$ rpki-client -vvf rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft File: s8jMSc2pmXofeyj1RvyRIdqhkzw.mft (raw, json) Hash identifier: p41e5shx4xY9GXWPjQjwbYpioC5s79vXElMUT6Ck7w0= Subject key identifier: B0:AE:84:76:5F:64:AB:71:CE:30:DA:C0:91:9F:A8:75:63:D4:48:D4 Authority key identifier: B3:C8:CC:49:CD:A9:99:7A:1F:7B:28:F5:46:FC:91:21:DA:A1:93:3C Certificate issuer: /CN=A913E83E/serialNumber=B3C8CC49CDA9997A1F7B28F546FC9121DAA1933C Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft Manifest number: 17 Signing time: Mon 11 Aug 2025 08:14:29 +0000 Manifest this update: Mon 11 Aug 2025 08:14:28 +0000 Manifest next update: Mon 18 Aug 2025 08:14:28 +0000 Files and hashes: 1: s8jMSc2pmXofeyj1RvyRIdqhkzw.crl (hash: RRIP2xlH5njnNmnAqfiyQbA4f+iP9i3YM+Ah1EfJyHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.crl rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 08:14:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E83E, serialNumber=B3C8CC49CDA9997A1F7B28F546FC9121DAA1933C Validity Not Before: Aug 11 08:14:28 2025 GMT Not After : Aug 18 08:14:28 2025 GMT Subject: CN=6899a664-30c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b3:be:d8:96:f6:f3:b7:e2:44:2e:3e:02:d9: 26:0d:30:93:3f:d1:2b:54:60:93:84:11:99:56:e6: c5:cc:41:41:86:d5:1c:ce:73:f9:9d:3c:6a:4b:03: 32:fa:0b:0b:de:64:c6:bc:b5:54:bf:b2:f4:04:3a: e5:f0:f2:69:05:85:1b:53:7b:3f:fb:c7:5a:d5:7e: cb:05:2b:ef:18:f5:f4:31:9c:bf:d8:68:f5:59:5a: e4:d8:d2:4f:dc:9b:9f:6e:b0:81:f0:7d:3d:9d:22: 97:85:22:50:a1:6a:88:17:e4:82:64:1b:b0:00:37: 07:98:44:46:36:7a:a0:2c:66:3e:67:34:75:45:7d: 50:de:96:8c:c3:d5:5a:08:db:66:e1:d5:c9:3b:d2: c9:1f:97:62:97:6e:cd:be:40:bc:0e:1c:da:8c:b2: 15:d0:0e:0a:b4:4d:58:97:4c:b5:d2:31:ce:05:80: 88:0f:29:7a:39:e1:6e:43:9a:3f:3c:bb:6d:33:ee: a0:a1:b9:12:d9:d9:aa:d4:1d:de:06:74:6d:93:8a: fe:84:b5:0c:ad:c4:94:0d:1b:29:ec:76:86:ad:a8: fb:15:5c:8b:e5:97:5d:13:c7:5e:d8:2d:7d:31:46: 29:77:6a:73:e3:4c:ad:c8:52:81:b4:4d:27:14:5d: 6f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AE:84:76:5F:64:AB:71:CE:30:DA:C0:91:9F:A8:75:63:D4:48:D4 X509v3 Authority Key Identifier: keyid:B3:C8:CC:49:CD:A9:99:7A:1F:7B:28:F5:46:FC:91:21:DA:A1:93:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:08:7c:5c:35:d9:9d:48:db:fe:fb:71:97:1e:64:77:f5:2b: 63:47:69:2c:48:47:59:7c:6c:b8:b1:19:b7:0f:18:3a:5e:c1: e1:35:ac:53:01:38:e7:7d:a2:a1:c0:14:87:9e:c9:eb:77:31: e6:34:a6:7e:55:84:cf:d7:31:db:c5:08:8e:48:a3:1b:12:6d: 3b:6e:a1:3a:c3:44:24:98:24:6a:06:05:0e:24:bd:0c:78:6b: cd:23:40:7e:33:44:bd:46:20:f9:91:74:67:ca:49:6d:2e:d0: 35:ab:03:2f:02:cb:a8:c1:2e:97:25:da:67:bf:fc:e9:1c:fd: d7:a6:96:54:89:7b:34:e5:91:f9:f4:0b:71:84:8b:ec:bb:ee: 6c:e9:b0:b5:6a:28:6d:db:cc:f9:27:33:64:98:9d:4b:ea:d8: 33:b6:29:8d:2d:5c:cb:60:54:94:53:a6:70:66:4a:32:0e:f2: c4:93:46:5c:e7:47:a1:01:b4:95:7f:67:14:31:19:2c:be:e1: 2b:76:e0:bd:2b:ee:e1:e2:cb:3d:ca:6b:6d:47:bb:8d:94:87: 14:d3:28:f3:33:77:10:af:5c:b5:c1:a6:10:36:18:67:65:c5: e8:22:db:d4:a1:fb:16:7f:49:72:49:f1:ec:35:08:e9:d1:dc: 6e:33:a3:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTgzRTExMC8GA1UEBRMoQjNDOENDNDlDREE5OTk3QTFGN0IyOEY1NDZGQzkxMjFE QUExOTMzQzAeFw0yNTA4MTEwODE0MjhaFw0yNTA4MTgwODE0MjhaMBgxFjAUBgNV BAMTDTY4OTlhNjY0LTMwYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7s77Ylvbzt+JELj4C2SYNMJM/0StUYJOEEZlW5sXMQUGG1RzOc/mdPGpLAzL6 CwveZMa8tVS/svQEOuXw8mkFhRtTez/7x1rVfssFK+8Y9fQxnL/YaPVZWuTY0k/c m59usIHwfT2dIpeFIlChaogX5IJkG7AANweYREY2eqAsZj5nNHVFfVDelozD1VoI 22bh1ck70skfl2KXbs2+QLwOHNqMshXQDgq0TViXTLXSMc4FgIgPKXo54W5Dmj88 u20z7qChuRLZ2arUHd4GdG2Tiv6EtQytxJQNGynsdoatqPsVXIvll10Tx17YLX0x Ril3anPjTK3IUoG0TScUXW/vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsK6Edl9k q3HOMNrAkZ+odWPUSNQwHwYDVR0jBBgwFoAUs8jMSc2pmXofeyj1RvyRIdqhkzww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFODNFL0YzOTEwQzkwNTYz MTExRjBBMUFBRTI0REM0RjlBRTAyL3M4ak1TYzJwbVhvZmV5ajFSdnlSSWRxaGt6 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvczhqTVNjMnBtWG9mZXlqMVJ2eVJJZHFoa3p3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF ODNFL0YzOTEwQzkwNTYzMTExRjBBMUFBRTI0REM0RjlBRTAyL3M4ak1TYzJwbVhv ZmV5ajFSdnlSSWRxaGt6dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD0IfFw12Z1I2/77cZceZHf1K2NHaSxIR1l8bLixGbcPGDpeweE1rFMB OOd9oqHAFIeeyet3MeY0pn5VhM/XMdvFCI5IoxsSbTtuoTrDRCSYJGoGBQ4kvQx4 a80jQH4zRL1GIPmRdGfKSW0u0DWrAy8Cy6jBLpcl2me//Okc/demllSJezTlkfn0 C3GEi+y77mzpsLVqKG3bzPknM2SYnUvq2DO2KY0tXMtgVJRTpnBmSjIO8sSTRlzn R6EBtJV/ZxQxGSy+4St24L0r7uHiyz3Ka21Hu42UhxTTKPMzdxCvXLXBphA2GGdl xegi29Sh+xZ/SXJJ8ew1COnR3G4zo8A= -----END CERTIFICATE-----Generated at Tue Aug 12 13:35:30 2025 by rpki-client