$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft File: g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json) Hash identifier: 9BJ0gQ5gV3rWmaBzLonE3kmEWEXRj5QuhuU4aT6PcSo= Subject key identifier: 18:7C:79:84:2B:43:B0:E8:B4:E1:93:4D:59:CA:93:FD:9D:0B:AF:6F Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Certificate serial: 09AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft Manifest number: 09A5 Signing time: Sun 10 Aug 2025 20:02:37 +0000 Manifest this update: Sun 10 Aug 2025 20:02:36 +0000 Manifest next update: Sun 17 Aug 2025 20:02:36 +0000 Files and hashes: 1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: mfoJOVMqQZKUvfnbFsPU+myLnvFhbdOd9hPtKOWNcvc=) 2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: LjFZkARdigofgjMJFtc/qBM/m3OntU9kJkRF62lZTLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2475 (0x9ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Validity Not Before: Aug 10 20:02:36 2025 GMT Not After : Aug 17 20:02:36 2025 GMT Subject: CN=6898fadd-3ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6a:d9:e3:6d:bf:ad:9f:7b:4c:8c:c3:14:64: 99:32:12:7a:93:83:4b:b1:4a:a4:04:44:4f:8d:77: c0:5f:a2:d1:cd:02:9e:59:23:1e:44:7d:13:74:21: 5a:7d:74:8a:f7:d9:44:a6:82:5f:4b:d5:5b:90:af: 8a:33:ce:b7:1d:4b:1f:89:2e:99:16:88:b3:cf:5a: 4b:74:e5:12:db:33:d6:7b:7b:85:14:23:69:ec:92: b6:ec:06:31:f1:96:ef:e2:4b:37:00:19:2c:0b:b5: 4e:5b:92:f8:bd:31:3f:a9:95:c5:fd:8d:c0:66:b9: a8:fd:82:08:bb:cf:15:1e:6a:fb:00:ff:2b:48:41: c8:db:3a:d7:0c:d2:0c:23:ba:61:78:58:d0:82:3c: aa:13:1b:8e:b2:c4:cf:53:17:0c:8a:4d:14:6a:f1: 09:05:34:37:c0:31:79:06:69:67:06:2b:99:d5:a4: 86:1f:80:03:00:a9:f0:58:b8:fc:ff:88:16:3a:0c: 01:17:84:40:01:c8:bf:6e:a5:47:22:65:86:2b:1e: 72:83:6e:65:1b:c8:38:1e:a7:5e:d0:74:41:b9:2c: ba:f0:d3:37:00:7d:2f:da:22:c8:51:0b:49:c2:49: 08:de:46:4c:f4:d3:93:8f:51:de:df:b2:2b:4e:11: a3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7C:79:84:2B:43:B0:E8:B4:E1:93:4D:59:CA:93:FD:9D:0B:AF:6F X509v3 Authority Key Identifier: keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:7e:c4:85:12:b0:6f:d8:49:f5:4d:77:21:04:4d:8a:05:0a: 9f:d3:0c:c9:da:92:57:cc:70:e2:cd:9b:a7:e0:e3:12:cb:5a: 7b:88:29:c0:b0:f9:f9:67:96:e6:ac:4f:53:8b:aa:55:06:ef: 7b:2b:a4:04:d7:a3:21:4d:38:e1:8e:cd:02:a2:7b:a3:d4:28: 4b:58:e7:a5:2a:f8:b4:c8:4c:95:d0:2e:8d:85:98:de:13:96: 98:2f:b1:4b:f1:20:72:1e:1e:2d:e4:db:bf:8c:11:24:f6:56: 14:2d:06:95:10:6c:f9:64:8c:1f:6e:f8:e8:8d:02:25:ee:c5: 85:ca:03:76:24:30:90:d8:70:7d:57:de:01:a6:2a:b2:05:7f: 62:e6:8f:d8:1d:97:02:cf:c2:8c:0f:ee:7f:93:55:22:a9:82: 7b:cc:53:10:61:32:44:1e:f6:ee:60:22:08:cc:ea:5c:20:3d: 4b:e0:62:0b:7a:83:9f:bb:21:25:36:a3:e2:1b:e9:61:cb:bb: 05:7d:da:45:86:7d:d7:a8:35:c0:db:7b:66:a6:50:e7:5f:75: ee:e0:93:9c:f0:39:df:79:f9:2b:84:e5:b8:d4:e3:03:2a:c7: 59:2d:9e:45:7d:5a:21:06:af:87:2d:16:b4:ed:ca:66:55:64: 06:77:1c:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1OTQxMTAvBgNVBAUTKDgzQ0M3MkRFN0Q1QzFGRTUzRkMxNDFGOEJDMUFDMjdC MURGMzAzQjEwHhcNMjUwODEwMjAwMjM2WhcNMjUwODE3MjAwMjM2WjAYMRYwFAYD VQQDEw02ODk4ZmFkZC0zZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mrZ422/rZ97TIzDFGSZMhJ6k4NLsUqkBERPjXfAX6LRzQKeWSMeRH0TdCFa fXSK99lEpoJfS9VbkK+KM863HUsfiS6ZFoizz1pLdOUS2zPWe3uFFCNp7JK27AYx 8Zbv4ks3ABksC7VOW5L4vTE/qZXF/Y3AZrmo/YIIu88VHmr7AP8rSEHI2zrXDNIM I7pheFjQgjyqExuOssTPUxcMik0UavEJBTQ3wDF5BmlnBiuZ1aSGH4ADAKnwWLj8 /4gWOgwBF4RAAci/bqVHImWGKx5yg25lG8g4Hqde0HRBuSy68NM3AH0v2iLIUQtJ wkkI3kZM9NOTj1He37IrThGjxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBh8eYQr Q7DotOGTTVnKk/2dC69vMB8GA1UdIwQYMBaAFIPMct59XB/lP8FB+Lwawnsd8wOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU5NC81MzE3OUZGODhF N0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gtVV93VUg0dkJyQ2V4M3pB N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4eHkzbjFjSC1VX3dVSDR2QnJDZXgzekE3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU5NC81MzE3OUZGODhFN0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gt VV93VUg0dkJyQ2V4M3pBN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8fsSFErBv2En1TXchBE2KBQqf0wzJ2pJXzHDizZun4OMSy1p7iCnA sPn5Z5bmrE9Ti6pVBu97K6QE16MhTTjhjs0Conuj1ChLWOelKvi0yEyV0C6NhZje E5aYL7FL8SByHh4t5Nu/jBEk9lYULQaVEGz5ZIwfbvjojQIl7sWFygN2JDCQ2HB9 V94BpiqyBX9i5o/YHZcCz8KMD+5/k1UiqYJ7zFMQYTJEHvbuYCIIzOpcID1L4GIL eoOfuyElNqPiG+lhy7sFfdpFhn3XqDXA23tmplDnX3Xu4JOc8DnfefkrhOW41OMD KsdZLZ5FfVohBq+HLRa07cpmVWQGdxxy -----END CERTIFICATE-----Generated at Mon Aug 11 04:35:34 2025 by rpki-client