$ rpki-client -vvf rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft File: x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft (raw, json) Hash identifier: N68287I8q9zkmT0b7MTA2K025TvMaAo+DNSgaTDl/HU= Subject key identifier: 26:86:73:E8:1C:2F:B4:BF:23:DB:B5:4D:BE:ED:3A:09:B2:25:D7:8D Authority key identifier: C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09 Certificate issuer: /CN=A91C85E9/serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609 Certificate serial: 11C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft Manifest number: 11B8 Signing time: Fri 08 Aug 2025 17:22:32 +0000 Manifest this update: Fri 08 Aug 2025 17:22:31 +0000 Manifest next update: Fri 15 Aug 2025 17:22:31 +0000 Files and hashes: 1: x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl (hash: uWUQvRyFDhb2FDxWsVS0NmZ7KKkqGsKMXnztRQeLACI=) 2: 8446564EF96611E8BE431B17C4F9AE02.roa (hash: S4PonvpkLuqmrbtgnv8T9QMFORQi4oK8GF7Qf1Ow3ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4546 (0x11c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C85E9, serialNumber=C7CF943E3A764F37C003CD435A2B8543BCE47609 Validity Not Before: Aug 8 17:22:31 2025 GMT Not After : Aug 15 17:22:31 2025 GMT Subject: CN=68963257-fd11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b3:9f:c4:1a:91:3f:c0:13:ea:00:79:4c:47: 46:06:e4:3c:84:fa:f9:79:59:c2:58:18:a6:b1:5c: c6:73:3b:d7:cb:43:2f:3b:6c:32:21:53:4e:63:86: 3b:49:c7:89:3d:b3:98:02:bd:a2:53:e5:51:e2:d2: e0:4d:dd:22:cf:53:19:83:33:18:9f:b7:61:04:b7: 11:96:0b:c3:ab:6d:55:56:f6:cb:2b:11:e5:34:a3: 32:39:6d:14:01:d7:ad:87:99:3b:84:20:3f:df:fb: ce:c5:12:6f:5a:52:c4:55:bd:7a:91:79:71:68:df: f1:79:57:24:83:89:2e:76:91:cd:25:a1:ec:3b:6a: 38:ef:fb:78:cb:21:a6:e3:15:53:98:f3:45:2f:90: 5d:a1:fb:16:65:ee:98:33:ae:6b:50:8b:86:98:a4: 33:0a:51:9f:0a:4e:2d:2e:a7:bb:c9:53:2a:fc:54: 82:45:c4:fd:b6:13:d4:88:0d:2e:0f:16:1c:77:24: 82:6a:6b:71:69:55:ae:56:9b:01:5d:a4:d5:58:3e: c8:4a:d0:45:47:71:6a:c6:b2:d3:38:50:c0:db:4f: 77:c3:bc:97:a4:8b:dd:42:51:18:36:1a:ae:c0:fe: 79:0d:a2:4a:b7:c9:39:67:2d:67:ef:59:62:6d:a7: 64:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:86:73:E8:1C:2F:B4:BF:23:DB:B5:4D:BE:ED:3A:09:B2:25:D7:8D X509v3 Authority Key Identifier: keyid:C7:CF:94:3E:3A:76:4F:37:C0:03:CD:43:5A:2B:85:43:BC:E4:76:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8-UPjp2TzfAA81DWiuFQ7zkdgk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C85E9/082538ECF96511E8BC052411C4F9AE02/x8-UPjp2TzfAA81DWiuFQ7zkdgk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:75:f1:8a:4b:4b:6b:2a:45:4b:ed:8f:87:a9:4a:50:29:43: bd:15:2b:18:ba:a5:23:4c:3a:65:e6:49:24:b7:cc:b5:93:a1: b6:29:64:9f:1b:b0:53:f8:79:ca:5c:50:6a:38:75:4a:3a:d2: 68:e9:9e:e9:f6:3c:bf:a8:81:1b:a8:ac:fd:b5:e6:85:1a:87: 2e:de:fb:f8:df:3d:ca:1a:83:b4:b1:a9:eb:f6:62:ff:28:16: 04:b3:76:a2:b3:a5:f1:49:22:1f:17:39:57:da:b0:46:9f:09: 56:5b:45:4c:f1:20:e2:06:ea:45:75:c4:d0:d0:79:d4:bf:d7: 90:25:d2:0a:f5:14:eb:95:53:fd:02:ee:73:fc:e9:cb:c5:81: 52:3d:6d:f2:58:c6:e5:04:7e:bd:e4:6c:ed:91:c4:7d:4f:e5: e6:32:e1:ee:d0:11:3d:e2:cc:ce:89:ee:4a:1f:3e:52:5d:cc: ad:73:8c:50:76:ff:8c:b2:64:c2:15:e4:ee:26:b3:df:04:76: 29:8a:cf:d7:bd:05:2d:6a:20:40:be:3d:1d:50:a2:ca:b4:25: 24:1f:ee:e0:3e:9f:9e:0d:a1:ca:a3:c8:26:b2:fa:94:9f:89: 1f:16:59:d6:bb:1a:21:b5:aa:04:72:a8:d5:82:84:c1:c4:cf: 48:58:34:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg1RTkxMTAvBgNVBAUTKEM3Q0Y5NDNFM0E3NjRGMzdDMDAzQ0Q0MzVBMkI4NTQz QkNFNDc2MDkwHhcNMjUwODA4MTcyMjMxWhcNMjUwODE1MTcyMjMxWjAYMRYwFAYD VQQDEw02ODk2MzI1Ny1mZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt7OfxBqRP8AT6gB5TEdGBuQ8hPr5eVnCWBimsVzGczvXy0MvO2wyIVNOY4Y7 SceJPbOYAr2iU+VR4tLgTd0iz1MZgzMYn7dhBLcRlgvDq21VVvbLKxHlNKMyOW0U Adeth5k7hCA/3/vOxRJvWlLEVb16kXlxaN/xeVckg4kudpHNJaHsO2o47/t4yyGm 4xVTmPNFL5BdofsWZe6YM65rUIuGmKQzClGfCk4tLqe7yVMq/FSCRcT9thPUiA0u DxYcdySCamtxaVWuVpsBXaTVWD7IStBFR3FqxrLTOFDA2093w7yXpIvdQlEYNhqu wP55DaJKt8k5Zy1n71libadkrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaGc+gc L7S/I9u1Tb7tOgmyJdeNMB8GA1UdIwQYMBaAFMfPlD46dk83wAPNQ1orhUO85HYJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODVFOS8wODI1MzhFQ0Y5 NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6ZkFBODFEV2l1RlE3emtk Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g4LVVQanAyVHpmQUE4MURXaXVGUTd6a2Rnay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODVFOS8wODI1MzhFQ0Y5NjUxMUU4QkMwNTI0MTFDNEY5QUUwMi94OC1VUGpwMlR6 ZkFBODFEV2l1RlE3emtkZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGdfGKS0trKkVL7Y+HqUpQKUO9FSsYuqUjTDpl5kkkt8y1k6G2KWSf G7BT+HnKXFBqOHVKOtJo6Z7p9jy/qIEbqKz9teaFGocu3vv43z3KGoO0sanr9mL/ KBYEs3ais6XxSSIfFzlX2rBGnwlWW0VM8SDiBupFdcTQ0HnUv9eQJdIK9RTrlVP9 Au5z/OnLxYFSPW3yWMblBH695GztkcR9T+XmMuHu0BE94szOie5KHz5SXcytc4xQ dv+MsmTCFeTuJrPfBHYpis/XvQUtaiBAvj0dUKLKtCUkH+7gPp+eDaHKo8gmsvqU n4kfFlnWuxohtaoEcqjVgoTBxM9IWDTE -----END CERTIFICATE-----Generated at Sat Aug 9 22:46:03 2025 by rpki-client