$ rpki-client -vvf rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft File: 8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft (raw, json) Hash identifier: CVWwN6v1xSt0s37JXFFc90K8Ywb6BXnrsC8tNiqZ+/s= Subject key identifier: 27:F7:6D:6F:4E:F6:92:28:B0:92:21:0B:BD:8A:4A:A3:E9:43:4C:02 Authority key identifier: F2:59:B8:AC:9C:F4:3B:D7:C5:94:54:E5:C8:3E:CF:48:F9:FB:87:17 Certificate issuer: /CN=A91329C1/serialNumber=F259B8AC9CF43BD7C59454E5C83ECF48F9FB8717 Certificate serial: 02B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8lm4rJz0O9fFlFTlyD7PSPn7hxc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft Manifest number: 02B4 Signing time: Sat 09 Aug 2025 02:01:29 +0000 Manifest this update: Sat 09 Aug 2025 02:01:28 +0000 Manifest next update: Sat 16 Aug 2025 02:01:28 +0000 Files and hashes: 1: 8lm4rJz0O9fFlFTlyD7PSPn7hxc.crl (hash: n+pgf87VGelj52j7KVMj47GVxHp6nx7ZqGvJLQxIhHc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.crl rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8lm4rJz0O9fFlFTlyD7PSPn7hxc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 696 (0x2b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91329C1, serialNumber=F259B8AC9CF43BD7C59454E5C83ECF48F9FB8717 Validity Not Before: Aug 9 02:01:28 2025 GMT Not After : Aug 16 02:01:28 2025 GMT Subject: CN=6896abf8-24d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ed:22:70:31:12:28:2b:3c:3e:bc:28:53:28: 25:0f:d0:2e:b3:09:da:a6:56:26:91:f8:bc:7d:3e: 3a:77:8f:57:47:4f:d4:3c:41:1c:b7:f8:04:55:24: d0:db:1d:e1:03:47:68:dc:8f:ab:81:6d:96:57:03: eb:77:b0:e3:c8:84:bb:e5:5d:2d:8b:0f:c2:17:cd: 69:6f:30:b6:df:b5:11:12:d6:7f:4f:8b:15:1f:df: 2d:00:fb:3e:a2:48:87:a2:2c:95:b5:02:3e:2f:62: 88:87:6d:55:e9:a1:97:59:13:a1:de:1b:f9:96:69: 69:00:30:ef:8e:03:ba:12:63:83:f9:5a:ff:ed:1c: b1:23:66:7d:4e:7d:88:49:4d:44:12:7f:6c:48:cf: b2:11:ea:3d:ed:c2:a5:3c:1f:e4:27:cc:6b:35:90: 87:f0:4e:97:30:67:bc:35:61:4f:0f:e5:bd:5b:49: a6:2f:93:e9:c6:b4:00:5c:cb:3b:0b:1c:93:1a:d1: 72:b1:39:52:b7:91:c4:65:5e:78:c2:20:a4:e1:81: 48:29:a5:5f:66:99:3d:2a:ca:0f:41:30:8f:32:de: 5d:1c:fb:01:f9:92:de:b3:f3:17:fd:a4:06:91:d9: 09:4f:77:7d:45:c7:b8:9c:d6:c0:61:6c:79:3c:37: d5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F7:6D:6F:4E:F6:92:28:B0:92:21:0B:BD:8A:4A:A3:E9:43:4C:02 X509v3 Authority Key Identifier: keyid:F2:59:B8:AC:9C:F4:3B:D7:C5:94:54:E5:C8:3E:CF:48:F9:FB:87:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8lm4rJz0O9fFlFTlyD7PSPn7hxc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91329C1/44236F0405BD11EDA00A5F3DC4F9AE02/8lm4rJz0O9fFlFTlyD7PSPn7hxc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f1:b6:ec:6d:bd:71:82:5b:b6:0b:1f:ce:1e:6f:fe:a0:8b: 1a:bb:37:17:b9:ab:07:b9:c8:9a:80:35:5e:14:15:a6:21:57: f3:fe:10:32:0e:f5:16:fe:62:c8:46:8c:75:ba:98:79:87:c2: 7d:c8:70:3c:8b:7c:cd:11:bf:61:73:b0:70:63:93:3e:a0:28: 7b:63:68:74:d3:12:c5:14:df:49:dd:f5:26:1f:1f:ab:bd:8a: 2e:a0:89:27:2b:07:09:df:0a:6f:0f:df:05:27:92:12:98:af: 02:37:b2:00:a3:98:16:01:ed:8e:8e:d3:f2:7b:c0:be:ed:38: 2c:6e:59:32:28:67:91:1c:c3:33:20:de:b1:2c:d1:53:db:e4: 3d:4a:60:83:9a:75:39:72:fa:89:b5:5c:48:ba:71:a1:bf:27: b8:4d:1d:fa:23:96:2e:c1:cc:f7:b7:f8:48:31:43:a8:40:fe: 78:64:c2:b9:b9:e2:4c:17:36:e0:37:11:80:0d:99:aa:d9:38: 6f:7c:82:3e:ee:d7:1e:6e:6a:12:2e:0b:48:4a:b0:0a:32:49: d3:35:26:39:bf:6d:8a:d7:c5:0f:6a:d5:fe:c6:23:c2:c6:96: af:a3:29:52:6a:8e:84:22:3e:06:f1:03:94:2f:bf:bd:d6:4d: 23:85:4b:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI5QzExMTAvBgNVBAUTKEYyNTlCOEFDOUNGNDNCRDdDNTk0NTRFNUM4M0VDRjQ4 RjlGQjg3MTcwHhcNMjUwODA5MDIwMTI4WhcNMjUwODE2MDIwMTI4WjAYMRYwFAYD VQQDEw02ODk2YWJmOC0yNGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzO0icDESKCs8PrwoUyglD9AuswnaplYmkfi8fT46d49XR0/UPEEct/gEVSTQ 2x3hA0do3I+rgW2WVwPrd7DjyIS75V0tiw/CF81pbzC237UREtZ/T4sVH98tAPs+ okiHoiyVtQI+L2KIh21V6aGXWROh3hv5lmlpADDvjgO6EmOD+Vr/7RyxI2Z9Tn2I SU1EEn9sSM+yEeo97cKlPB/kJ8xrNZCH8E6XMGe8NWFPD+W9W0mmL5PpxrQAXMs7 CxyTGtFysTlSt5HEZV54wiCk4YFIKaVfZpk9KsoPQTCPMt5dHPsB+ZLes/MX/aQG kdkJT3d9Rce4nNbAYWx5PDfVoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCf3bW9O 9pIosJIhC72KSqPpQ0wCMB8GA1UdIwQYMBaAFPJZuKyc9DvXxZRU5cg+z0j5+4cX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjlDMS80NDIzNkYwNDA1 QkQxMUVEQTAwQTVGM0RDNEY5QUUwMi84bG00ckp6ME85ZkZsRlRseUQ3UFNQbjdo eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhsbTRySnowTzlmRmxGVGx5RDdQU1BuN2h4Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjlDMS80NDIzNkYwNDA1QkQxMUVEQTAwQTVGM0RDNEY5QUUwMi84bG00ckp6ME85 ZkZsRlRseUQ3UFNQbjdoeGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBd8bbsbb1xglu2Cx/OHm/+oIsauzcXuasHuciagDVeFBWmIVfz/hAy DvUW/mLIRox1uph5h8J9yHA8i3zNEb9hc7BwY5M+oCh7Y2h00xLFFN9J3fUmHx+r vYouoIknKwcJ3wpvD98FJ5ISmK8CN7IAo5gWAe2OjtPye8C+7TgsblkyKGeRHMMz IN6xLNFT2+Q9SmCDmnU5cvqJtVxIunGhvye4TR36I5Yuwcz3t/hIMUOoQP54ZMK5 ueJMFzbgNxGADZmq2ThvfII+7tcebmoSLgtISrAKMknTNSY5v22K18UPatX+xiPC xpavoylSao6EIj4G8QOUL7+91k0jhUtN -----END CERTIFICATE-----Generated at Sun Aug 10 16:11:39 2025 by rpki-client