$ rpki-client -vvf rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft File: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft (raw, json) Hash identifier: E7os0N2Q5WcwEIJYZkPVTVCNWRIMm3kJqIrqTEA3owA= Subject key identifier: 33:CB:D3:19:5E:19:6B:04:67:A7:C1:7D:0E:F9:C6:A2:CB:A6:E9:27 Authority key identifier: F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C Certificate issuer: /CN=A91909D7/serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Certificate serial: 0D33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft Manifest number: 0D1B Signing time: Fri 08 Aug 2025 18:16:26 +0000 Manifest this update: Fri 08 Aug 2025 18:16:26 +0000 Manifest next update: Fri 15 Aug 2025 18:16:26 +0000 Files and hashes: 1: 8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl (hash: pEa//90Vca5m6HrXk6Sv1Z9M+THy2UX0Z5wPNSmKbkw=) 2: 9F1777A406BD11EFB27FA94FC4F9AE02.roa (hash: 6tESd18bNlTp7MTJWPASDnQ/QZ789nFYaqEj8964Wuk=) 3: 6E9C8882E2B211E9B2944855C4F9AE02.roa (hash: EPhvpVKPmBr1gw4zNjYoBtmyt2pNt1yo4gY/5g2PubM=) 4: 6E108B3EE2B211E9B2944855C4F9AE02.roa (hash: lEs75gKOPCCArPAlQAMhTBdgUk348a94N0Kq8VMlq+o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3379 (0xd33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91909D7, serialNumber=F27B115BF50980BB9D84FC5CDD2C3B5AED8DEA5C Validity Not Before: Aug 8 18:16:26 2025 GMT Not After : Aug 15 18:16:26 2025 GMT Subject: CN=68963efa-82da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3d:68:27:7c:fc:67:2e:e5:60:77:95:d6:01: d8:dc:38:c4:02:ae:89:46:89:b2:66:3c:c7:6e:7b: be:76:36:47:4a:7a:af:01:ce:a8:bb:b7:2b:95:ad: bf:c4:4e:c0:03:53:5f:8d:21:43:88:38:12:a6:69: af:ad:ef:4b:88:32:38:39:47:a0:23:a3:44:b2:de: 87:c9:f2:dd:be:8d:a7:bd:ab:77:26:14:e2:e4:97: 8f:32:71:dd:a3:64:63:db:f8:cd:d8:13:a6:a3:ce: 7d:86:64:1d:38:ae:fb:63:31:e5:21:7f:e7:67:8e: f7:c3:76:9f:bc:26:e1:ab:55:06:a1:bb:f0:38:22: f7:1f:2a:31:bc:94:0d:fa:09:8b:2d:f6:ed:9b:0c: 8d:11:be:78:f6:08:2c:f5:d7:f6:ad:51:32:38:d7: 74:95:4d:8b:4b:14:4b:e5:ad:cf:cf:ab:c6:60:47: 71:9f:51:a9:ad:59:b3:f5:a4:fe:56:f5:a6:d1:68: 43:d0:ba:49:25:3a:77:06:2d:42:18:70:f2:7d:fe: 61:e2:61:60:4f:a6:be:96:3f:38:fe:e0:b4:bd:67: 30:0b:93:5d:00:d2:f7:e1:e8:0f:28:47:5c:d5:7d: ca:1f:e6:4d:cb:d2:8b:ed:43:92:4d:2b:69:4a:be: 84:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CB:D3:19:5E:19:6B:04:67:A7:C1:7D:0E:F9:C6:A2:CB:A6:E9:27 X509v3 Authority Key Identifier: keyid:F2:7B:11:5B:F5:09:80:BB:9D:84:FC:5C:DD:2C:3B:5A:ED:8D:EA:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91909D7/4A428294E2B111E9BCEA4F53C4F9AE02/8nsRW_UJgLudhPxc3Sw7Wu2N6lw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3c:f3:36:eb:46:43:00:df:55:a9:ea:82:bc:79:32:24:90: f9:c3:75:14:81:59:61:27:64:bf:79:1f:54:95:d6:91:8d:86: 66:01:e7:30:02:c6:97:85:ea:8e:93:b0:dc:13:e9:df:94:b2: f7:07:56:2e:ab:11:d3:92:cd:b9:c7:9f:98:25:13:c5:57:ef: 32:30:0d:07:d5:33:d3:48:0c:70:42:4e:4c:e2:6c:71:e5:cc: ca:f9:d0:61:83:9f:42:77:ce:81:26:3b:b9:2a:67:e6:63:48: 7e:30:3c:01:d2:27:07:71:49:4d:45:21:38:63:54:79:37:fa: 10:0c:4a:9b:95:e6:1b:27:5b:b1:a3:53:83:6e:da:ef:9e:ce: 1e:67:38:e0:c9:ee:46:c5:8d:06:21:5d:be:32:08:bc:45:3a: 0c:d6:c6:e7:30:f3:3d:69:fc:ea:5d:f1:c0:6b:66:c5:08:10: fa:b9:6f:c8:d3:a2:50:46:40:ab:3f:d1:b1:f9:c1:13:e3:bf: 40:99:ab:3c:15:b1:56:66:bd:48:20:7d:47:e9:d2:8c:88:51: f1:4a:ee:ed:c9:60:26:aa:b6:cc:5d:6a:57:7a:44:30:84:4e: d0:a8:47:d7:a5:07:26:9a:7e:9a:39:3c:59:ed:5e:03:ce:fa: 5c:b2:92:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA5RDcxMTAvBgNVBAUTKEYyN0IxMTVCRjUwOTgwQkI5RDg0RkM1Q0REMkMzQjVB RUQ4REVBNUMwHhcNMjUwODA4MTgxNjI2WhcNMjUwODE1MTgxNjI2WjAYMRYwFAYD VQQDEw02ODk2M2VmYS04MmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1T1oJ3z8Zy7lYHeV1gHY3DjEAq6JRomyZjzHbnu+djZHSnqvAc6ou7crla2/ xE7AA1NfjSFDiDgSpmmvre9LiDI4OUegI6NEst6HyfLdvo2nvat3JhTi5JePMnHd o2Rj2/jN2BOmo859hmQdOK77YzHlIX/nZ473w3afvCbhq1UGobvwOCL3HyoxvJQN +gmLLfbtmwyNEb549ggs9df2rVEyONd0lU2LSxRL5a3Pz6vGYEdxn1GprVmz9aT+ VvWm0WhD0LpJJTp3Bi1CGHDyff5h4mFgT6a+lj84/uC0vWcwC5NdANL34egPKEdc 1X3KH+ZNy9KL7UOSTStpSr6EywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDPL0xle GWsEZ6fBfQ75xqLLpuknMB8GA1UdIwQYMBaAFPJ7EVv1CYC7nYT8XN0sO1rtjepc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDlENy80QTQyODI5NEUy QjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdMdWRoUHhjM1N3N1d1Mk42 bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuc1JXX1VKZ0x1ZGhQeGMzU3c3V3UyTjZsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MDlENy80QTQyODI5NEUyQjExMUU5QkNFQTRGNTNDNEY5QUUwMi84bnNSV19VSmdM dWRoUHhjM1N3N1d1Mk42bHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsPPM260ZDAN9VqeqCvHkyJJD5w3UUgVlhJ2S/eR9UldaRjYZmAecw AsaXheqOk7DcE+nflLL3B1YuqxHTks25x5+YJRPFV+8yMA0H1TPTSAxwQk5M4mxx 5czK+dBhg59Cd86BJju5KmfmY0h+MDwB0icHcUlNRSE4Y1R5N/oQDEqbleYbJ1ux o1ODbtrvns4eZzjgye5GxY0GIV2+Mgi8RToM1sbnMPM9afzqXfHAa2bFCBD6uW/I 06JQRkCrP9Gx+cET479Amas8FbFWZr1IIH1H6dKMiFHxSu7tyWAmqrbMXWpXekQw hE7QqEfXpQcmmn6aOTxZ7V4DzvpcspKu -----END CERTIFICATE-----Generated at Sat Aug 9 01:12:39 2025 by rpki-client