$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft File: 8GL1A-ySI_r2geak3NiYSRom5JQ.mft (raw, json) Hash identifier: owjYROFNsjy6ErDRQzl5SqUzuNRZxweMTbPrqCd9Hbs= Subject key identifier: 1D:4B:C5:08:4A:35:15:1E:48:44:33:B4:7A:D1:B4:10:CC:18:BD:17 Authority key identifier: F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 Certificate issuer: /CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Certificate serial: ED Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft Manifest number: EB Signing time: Sat 09 Aug 2025 05:44:59 +0000 Manifest this update: Sat 09 Aug 2025 05:44:58 +0000 Manifest next update: Sat 16 Aug 2025 05:44:58 +0000 Files and hashes: 1: 8GL1A-ySI_r2geak3NiYSRom5JQ.crl (hash: rW5r6EaWvDOIBXlf1t1GCSDcahbxS503tcxqJD4baCo=) 2: ABF1B4E60DD211EF8903F07AC4F9AE02.roa (hash: Wf5yWE5WQZfabwwzQeNVDetWRiMN8CeR7Ab2vxrNgeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 237 (0xed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF793, serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Validity Not Before: Aug 9 05:44:58 2025 GMT Not After : Aug 16 05:44:58 2025 GMT Subject: CN=6896e05a-7a61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0c:88:ea:59:39:8c:fa:db:13:20:d5:24:0e: a5:bf:eb:cd:76:ea:0a:2c:ca:24:18:eb:c9:1a:c3: d6:3d:d1:b1:78:c9:36:6a:b8:f6:24:f5:6a:0c:e2: a0:ce:4e:7f:48:1f:8a:50:10:68:31:94:4c:b8:9b: 5e:df:aa:02:c4:a4:01:fc:e3:c4:9e:d4:54:e7:0a: e2:6e:f3:a5:e8:e3:cf:d3:c1:ce:ca:9b:3e:8b:7f: 24:15:41:06:ac:46:55:fa:d8:d0:da:b7:db:e7:86: 3a:a2:2f:1e:cf:cc:17:84:b2:a1:ff:fd:96:ca:2f: 79:4c:ea:d8:0f:8f:72:5c:78:2c:7b:a2:aa:bd:83: 7e:79:65:84:a2:d9:95:d4:ea:aa:b9:b1:2d:ce:c3: bb:f5:3a:68:42:f2:c5:c8:b7:8b:8e:29:60:8c:0c: a7:ff:67:60:e2:2e:43:24:bf:39:e2:dc:51:b0:25: aa:19:50:0e:b8:79:1e:e1:49:7b:84:c8:cb:fb:4b: 28:38:82:01:7a:7b:c9:77:60:77:99:a3:84:1c:7f: f4:5b:82:41:97:dc:ed:80:10:4a:cf:98:0e:07:10: 93:e5:38:cd:40:5e:8f:eb:16:d9:f6:aa:27:a8:43: df:d8:db:d5:2b:f3:58:4d:33:e5:f7:00:95:e1:6a: e7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4B:C5:08:4A:35:15:1E:48:44:33:B4:7A:D1:B4:10:CC:18:BD:17 X509v3 Authority Key Identifier: keyid:F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:72:7e:68:94:ba:df:44:86:6e:9d:7d:25:be:3e:c4:dd:24: 9e:72:e8:6f:61:a6:fc:09:44:e7:e8:b1:ec:be:38:44:56:91: 3e:e5:12:b8:0b:54:69:4d:c2:e1:ff:b2:30:93:d7:cb:9a:c9: a5:ed:c8:3f:51:2a:0c:6c:90:55:ac:19:32:e0:68:c5:62:1f: ca:4b:58:b8:2a:a3:69:28:7b:1b:eb:e8:ef:69:0c:37:77:86: 36:26:ee:51:57:14:00:cd:d1:0c:a5:f4:c4:1a:c3:85:06:49: c4:12:40:53:d3:ec:72:40:e2:08:03:2a:e9:ff:7e:d7:60:93: 81:e0:8f:ed:5d:eb:42:9e:18:f6:6a:11:63:84:94:b2:01:9d: 3d:44:f2:b8:d7:87:a9:71:1e:99:10:82:87:9f:1c:b3:9c:47: 05:a9:9a:3c:64:44:90:b1:16:1a:c4:54:25:82:61:7a:f7:aa: 5a:47:ab:05:6d:f8:74:6c:36:24:e1:ab:e3:e0:d4:24:7f:21: 9a:60:a0:18:1d:d9:64:ab:31:9c:08:1a:6d:62:07:29:05:fc: 5a:bc:97:fb:76:b0:22:f7:cd:67:f2:d2:2b:b1:53:9b:a2:b0: 28:bc:f2:32:11:72:d9:dd:b1:fd:09:20:60:73:da:e9:03:5f: 10:99:54:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3OTMxMTAvBgNVBAUTKEYwNjJGNTAzRUM5MjIzRkFGNjgxRTZBNERDRDg5ODQ5 MUEyNkU0OTQwHhcNMjUwODA5MDU0NDU4WhcNMjUwODE2MDU0NDU4WjAYMRYwFAYD VQQDEw02ODk2ZTA1YS03YTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswyI6lk5jPrbEyDVJA6lv+vNduoKLMokGOvJGsPWPdGxeMk2arj2JPVqDOKg zk5/SB+KUBBoMZRMuJte36oCxKQB/OPEntRU5wribvOl6OPP08HOyps+i38kFUEG rEZV+tjQ2rfb54Y6oi8ez8wXhLKh//2Wyi95TOrYD49yXHgse6KqvYN+eWWEotmV 1OqqubEtzsO79TpoQvLFyLeLjilgjAyn/2dg4i5DJL854txRsCWqGVAOuHke4Ul7 hMjL+0soOIIBenvJd2B3maOEHH/0W4JBl9ztgBBKz5gOBxCT5TjNQF6P6xbZ9qon qEPf2NvVK/NYTTPl9wCV4WrnSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1LxQhK NRUeSEQztHrRtBDMGL0XMB8GA1UdIwQYMBaAFPBi9QPskiP69oHmpNzYmEkaJuSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc5My8wRjZCRDNFMDBE RDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lfcjJnZWFrM05pWVNSb201 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhHTDFBLXlTSV9yMmdlYWszTmlZU1JvbTVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc5My8wRjZCRDNFMDBERDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lf cjJnZWFrM05pWVNSb201SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANcn5olLrfRIZunX0lvj7E3SSecuhvYab8CUTn6LHsvjhEVpE+5RK4 C1RpTcLh/7Iwk9fLmsml7cg/USoMbJBVrBky4GjFYh/KS1i4KqNpKHsb6+jvaQw3 d4Y2Ju5RVxQAzdEMpfTEGsOFBknEEkBT0+xyQOIIAyrp/37XYJOB4I/tXetCnhj2 ahFjhJSyAZ09RPK414epcR6ZEIKHnxyznEcFqZo8ZESQsRYaxFQlgmF696paR6sF bfh0bDYk4avj4NQkfyGaYKAYHdlkqzGcCBptYgcpBfxavJf7drAi981n8tIrsVOb orAovPIyEXLZ3bH9CSBgc9rpA18QmVR0 -----END CERTIFICATE-----Generated at Sun Aug 10 04:17:16 2025 by rpki-client