$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json) Hash identifier: KKOrstij4EeHbgH/0E+9ErpzSeIn7Pp0pLtH+CR0flc= Subject key identifier: E8:8E:59:B4:4E:4B:19:23:4F:BB:65:7B:DE:1B:9F:29:45:83:71:34 Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Certificate serial: 06D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft Manifest number: 06D0 Signing time: Fri 08 Aug 2025 22:27:42 +0000 Manifest this update: Fri 08 Aug 2025 22:27:41 +0000 Manifest next update: Fri 15 Aug 2025 22:27:41 +0000 Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: YG9DGwLzsrQbiOeM9iA+5JP1vz4F297HKJbHD/TyIpc=) 2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: Zn98IKw1ORShKjYTsznVV3Nuz5otGr6pldJ4tgtNf00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1749 (0x6d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Validity Not Before: Aug 8 22:27:41 2025 GMT Not After : Aug 15 22:27:41 2025 GMT Subject: CN=689679dd-4923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:6f:7e:5c:84:2b:53:e9:35:09:ea:69:9e:aa: 02:86:4e:bf:2b:93:9f:94:ed:7d:da:62:4a:b1:32: e1:ab:02:64:39:2b:e3:8e:7f:41:83:85:aa:ed:a6: bb:89:9a:e7:89:41:fc:b3:17:df:4a:1c:25:4d:2e: e8:3b:40:07:fa:cc:31:6e:39:7b:84:c7:1e:42:01: a3:46:44:cd:22:68:b6:ff:03:bc:5b:a8:ce:bb:14: 08:ab:78:99:59:19:d9:76:79:dc:6b:5b:e0:cc:94: f4:9d:ac:86:37:25:09:e3:69:b7:90:8a:0b:f4:97: 2f:e1:42:5b:46:ce:db:69:67:0f:e6:a4:89:fd:d6: 54:da:ec:08:f8:bb:b4:61:77:2e:28:fe:1e:10:34: 61:83:4c:68:cf:27:a8:31:32:e0:43:63:46:e8:95: 46:ca:0d:0a:d9:84:25:e0:94:8b:39:8c:c3:44:8d: 80:66:02:69:c9:4e:d6:a4:f0:2b:47:08:06:5f:b7: 2e:62:6e:1e:11:3a:96:de:a0:4a:b6:4e:2e:7f:a7: c7:cb:45:da:9b:27:0b:df:e4:f5:ad:ac:f3:90:7b: 59:49:f6:3b:65:e2:bd:d1:e4:ae:6d:a6:b5:50:57: a1:24:a5:f4:c5:d3:d5:12:9a:ec:3f:77:b7:89:fc: c7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8E:59:B4:4E:4B:19:23:4F:BB:65:7B:DE:1B:9F:29:45:83:71:34 X509v3 Authority Key Identifier: keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b8:24:ff:50:8f:69:d6:c4:91:76:1b:4d:b6:48:db:d0:ea: be:f3:72:b8:b6:4c:d3:04:8e:dd:94:c8:5a:b3:25:9a:25:78: bd:fa:62:05:fd:3c:c8:01:f2:33:4a:f4:e4:eb:c4:e1:fb:f6: 97:23:dd:d8:ec:22:cc:13:03:47:ab:be:06:a0:3a:03:1f:f0: 15:b6:85:e7:8a:b9:a3:93:6b:2d:86:1d:e7:c9:ee:02:01:08: dd:89:f1:d9:c4:a9:db:85:94:b5:c0:c3:5c:13:78:dd:52:28: d5:19:b9:59:91:08:81:e3:40:77:e3:fa:3e:4c:dd:54:2f:99: 5c:7a:7a:7f:e1:1f:d3:75:9c:b1:f9:c5:5b:3f:fa:57:b0:05: 81:c3:01:c2:a3:6b:46:bd:d6:be:90:95:6f:3f:be:5e:a0:ee: 21:e7:4d:81:61:38:39:ad:ee:c4:8d:8e:11:2d:3c:49:6e:7a: 4c:48:17:a9:8b:b5:d1:6e:56:4d:22:fa:98:6d:eb:83:c7:37: 1d:ab:83:1f:1c:31:74:a8:f5:3e:4a:11:1d:f9:63:06:71:72: 26:9f:32:d6:95:0b:59:bb:78:c4:d4:19:ed:e3:f9:02:97:d8: 7d:fb:c6:cb:30:56:46:83:bf:fd:3a:9a:19:b9:c0:4b:9f:c5: bb:29:1b:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRDcxMTAvBgNVBAUTKEYyQjcwQjQ5NzMyMkJFRTY2ODIwRUQzRkNFMjhBQTc5 NkRCMDkxNTMwHhcNMjUwODA4MjIyNzQxWhcNMjUwODE1MjIyNzQxWjAYMRYwFAYD VQQDEw02ODk2NzlkZC00OTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA929+XIQrU+k1CeppnqoChk6/K5OflO192mJKsTLhqwJkOSvjjn9Bg4Wq7aa7 iZrniUH8sxffShwlTS7oO0AH+swxbjl7hMceQgGjRkTNImi2/wO8W6jOuxQIq3iZ WRnZdnnca1vgzJT0nayGNyUJ42m3kIoL9Jcv4UJbRs7baWcP5qSJ/dZU2uwI+Lu0 YXcuKP4eEDRhg0xozyeoMTLgQ2NG6JVGyg0K2YQl4JSLOYzDRI2AZgJpyU7WpPAr RwgGX7cuYm4eETqW3qBKtk4uf6fHy0XamycL3+T1razzkHtZSfY7ZeK90eSubaa1 UFehJKX0xdPVEprsP3e3ifzH+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOiOWbRO SxkjT7tle94bnylFg3E0MB8GA1UdIwQYMBaAFPK3C0lzIr7maCDtP84oqnltsJFT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNENy9FOUY1RDkzRTY1 MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1Wm9JTzBfemlpcWVXMndr Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyY0xTWE1pdnVab0lPMF96aWlxZVcyd2tWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNENy9FOUY1RDkzRTY1MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1 Wm9JTzBfemlpcWVXMndrVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6uCT/UI9p1sSRdhtNtkjb0Oq+83K4tkzTBI7dlMhasyWaJXi9+mIF /TzIAfIzSvTk68Th+/aXI93Y7CLMEwNHq74GoDoDH/AVtoXnirmjk2sthh3nye4C AQjdifHZxKnbhZS1wMNcE3jdUijVGblZkQiB40B34/o+TN1UL5lcenp/4R/TdZyx +cVbP/pXsAWBwwHCo2tGvda+kJVvP75eoO4h502BYTg5re7EjY4RLTxJbnpMSBep i7XRblZNIvqYbeuDxzcdq4MfHDF0qPU+ShEd+WMGcXImnzLWlQtZu3jE1Bnt4/kC l9h9+8bLMFZGg7/9OpoZucBLn8W7KRsE -----END CERTIFICATE-----Generated at Sat Aug 9 22:49:12 2025 by rpki-client