$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft File: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft (raw, json) Hash identifier: wys5X1cie4I1VjaSjE5T5wOv7uiVck7TDYfhg0BAVOo= Subject key identifier: 2E:E6:EF:CF:E0:87:72:12:29:52:32:50:C6:9B:EB:58:E7:5C:19:C1 Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F Certificate issuer: /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft Manifest number: 021C Signing time: Sat 09 Aug 2025 02:32:45 +0000 Manifest this update: Sat 09 Aug 2025 02:32:45 +0000 Manifest next update: Sat 16 Aug 2025 02:32:45 +0000 Files and hashes: 1: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl (hash: /g9Mb3FT+7KycKA7+zEJe9VsBZQ7dtylV0pBfaF91Go=) 2: E7312F4C5DE211ED9D5E6613C4F9AE02.roa (hash: rc/VDMjkPbB4X1/rw349yGgl9pIXGG2Nvyj57rr+IWw=) 3: 50C409A4591811EDA0DEE335C4F9AE02.roa (hash: 1pnwFpSmR4EBTHjCO/gvMKBX3b/KZHcHGgKDB9usLIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A93BB, serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F Validity Not Before: Aug 9 02:32:45 2025 GMT Not After : Aug 16 02:32:45 2025 GMT Subject: CN=6896b34d-4046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:54:5b:f7:fd:bc:a5:66:de:71:ed:ca:4a:5f: ed:20:bf:b8:d1:9a:65:ee:50:30:76:1f:ee:29:78: 21:8c:d7:30:1e:ac:c2:16:51:32:53:d2:4f:bc:00: 2a:92:a6:c6:6b:1c:38:f7:68:32:8f:36:e9:af:23: 87:26:f7:9a:86:e3:de:a4:3c:d9:c1:fa:16:ca:d0: 3e:9f:50:ef:85:e2:c7:24:05:d4:6a:e3:eb:8f:4a: d3:30:5f:13:18:b2:08:53:a5:95:12:5e:08:5e:22: df:c5:77:9d:49:b9:4e:5a:57:12:30:15:a5:c1:da: 8d:53:f9:61:f8:f5:ce:a9:50:13:7b:43:82:f8:7d: 8b:13:8b:ae:c2:61:d1:95:67:05:77:e2:15:ec:a0: dd:a5:da:03:c7:3c:aa:c5:b0:0d:29:83:67:49:d6: 86:06:b7:b4:34:f1:04:0a:b4:d7:3f:79:83:5f:93: 20:2b:93:b6:69:da:f4:5d:c8:9f:c5:08:99:26:d3: 1b:6e:ab:a8:3a:80:03:06:41:42:84:fb:10:86:60: 55:c7:f5:7f:ac:27:9c:98:c5:7d:fc:93:ae:77:af: 75:36:61:8d:24:75:93:cd:6b:04:0d:a9:6e:75:85: 82:50:7d:a8:6b:4d:48:65:5e:4d:01:34:5f:f2:32: 50:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E6:EF:CF:E0:87:72:12:29:52:32:50:C6:9B:EB:58:E7:5C:19:C1 X509v3 Authority Key Identifier: keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:4c:94:99:df:26:5d:8e:7f:bc:81:c3:07:80:11:b7:27:07: aa:bd:c2:f1:7a:09:a8:d3:2a:04:9a:05:6a:6a:75:02:31:3f: 9b:03:32:fa:cd:1a:15:61:f8:a5:12:4c:2f:95:60:52:f6:56: 38:8c:16:01:8c:41:d3:cc:a8:3d:79:f5:3c:4b:4e:0c:66:40: c9:50:e1:3b:bf:43:03:03:66:f6:d6:53:27:b4:7c:e9:96:3e: ec:c5:31:b5:4e:cb:cc:62:93:09:89:7e:4b:04:23:c0:4d:42: 04:3a:76:54:75:0d:9e:06:78:7b:af:fb:e0:75:83:d4:41:aa: 2f:dd:0b:f9:bd:73:34:f4:30:ed:46:aa:b9:26:54:74:d4:b5: 9c:f0:97:ae:99:7b:c8:9f:53:eb:c7:64:db:30:a9:7f:f4:0e: 93:6f:99:2d:e7:64:87:58:ae:c6:f8:ad:7e:b6:ff:37:cf:95: 38:bf:44:31:dc:ae:55:b7:be:d8:31:2d:3b:dc:56:73:bb:27: a9:00:ef:64:06:c6:4d:3d:34:10:3c:e2:7c:26:3d:61:c6:af: ae:a0:78:ee:5e:a7:c7:48:2a:28:af:f5:d7:d5:6b:87:b6:4e: 67:bf:6c:4c:a9:41:4c:2d:5c:b0:4d:91:2d:10:16:b7:ad:d0: 74:fa:81:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkzQkIxMTAvBgNVBAUTKEYzRTVFMjU2RDJFQzVDQTY3RjhBMTlCRTVBMUIyODI5 QjEzNzU4MUYwHhcNMjUwODA5MDIzMjQ1WhcNMjUwODE2MDIzMjQ1WjAYMRYwFAYD VQQDEw02ODk2YjM0ZC00MDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz1Rb9/28pWbece3KSl/tIL+40Zpl7lAwdh/uKXghjNcwHqzCFlEyU9JPvAAq kqbGaxw492gyjzbpryOHJveahuPepDzZwfoWytA+n1DvheLHJAXUauPrj0rTMF8T GLIIU6WVEl4IXiLfxXedSblOWlcSMBWlwdqNU/lh+PXOqVATe0OC+H2LE4uuwmHR lWcFd+IV7KDdpdoDxzyqxbANKYNnSdaGBre0NPEECrTXP3mDX5MgK5O2adr0Xcif xQiZJtMbbquoOoADBkFChPsQhmBVx/V/rCecmMV9/JOud691NmGNJHWTzWsEDalu dYWCUH2oa01IZV5NATRf8jJQ9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC7m78/g h3ISKVIyUMab61jnXBnBMB8GA1UdIwQYMBaAFPPl4lbS7Fymf4oZvlobKCmxN1gf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCQi85NDUxRDM3MjRB MDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hLWl9paG0tV2hzb0tiRTNX QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzgtWGlWdExzWEtaX2lobS1XaHNvS2JFM1dCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTNCQi85NDUxRDM3MjRBMDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hL Wl9paG0tV2hzb0tiRTNXQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGTJSZ3yZdjn+8gcMHgBG3JweqvcLxegmo0yoEmgVqanUCMT+bAzL6 zRoVYfilEkwvlWBS9lY4jBYBjEHTzKg9efU8S04MZkDJUOE7v0MDA2b21lMntHzp lj7sxTG1TsvMYpMJiX5LBCPATUIEOnZUdQ2eBnh7r/vgdYPUQaov3Qv5vXM09DDt Rqq5JlR01LWc8JeumXvIn1Prx2TbMKl/9A6Tb5kt52SHWK7G+K1+tv83z5U4v0Qx 3K5Vt77YMS073FZzuyepAO9kBsZNPTQQPOJ8Jj1hxq+uoHjuXqfHSCoor/XX1WuH tk5nv2xMqUFMLVywTZEtEBa3rdB0+oHz -----END CERTIFICATE-----Generated at Sun Aug 10 21:11:18 2025 by rpki-client