$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft File: _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json) Hash identifier: Gd/eM13uYbwo6UZL8iwtxSAcaNF1wvfBbYX+nEGxhqY= Subject key identifier: E6:04:43:E4:A7:43:D4:3D:8D:25:5D:F5:1D:66:2C:7D:87:2B:C1:80 Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Certificate serial: 04BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft Manifest number: 04B9 Signing time: Sat 09 Aug 2025 00:22:23 +0000 Manifest this update: Sat 09 Aug 2025 00:22:22 +0000 Manifest next update: Sat 16 Aug 2025 00:22:22 +0000 Files and hashes: 1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: Pv44NQYE78ZL7qXyHMH1lNiYbAD+ACmgbOZeB7UTw34=) 2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: zdwLUFrK62NtcQ/mdbUvAzqM7ityQdkX7IQIHBe+tG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1213 (0x4bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB508, serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Validity Not Before: Aug 9 00:22:22 2025 GMT Not After : Aug 16 00:22:22 2025 GMT Subject: CN=689694bf-e12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:fc:81:73:b7:ec:32:29:39:dc:20:bb:16: a8:e9:dd:dc:15:d3:e1:86:30:f9:4c:75:e2:97:8c: 0f:cc:48:5c:c7:04:fa:37:94:27:6f:ea:60:40:c1: 07:a3:7c:a4:18:04:0f:04:3e:1f:ff:14:5f:b7:b7: 01:3f:02:72:0f:97:5e:a6:da:26:21:fb:8c:0b:1d: 08:63:4a:4f:ea:93:8a:5c:bc:d6:e7:c4:5c:8c:af: ee:13:6f:fa:a4:c6:d5:fb:37:6d:7f:0e:9a:a4:c4: ac:84:fd:f4:ed:db:3a:d3:14:0f:58:84:71:9b:d8: 56:c6:ef:39:bf:ee:e8:07:2b:30:18:be:9b:2d:de: 26:03:e6:e6:5c:02:db:47:2e:81:9b:a2:33:ec:9c: 4f:e6:19:07:f4:7b:80:b2:8c:47:b1:c3:7a:f2:1f: 9e:97:df:6d:92:1e:ae:27:60:cc:da:73:4f:8c:31: 3d:52:22:2c:97:b1:ab:7c:b5:09:60:05:f7:fc:8d: d4:38:ee:d9:48:18:77:11:92:ac:0e:1d:c9:2b:f4: bb:15:1d:fa:6c:6b:da:12:a4:2f:76:9f:ce:7c:9f: 58:37:81:a8:55:74:40:2a:f6:b9:92:8f:33:ae:d1: 52:33:96:a3:21:85:51:49:2d:bb:35:77:a1:c3:a8: 98:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:04:43:E4:A7:43:D4:3D:8D:25:5D:F5:1D:66:2C:7D:87:2B:C1:80 X509v3 Authority Key Identifier: keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:14:d6:1a:90:83:ab:14:ad:c4:cd:f6:ba:57:63:7f:19:86: 2d:65:9e:d1:7c:52:69:43:d4:20:a0:d1:06:30:3e:f7:a3:d0: 35:10:fc:15:bf:4a:90:06:58:df:d1:f7:4a:6e:0a:d6:6e:36: 61:82:6a:f0:61:dd:ca:66:d8:cc:6f:21:ad:e2:37:4a:2d:46: c9:5d:25:6b:b7:06:18:61:3b:0f:54:8d:da:50:52:a1:6b:17: 7c:bd:91:ce:fc:e3:5f:c9:16:b2:bc:89:85:ac:d5:41:bd:5a: d3:f4:10:e8:4f:a3:18:f1:51:40:b9:d9:0b:a0:a8:dd:c9:03: 2a:88:0f:02:41:cf:91:9d:eb:37:6f:d7:03:f3:c4:6b:69:8c: f2:83:68:66:f3:ca:2a:6c:0b:28:09:a9:83:a8:1b:71:c5:82: 66:e6:7b:98:2d:52:8a:46:3c:73:71:af:e1:3f:fd:c4:8f:6d: fa:02:e1:f3:77:1b:1b:f4:62:0c:20:4b:9b:f7:50:5f:62:15: 40:bd:6a:aa:86:37:4c:4e:37:c9:d1:8f:9e:c2:d4:2d:bf:e4: b4:fb:fb:ad:e5:1c:68:d2:8a:34:f4:8b:f7:9c:81:71:03:3d: 89:c0:42:c9:e5:4e:ef:02:b6:03:4c:93:5d:69:65:3f:22:9b: 6c:19:91:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1MDgxMTAvBgNVBAUTKEZGQzI4NEFDMUIxQTVGMDg0M0VCNTc1QjhCMDVERTIy NEZGQUUxRkEwHhcNMjUwODA5MDAyMjIyWhcNMjUwODE2MDAyMjIyWjAYMRYwFAYD VQQDEw02ODk2OTRiZi1lMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDf8gXO37DIpOdwguxao6d3cFdPhhjD5THXil4wPzEhcxwT6N5Qnb+pgQMEH o3ykGAQPBD4f/xRft7cBPwJyD5deptomIfuMCx0IY0pP6pOKXLzW58RcjK/uE2/6 pMbV+zdtfw6apMSshP307ds60xQPWIRxm9hWxu85v+7oByswGL6bLd4mA+bmXALb Ry6Bm6Iz7JxP5hkH9HuAsoxHscN68h+el99tkh6uJ2DM2nNPjDE9UiIsl7GrfLUJ YAX3/I3UOO7ZSBh3EZKsDh3JK/S7FR36bGvaEqQvdp/OfJ9YN4GoVXRAKva5ko8z rtFSM5ajIYVRSS27NXehw6iYdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOYEQ+Sn Q9Q9jSVd9R1mLH2HK8GAMB8GA1UdIwQYMBaAFP/ChKwbGl8IQ+tXW4sF3iJP+uH6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjUwOC83QTMzNzkxRTM5 NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3aEQ2MWRiaXdYZUlrXzY0 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL184S0VyQnNhWHdoRDYxZGJpd1hlSWtfNjRmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjUwOC83QTMzNzkxRTM5NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3 aEQ2MWRiaXdYZUlrXzY0Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4FNYakIOrFK3Ezfa6V2N/GYYtZZ7RfFJpQ9QgoNEGMD73o9A1EPwV v0qQBljf0fdKbgrWbjZhgmrwYd3KZtjMbyGt4jdKLUbJXSVrtwYYYTsPVI3aUFKh axd8vZHO/ONfyRayvImFrNVBvVrT9BDoT6MY8VFAudkLoKjdyQMqiA8CQc+Rnes3 b9cD88RraYzyg2hm88oqbAsoCamDqBtxxYJm5nuYLVKKRjxzca/hP/3Ej236AuHz dxsb9GIMIEub91BfYhVAvWqqhjdMTjfJ0Y+ewtQtv+S0+/ut5Rxo0oo09Iv3nIFx Az2JwELJ5U7vArYDTJNdaWU/IptsGZFK -----END CERTIFICATE-----Generated at Sat Aug 9 05:46:24 2025 by rpki-client