1:3c:3d:47:01:ca:af:de:a3:b7:c2:b4:5f:f3: 39:85:fe:dc:69:74:14:1b:76:85:10:58:c1:25:22:34:22:ae: 5f:49:e5:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKEYyNDdBRUJEMDc1RkM4Q0JGM0Q5QjgwNTU2OUVBQkJF RTc5NzVCMEIwHhcNMjUwODIzMDYyMTMxWhcNMjUwODMwMDYyMTMxWjAYMRYwFAYD VQQDEw02OGE5NWRlYi0wNmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7C+eLLr6I87hlC16k6D+NCEj9LwQGo/LIcUGdfxl2uv6idtZOa7shZoB1v6d ChNjivjrfuT3IiB51JiShJ4yimPB2DsCo6BgujgOEAcE2QP6lrVi3R5e+m9NznuY pVNsZ/Hicy8jIBjsU9JLkVSNAP7a+d5ywdwFV3xI/hEnGE3Jv0mMmXRFC752CORV e2pDmg3dY9XqW2Ux39yYfVKmbQ2yTYJpnJJ1kiOObohE6MinYOVlWTgxB6Jemqpz tp5x3rcS1qNDWIGxY2gcrdEWuCgBpehxP4r0AqAqUrQxx2NMDFQf/o/PkKI1ygYB WuWTfZJuaOeBVlapY59K9V/r1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA0koV4K F6RBhH93N9ESiEnRQq0pMB8GA1UdIwQYMBaAFPJHrr0HX8jL89m4BVaeq77nl1sL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ENkYxMDUyMjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlNdnoyYmdGVnA2cnZ1ZVhX d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUE1OC9ENkYxMDUyMjdCRkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlN dnoyYmdGVnA2cnZ1ZVhXd3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNaXbrbxaJVk8qIqjMNiKvoeIsKQy5seUTzwXQQWjkPxpzMfg76xM5 Mv0hngDc3aCNylBeaIyR7b1sH0cW0zl9BxuqEr8tIxIIS9XY8nLuffhkl9YsUbBS 0YWvOabcyTgzEllWULKVyaj6qM/lSI/ppeFhsQJWVOdQArXeKFpS/CsNDUxP0rt3 3rRxrUbiejxdCK8UtsoeptI/k0EmkjUNEQsTye+3Sj0xcyDW7iMyFLgF8UiUkXg1 WtEd07Tgc8eZuN0zPfrvjc7WV1OEIFZl+e0bv7p2aQJH+POC8Tw9RwHKr96jt8K0 X/M5hf7caXQUG3aFEFjBJSI0Iq5fSeU1 -----END CERTIFICATE-----Generated at Sat Aug 23 17:46:13 2025 by rpki-client