$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft File: t8K-zJe0I3nEStGuteBz4qPaUR4.mft (raw, json) Hash identifier: 35ZwJV/ISDbdVIsUjnd3WabHf+lRtigB1y80+Kmck5E= Subject key identifier: 6A:BB:07:67:ED:93:CB:A8:E9:99:73:E7:53:87:60:2B:A2:37:82:6B Authority key identifier: B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E Certificate issuer: /CN=A9187E45/serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Certificate serial: 04C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft Manifest number: 04A6 Signing time: Sat 23 Aug 2025 00:16:58 +0000 Manifest this update: Sat 23 Aug 2025 00:16:58 +0000 Manifest next update: Sat 30 Aug 2025 00:16:58 +0000 Files and hashes: 1: t8K-zJe0I3nEStGuteBz4qPaUR4.crl (hash: dTyKZ/lIOrpuS+KmCUMXthaZyTxpd/JrkcxTP7XzbLA=) 2: 26341238FB5011EF989C8143C4F9AE02.roa (hash: 6Gx+BiutQSrEbY8mFBzgAsNKgb1qIvA80j3THb6HaOU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1217 (0x4c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187E45, serialNumber=B7C2BECC97B42379C44AD1AEB5E073E2A3DA511E Validity Not Before: Aug 23 00:16:58 2025 GMT Not After : Aug 30 00:16:58 2025 GMT Subject: CN=68a9087a-810e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0e:f2:d7:99:81:05:a8:f2:5b:bf:aa:d8:a8: f4:69:ce:20:aa:3b:6c:f2:1a:9d:fd:1f:2e:3f:89: 30:87:af:a0:30:63:ec:eb:e0:9f:37:71:b8:94:8b: e9:79:20:a8:8e:1b:3d:c3:97:47:2d:d5:94:bb:ce: f7:e3:aa:dd:6a:d6:43:3b:ff:94:92:49:b1:24:ab: 0f:d2:26:9b:b5:84:e2:6b:cf:9f:fd:5b:0f:35:13: ed:2f:16:c9:4c:5d:80:2e:b3:e5:62:7e:1a:78:e1: d6:2b:ee:e5:4b:d5:e1:b0:77:c6:3a:49:57:6e:e6: 7b:7c:f0:38:9d:38:e3:d5:d6:6b:45:91:f9:d1:5f: e0:94:ce:b7:ce:e2:87:66:51:0a:a1:65:97:a9:f3: 64:86:d3:df:4a:f4:5e:5c:f3:6c:12:2e:70:f0:e0: 78:8f:45:1f:b0:b1:c5:47:d9:70:85:dc:8e:5d:cb: 0d:b3:46:2a:0e:2f:42:3e:fd:a3:17:72:78:47:0d: 95:c3:d3:ea:f7:35:89:b7:29:6e:16:62:3f:ae:ba: ae:76:96:4a:01:47:c8:d0:6d:2c:e7:aa:fd:78:a4: e9:ce:01:ec:3f:54:12:b8:6a:a0:6f:d7:cb:65:86: 32:cd:fa:f2:46:7c:f5:a9:9b:13:49:2b:8f:60:08: f2:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BB:07:67:ED:93:CB:A8:E9:99:73:E7:53:87:60:2B:A2:37:82:6B X509v3 Authority Key Identifier: keyid:B7:C2:BE:CC:97:B4:23:79:C4:4A:D1:AE:B5:E0:73:E2:A3:DA:51:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t8K-zJe0I3nEStGuteBz4qPaUR4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E45/5F6AB10C529711ECA377E670C4F9AE02/t8K-zJe0I3nEStGuteBz4qPaUR4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:c4:4d:5c:e9:a7:6f:ed:33:31:9c:37:f9:86:db:33:3f:39: a1:e5:71:5e:b1:6e:a5:e5:42:0e:4a:28:19:69:a7:ed:0e:ae: 4e:c3:d9:a9:a5:a2:17:f6:7c:62:86:bb:e5:39:87:44:89:71: 8d:58:c0:d2:bf:3f:9e:11:29:73:97:96:8c:5b:13:67:b0:1a: 9f:9d:81:8b:49:63:7e:d8:f0:d1:82:9c:ef:d8:0c:d5:90:0e: 74:31:37:c0:01:be:b4:c2:9e:8c:5e:eb:6c:74:74:c3:88:58: c7:1d:5d:8d:17:9f:46:cc:f3:d2:a1:91:3e:c5:26:7f:2c:65: 92:17:fa:4c:47:46:12:dd:db:d6:ca:ff:f1:83:7c:fd:43:f6: cd:e1:2d:bf:e9:81:94:46:72:b3:d1:f7:4c:e1:7f:ac:e6:a5: 2b:31:c5:e1:65:04:11:27:ff:6c:f3:94:f3:ef:60:e4:f6:60: df:b2:95:8a:e8:38:75:72:ae:10:3b:82:fa:b1:b1:42:5a:2c: 29:ef:34:02:7d:9f:f8:3a:70:8c:a2:7e:1d:b6:0e:fe:4b:5c: c4:60:3f:f9:17:44:ac:36:7b:d3:09:ca:0d:67:17:62:df:39: c5:fe:5a:5c:fc:51:0d:b3:3a:3d:de:ae:3d:e4:ff:ec:5d:b4: 94:41:13:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODdFNDUxMTAvBgNVBAUTKEI3QzJCRUNDOTdCNDIzNzlDNDRBRDFBRUI1RTA3M0Uy QTNEQTUxMUUwHhcNMjUwODIzMDAxNjU4WhcNMjUwODMwMDAxNjU4WjAYMRYwFAYD VQQDEw02OGE5MDg3YS04MTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2g7y15mBBajyW7+q2Kj0ac4gqjts8hqd/R8uP4kwh6+gMGPs6+CfN3G4lIvp eSCojhs9w5dHLdWUu87346rdatZDO/+UkkmxJKsP0iabtYTia8+f/VsPNRPtLxbJ TF2ALrPlYn4aeOHWK+7lS9XhsHfGOklXbuZ7fPA4nTjj1dZrRZH50V/glM63zuKH ZlEKoWWXqfNkhtPfSvReXPNsEi5w8OB4j0UfsLHFR9lwhdyOXcsNs0YqDi9CPv2j F3J4Rw2Vw9Pq9zWJtyluFmI/rrqudpZKAUfI0G0s56r9eKTpzgHsP1QSuGqgb9fL ZYYyzfryRnz1qZsTSSuPYAjyhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGq7B2ft k8uo6Zlz51OHYCuiN4JrMB8GA1UdIwQYMBaAFLfCvsyXtCN5xErRrrXgc+Kj2lEe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4N0U0NS81RjZBQjEwQzUy OTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkzbkVTdEd1dGVCejRxUGFV UjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q4Sy16SmUwSTNuRVN0R3V0ZUJ6NHFQYVVSNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0U0NS81RjZBQjEwQzUyOTcxMUVDQTM3N0U2NzBDNEY5QUUwMi90OEstekplMEkz bkVTdEd1dGVCejRxUGFVUjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCixE1c6adv7TMxnDf5htszPzmh5XFesW6l5UIOSigZaaftDq5Ow9mp paIX9nxihrvlOYdEiXGNWMDSvz+eESlzl5aMWxNnsBqfnYGLSWN+2PDRgpzv2AzV kA50MTfAAb60wp6MXutsdHTDiFjHHV2NF59GzPPSoZE+xSZ/LGWSF/pMR0YS3dvW yv/xg3z9Q/bN4S2/6YGURnKz0fdM4X+s5qUrMcXhZQQRJ/9s85Tz72Dk9mDfspWK 6Dh1cq4QO4L6sbFCWiwp7zQCfZ/4OnCMon4dtg7+S1zEYD/5F0SsNnvTCcoNZxdi 3znF/lpc/FENszo93q495P/sXbSUQRPL -----END CERTIFICATE-----Generated at Sun Aug 24 00:55:05 2025 by rpki-client