$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft File: AI8syGQkHehjXpOldED5wusli7M.mft (raw, json) Hash identifier: SvQyAtNu6i8odcowTvHPl7fuyORGUvSIRUqMQE3La9w= Subject key identifier: F8:29:56:9B:C1:75:77:D7:6C:B6:A9:25:23:C9:BF:FD:85:45:0C:20 Authority key identifier: 00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3 Certificate issuer: /CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3 Certificate serial: 0115 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft Manifest number: 0113 Signing time: Mon 11 Aug 2025 05:03:20 +0000 Manifest this update: Mon 11 Aug 2025 05:03:20 +0000 Manifest next update: Mon 18 Aug 2025 05:03:20 +0000 Files and hashes: 1: AI8syGQkHehjXpOldED5wusli7M.crl (hash: i8kbFS2HhqdSPbnLZTcp8XqPFs6ZUvo72yCWr3HnzlY=) 2: 2C24CB26CECC11EEAFCD520AC4F9AE02.roa (hash: irE7drsVeTTk7a2RFFZcS/J6SNQBkLx5nAZFgDb1h5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 277 (0x115) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC3B, serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3 Validity Not Before: Aug 11 05:03:20 2025 GMT Not After : Aug 18 05:03:20 2025 GMT Subject: CN=68997998-8312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e9:3f:7d:fc:b3:d6:72:72:9c:e8:e6:87:53: 0f:a7:75:70:22:5b:be:0e:36:7e:27:51:6a:61:3f: 96:3a:91:79:c0:85:15:be:51:f7:65:b6:a8:10:75: 6c:d8:e8:7e:a2:6a:e9:cf:6e:d7:1f:3e:35:86:72: 6c:eb:8c:15:b8:b3:2e:a7:76:89:3d:e0:03:3c:ad: 40:e6:ed:2d:70:59:bc:da:55:9b:df:f2:28:26:8d: f9:7e:66:59:2f:c0:81:2b:bc:df:5a:93:67:59:95: ef:26:96:6e:db:13:f2:98:1e:1f:d3:33:2c:61:b1: 75:87:5f:9e:53:b4:ef:c5:70:3c:ab:2d:77:58:79: 3c:e6:63:ba:74:97:1d:d5:54:e2:c4:50:47:02:c0: e7:11:bb:6b:0d:45:4d:18:3b:58:d7:2b:20:c8:f3: 9b:06:d7:64:97:d5:86:64:80:61:54:d4:c4:80:6c: 84:3d:b5:b0:f3:b7:2f:0f:7d:07:40:cc:94:6d:56: b5:61:72:c1:0f:b8:82:d7:a4:4c:21:24:f3:02:ae: 3a:e6:05:4a:88:2d:c6:a1:33:f6:a2:1f:ed:fe:7a: ea:b7:d9:9a:3d:e7:a8:60:6f:9b:22:a8:67:8d:07: 7a:13:fe:8a:d1:42:91:f8:8e:5f:80:eb:c9:54:37: 78:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:29:56:9B:C1:75:77:D7:6C:B6:A9:25:23:C9:BF:FD:85:45:0C:20 X509v3 Authority Key Identifier: keyid:00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:d9:7d:19:6d:dd:4a:69:19:d0:51:69:a7:89:cc:bb:3e:90: b0:32:e5:97:07:f6:4c:bd:28:bc:2c:f2:86:dd:37:27:65:3b: 8b:ac:82:1c:23:a9:9b:e8:b2:5c:47:aa:62:21:17:98:62:29: c6:bc:3c:6b:05:27:60:12:b7:56:3d:4e:a2:60:94:9c:70:bd: 0e:59:51:c2:e9:fe:18:1c:30:7a:7c:9a:d8:3a:88:89:4f:c6: a0:89:e8:30:a2:1f:fe:c0:bf:13:a7:d4:d7:20:bb:c4:14:2c: 1e:19:d8:42:3a:3a:41:0e:9b:84:a5:2a:17:33:92:6f:12:02: b9:05:9e:01:a7:a9:f9:6d:86:4d:1a:bc:28:81:2a:75:3e:6e: b6:77:2a:43:85:c2:85:51:6c:41:69:1b:6d:ff:82:be:e6:70: 24:19:14:24:16:0d:42:a5:1a:45:d3:56:2f:a1:c5:ee:4d:44: 56:8c:45:18:87:f3:70:eb:71:dd:d3:ac:7d:0c:fc:67:6f:9e: 86:15:f9:00:99:6b:e1:42:21:6c:86:65:84:6d:ec:22:62:92: 07:25:5b:45:99:5d:04:1d:b3:30:e7:0e:a5:32:74:1c:8a:d2: 44:a0:c2:b5:fa:6a:ea:cf:df:09:34:9e:6a:ed:52:56:11:44: 4c:9e:68:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDM0IxMTAvBgNVBAUTKDAwOEYyQ0M4NjQyNDFERTg2MzVFOTNBNTc0NDBGOUMy RUIyNThCQjMwHhcNMjUwODExMDUwMzIwWhcNMjUwODE4MDUwMzIwWjAYMRYwFAYD VQQDEw02ODk5Nzk5OC04MzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOk/ffyz1nJynOjmh1MPp3VwIlu+DjZ+J1FqYT+WOpF5wIUVvlH3ZbaoEHVs 2Oh+omrpz27XHz41hnJs64wVuLMup3aJPeADPK1A5u0tcFm82lWb3/IoJo35fmZZ L8CBK7zfWpNnWZXvJpZu2xPymB4f0zMsYbF1h1+eU7TvxXA8qy13WHk85mO6dJcd 1VTixFBHAsDnEbtrDUVNGDtY1ysgyPObBtdkl9WGZIBhVNTEgGyEPbWw87cvD30H QMyUbVa1YXLBD7iC16RMISTzAq465gVKiC3GoTP2oh/t/nrqt9maPeeoYG+bIqhn jQd6E/6K0UKR+I5fgOvJVDd4RQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPgpVpvB dXfXbLapJSPJv/2FRQwgMB8GA1UdIwQYMBaAFACPLMhkJB3oY16TpXRA+cLrJYuz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUMzQi85NTdCMjQ0MENF Q0IxMUVFQjAzMDU1ODdDNEY5QUUwMi9BSThzeUdRa0hlaGpYcE9sZEVENXd1c2xp N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOHN5R1FrSGVoalhwT2xkRUQ1d3VzbGk3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUMzQi85NTdCMjQ0MENFQ0IxMUVFQjAzMDU1ODdDNEY5QUUwMi9BSThzeUdRa0hl aGpYcE9sZEVENXd1c2xpN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAA2X0Zbd1KaRnQUWmnicy7PpCwMuWXB/ZMvSi8LPKG3TcnZTuLrIIc I6mb6LJcR6piIReYYinGvDxrBSdgErdWPU6iYJSccL0OWVHC6f4YHDB6fJrYOoiJ T8agiegwoh/+wL8Tp9TXILvEFCweGdhCOjpBDpuEpSoXM5JvEgK5BZ4Bp6n5bYZN GrwogSp1Pm62dypDhcKFUWxBaRtt/4K+5nAkGRQkFg1CpRpF01YvocXuTURWjEUY h/Nw63Hd06x9DPxnb56GFfkAmWvhQiFshmWEbewiYpIHJVtFmV0EHbMw5w6lMnQc itJEoMK1+mrqz98JNJ5q7VJWEURMnmgX -----END CERTIFICATE-----Generated at Mon Aug 11 13:14:02 2025 by rpki-client