$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft File: S8VilW0H0G-q3JIziLmGYPcofJo.mft (raw, json) Hash identifier: 4PRvjNvOwIhVJZH7UXlRWmobcysteNqOJZjRoxVURJ4= Subject key identifier: A5:57:DE:71:F4:FF:FB:08:52:80:B0:46:E1:6D:85:DA:43:70:4E:AE Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A Certificate issuer: /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A Certificate serial: 0B22 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft Manifest number: 0B1B Signing time: Sun 10 Aug 2025 19:18:28 +0000 Manifest this update: Sun 10 Aug 2025 19:18:27 +0000 Manifest next update: Sun 17 Aug 2025 19:18:27 +0000 Files and hashes: 1: S8VilW0H0G-q3JIziLmGYPcofJo.crl (hash: tIjEj7QpYHy7p2TVD2GUHgLOMCn6BY2bsAwktJ2AuEk=) 2: 6D49440845BC11EAB591BD20C4F9AE02.roa (hash: d1emA2UMoO8VznsV+Ait8FlVXTOyXdepIAgXYTBBJeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2850 (0xb22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A Validity Not Before: Aug 10 19:18:27 2025 GMT Not After : Aug 17 19:18:27 2025 GMT Subject: CN=6898f084-6c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a7:ef:b8:a5:66:92:79:57:b5:b5:4a:bd:10: 5f:cc:b8:4a:10:c6:3b:a7:fe:95:bc:6c:84:4c:ae: 17:82:e6:0d:05:7d:0b:78:90:f9:b3:6e:03:ae:5e: b2:16:cf:e7:60:22:96:79:d9:56:0d:80:9d:7a:8d: cc:1e:7c:0b:a4:b6:1e:06:48:c0:9c:a6:cd:89:72: 9e:58:70:b3:73:ab:db:12:b6:a5:ed:6b:9d:48:09: 26:a1:eb:ae:ca:07:1c:6c:43:93:ec:bb:d9:c4:b6: c5:da:ae:f7:98:2d:ed:3a:4d:14:d3:7d:23:7e:45: e4:40:d0:d8:c1:f0:83:75:a3:8c:65:99:3b:4d:bf: 33:23:14:30:e9:42:30:2d:8c:6e:7a:12:66:b2:10: b5:bf:7f:ea:66:be:1a:f9:5f:24:24:f5:98:38:87: 3e:c4:d8:f3:04:d1:a7:b7:f3:11:5c:a7:53:d5:5e: e3:ff:1a:b0:80:d0:96:48:64:cb:77:cf:03:26:9f: 3f:09:2e:d4:e5:c6:0f:7f:00:de:bc:1e:e8:70:6e: 15:55:ef:45:66:6c:38:8f:32:d3:3a:75:01:f6:24: 52:3b:c6:19:0f:71:81:5a:a5:15:6f:87:2b:fc:34: b1:6b:0a:1c:75:9e:59:92:c0:aa:fe:7a:4d:c9:f4: 0a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:57:DE:71:F4:FF:FB:08:52:80:B0:46:E1:6D:85:DA:43:70:4E:AE X509v3 Authority Key Identifier: keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:8e:be:ff:fe:dd:ac:a8:d1:45:46:d8:16:4a:9e:e7:2c:53: 55:db:c6:1b:71:07:09:70:92:b5:8e:9d:c7:44:b6:51:45:77: 00:30:34:35:b1:9b:9c:f9:b9:1b:25:be:fd:cb:9f:ea:ac:88: 17:7c:a9:7a:f6:e6:1b:85:0b:85:6d:14:60:1f:90:70:2a:2e: 16:d1:bf:01:c3:9f:7a:cf:25:e7:e7:48:b2:08:1e:b7:3e:bb: 3a:cf:44:0b:c8:87:85:c8:21:29:d6:50:05:0d:2b:b9:ce:79: eb:05:d6:98:f6:b9:03:78:f8:cd:e4:c4:b1:1d:10:c9:9f:eb: 6d:41:f9:30:56:15:e6:a8:62:97:9a:2e:4e:7a:c5:b7:98:8f: a1:dc:f9:d5:87:91:87:64:ad:ec:90:35:6d:55:ab:90:9b:b2: 82:28:d7:a8:cc:08:98:81:ee:80:b5:2a:e6:bd:ea:71:ba:32: 01:f6:71:ff:41:82:ed:50:35:3f:a3:fc:18:ce:86:d8:fe:4e: 87:08:f3:9b:f0:6a:8a:4e:9b:c8:e2:6f:6d:15:5a:c5:32:b8: 8d:43:2d:46:97:a1:37:ac:bb:28:d2:7d:7a:3f:06:d2:32:89: a6:b2:6a:e8:a4:f6:8c:b2:65:0e:8a:e7:31:32:d4:af:a9:02: a7:c5:dc:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMzkxMTAvBgNVBAUTKDRCQzU2Mjk1NkQwN0QwNkZBQURDOTIzMzg4Qjk4NjYw RjcyODdDOUEwHhcNMjUwODEwMTkxODI3WhcNMjUwODE3MTkxODI3WjAYMRYwFAYD VQQDEw02ODk4ZjA4NC02YzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnKfvuKVmknlXtbVKvRBfzLhKEMY7p/6VvGyETK4XguYNBX0LeJD5s24Drl6y Fs/nYCKWedlWDYCdeo3MHnwLpLYeBkjAnKbNiXKeWHCzc6vbEral7WudSAkmoeuu ygccbEOT7LvZxLbF2q73mC3tOk0U030jfkXkQNDYwfCDdaOMZZk7Tb8zIxQw6UIw LYxuehJmshC1v3/qZr4a+V8kJPWYOIc+xNjzBNGnt/MRXKdT1V7j/xqwgNCWSGTL d88DJp8/CS7U5cYPfwDevB7ocG4VVe9FZmw4jzLTOnUB9iRSO8YZD3GBWqUVb4cr /DSxawocdZ5ZksCq/npNyfQKWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVX3nH0 //sIUoCwRuFthdpDcE6uMB8GA1UdIwQYMBaAFEvFYpVtB9BvqtySM4i5hmD3KHya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAzOS8yNTY3NkRGMDQ1 QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBHLXEzSkl6aUxtR1lQY29m Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M4VmlsVzBIMEctcTNKSXppTG1HWVBjb2ZKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjAzOS8yNTY3NkRGMDQ1QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBH LXEzSkl6aUxtR1lQY29mSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUjr7//t2sqNFFRtgWSp7nLFNV28YbcQcJcJK1jp3HRLZRRXcAMDQ1 sZuc+bkbJb79y5/qrIgXfKl69uYbhQuFbRRgH5BwKi4W0b8Bw596zyXn50iyCB63 Prs6z0QLyIeFyCEp1lAFDSu5znnrBdaY9rkDePjN5MSxHRDJn+ttQfkwVhXmqGKX mi5OesW3mI+h3PnVh5GHZK3skDVtVauQm7KCKNeozAiYge6AtSrmvepxujIB9nH/ QYLtUDU/o/wYzobY/k6HCPOb8GqKTpvI4m9tFVrFMriNQy1Gl6E3rLso0n16PwbS MommsmropPaMsmUOiucxMtSvqQKnxdxk -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:02 2025 by rpki-client