$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft File: 8bA7xYd_4tpPRGoGM9prjh93x9s.mft (raw, json) Hash identifier: 4l27exJqBWaVC3UBuuHmmSFxiJA2d/Fj19n9sNM8he4= Subject key identifier: 5E:9D:AF:DF:23:F2:EF:07:BC:4F:42:96:93:75:B0:C1:51:7E:58:DD Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB Certificate issuer: /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Certificate serial: 05D2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft Manifest number: 05CB Signing time: Fri 08 Aug 2025 23:30:35 +0000 Manifest this update: Fri 08 Aug 2025 23:30:34 +0000 Manifest next update: Fri 15 Aug 2025 23:30:34 +0000 Files and hashes: 1: 8bA7xYd_4tpPRGoGM9prjh93x9s.crl (hash: zbdH4oARHBXh9rNv+eZ1BszltMzNbdxOh/WMpquepaI=) 2: F908A568CD1711EB84E11B24C4F9AE02.roa (hash: 3Wa4+14WSEVvgBq7062Z7z9sx/n30lE6zNTxT2rYF0Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1490 (0x5d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E881, serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Validity Not Before: Aug 8 23:30:34 2025 GMT Not After : Aug 15 23:30:34 2025 GMT Subject: CN=6896889a-6728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:42:79:12:b2:7c:cc:9e:d4:98:0c:ae:ee:e0: ca:f2:53:4c:12:20:5c:82:b1:8b:b4:52:ad:6f:eb: 76:e6:00:41:a5:9f:4f:9d:bf:f2:62:1d:27:90:9d: cc:2c:01:93:85:e7:35:5f:4c:88:a9:16:a5:1f:81: fe:dd:7b:18:a4:c1:90:2c:44:0d:bb:8c:34:9e:87: 54:73:ea:79:25:32:ea:06:3e:57:3c:a9:fe:bd:88: 22:ff:59:cb:68:e0:6e:e1:5c:cd:aa:4e:1e:96:20: f6:f5:eb:60:92:0a:9e:a3:b9:33:97:62:b8:19:3e: af:ec:c3:28:3d:97:4b:81:db:78:38:5b:e2:db:b5: c6:2c:7a:37:a8:69:15:1c:bd:1f:61:87:6e:05:7b: e0:42:bf:8f:4f:54:78:e9:b7:30:34:eb:9d:8e:1f: 4d:fa:24:25:d2:41:ac:54:ae:30:8f:ce:3c:1f:33: b8:54:a3:70:f0:eb:b4:2b:aa:8f:78:f4:6d:8d:5d: 5f:ce:52:93:1b:3c:1d:34:5a:65:26:4f:f3:78:9b: dc:76:bb:16:2d:89:bc:49:c2:8c:92:9b:39:5d:b8: a6:a4:6b:4b:e6:98:21:26:02:7b:7c:bf:92:96:c8: 6c:1e:9f:88:70:dd:a8:86:a0:25:22:90:80:d6:4d: a3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9D:AF:DF:23:F2:EF:07:BC:4F:42:96:93:75:B0:C1:51:7E:58:DD X509v3 Authority Key Identifier: keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:1e:be:84:ba:fc:13:47:29:6a:48:e6:52:e3:d3:5d:ef:82: e9:b1:4a:3f:48:ff:55:25:59:4e:5e:ce:f3:9a:27:8c:8f:8d: 70:38:29:95:da:93:78:57:e7:e3:05:a1:dc:39:67:3c:13:a7: f7:5b:89:c9:6a:21:07:b2:8c:e8:4d:fb:3f:ce:70:0a:1d:5b: ef:bd:e5:6b:76:9d:aa:2f:3b:81:1b:1d:db:6b:d3:73:5c:d8: d0:6e:0c:1f:70:93:0e:4d:c8:3b:3f:5d:3d:d9:06:4a:e6:85: 66:f7:48:e6:e1:1c:17:e1:ea:42:50:8f:21:da:0f:a2:75:22: 1a:da:bf:a0:b2:9b:98:35:f0:e2:69:19:39:9b:4c:a6:bd:9c: e2:3f:57:c8:98:66:1b:3d:4c:50:41:51:0c:b0:41:fe:16:34: b8:76:18:fb:db:c0:a5:d1:5b:27:2a:6d:d8:ef:dd:a1:22:90: 84:96:6a:b0:55:9b:77:3e:2a:bc:3b:94:d4:15:8b:5a:57:88: cd:4e:39:96:2b:36:ca:85:79:d3:5a:fa:9f:92:d5:e9:97:b9: 6e:3e:dd:ed:12:74:0b:7b:3c:06:80:16:c7:4f:51:14:65:9a: 64:69:fa:cf:71:75:c5:e0:f1:6f:5b:99:80:f7:63:26:1b:b2: c3:58:a6:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4ODExMTAvBgNVBAUTKEYxQjAzQkM1ODc3RkUyREE0RjQ0NkEwNjMzREE2QjhF MUY3N0M3REIwHhcNMjUwODA4MjMzMDM0WhcNMjUwODE1MjMzMDM0WjAYMRYwFAYD VQQDEw02ODk2ODg5YS02NzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0J5ErJ8zJ7UmAyu7uDK8lNMEiBcgrGLtFKtb+t25gBBpZ9Pnb/yYh0nkJ3M LAGThec1X0yIqRalH4H+3XsYpMGQLEQNu4w0nodUc+p5JTLqBj5XPKn+vYgi/1nL aOBu4VzNqk4eliD29etgkgqeo7kzl2K4GT6v7MMoPZdLgdt4OFvi27XGLHo3qGkV HL0fYYduBXvgQr+PT1R46bcwNOudjh9N+iQl0kGsVK4wj848HzO4VKNw8Ou0K6qP ePRtjV1fzlKTGzwdNFplJk/zeJvcdrsWLYm8ScKMkps5XbimpGtL5pghJgJ7fL+S lshsHp+IcN2ohqAlIpCA1k2jEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6dr98j 8u8HvE9ClpN1sMFRfljdMB8GA1UdIwQYMBaAFPGwO8WHf+LaT0RqBjPaa44fd8fb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg4MS9DREQ2MEFFQUNE MTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0cFBSR29HTTlwcmpoOTN4 OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiQTd4WWRfNHRwUFJHb0dNOXByamg5M3g5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg4MS9DREQ2MEFFQUNEMTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0 cFBSR29HTTlwcmpoOTN4OXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCrHr6EuvwTRylqSOZS49Nd74LpsUo/SP9VJVlOXs7zmieMj41wOCmV 2pN4V+fjBaHcOWc8E6f3W4nJaiEHsozoTfs/znAKHVvvveVrdp2qLzuBGx3ba9Nz XNjQbgwfcJMOTcg7P1092QZK5oVm90jm4RwX4epCUI8h2g+idSIa2r+gspuYNfDi aRk5m0ymvZziP1fImGYbPUxQQVEMsEH+FjS4dhj728Cl0VsnKm3Y792hIpCElmqw VZt3Piq8O5TUFYtaV4jNTjmWKzbKhXnTWvqfktXpl7luPt3tEnQLezwGgBbHT1EU ZZpkafrPcXXF4PFvW5mA92MmG7LDWKaL -----END CERTIFICATE-----Generated at Sun Aug 10 16:02:06 2025 by rpki-client