$ rpki-client -vvf rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft File: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft (raw, json) Hash identifier: P2Xhv+/O8LpuDhfEwsL8uTGRK9GZKM3eElo3fvOs1lY= Subject key identifier: 47:BB:FC:D1:BF:D1:FA:A4:7E:F2:58:3B:47:EA:3E:CF:F8:F8:C2:9B Authority key identifier: F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 Certificate issuer: /CN=A91409DC/serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Certificate serial: 0C5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft Manifest number: 14C0 Signing time: Fri 08 Aug 2025 18:44:29 +0000 Manifest this update: Fri 08 Aug 2025 18:44:28 +0000 Manifest next update: Fri 15 Aug 2025 18:44:28 +0000 Files and hashes: 1: 8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl (hash: q71bRZfr1L+Pd/s01zjz3/Ga0p4/yTE+MNZBcoadFiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3162 (0xc5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91409DC, serialNumber=F10C805247C026F9E3294F81451D162C4650FCD3 Validity Not Before: Aug 8 18:44:28 2025 GMT Not After : Aug 15 18:44:28 2025 GMT Subject: CN=6896458d-04fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:bc:f2:73:7d:dd:e3:bc:37:fb:e0:03:56: 0b:41:a2:19:c1:4f:67:67:16:b9:fd:d1:eb:9f:0b: 51:47:a8:07:5c:81:3c:5c:fc:f0:88:b3:02:80:57: e7:e8:0a:7f:33:6f:98:32:a0:b6:9b:65:65:dd:6e: 62:70:49:3f:c2:25:70:01:7d:eb:1d:90:4e:5b:23: dd:67:55:6c:a0:0c:14:62:16:f0:00:56:bc:2c:9b: 15:d2:ba:d9:8f:2a:81:6b:52:59:f0:f0:7e:ab:67: 48:98:a4:e6:07:dc:52:7c:14:62:9a:a2:01:fc:60: ac:89:37:4a:13:a1:d9:80:92:5f:e5:ab:5e:3f:60: 5a:db:77:13:a9:a2:c5:a6:07:80:3d:6b:48:8c:b1: 13:b0:bc:3d:5a:1c:f1:a2:c9:04:55:54:65:6f:48: ef:a1:b8:64:a6:11:47:4a:c3:9c:f4:80:88:43:6c: 78:2a:57:9e:fa:d1:97:52:9b:83:90:b7:db:e9:c9: 5b:f6:a8:2f:f6:cc:92:32:09:6f:eb:16:b2:39:7f: 27:7e:d2:72:99:53:3a:8b:68:6e:16:d1:54:14:df: a7:91:58:cd:6e:d2:6e:c2:21:74:ac:75:cc:84:4a: df:83:46:ac:d8:2b:3d:82:8f:66:3a:6d:c1:a3:bc: b7:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BB:FC:D1:BF:D1:FA:A4:7E:F2:58:3B:47:EA:3E:CF:F8:F8:C2:9B X509v3 Authority Key Identifier: keyid:F1:0C:80:52:47:C0:26:F9:E3:29:4F:81:45:1D:16:2C:46:50:FC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91409DC/A5BBFAA6093511EAAB10C91FC4F9AE02/8QyAUkfAJvnjKU-BRR0WLEZQ_NM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:3d:fd:34:68:e8:74:e1:10:ad:ec:31:80:41:9a:2a:8a:4e: 3f:77:dc:c9:76:5e:67:f9:9c:5b:0e:36:3f:3a:69:08:7a:b8: e9:b0:c3:21:9a:10:7c:a1:8b:51:3a:59:4c:72:8b:fe:f0:b6: b6:96:47:a4:e2:7d:98:b3:fc:8e:ef:e9:a9:6e:b6:de:c3:14: 86:a3:64:59:63:7c:ca:4f:b9:a4:a3:fd:77:5f:7b:47:2f:1b: 61:0c:e7:1f:ae:d6:41:87:26:8c:06:6f:c4:71:19:0d:50:96: a6:66:06:5d:40:3a:d7:94:a1:c3:40:a9:a9:1c:4a:bf:cf:48: 48:5a:fb:2f:0f:27:0e:c3:2f:eb:b1:e0:67:48:8c:ff:78:e5: 5c:62:20:91:02:dd:17:1d:37:b5:5e:b4:29:44:8b:7b:cc:20: 23:17:9e:2c:5d:2e:07:d5:84:a6:b1:31:79:83:0c:50:6b:1d: 12:a0:1e:68:25:43:7a:7e:69:2e:3e:c7:db:ea:ad:5c:38:57: e3:26:1c:cd:4a:4c:e9:a4:03:82:14:75:a4:15:97:70:01:fa: 64:49:09:97:1a:c4:2c:f2:c1:a6:59:0e:e2:e8:81:ff:5a:89: b8:62:41:a1:d2:64:5b:31:06:7c:ef:7b:5f:f0:cb:31:d1:0a: e9:b7:df:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA5REMxMTAvBgNVBAUTKEYxMEM4MDUyNDdDMDI2RjlFMzI5NEY4MTQ1MUQxNjJD NDY1MEZDRDMwHhcNMjUwODA4MTg0NDI4WhcNMjUwODE1MTg0NDI4WjAYMRYwFAYD VQQDEw02ODk2NDU4ZC0wNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtjS88nN93eO8N/vgA1YLQaIZwU9nZxa5/dHrnwtRR6gHXIE8XPzwiLMCgFfn 6Ap/M2+YMqC2m2Vl3W5icEk/wiVwAX3rHZBOWyPdZ1VsoAwUYhbwAFa8LJsV0rrZ jyqBa1JZ8PB+q2dImKTmB9xSfBRimqIB/GCsiTdKE6HZgJJf5ateP2Ba23cTqaLF pgeAPWtIjLETsLw9WhzxoskEVVRlb0jvobhkphFHSsOc9ICIQ2x4Klee+tGXUpuD kLfb6clb9qgv9sySMglv6xayOX8nftJymVM6i2huFtFUFN+nkVjNbtJuwiF0rHXM hErfg0as2Cs9go9mOm3Bo7y3RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEe7/NG/ 0fqkfvJYO0fqPs/4+MKbMB8GA1UdIwQYMBaAFPEMgFJHwCb54ylPgUUdFixGUPzT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDlEQy9BNUJCRkFBNjA5 MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2bmpLVS1CUlIwV0xFWlFf Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhReUFVa2ZBSnZuaktVLUJSUjBXTEVaUV9OTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDlEQy9BNUJCRkFBNjA5MzUxMUVBQUIxMEM5MUZDNEY5QUUwMi84UXlBVWtmQUp2 bmpLVS1CUlIwV0xFWlFfTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYPf00aOh04RCt7DGAQZoqik4/d9zJdl5n+ZxbDjY/OmkIerjpsMMh mhB8oYtROllMcov+8La2lkek4n2Ys/yO7+mpbrbewxSGo2RZY3zKT7mko/13X3tH LxthDOcfrtZBhyaMBm/EcRkNUJamZgZdQDrXlKHDQKmpHEq/z0hIWvsvDycOwy/r seBnSIz/eOVcYiCRAt0XHTe1XrQpRIt7zCAjF54sXS4H1YSmsTF5gwxQax0SoB5o JUN6fmkuPsfb6q1cOFfjJhzNSkzppAOCFHWkFZdwAfpkSQmXGsQs8sGmWQ7i6IH/ Wom4YkGh0mRbMQZ873tf8Msx0Qrpt98G -----END CERTIFICATE-----Generated at Sun Aug 10 18:52:01 2025 by rpki-client