$ rpki-client -vvf rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft File: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft (raw, json) Hash identifier: l7B3f23jKLbjj4yKO+zhgyl2KsZK0KU2dL7o+dKNqSM= Subject key identifier: A3:85:1D:05:05:1E:16:56:7E:5A:DE:14:89:81:4C:59:61:43:64:9E Authority key identifier: F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C Certificate issuer: /CN=A917B12B/serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Certificate serial: 2795 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft Manifest number: 276D Signing time: Fri 08 Aug 2025 15:43:42 +0000 Manifest this update: Fri 08 Aug 2025 15:43:42 +0000 Manifest next update: Fri 15 Aug 2025 15:43:42 +0000 Files and hashes: 1: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl (hash: sGYuD1f2PODplP6BWx44Qw4d2g28NYPqx5iq0ouwI0E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10133 (0x2795) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B12B, serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Validity Not Before: Aug 8 15:43:42 2025 GMT Not After : Aug 15 15:43:42 2025 GMT Subject: CN=68961b2e-c5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7c:d5:94:51:48:59:8b:3e:65:29:1f:d3:e9: 87:47:07:f2:05:f5:cf:95:85:5c:12:97:b5:63:70: 8b:b7:21:a3:a7:7d:55:4b:c9:6a:2e:bf:92:07:4c: 7b:f6:31:d6:b3:14:1c:21:ed:40:be:85:15:aa:8c: 05:32:57:17:0c:c6:4c:a6:ad:8b:09:a9:5f:42:2d: 39:aa:fe:6c:5a:4c:f6:34:3c:80:3c:c3:b0:3f:58: 6a:ea:45:15:72:c6:5f:3d:7d:24:70:1d:13:0f:17: 16:bd:75:67:76:07:33:28:e5:ef:3f:dd:59:12:f7: e8:04:9e:23:cd:3a:b9:07:b4:de:62:68:f5:fe:b3: f4:c4:c2:0d:cb:c0:45:37:1f:7c:ea:6d:55:0b:13: 2b:b4:c3:46:0d:5b:7e:f1:32:f0:d2:f2:d4:0a:0d: 45:ea:04:68:4c:79:5f:27:b5:87:cc:7f:cb:6e:67: 60:36:4c:4e:9c:4e:d1:09:e7:98:74:fa:15:c4:31: 5a:fa:0d:6a:56:ae:24:8c:a0:dc:3a:7e:0f:f2:5e: 8d:a0:a9:c0:7d:f1:dd:01:ff:d9:36:50:7f:f2:91: 7d:b3:a7:cc:d1:02:0c:65:cd:40:43:24:e9:30:50: 77:5f:f3:1b:ce:ec:63:d7:f5:b9:9e:e4:66:84:65: 7b:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:85:1D:05:05:1E:16:56:7E:5A:DE:14:89:81:4C:59:61:43:64:9E X509v3 Authority Key Identifier: keyid:F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:e5:a5:7e:66:11:96:c6:32:bc:59:17:10:b9:77:d4:69:fb: b9:ff:a1:23:f3:0b:53:b2:5f:e6:57:62:30:05:5a:ef:65:2b: a9:3d:76:2e:77:c5:01:c9:1b:d0:bf:3d:6e:7b:d5:10:68:94: 6f:e9:10:8e:2d:4c:8b:25:fb:fb:44:10:12:ba:51:81:7f:a4: d5:44:62:37:a0:6f:b9:bb:32:6b:80:2f:1b:4f:1a:64:ef:88: 22:d5:65:a3:e0:bf:80:cd:c0:d2:4a:2b:d7:5e:d4:b8:bb:0e: bc:dc:63:3f:c2:75:0d:e2:ba:39:11:0d:53:5e:0b:89:19:13: 5c:76:b2:8c:84:81:09:3e:ce:1a:c7:4a:64:55:75:2c:11:7f: fa:c0:71:8d:7a:c4:54:a8:4f:c7:16:68:95:cb:8a:2d:35:43: 56:e3:75:44:c1:78:db:e4:bd:2c:c5:33:6e:84:de:82:63:5c: f4:f2:35:34:a0:58:99:af:53:88:f1:07:59:13:0c:3d:c9:b3: e8:bb:19:4f:b4:9a:19:3c:8d:eb:a4:6a:81:46:d9:0b:e6:fc: 25:78:51:f0:72:0f:14:33:de:de:08:66:20:8b:f7:f6:8a:3e: 78:8f:16:dc:57:47:fb:c1:e7:0b:4a:28:3e:3a:c5:ff:3c:b1: cf:e7:0f:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxMkIxMTAvBgNVBAUTKEYyNjkyMzQ1M0YwMTcwMzA5RkQ1OEJGM0IwQjVEQ0U0 M0ZGOUI0MUMwHhcNMjUwODA4MTU0MzQyWhcNMjUwODE1MTU0MzQyWjAYMRYwFAYD VQQDEw02ODk2MWIyZS1jNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XzVlFFIWYs+ZSkf0+mHRwfyBfXPlYVcEpe1Y3CLtyGjp31VS8lqLr+SB0x7 9jHWsxQcIe1AvoUVqowFMlcXDMZMpq2LCalfQi05qv5sWkz2NDyAPMOwP1hq6kUV csZfPX0kcB0TDxcWvXVndgczKOXvP91ZEvfoBJ4jzTq5B7TeYmj1/rP0xMINy8BF Nx986m1VCxMrtMNGDVt+8TLw0vLUCg1F6gRoTHlfJ7WHzH/LbmdgNkxOnE7RCeeY dPoVxDFa+g1qVq4kjKDcOn4P8l6NoKnAffHdAf/ZNlB/8pF9s6fM0QIMZc1AQyTp MFB3X/Mbzuxj1/W5nuRmhGV7kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOFHQUF HhZWflreFImBTFlhQ2SeMB8GA1UdIwQYMBaAFPJpI0U/AXAwn9WL87C13OQ/+bQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjEyQi9BNTA5RUMxRUJE OUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNEQ2YxWXZ6c0xYYzVEXzV0 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhta2pSVDhCY0RDZjFZdnpzTFhjNURfNXRCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjEyQi9BNTA5RUMxRUJEOUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNE Q2YxWXZ6c0xYYzVEXzV0QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCo5aV+ZhGWxjK8WRcQuXfUafu5/6Ej8wtTsl/mV2IwBVrvZSupPXYu d8UByRvQvz1ue9UQaJRv6RCOLUyLJfv7RBASulGBf6TVRGI3oG+5uzJrgC8bTxpk 74gi1WWj4L+AzcDSSivXXtS4uw683GM/wnUN4ro5EQ1TXguJGRNcdrKMhIEJPs4a x0pkVXUsEX/6wHGNesRUqE/HFmiVy4otNUNW43VEwXjb5L0sxTNuhN6CY1z08jU0 oFiZr1OI8QdZEww9ybPouxlPtJoZPI3rpGqBRtkL5vwleFHwcg8UM97eCGYgi/f2 ij54jxbcV0f7wecLSig+OsX/PLHP5w+t -----END CERTIFICATE-----Generated at Sun Aug 10 04:26:20 2025 by rpki-client