$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft File: 8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json) Hash identifier: cyfDbDZx8eXhRyhVsRIfhgkcOyCqOB+G5jVyNcEuG9Q= Subject key identifier: 65:E7:AA:24:BF:14:E5:68:9B:60:2E:D2:39:18:51:F5:1E:D9:BC:C2 Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 Certificate issuer: /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Certificate serial: 029A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft Manifest number: 029A Signing time: Sat 09 Aug 2025 02:06:17 +0000 Manifest this update: Sat 09 Aug 2025 02:06:16 +0000 Manifest next update: Sat 16 Aug 2025 02:06:16 +0000 Files and hashes: 1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: SjyFSIZr4JeH6f0HSvCLCPkuCT0F3pv9PZAc1nu5vbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 666 (0x29a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54, serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Validity Not Before: Aug 9 02:06:16 2025 GMT Not After : Aug 16 02:06:16 2025 GMT Subject: CN=6896ad18-eab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cf:ed:56:1c:fa:56:b0:80:29:60:5d:e5:29: bd:6c:7e:95:dc:cd:e5:51:02:61:06:ad:6e:dc:17: 99:3d:37:2a:c4:9d:e5:17:bc:3d:50:13:64:d5:4a: 7d:b8:3d:46:9f:92:92:59:b3:64:a2:09:e4:53:db: 7a:9c:fa:4c:cc:b5:ac:09:5e:4c:e6:62:cf:dd:9c: f1:a1:6d:f1:18:e3:a6:72:c7:21:4c:a0:84:29:8f: 63:57:20:c0:72:c3:23:2c:e4:0e:19:46:8a:9b:e1: 67:11:ad:63:dc:d0:a7:ce:88:e6:d1:c2:52:65:bd: b0:aa:55:aa:a3:10:34:ff:69:cb:75:0f:89:6c:4b: f3:7b:9b:b5:f4:56:3a:32:c9:e1:97:44:50:98:ac: b1:86:7f:f2:58:66:92:fe:dc:b8:97:f2:41:dc:0a: 78:0a:8a:18:19:1c:3b:84:c1:9d:07:84:a4:c3:f4: 29:ee:79:93:a5:24:6f:61:6a:43:5c:bb:34:c8:40: 74:3d:3d:24:ca:2f:a4:9c:b4:34:96:e0:21:3f:11: 4d:93:59:cd:21:00:28:fd:53:c7:16:77:d1:09:ad: 46:5b:7f:c9:82:c3:34:d9:6c:02:2f:0e:be:ac:56: ec:51:45:68:b8:a3:cc:79:55:2b:91:02:cd:de:da: 9b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E7:AA:24:BF:14:E5:68:9B:60:2E:D2:39:18:51:F5:1E:D9:BC:C2 X509v3 Authority Key Identifier: keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:bc:41:52:4d:e0:57:d2:de:ea:e9:c4:0c:cf:ea:a9:9f:6f: 9e:af:ca:6b:fd:2e:65:cb:e2:4d:9f:40:bd:2f:b4:cf:af:e5: 07:2c:d8:2f:44:c3:ad:32:e7:fd:b3:f4:50:13:15:b1:b4:2f: 95:a5:50:27:4c:a0:de:6c:75:49:da:d7:15:9b:7c:c4:0e:d2: 15:16:07:20:2a:bf:3a:49:23:45:5f:bb:e4:23:de:0c:59:f8: c0:98:5b:be:1c:39:96:77:83:38:af:31:81:3b:8c:24:86:4d: f2:54:a6:4d:ec:00:a4:99:97:d8:74:af:52:bf:07:18:56:77: 38:7e:a6:f0:ed:28:c8:eb:87:d7:c7:e1:ed:70:06:a6:c4:9b: b2:2a:59:ee:9a:82:e6:1e:d0:ac:0a:d2:dc:86:88:b9:4d:8a: a1:53:69:80:5f:32:59:1c:e8:f3:f3:ce:88:3e:9b:41:a7:ca: 9d:1a:64:71:24:e2:9e:82:85:64:2a:ae:30:44:2a:bc:b3:71: 2a:57:83:8f:49:4d:23:04:77:31:56:d2:3c:56:ea:58:6f:b7: bf:45:34:84:af:a9:e6:25:42:ca:dd:0f:a8:0d:ae:d4:a0:18: 71:25:4d:f9:56:a6:a9:c7:14:13:35:05:e5:4b:1b:78:c9:7b: aa:11:bb:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKEYxMTZFOTEyQTk1MDlERTRCMkQ2QjNEOTNDQkMxOEY1 MDAzNkUxNjgwHhcNMjUwODA5MDIwNjE2WhcNMjUwODE2MDIwNjE2WjAYMRYwFAYD VQQDEw02ODk2YWQxOC1lYWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArs/tVhz6VrCAKWBd5Sm9bH6V3M3lUQJhBq1u3BeZPTcqxJ3lF7w9UBNk1Up9 uD1Gn5KSWbNkognkU9t6nPpMzLWsCV5M5mLP3ZzxoW3xGOOmcschTKCEKY9jVyDA csMjLOQOGUaKm+FnEa1j3NCnzojm0cJSZb2wqlWqoxA0/2nLdQ+JbEvze5u19FY6 Msnhl0RQmKyxhn/yWGaS/ty4l/JB3Ap4CooYGRw7hMGdB4Skw/Qp7nmTpSRvYWpD XLs0yEB0PT0kyi+knLQ0luAhPxFNk1nNIQAo/VPHFnfRCa1GW3/JgsM02WwCLw6+ rFbsUUVouKPMeVUrkQLN3tqbKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGXnqiS/ FOVom2Au0jkYUfUe2bzCMB8GA1UdIwQYMBaAFPEW6RKpUJ3kstaz2Ty8GPUANuFo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC84NTI3RTRCNjBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5lU3kxclBaUEx3WTlRQTI0 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSYnBFcWxRbmVTeTFyUFpQTHdZOVFBMjRXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC84NTI3RTRCNjBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5l U3kxclBaUEx3WTlRQTI0V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfvEFSTeBX0t7q6cQMz+qpn2+er8pr/S5ly+JNn0C9L7TPr+UHLNgv RMOtMuf9s/RQExWxtC+VpVAnTKDebHVJ2tcVm3zEDtIVFgcgKr86SSNFX7vkI94M WfjAmFu+HDmWd4M4rzGBO4wkhk3yVKZN7ACkmZfYdK9SvwcYVnc4fqbw7SjI64fX x+HtcAamxJuyKlnumoLmHtCsCtLchoi5TYqhU2mAXzJZHOjz886IPptBp8qdGmRx JOKegoVkKq4wRCq8s3EqV4OPSU0jBHcxVtI8VupYb7e/RTSEr6nmJULK3Q+oDa7U oBhxJU35VqapxxQTNQXlSxt4yXuqEbvu -----END CERTIFICATE-----Generated at Sun Aug 10 03:56:47 2025 by rpki-client