$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft File: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft (raw, json) Hash identifier: Zy8qazDWytEdLDp2m534iTs+oK9It8hcvoE0Y+TIgTA= Subject key identifier: C2:65:16:5D:A0:9D:D1:1F:27:4D:0E:A4:27:39:4C:DA:BD:1A:B3:85 Authority key identifier: F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07 Certificate issuer: /CN=A91C9916/serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07 Certificate serial: 01FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft Manifest number: 01FF Signing time: Wed 13 Aug 2025 02:43:53 +0000 Manifest this update: Wed 13 Aug 2025 02:43:53 +0000 Manifest next update: Wed 20 Aug 2025 02:43:53 +0000 Files and hashes: 1: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl (hash: 6g2ZiyGH9goEWsq2b2zH242V8509YCc/12x4GAIBWe0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 02:43:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 511 (0x1ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9916, serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07 Validity Not Before: Aug 13 02:43:53 2025 GMT Not After : Aug 20 02:43:53 2025 GMT Subject: CN=689bfbe9-e183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4e:47:c6:49:53:62:92:24:a7:61:4a:ee:52: 11:0c:5c:27:ec:ce:d6:bb:39:f7:8c:79:99:fe:5b: df:35:8e:cb:7b:da:cc:0c:e1:92:74:d1:6f:60:17: b3:90:0b:96:d6:3d:b8:b3:14:4b:78:0d:0a:22:00: 39:dc:78:86:39:f9:0a:66:e4:df:5e:82:65:4b:97: ff:17:d3:ed:b2:98:88:7d:9b:50:d1:25:d1:ef:1f: 6f:cc:c5:f9:64:1b:70:03:a8:86:91:41:24:15:b8: 29:c2:d3:61:a6:38:3d:54:2d:a5:a4:76:8e:3b:9d: cd:02:a2:6c:df:7a:09:5b:46:44:82:a4:85:ba:82: dd:17:ad:85:5c:2d:ba:81:07:3f:01:e5:96:16:6a: 30:b8:ce:b1:d4:b0:1f:a8:c1:61:0b:1b:96:55:5e: 2c:7e:0a:21:5a:ad:9f:32:74:d5:dc:a6:4d:a0:44: 62:06:ef:ac:f9:17:c2:a3:f2:4d:ea:18:f3:88:a8: 44:5d:79:2b:00:35:50:b9:45:0c:ae:65:b6:bc:0d: 1d:d9:8c:68:1b:5d:60:65:1a:a7:2b:df:e4:9f:09: 84:19:c0:12:0f:06:88:44:9c:7e:c9:01:06:a2:23: 8d:d1:8b:68:9d:0e:73:65:e0:31:a0:7a:53:a0:09: 20:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:65:16:5D:A0:9D:D1:1F:27:4D:0E:A4:27:39:4C:DA:BD:1A:B3:85 X509v3 Authority Key Identifier: keyid:F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:88:4e:aa:39:36:28:d1:67:33:ed:aa:25:8d:50:52:be:22: fa:80:9b:41:3f:b4:4d:9b:37:fc:13:6d:f1:e4:b1:ed:cf:85: f2:d3:d9:fd:24:5d:c3:7c:da:cd:ab:9a:59:62:ba:16:aa:45: 8d:16:02:e5:14:6e:a4:63:c4:41:59:f8:ee:b9:a4:1e:b1:bc: 5b:8c:d5:38:b0:33:2d:c2:24:2e:56:c6:79:b2:2f:94:86:78: d8:b4:8c:90:ba:d2:a2:e8:08:a0:c4:c0:22:9c:d4:50:b8:24: f9:6d:3e:65:91:a9:1f:07:6e:ec:b3:5e:d2:a1:bf:b9:0f:c8: 87:02:5c:e1:6d:d7:5f:5e:1a:49:e0:68:13:15:94:84:b2:45: 1d:dd:d5:6a:78:1b:51:00:02:34:86:55:6c:b4:13:e3:0d:a9: d0:2a:de:90:0a:5b:77:37:6d:67:7d:e8:5e:a2:e0:f2:b0:dc: 82:2d:e2:7c:84:a7:b0:83:1b:48:9b:63:64:80:8e:d6:11:e4: a8:e4:19:a2:eb:17:a9:ee:e0:da:a1:03:cf:52:ad:fd:5b:1b: ed:bf:84:a1:5c:a7:ff:3d:5e:cb:97:c8:f7:0a:e9:f8:ec:8e: c5:f9:5a:8a:e2:d8:01:3d:91:11:8e:1f:a9:73:c4:01:12:cb: df:75:a7:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAf8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5MTYxMTAvBgNVBAUTKEYyRTQ2NTdGQjBCMTUxNDI3M0M1MEVFQkY5MEY0NDE2 RkRBNTRCMDcwHhcNMjUwODEzMDI0MzUzWhcNMjUwODIwMDI0MzUzWjAYMRYwFAYD VQQDEw02ODliZmJlOS1lMTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlk5HxklTYpIkp2FK7lIRDFwn7M7Wuzn3jHmZ/lvfNY7Le9rMDOGSdNFvYBez kAuW1j24sxRLeA0KIgA53HiGOfkKZuTfXoJlS5f/F9PtspiIfZtQ0SXR7x9vzMX5 ZBtwA6iGkUEkFbgpwtNhpjg9VC2lpHaOO53NAqJs33oJW0ZEgqSFuoLdF62FXC26 gQc/AeWWFmowuM6x1LAfqMFhCxuWVV4sfgohWq2fMnTV3KZNoERiBu+s+RfCo/JN 6hjziKhEXXkrADVQuUUMrmW2vA0d2YxoG11gZRqnK9/knwmEGcASDwaIRJx+yQEG oiON0YtonQ5zZeAxoHpToAkgPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMJlFl2g ndEfJ00OpCc5TNq9GrOFMB8GA1UdIwQYMBaAFPLkZX+wsVFCc8UO6/kPRBb9pUsH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTkxNi8yMzlEQzQyNjYx OEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVVSnp4UTdyLVE5RUZ2MmxT d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1UmxmN0N4VVVKenhRN3ItUTlFRnYybFN3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTkxNi8yMzlEQzQyNjYxOEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVV Snp4UTdyLVE5RUZ2MmxTd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfiE6qOTYo0Wcz7aoljVBSviL6gJtBP7RNmzf8E23x5LHtz4Xy09n9 JF3DfNrNq5pZYroWqkWNFgLlFG6kY8RBWfjuuaQesbxbjNU4sDMtwiQuVsZ5si+U hnjYtIyQutKi6AigxMAinNRQuCT5bT5lkakfB27ss17Sob+5D8iHAlzhbddfXhpJ 4GgTFZSEskUd3dVqeBtRAAI0hlVstBPjDanQKt6QClt3N21nfeheouDysNyCLeJ8 hKewgxtIm2NkgI7WEeSo5Bmi6xep7uDaoQPPUq39Wxvtv4ShXKf/PV7Ll8j3Cun4 7I7F+VqK4tgBPZERjh+pc8QBEsvfdae5 -----END CERTIFICATE-----Generated at Wed Aug 13 05:56:08 2025 by rpki-client