$ rpki-client -vvf rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft File: 8qiUEKVLBHj2ArcxIAUVHClcc3k.mft (raw, json) Hash identifier: GEXJoESrtgKmJu+STm2lGt8F1HoSU+EXaEzGQzTIOwA= Subject key identifier: BC:57:EF:56:E4:D0:E6:A2:08:7C:8B:F0:DA:39:3F:20:90:AE:E7:BC Authority key identifier: F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 Certificate issuer: /CN=A9175300/serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Certificate serial: 0CD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft Manifest number: 0CD2 Signing time: Fri 22 Aug 2025 18:13:15 +0000 Manifest this update: Fri 22 Aug 2025 18:13:14 +0000 Manifest next update: Fri 29 Aug 2025 18:13:14 +0000 Files and hashes: 1: 8qiUEKVLBHj2ArcxIAUVHClcc3k.crl (hash: Jab6dJ28Zqifke7IPuUUApIEYDUjo6pXXEPczcpACtQ=) 2: 68EB3B00F18E11E997528762C4F9AE02.roa (hash: ag4btEEr8nwGBlqow86nAvtb1JX6B7t93yhnFSFUrc4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:13:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3289 (0xcd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175300, serialNumber=F2A89410A54B0478F602B7312005151C295C7379 Validity Not Before: Aug 22 18:13:14 2025 GMT Not After : Aug 29 18:13:14 2025 GMT Subject: CN=68a8b33a-a363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:94:7a:c2:1e:f8:fc:c1:2e:83:13:f0:d8:d9: 7c:13:ac:7d:17:c6:14:2e:0e:de:28:39:43:f7:65: 8b:9b:45:4f:52:ba:87:bb:09:d3:76:8c:7d:79:09: bd:a5:de:cf:1c:86:52:46:2c:fa:98:82:3c:80:55: 8f:0d:f4:ac:b8:15:69:52:5f:90:31:4d:6f:03:75: 9a:90:ff:b1:56:cf:60:6a:6d:77:8a:69:47:05:d4: a1:39:1e:e0:34:b5:5c:bd:a8:f5:52:a6:fc:40:5e: a4:8d:c5:a0:ee:b2:d2:29:77:c6:d1:7a:6a:0c:70: 80:84:ef:4e:e6:71:01:21:0d:8f:90:b6:de:7a:82: 66:10:4d:96:ad:cf:ac:17:d2:80:4a:44:b2:37:e6: 53:2c:31:d0:37:10:d6:3a:a4:7c:fa:3e:29:0f:b6: 7a:99:82:38:02:84:b3:a9:dd:08:73:72:54:54:98: e9:af:48:d3:0d:12:ef:02:21:be:67:67:59:55:43: 20:97:41:8c:39:12:d2:47:df:5b:03:2a:e6:c0:fe: fd:56:1d:ff:0f:2f:c5:fa:f3:1c:a2:de:5f:c7:90: 3f:77:4b:be:cb:44:b2:c0:5a:21:eb:c4:cd:a4:b5: 4f:4e:87:a0:d5:9f:93:42:fd:6e:e0:2b:e4:e0:2a: a5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:57:EF:56:E4:D0:E6:A2:08:7C:8B:F0:DA:39:3F:20:90:AE:E7:BC X509v3 Authority Key Identifier: keyid:F2:A8:94:10:A5:4B:04:78:F6:02:B7:31:20:05:15:1C:29:5C:73:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8qiUEKVLBHj2ArcxIAUVHClcc3k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175300/5EFAD764F18D11E9AD75B860C4F9AE02/8qiUEKVLBHj2ArcxIAUVHClcc3k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1e:46:0a:9a:d9:38:b2:9f:37:37:70:ba:4f:09:cb:9b:df:62: 38:16:d0:99:e8:3c:cc:7a:c4:9a:d7:d4:8e:fe:bb:11:0f:7e: bc:59:61:f1:3a:4c:bd:3c:78:cd:1a:da:d0:6d:a7:be:75:65: a4:1e:5c:b6:66:02:44:67:85:f1:e6:2e:0d:cb:58:f9:91:fa: 9a:b2:22:e6:1f:92:0f:8e:6f:4e:b8:ac:95:54:e0:69:59:43: 25:d9:12:b6:f3:96:0a:86:f2:24:89:ab:f4:f2:e8:a0:2c:da: 8a:dc:14:cd:ca:96:7e:94:e5:19:ef:f1:29:af:ac:1f:e1:a4: 52:40:8a:1d:57:58:f3:00:ca:93:0d:37:4f:61:fa:3b:7b:3b: 7f:e6:48:be:00:04:85:3d:60:e9:17:1b:0c:82:ec:7c:36:d0: 15:9f:bf:b5:77:4d:a4:41:aa:02:5e:b6:f1:cb:fc:8f:09:ff: 71:b1:a8:b8:7b:6d:80:33:d8:91:d5:2a:5d:e0:51:25:dc:ee: 8c:ae:13:2f:26:80:6f:4d:5f:91:2c:46:c7:91:d1:68:dd:ac: 79:1d:8c:d5:9f:97:e1:76:fa:32:ad:bf:7a:26:e0:2d:c8:e9: 2c:2d:f3:de:a6:53:c3:07:31:17:3a:ab:b9:af:b5:fc:f7:ba: cf:ba:de:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzUzMDAxMTAvBgNVBAUTKEYyQTg5NDEwQTU0QjA0NzhGNjAyQjczMTIwMDUxNTFD Mjk1QzczNzkwHhcNMjUwODIyMTgxMzE0WhcNMjUwODI5MTgxMzE0WjAYMRYwFAYD VQQDEw02OGE4YjMzYS1hMzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5R6wh74/MEugxPw2Nl8E6x9F8YULg7eKDlD92WLm0VPUrqHuwnTdox9eQm9 pd7PHIZSRiz6mII8gFWPDfSsuBVpUl+QMU1vA3WakP+xVs9gam13imlHBdShOR7g NLVcvaj1Uqb8QF6kjcWg7rLSKXfG0XpqDHCAhO9O5nEBIQ2PkLbeeoJmEE2Wrc+s F9KASkSyN+ZTLDHQNxDWOqR8+j4pD7Z6mYI4AoSzqd0Ic3JUVJjpr0jTDRLvAiG+ Z2dZVUMgl0GMORLSR99bAyrmwP79Vh3/Dy/F+vMcot5fx5A/d0u+y0SywFoh68TN pLVPToeg1Z+TQv1u4Cvk4CqlZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxX71bk 0OaiCHyL8No5PyCQrue8MB8GA1UdIwQYMBaAFPKolBClSwR49gK3MSAFFRwpXHN5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTMwMC81RUZBRDc2NEYx OEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJIajJBcmN4SUFVVkhDbGNj M2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhxaVVFS1ZMQkhqMkFyY3hJQVVWSENsY2Mzay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTMwMC81RUZBRDc2NEYxOEQxMUU5QUQ3NUI4NjBDNEY5QUUwMi84cWlVRUtWTEJI ajJBcmN4SUFVVkhDbGNjM2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAeRgqa2Tiynzc3cLpPCcub32I4FtCZ6DzMesSa19SO/rsRD368WWHx Oky9PHjNGtrQbae+dWWkHly2ZgJEZ4Xx5i4Ny1j5kfqasiLmH5IPjm9OuKyVVOBp WUMl2RK285YKhvIkiav08uigLNqK3BTNypZ+lOUZ7/Epr6wf4aRSQIodV1jzAMqT DTdPYfo7ezt/5ki+AASFPWDpFxsMgux8NtAVn7+1d02kQaoCXrbxy/yPCf9xsai4 e22AM9iR1Spd4FEl3O6MrhMvJoBvTV+RLEbHkdFo3ax5HYzVn5fhdvoyrb96JuAt yOksLfPeplPDBzEXOqu5r7X897rPut4S -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:56 2025 by rpki-client