$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft File: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft (raw, json) Hash identifier: VjBoRxfcYq/1Bzw2JszGPoHnSwRLky4q2LFgMHsXOM4= Subject key identifier: 39:33:9A:F5:83:35:C1:B8:9B:6E:20:FA:E7:5F:24:EF:74:6A:66:E6 Authority key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A Certificate issuer: /CN=A91709F5/serialNumber=F12895792117E90703A0020F4F359831DB2F937A Certificate serial: 63 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft Manifest number: 62 Signing time: Sat 09 Aug 2025 07:32:30 +0000 Manifest this update: Sat 09 Aug 2025 07:32:30 +0000 Manifest next update: Sat 16 Aug 2025 07:32:30 +0000 Files and hashes: 1: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl (hash: MV9PUBFWAQHsLJ8mLzLxA0+If7Ss4DVABtLfa0eNL8M=) 2: A42925E8DFDA11EFB5E94125C4F9AE02.roa (hash: mx4Ct5Tnd5YkFq5qkT60Yq1dgh6KZfYC5nrKRxnyy28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 99 (0x63) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A Validity Not Before: Aug 9 07:32:30 2025 GMT Not After : Aug 16 07:32:30 2025 GMT Subject: CN=6896f98e-5f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cf:9d:8a:8a:7a:f7:7e:90:5b:fc:eb:d4:07: d1:82:27:03:ed:00:56:11:0d:7b:c2:0a:09:74:f1: 2b:d0:24:1f:af:cd:60:44:72:c0:43:fe:0f:92:74: f3:9e:8c:46:98:22:78:df:f9:66:c4:d3:6a:5e:44: 6c:77:95:72:53:21:5c:55:6e:00:24:03:c4:f0:ac: a5:82:cc:f4:7b:b5:50:54:70:df:c0:51:dc:ee:ca: c0:dc:16:f9:75:5e:89:62:f9:26:52:6b:ab:7b:44: ab:2d:e6:5d:25:c1:8f:44:2e:62:b8:a6:63:7a:19: 02:77:8c:2c:6e:28:b1:5b:36:43:50:40:0f:fa:67: 5e:53:f5:3f:82:b4:e1:08:d2:ed:4b:70:48:cd:fc: 8a:c4:cf:30:ce:a5:4a:57:e7:6c:9f:78:7c:c6:98: e2:42:e8:94:11:8e:e8:1e:58:08:71:45:c9:13:1a: 89:ac:28:b6:59:aa:ae:88:45:69:45:28:81:42:d2: 34:dc:84:2f:cb:c7:5e:21:3b:c9:06:8e:53:af:94: 0c:3b:51:d2:a2:ed:9a:ba:49:db:f8:21:b8:ca:7d: 5b:37:37:ef:df:eb:f0:b2:96:3e:00:5e:0c:54:a8: bc:5c:92:36:87:ae:94:76:59:26:d5:f4:f0:c0:db: 1b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:33:9A:F5:83:35:C1:B8:9B:6E:20:FA:E7:5F:24:EF:74:6A:66:E6 X509v3 Authority Key Identifier: keyid:F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:29:7e:2b:81:96:9b:09:38:55:81:f2:91:eb:98:fe:0d:6a: b2:7e:45:8d:a1:b3:cc:93:02:97:07:c8:3e:55:51:7f:01:88: 65:8c:50:32:06:8a:81:55:df:5a:df:17:56:64:7c:43:2a:db: a1:6a:cb:86:dc:19:31:14:58:c2:20:d7:92:7f:67:20:82:64: ee:d5:eb:e0:94:c3:48:30:a1:38:a6:3e:40:4f:55:05:16:b5: 28:6b:81:b5:ff:03:46:05:77:e3:5a:7c:2b:cc:e3:45:a7:a8: 54:82:24:ba:a0:80:af:66:f8:b9:7c:c3:fb:05:5f:a8:01:10: ae:62:64:9f:34:07:79:e5:b2:5c:22:b3:3b:0f:b0:51:a8:2e: d7:13:a8:90:95:a2:44:53:39:1f:43:51:52:50:1e:06:b3:83: 5b:72:75:c3:c4:cb:b3:a8:cf:01:87:8f:76:9c:29:ae:4d:8c: e1:d0:22:38:b3:1d:16:29:3b:c4:b1:91:69:44:8f:14:02:38: 36:59:2f:a8:b4:44:82:e1:a4:0f:82:d6:8f:76:bd:10:07:e3: 41:69:cc:99:cb:4d:1e:a1:bb:34:40:cb:b0:ae:a7:7a:07:2a: b3:28:54:68:ff:aa:77:27:c8:1e:7c:3d:e4:6f:0b:11:06:2d: 89:82:e9:45 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDlGNTExMC8GA1UEBRMoRjEyODk1NzkyMTE3RTkwNzAzQTAwMjBGNEYzNTk4MzFE QjJGOTM3QTAeFw0yNTA4MDkwNzMyMzBaFw0yNTA4MTYwNzMyMzBaMBgxFjAUBgNV BAMTDTY4OTZmOThlLTVmNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDTz52Kinr3fpBb/OvUB9GCJwPtAFYRDXvCCgl08SvQJB+vzWBEcsBD/g+SdPOe jEaYInjf+WbE02peRGx3lXJTIVxVbgAkA8TwrKWCzPR7tVBUcN/AUdzuysDcFvl1 Xoli+SZSa6t7RKst5l0lwY9ELmK4pmN6GQJ3jCxuKLFbNkNQQA/6Z15T9T+CtOEI 0u1LcEjN/IrEzzDOpUpX52yfeHzGmOJC6JQRjugeWAhxRckTGomsKLZZqq6IRWlF KIFC0jTchC/Lx14hO8kGjlOvlAw7UdKi7Zq6Sdv4IbjKfVs3N+/f6/Cylj4AXgxU qLxckjaHrpR2WSbV9PDA2xubAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOTOa9YM1 wbibbiD6518k73RqZuYwHwYDVR0jBBgwFoAU8SiVeSEX6QcDoAIPTzWYMdsvk3ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOUY1LzMyODNFN0Q0REZE QTExRUY4QjQ3ODYyNEM0RjlBRTAyLzhTaVZlU0VYNlFjRG9BSVBUeldZTWRzdmsz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFNpVmVTRVg2UWNEb0FJUFR6V1lNZHN2azNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OUY1LzMyODNFN0Q0REZEQTExRUY4QjQ3ODYyNEM0RjlBRTAyLzhTaVZlU0VYNlFj RG9BSVBUeldZTWRzdmszby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAwpfiuBlpsJOFWB8pHrmP4NarJ+RY2hs8yTApcHyD5VUX8BiGWMUDIG ioFV31rfF1ZkfEMq26Fqy4bcGTEUWMIg15J/ZyCCZO7V6+CUw0gwoTimPkBPVQUW tShrgbX/A0YFd+NafCvM40WnqFSCJLqggK9m+Ll8w/sFX6gBEK5iZJ80B3nlslwi szsPsFGoLtcTqJCVokRTOR9DUVJQHgazg1tydcPEy7OozwGHj3acKa5NjOHQIjiz HRYpO8SxkWlEjxQCODZZL6i0RILhpA+C1o92vRAH40FpzJnLTR6huzRAy7Cup3oH KrMoVGj/qncnyB58PeRvCxEGLYmC6UU= -----END CERTIFICATE-----Generated at Sun Aug 10 18:15:49 2025 by rpki-client