$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft File: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft (raw, json) Hash identifier: vYVfQXx+h7cWdBVqc+ifMf/kK/xwzXAXzEKZb7a5uCU= Subject key identifier: 41:A7:4A:2C:8E:42:26:C0:E9:1D:00:65:8D:3D:54:FB:70:5D:3A:33 Authority key identifier: F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11 Certificate issuer: /CN=A913A5AF/serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft Manifest number: 72 Signing time: Sat 09 Aug 2025 07:20:50 +0000 Manifest this update: Sat 09 Aug 2025 07:20:50 +0000 Manifest next update: Sat 16 Aug 2025 07:20:50 +0000 Files and hashes: 1: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl (hash: pL4l+O9Vi6IGzQLB7iHPXA6XugiRMJeeIorUh1veFHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5AF, serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611 Validity Not Before: Aug 9 07:20:50 2025 GMT Not After : Aug 16 07:20:50 2025 GMT Subject: CN=6896f6d2-127d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:26:36:90:24:72:a4:dd:77:2e:1c:55:87:7a: bf:82:d6:b3:fd:19:7a:08:48:25:84:32:78:99:36: e3:bf:27:98:9b:cb:94:39:69:72:58:18:66:9f:66: af:93:64:69:df:c8:60:13:9d:48:e8:da:48:8d:54: 74:42:29:16:d0:f6:7a:7f:99:f0:b9:d5:51:65:c3: fe:8c:c5:3e:0e:07:de:c4:c9:35:cd:42:9f:b5:04: 3d:12:e9:aa:75:13:c1:ec:da:99:5d:62:01:93:12: 84:96:0a:ba:d8:59:bd:e7:2a:a9:29:55:93:9a:43: a3:58:7d:dd:49:a0:62:8d:00:7f:ea:2d:4b:ba:19: e9:88:e8:f5:82:11:47:27:0f:66:ba:a7:c0:73:7b: d5:36:bb:91:7f:ab:b9:61:b7:e9:da:05:d7:dd:06: 73:51:e4:9d:50:9b:dc:00:9e:13:5b:00:23:b0:06: 60:de:dc:1c:66:c0:d9:86:1f:10:81:97:84:aa:b9: 68:64:e8:a1:df:8c:bd:af:0a:e8:4b:14:d2:98:bf: b6:d8:4e:57:c3:e7:fe:da:79:7b:e8:11:31:bb:98: 7e:02:3b:ca:9e:61:27:a3:9e:d3:39:33:ea:5d:46: c9:89:9a:7a:dd:85:95:a5:2d:51:08:f6:8b:9f:04: b5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A7:4A:2C:8E:42:26:C0:E9:1D:00:65:8D:3D:54:FB:70:5D:3A:33 X509v3 Authority Key Identifier: keyid:F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:c8:47:59:84:0b:a9:2d:08:ac:c3:62:3d:5f:85:55:e9:98: 8f:e9:25:42:d0:95:a1:57:df:99:6c:f4:f2:fb:44:5d:3f:07: 44:46:7f:6f:1a:a0:f1:ee:9a:e9:b5:0f:b9:f3:ab:d8:ae:49: 51:de:05:d3:09:e7:63:fc:9e:c6:b2:cf:fc:66:ae:e6:75:0a: 46:e2:6a:81:59:d2:f7:01:08:0e:92:cd:63:25:51:03:71:f0: 23:b5:87:ee:0c:ec:a3:b0:25:23:98:16:7e:58:ed:4d:31:2a: 61:c8:18:76:6e:ad:9a:b1:aa:aa:48:37:26:7d:64:ed:4c:5b: 40:9c:cf:4f:f8:60:a6:e1:dc:b5:78:1c:a8:64:5d:7b:58:40: dc:b0:05:aa:b2:34:96:f6:4e:a5:c8:28:3f:20:eb:8f:83:4a: 58:a8:ab:af:6c:de:f0:b1:2b:e7:82:b2:96:1c:9f:22:8b:7d: ad:f6:03:1b:25:dc:f0:36:a0:0c:b4:b8:53:ec:c4:38:ab:75: 9b:b3:1f:38:e4:ab:4a:85:c6:a7:95:2b:ea:02:e2:55:de:0f: 8b:d9:4e:ee:ee:24:f8:42:c3:a1:64:ea:17:cd:db:4e:f3:e3: 49:a4:5c:81:ea:e9:61:49:b9:4b:1c:56:13:3a:40:73:0e:75: bd:c1:e1:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QTVBRjExMC8GA1UEBRMoRjNFQkJGQjRBOTM4MEZFMDlBNTYxRkM2QUZBMkExQ0My MTQ4ODYxMTAeFw0yNTA4MDkwNzIwNTBaFw0yNTA4MTYwNzIwNTBaMBgxFjAUBgNV BAMTDTY4OTZmNmQyLTEyN2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDSJjaQJHKk3XcuHFWHer+C1rP9GXoISCWEMniZNuO/J5iby5Q5aXJYGGafZq+T ZGnfyGATnUjo2kiNVHRCKRbQ9np/mfC51VFlw/6MxT4OB97EyTXNQp+1BD0S6ap1 E8Hs2pldYgGTEoSWCrrYWb3nKqkpVZOaQ6NYfd1JoGKNAH/qLUu6GemI6PWCEUcn D2a6p8Bze9U2u5F/q7lht+naBdfdBnNR5J1Qm9wAnhNbACOwBmDe3BxmwNmGHxCB l4SquWhk6KHfjL2vCuhLFNKYv7bYTlfD5/7aeXvoETG7mH4CO8qeYSejntM5M+pd RsmJmnrdhZWlLVEI9oufBLVFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUQadKLI5C JsDpHQBljT1U+3BdOjMwHwYDVR0jBBgwFoAU8+u/tKk4D+CaVh/Gr6KhzCFIhhEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNBNUFGLzg4REJBOTgyQ0JD MTExRUY5Q0QxOUQ0NEM0RjlBRTAyLzgtdV90S2s0RC1DYVZoX0dyNktoekNGSWho RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOC11X3RLazRELUNhVmhfR3I2S2h6Q0ZJaGhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNB NUFGLzg4REJBOTgyQ0JDMTExRUY5Q0QxOUQ0NEM0RjlBRTAyLzgtdV90S2s0RC1D YVZoX0dyNktoekNGSWhoRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFjIR1mEC6ktCKzDYj1fhVXpmI/pJULQlaFX35ls9PL7RF0/B0RGf28a oPHumum1D7nzq9iuSVHeBdMJ52P8nsayz/xmruZ1CkbiaoFZ0vcBCA6SzWMlUQNx 8CO1h+4M7KOwJSOYFn5Y7U0xKmHIGHZurZqxqqpINyZ9ZO1MW0Ccz0/4YKbh3LV4 HKhkXXtYQNywBaqyNJb2TqXIKD8g64+DSlioq69s3vCxK+eCspYcnyKLfa32Axsl 3PA2oAy0uFPsxDirdZuzHzjkq0qFxqeVK+oC4lXeD4vZTu7uJPhCw6Fk6hfN207z 40mkXIHq6WFJuUscVhM6QHMOdb3B4b0= -----END CERTIFICATE-----Generated at Mon Aug 11 01:49:29 2025 by rpki-client