$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: pvdlxegSNKNEHAjuN+IvuYcZi5zoYC0oVKt9ElHBkS4= Subject key identifier: CC:AF:86:F5:A3:7A:E7:71:40:7E:81:B6:6C:6C:55:E7:66:7D:B7:15 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 0168 Signing time: Sat 09 Aug 2025 04:19:01 +0000 Manifest this update: Sat 09 Aug 2025 04:19:00 +0000 Manifest next update: Sat 16 Aug 2025 04:19:00 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: iYjnycJkHXnhu5zyI9KN7Qi6NCsVib6jO1Y5dYWzohQ=) 2: CE74C490AA4911EF80B4D381C4F9AE02.roa (hash: 9trSPATG6e6kZcNLx6FEo2PvgXLIh+akuZgMM6SjcBw=) 3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XwxYtSorve+SAC3u+XigKdLjB1a8nt+xDntpvYaL7J8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Aug 9 04:19:00 2025 GMT Not After : Aug 16 04:19:00 2025 GMT Subject: CN=6896cc35-2827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:85:8f:85:7a:aa:bb:00:e4:c2:d1:37:18: b4:85:ae:6d:d0:15:23:fb:a8:0e:1b:9e:94:ec:36: 71:90:a3:50:33:ef:07:06:ed:53:fd:1b:a7:3d:09: d6:f3:e5:28:2a:b9:85:a4:10:9a:2d:c5:11:75:2d: 77:2b:da:47:aa:97:a1:ac:52:b4:9c:d6:f6:79:1a: 14:60:92:d7:8a:4b:9d:3b:98:de:d8:a1:9f:67:cf: b5:3b:3a:65:38:cc:02:5a:38:81:24:e1:9b:b7:6f: f6:ab:96:10:c5:96:29:8a:3e:b4:8d:f5:d6:1b:36: 3e:a0:c2:e3:42:1b:cd:61:f1:61:bb:40:e4:81:81: 50:9a:0b:a1:33:08:98:40:93:f0:1d:00:03:62:0e: cc:31:05:1f:d9:80:07:b2:09:c6:47:5c:12:73:30: 11:5c:1b:49:3c:95:f6:e2:19:de:dd:62:44:1c:76: cf:0b:48:04:36:32:f1:ac:8c:e1:82:bd:e4:7d:26: 76:31:df:0d:d0:e4:42:f0:c3:fd:c2:49:4a:63:40: 58:df:32:37:d7:86:5a:80:94:4a:fd:41:02:a9:33: 77:6e:47:04:97:6b:e9:14:4b:a4:99:42:d7:5c:a4: b8:60:ca:a3:35:d4:df:32:62:db:53:68:48:dd:cf: 18:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:AF:86:F5:A3:7A:E7:71:40:7E:81:B6:6C:6C:55:E7:66:7D:B7:15 X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:f1:20:1a:9e:ce:61:30:b4:b5:45:e9:4f:ff:4c:1a:f0:32: 4b:a9:9e:d2:4c:e6:89:be:91:74:48:fa:06:8d:95:4c:04:72: 77:98:fa:97:e8:3c:0d:cd:b6:13:5c:0a:ab:78:bc:13:01:6b: 00:24:c1:3d:13:89:c3:44:c9:be:a3:3e:6a:fe:76:af:d2:38: 5a:f8:ad:15:24:f2:05:53:4b:1c:9e:35:95:4a:99:93:55:1a: ed:12:08:f1:31:dc:0c:25:eb:b8:d7:61:77:67:94:c1:a9:be: fe:b7:a1:86:2d:4b:9a:cf:29:e7:6b:4d:3e:e4:99:08:86:ad: 30:24:db:f1:ca:e7:af:27:8a:69:c9:1e:12:28:fb:ac:0a:16: d8:52:2a:b5:a3:a0:65:12:6b:87:77:b4:6a:6c:22:3f:aa:17: 1c:42:78:b1:08:c1:70:21:7c:74:28:f6:b4:ca:b7:8c:17:42: 9d:2b:67:91:83:40:16:aa:7d:ad:c1:b7:3f:bc:bc:03:5d:2b: c6:af:a3:82:de:7f:97:bc:43:d7:e1:40:c8:ec:4a:b7:b0:c1: 9b:75:56:6d:cb:6c:9f:f4:0b:60:21:f5:4f:f6:5e:18:17:ab: eb:b7:eb:9b:3f:06:69:d3:f1:57:a9:9d:4f:57:01:7a:56:21: 4b:48:c9:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjUwODA5MDQxOTAwWhcNMjUwODE2MDQxOTAwWjAYMRYwFAYD VQQDEw02ODk2Y2MzNS0yODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdOFj4V6qrsA5MLRNxi0ha5t0BUj+6gOG56U7DZxkKNQM+8HBu1T/RunPQnW 8+UoKrmFpBCaLcURdS13K9pHqpehrFK0nNb2eRoUYJLXikudO5je2KGfZ8+1Ozpl OMwCWjiBJOGbt2/2q5YQxZYpij60jfXWGzY+oMLjQhvNYfFhu0DkgYFQmguhMwiY QJPwHQADYg7MMQUf2YAHsgnGR1wSczARXBtJPJX24hne3WJEHHbPC0gENjLxrIzh gr3kfSZ2Md8N0ORC8MP9wklKY0BY3zI314ZagJRK/UECqTN3bkcEl2vpFEukmULX XKS4YMqjNdTfMmLbU2hI3c8YNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMyvhvWj eudxQH6BtmxsVedmfbcVMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA18SAans5hMLS1RelP/0wa8DJLqZ7STOaJvpF0SPoGjZVMBHJ3mPqX 6DwNzbYTXAqreLwTAWsAJME9E4nDRMm+oz5q/nav0jha+K0VJPIFU0scnjWVSpmT VRrtEgjxMdwMJeu412F3Z5TBqb7+t6GGLUuazynna00+5JkIhq0wJNvxyuevJ4pp yR4SKPusChbYUiq1o6BlEmuHd7RqbCI/qhccQnixCMFwIXx0KPa0yreMF0KdK2eR g0AWqn2twbc/vLwDXSvGr6OC3n+XvEPX4UDI7Eq3sMGbdVZty2yf9AtgIfVP9l4Y F6vrt+ubPwZp0/FXqZ1PVwF6ViFLSMl5 -----END CERTIFICATE-----Generated at Mon Aug 11 04:12:16 2025 by rpki-client