$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json) Hash identifier: Cwh8NTmmvKfptniy652fsOwhkfhUaeaZ85o4QT6pg90= Subject key identifier: 9F:8E:92:2F:DA:08:B9:B0:49:8B:F2:D7:16:E0:B8:AE:B9:BB:56:58 Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft Manifest number: 0194 Signing time: Sat 09 Aug 2025 03:48:41 +0000 Manifest this update: Sat 09 Aug 2025 03:48:41 +0000 Manifest next update: Sat 16 Aug 2025 03:48:41 +0000 Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: or5Mxq+tojxh/gn7cN12xhluE7CJw2Klxy6PlOs7QMs=) 2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: 6xfHA0xOfSf1bsWXYgETgvu/Qg0LpdZ4QedkQYTwxII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Validity Not Before: Aug 9 03:48:41 2025 GMT Not After : Aug 16 03:48:41 2025 GMT Subject: CN=6896c519-6d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3e:be:38:45:68:3c:11:fd:63:7c:1d:17:d8: c8:58:9c:c0:2a:12:b9:94:52:61:25:ad:93:11:e4: 77:58:b7:cd:42:3f:c4:f3:17:c5:49:2f:8a:14:f2: 3a:10:f0:6c:3a:55:1a:4c:5d:44:13:e2:8b:56:b3: 14:0c:61:bf:e9:38:f3:83:34:46:b4:6d:69:bf:66: f6:81:09:45:e1:40:6a:27:75:55:58:ea:b3:a7:73: af:72:be:db:6a:7f:9f:9f:7b:87:ab:bc:82:00:80: 97:55:b1:a4:36:78:82:85:d8:b0:ac:e0:a5:1b:f3: d5:ff:ea:f1:81:93:5a:5c:15:fe:41:c0:58:9a:1d: 10:b7:fa:7e:16:5d:f9:40:35:3a:6e:99:73:cf:6c: e6:f0:93:e3:7c:4e:ac:2c:7e:0b:91:b4:5b:f1:81: 7a:93:a8:7d:ec:48:6d:03:77:b9:d2:04:c5:39:f9: bc:34:97:0c:4a:83:3a:ff:57:1f:70:e2:a1:6c:ff: bf:ea:16:68:10:32:57:09:74:31:e8:5d:19:de:46: ab:53:ba:ef:5a:d8:ad:22:e1:ab:41:2f:ef:67:1f: 92:27:dc:07:77:09:a3:bd:fa:98:b7:c0:21:87:48: c1:e8:55:fe:f9:c4:42:16:5c:f3:66:39:e5:c9:6f: dd:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8E:92:2F:DA:08:B9:B0:49:8B:F2:D7:16:E0:B8:AE:B9:BB:56:58 X509v3 Authority Key Identifier: keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:9f:5e:1d:d2:38:f1:cb:39:a0:8c:fa:b1:5f:3b:03:03:fb: ef:eb:e9:24:67:2b:03:f0:ab:50:58:f2:ab:a7:d7:ce:a2:9f: 1f:e7:be:b8:d4:25:20:0e:26:42:c8:45:02:ae:b8:3e:dd:4a: b1:9a:74:19:d4:42:a5:a5:03:76:06:8a:e3:f8:6a:01:95:89: d1:4d:86:3f:39:13:54:84:a5:7d:91:f9:77:ff:43:38:59:a7: 85:45:7d:c9:39:c2:5b:0b:27:59:b6:4e:37:e7:b6:81:e6:4b: 4a:42:1d:e0:96:42:9f:0a:7e:73:47:05:8b:b2:02:8d:12:6e: 10:0d:91:05:87:aa:14:e4:bc:4f:5d:fb:a1:26:ed:08:66:7e: 64:af:2a:3c:ed:67:d7:33:23:2f:ee:80:20:3d:ea:00:61:c9: 33:d1:24:cb:f4:49:35:74:6f:75:0e:35:42:be:38:e4:f4:92: f0:c3:84:a5:d0:7f:81:2c:d6:8c:79:a4:5b:dd:ef:55:8c:ac: f9:67:29:19:c1:2b:5a:f5:59:99:f4:6e:1f:c0:cc:52:bf:af: 13:c3:b5:e8:2c:13:c5:30:b8:88:1c:7d:51:8c:8b:88:82:9d: 51:a6:44:3d:46:66:51:95:80:74:2a:c2:61:a3:e0:d9:a6:d7: b0:7b:66:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC NkE5MDU4MEQwHhcNMjUwODA5MDM0ODQxWhcNMjUwODE2MDM0ODQxWjAYMRYwFAYD VQQDEw02ODk2YzUxOS02ZDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0z6+OEVoPBH9Y3wdF9jIWJzAKhK5lFJhJa2TEeR3WLfNQj/E8xfFSS+KFPI6 EPBsOlUaTF1EE+KLVrMUDGG/6TjzgzRGtG1pv2b2gQlF4UBqJ3VVWOqzp3Ovcr7b an+fn3uHq7yCAICXVbGkNniChdiwrOClG/PV/+rxgZNaXBX+QcBYmh0Qt/p+Fl35 QDU6bplzz2zm8JPjfE6sLH4LkbRb8YF6k6h97EhtA3e50gTFOfm8NJcMSoM6/1cf cOKhbP+/6hZoEDJXCXQx6F0Z3karU7rvWtitIuGrQS/vZx+SJ9wHdwmjvfqYt8Ah h0jB6FX++cRCFlzzZjnlyW/d3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+Oki/a CLmwSYvy1xbguK65u1ZYMB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi YjMxS2lJZUF1TmkycVFXQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAcn14d0jjxyzmgjPqxXzsDA/vv6+kkZysD8KtQWPKrp9fOop8f5764 1CUgDiZCyEUCrrg+3UqxmnQZ1EKlpQN2Borj+GoBlYnRTYY/ORNUhKV9kfl3/0M4 WaeFRX3JOcJbCydZtk4357aB5ktKQh3glkKfCn5zRwWLsgKNEm4QDZEFh6oU5LxP XfuhJu0IZn5kryo87WfXMyMv7oAgPeoAYckz0STL9Ek1dG91DjVCvjjk9JLww4Sl 0H+BLNaMeaRb3e9VjKz5ZykZwSta9VmZ9G4fwMxSv68Tw7XoLBPFMLiIHH1RjIuI gp1RpkQ9RmZRlYB0KsJho+DZptewe2aI -----END CERTIFICATE-----Generated at Sat Aug 9 10:41:37 2025 by rpki-client