$ rpki-client -vvf rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft File: m8Zs_4CainEhIAXdnCcEerQYyKc.mft (raw, json) Hash identifier: rDYhOjNEfSvsqESKKOi2Sn0drIckXX+mJmQUoL1pZTw= Subject key identifier: 29:B1:B8:56:8E:9D:55:9F:72:2E:4A:F7:07:99:FF:C5:EB:03:B6:7D Authority key identifier: 9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 Certificate issuer: /CN=A9173780/serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Certificate serial: 0A45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft Manifest number: 0A34 Signing time: Fri 22 Aug 2025 19:54:12 +0000 Manifest this update: Fri 22 Aug 2025 19:54:12 +0000 Manifest next update: Fri 29 Aug 2025 19:54:12 +0000 Files and hashes: 1: m8Zs_4CainEhIAXdnCcEerQYyKc.crl (hash: 54QuylRwsk8oHTSwbr6v5I61931vL5a+V3dT11gq50Y=) 2: 87C1A5F8245711F083602A0BC4F9AE02.roa (hash: 3SdLflE7QNKZukodJvPP0+VEXx4PpxcKaoT3DVdeoho=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2629 (0xa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173780, serialNumber=9BC66CFF809A8A71212005DD9C27047AB418C8A7 Validity Not Before: Aug 22 19:54:12 2025 GMT Not After : Aug 29 19:54:12 2025 GMT Subject: CN=68a8cae4-b6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a2:2d:34:97:fe:e9:06:c5:63:f7:ee:a1:e6: ea:66:84:a8:80:d2:5e:d8:86:ad:15:16:2f:e0:f7: c3:e9:96:fb:2d:3b:d2:7f:a9:52:2c:06:b2:81:e2: 83:90:78:4c:e6:9d:b6:f2:87:46:a8:6d:88:6b:49: 1f:d4:00:d4:52:af:ac:0d:65:f3:2b:c4:12:86:5b: 93:33:5b:80:2f:6b:a8:48:85:9f:59:54:e6:bd:bc: 94:fa:d4:ab:3c:bf:89:ca:74:fe:f0:a2:61:a3:89: f1:67:c5:de:b2:56:ac:9b:98:40:1b:60:33:ba:bd: 81:f4:17:a4:75:aa:6a:a5:75:ee:18:2d:85:a6:ad: 0f:21:88:7b:e0:0d:c8:d2:17:fa:93:00:a1:5d:51: ba:c6:a1:86:4f:45:69:b5:a0:de:61:47:37:bd:d1: ca:a3:2d:f1:65:8e:60:b2:d5:16:35:64:c0:8b:41: 07:6b:1c:8a:e6:61:eb:35:b3:5b:d7:dc:35:8f:e8: b0:71:b8:16:aa:35:a8:af:52:72:77:11:f0:49:7c: f3:ee:ab:9b:70:e6:51:e5:da:48:a6:65:91:43:27: be:6e:96:6e:b1:56:94:3a:18:92:c5:60:69:60:47: dc:26:c8:c0:a2:b4:35:68:30:35:e2:36:7d:46:ff: b8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B1:B8:56:8E:9D:55:9F:72:2E:4A:F7:07:99:FF:C5:EB:03:B6:7D X509v3 Authority Key Identifier: keyid:9B:C6:6C:FF:80:9A:8A:71:21:20:05:DD:9C:27:04:7A:B4:18:C8:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8Zs_4CainEhIAXdnCcEerQYyKc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173780/8EB62DFA77ED11EAAA4CC422C4F9AE02/m8Zs_4CainEhIAXdnCcEerQYyKc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:c4:5c:0c:22:0a:df:1a:8b:e6:cc:8a:82:0b:d4:5a:0d:80: 8f:8e:2a:8c:b1:9c:80:1d:49:0c:fe:22:5e:28:c8:15:4a:f3: 50:8b:03:78:70:9a:9e:d5:61:02:2d:af:1e:ca:14:8a:cf:d4: df:c1:12:16:a3:75:32:bb:d1:59:fa:f7:72:52:2e:1f:a4:87: 60:b0:ba:a3:5b:c1:07:a6:ba:8c:31:57:1a:d6:6b:3d:8c:ee: 5d:9c:b6:d0:bf:b9:f7:db:b7:de:bf:08:31:75:83:88:78:40: b9:35:87:cf:d8:3d:ad:ae:7a:24:d7:94:7d:a4:5c:10:13:51: c5:03:32:2c:10:6b:56:4d:72:bb:8d:25:e3:3c:77:c4:cf:9f: f0:05:9f:f4:6f:12:2a:43:46:b0:06:06:48:7d:1c:f5:26:57: fb:86:36:62:b9:5b:4e:d5:02:52:ff:c3:a7:23:8a:6e:8a:08: 3d:5e:94:ae:e2:11:02:53:97:aa:01:18:38:35:76:df:e4:0f: d8:d7:c9:84:8e:d3:f8:2b:be:2c:62:42:ff:ae:96:f5:8a:08: b0:c0:91:5a:84:53:00:ba:9b:2f:16:41:56:34:1e:d7:7e:38: 7f:c3:24:ab:90:95:af:92:92:e1:22:44:b9:39:18:c1:e6:3f: 54:85:37:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM3ODAxMTAvBgNVBAUTKDlCQzY2Q0ZGODA5QThBNzEyMTIwMDVERDlDMjcwNDdB QjQxOEM4QTcwHhcNMjUwODIyMTk1NDEyWhcNMjUwODI5MTk1NDEyWjAYMRYwFAYD VQQDEw02OGE4Y2FlNC1iNmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArqItNJf+6QbFY/fuoebqZoSogNJe2IatFRYv4PfD6Zb7LTvSf6lSLAaygeKD kHhM5p228odGqG2Ia0kf1ADUUq+sDWXzK8QShluTM1uAL2uoSIWfWVTmvbyU+tSr PL+JynT+8KJho4nxZ8Xeslasm5hAG2Azur2B9BekdapqpXXuGC2Fpq0PIYh74A3I 0hf6kwChXVG6xqGGT0VptaDeYUc3vdHKoy3xZY5gstUWNWTAi0EHaxyK5mHrNbNb 19w1j+iwcbgWqjWor1JydxHwSXzz7qubcOZR5dpIpmWRQye+bpZusVaUOhiSxWBp YEfcJsjAorQ1aDA14jZ9Rv+4xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmxuFaO nVWfci5K9weZ/8XrA7Z9MB8GA1UdIwQYMBaAFJvGbP+AmopxISAF3ZwnBHq0GMin MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Mzc4MC84RUI2MkRGQTc3 RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWluRWhJQVhkbkNjRWVyUVl5 S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL204WnNfNENhaW5FaElBWGRuQ2NFZXJRWXlLYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Mzc4MC84RUI2MkRGQTc3RUQxMUVBQUE0Q0M0MjJDNEY5QUUwMi9tOFpzXzRDYWlu RWhJQVhkbkNjRWVyUVl5S2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC6xFwMIgrfGovmzIqCC9RaDYCPjiqMsZyAHUkM/iJeKMgVSvNQiwN4 cJqe1WECLa8eyhSKz9TfwRIWo3Uyu9FZ+vdyUi4fpIdgsLqjW8EHprqMMVca1ms9 jO5dnLbQv7n327fevwgxdYOIeEC5NYfP2D2trnok15R9pFwQE1HFAzIsEGtWTXK7 jSXjPHfEz5/wBZ/0bxIqQ0awBgZIfRz1Jlf7hjZiuVtO1QJS/8OnI4puigg9XpSu 4hECU5eqARg4NXbf5A/Y18mEjtP4K74sYkL/rpb1igiwwJFahFMAupsvFkFWNB7X fjh/wySrkJWvkpLhIkS5ORjB5j9UhTck -----END CERTIFICATE-----Generated at Sat Aug 23 19:25:53 2025 by rpki-client