$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft File: 8XD1e07KEpakIh1wemTkKYk7h9Q.mft (raw, json) Hash identifier: pAfIWXQlZGtCc4Rc+2fro+fXePlUXeB/RViPXZTSOpo= Subject key identifier: E1:84:AE:0C:12:13:25:10:04:BF:D4:C4:EA:51:BB:67:F8:54:DB:76 Authority key identifier: F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 Certificate issuer: /CN=A91C4F28/serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Certificate serial: 0142 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft Manifest number: 013E Signing time: Sat 09 Aug 2025 04:46:01 +0000 Manifest this update: Sat 09 Aug 2025 04:46:00 +0000 Manifest next update: Sat 16 Aug 2025 04:46:00 +0000 Files and hashes: 1: 8XD1e07KEpakIh1wemTkKYk7h9Q.crl (hash: V68ipPkcoBYAIRg+ZBtsyQ6J5ii2+JtO6wpXxTi2OKM=) 2: B59362A28D5C11EEADDC522EC4F9AE02.roa (hash: sPbI4s6oqdRUOiNi18Y1/q6iWjlYMVf5hdTw+xVFaMo=) 3: 6DAB109E8DF111EEA5BB4A1BC4F9AE02.roa (hash: AVP7CNVml5F9ogjZv8lDcpc3+J0u+jj8KPjr/y0/brc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4F28, serialNumber=F170F57B4ECA1296A4221D707A64E429893B87D4 Validity Not Before: Aug 9 04:46:00 2025 GMT Not After : Aug 16 04:46:00 2025 GMT Subject: CN=6896d289-d4de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7a:e7:ef:ff:65:52:55:e4:15:59:ec:06:0e: 86:c0:6c:44:29:38:53:9d:79:7b:fc:64:a1:5a:de: 61:72:5d:8b:1a:00:68:fb:8c:ee:6d:2e:f8:c5:89: 48:ff:d8:a4:ba:d7:11:a3:ae:4b:df:17:49:75:72: 46:1e:f4:58:d9:06:89:72:12:7f:b0:96:da:e4:e0: ad:fe:fe:36:14:70:9f:ed:b8:32:20:a1:61:17:1a: 12:ca:b9:00:1f:d0:fb:ed:fe:de:2c:07:82:7e:d3: bc:a0:6a:67:9b:70:34:5f:cc:3d:09:86:93:29:40: 08:cb:43:83:5a:0c:c9:f6:87:d0:7b:a3:56:58:9d: 6a:b3:0c:7e:5c:cc:85:c1:3e:96:e0:f8:59:e7:3f: cd:b0:82:9a:e5:5c:e1:35:c3:2b:9a:4b:24:c5:2a: ce:44:2b:84:da:64:e1:fa:45:2e:34:5c:f7:6f:37: 09:d2:cc:08:16:a0:a9:dc:f9:a9:63:85:cc:df:e3: 27:77:f3:0d:76:b2:99:ea:af:d2:ff:8e:b0:3e:5f: c7:56:6b:15:0a:e4:f4:14:3a:ee:53:17:1c:8a:1f: 74:82:e0:d2:9c:69:67:39:de:55:b2:45:40:68:f7: 66:f3:a5:3a:06:8a:ba:7a:7b:cd:89:7b:bc:85:63: 76:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:84:AE:0C:12:13:25:10:04:BF:D4:C4:EA:51:BB:67:F8:54:DB:76 X509v3 Authority Key Identifier: keyid:F1:70:F5:7B:4E:CA:12:96:A4:22:1D:70:7A:64:E4:29:89:3B:87:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XD1e07KEpakIh1wemTkKYk7h9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4F28/F57FD0B88D5611EE9787E783C4F9AE02/8XD1e07KEpakIh1wemTkKYk7h9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8c:92:e4:03:38:f1:40:24:e2:f3:d7:bf:42:de:9f:97:fd: 3d:1e:9b:ff:19:01:b5:ae:6a:97:5d:69:50:32:f0:2c:e5:63: 61:70:e3:ec:97:e1:db:02:d5:3a:eb:34:de:12:70:a6:b6:ff: 4b:99:4d:0c:eb:17:59:d3:2c:7e:1b:bf:26:69:96:18:66:e8: 95:6e:ce:a6:13:bd:ec:26:3b:a6:8f:4e:3e:bc:85:99:b6:be: 9c:f2:69:5a:ad:d1:99:a6:fc:b3:46:2b:1d:92:ac:63:4b:49: c1:91:81:0e:47:9d:db:62:6b:a2:9d:85:f0:19:64:29:d4:ea: fd:10:6e:5c:b4:6b:98:21:de:b6:ef:86:4b:27:42:8b:f8:f8: 2a:36:3e:d6:14:ed:4e:be:68:4c:81:ba:b0:1c:d1:31:47:9d: 01:c6:d3:35:02:66:90:dc:9c:1a:95:a6:a4:22:34:23:7e:9c: 6f:b8:3a:ec:13:60:3d:e6:fb:57:d7:c7:6c:2a:b8:3f:ea:86: 0a:a0:c9:af:10:30:bd:39:f1:33:01:d4:94:ff:04:f2:c6:d5: 0f:e2:b7:db:04:dc:02:c2:86:63:b1:78:29:ec:8e:fe:27:66: f7:0e:67:ac:70:59:6c:71:e3:fe:b7:cc:09:1b:13:d2:d0:61: b0:0f:88:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRGMjgxMTAvBgNVBAUTKEYxNzBGNTdCNEVDQTEyOTZBNDIyMUQ3MDdBNjRFNDI5 ODkzQjg3RDQwHhcNMjUwODA5MDQ0NjAwWhcNMjUwODE2MDQ0NjAwWjAYMRYwFAYD VQQDEw02ODk2ZDI4OS1kNGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3rn7/9lUlXkFVnsBg6GwGxEKThTnXl7/GShWt5hcl2LGgBo+4zubS74xYlI /9ikutcRo65L3xdJdXJGHvRY2QaJchJ/sJba5OCt/v42FHCf7bgyIKFhFxoSyrkA H9D77f7eLAeCftO8oGpnm3A0X8w9CYaTKUAIy0ODWgzJ9ofQe6NWWJ1qswx+XMyF wT6W4PhZ5z/NsIKa5VzhNcMrmkskxSrORCuE2mTh+kUuNFz3bzcJ0swIFqCp3Pmp Y4XM3+Mnd/MNdrKZ6q/S/46wPl/HVmsVCuT0FDruUxccih90guDSnGlnOd5VskVA aPdm86U6Boq6envNiXu8hWN2tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOGErgwS EyUQBL/UxOpRu2f4VNt2MB8GA1UdIwQYMBaAFPFw9XtOyhKWpCIdcHpk5CmJO4fU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEYyOC9GNTdGRDBCODhE NTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0VwYWtJaDF3ZW1Ua0tZazdo OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYRDFlMDdLRXBha0loMXdlbVRrS1lrN2g5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NEYyOC9GNTdGRDBCODhENTYxMUVFOTc4N0U3ODNDNEY5QUUwMi84WEQxZTA3S0Vw YWtJaDF3ZW1Ua0tZazdoOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbjJLkAzjxQCTi89e/Qt6fl/09Hpv/GQG1rmqXXWlQMvAs5WNhcOPs l+HbAtU66zTeEnCmtv9LmU0M6xdZ0yx+G78maZYYZuiVbs6mE73sJjumj04+vIWZ tr6c8mlardGZpvyzRisdkqxjS0nBkYEOR53bYmuinYXwGWQp1Or9EG5ctGuYId62 74ZLJ0KL+PgqNj7WFO1OvmhMgbqwHNExR50BxtM1AmaQ3JwalaakIjQjfpxvuDrs E2A95vtX18dsKrg/6oYKoMmvEDC9OfEzAdSU/wTyxtUP4rfbBNwCwoZjsXgp7I7+ J2b3DmescFlsceP+t8wJGxPS0GGwD4gg -----END CERTIFICATE-----Generated at Sun Aug 10 21:13:13 2025 by rpki-client