$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: Fp/czQ712m/Tl71ky5kdrzZihdkI3JzNzuXpYjIHbEA= Subject key identifier: 67:AE:EC:DB:17:61:0E:81:AC:84:FF:B7:61:53:EA:34:9B:2A:B1:1D Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0C7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0C71 Signing time: Fri 08 Aug 2025 18:35:35 +0000 Manifest this update: Fri 08 Aug 2025 18:35:34 +0000 Manifest next update: Fri 15 Aug 2025 18:35:34 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: 6AGlfaeceEfdNo4C3Y1OVzd1kwfNIWV4p24OIyIkaGo=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: W5qhrk3NsiS79KgqelHi0v6nSmVUxngvNJSR/yTxWhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3194 (0xc7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Aug 8 18:35:34 2025 GMT Not After : Aug 15 18:35:34 2025 GMT Subject: CN=68964376-4fe8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:39:cf:71:7a:9d:18:2f:87:11:82:93:58:68: 6a:82:cd:03:dc:f4:f0:79:aa:7a:c3:58:d8:2e:6c: 11:d8:58:62:df:6b:fc:16:d0:06:fe:6d:ab:28:ae: 04:0c:5a:92:7d:92:af:9b:9e:9e:a0:d8:cb:0c:0e: 7a:1b:ae:38:0a:1b:d4:9b:32:a1:23:98:cc:7e:78: 05:0b:7a:c6:16:4b:1f:dd:8e:0a:a1:9e:06:ab:4c: d7:99:0a:b6:0d:e5:d9:81:95:e3:dc:2f:50:46:10: d3:9a:49:35:9e:d3:a0:2b:1e:5f:7c:d7:2e:b4:37: 3a:84:4f:7b:a9:d6:9f:c4:0a:41:c5:2d:cc:c8:09: b5:38:3c:fc:31:d2:f9:a2:ab:38:2f:3b:73:d6:56: 4b:09:72:35:a7:ed:2e:b7:aa:12:67:4f:3b:c1:6b: 24:d4:27:75:8d:23:0a:8a:e6:40:a0:12:b5:1f:a8: 27:3e:e1:0a:32:c1:d1:3c:a1:6f:32:75:57:76:ec: 66:9a:c9:0c:9f:9c:e1:1f:8e:76:72:44:44:b0:a5: 80:39:38:c5:63:34:42:90:82:aa:f6:7d:5c:04:2c: 8c:e5:74:4d:8a:b8:01:7a:a8:4b:18:a3:bb:91:98: b3:78:a4:63:9e:32:dc:07:8f:3f:a7:33:4b:96:ea: 79:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:AE:EC:DB:17:61:0E:81:AC:84:FF:B7:61:53:EA:34:9B:2A:B1:1D X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 98:c7:62:04:5f:cf:aa:49:c7:9d:de:7f:83:90:c3:9c:ad:eb: e4:c1:5f:5c:3f:6a:a8:35:e4:48:b9:4f:2b:c1:ad:21:a9:55: b0:4d:01:d6:c4:ab:62:23:47:38:a4:23:96:c6:2b:d9:8e:b2: 7c:f8:8a:4b:55:18:84:64:60:a1:25:7c:85:a2:3b:2b:12:f1: 98:22:7d:28:42:43:b5:c3:56:59:1a:3b:11:dc:7e:c4:7e:78: a7:2b:db:6f:09:8a:67:39:10:81:4f:fd:86:e6:16:58:65:c3: 72:9c:1e:93:04:9e:85:b7:2c:38:5e:98:72:36:82:5c:27:7a: e6:5c:59:d1:56:14:90:b9:14:4a:51:5a:b6:af:e2:57:a7:b0: 0e:76:b0:a9:21:1f:f0:dc:bd:b8:be:6d:29:fa:48:61:34:64: 0a:b0:55:6b:e3:bd:ce:89:fa:ce:a7:eb:e0:e1:7c:21:6e:9f: 1a:05:3e:4e:7c:7c:7e:81:58:36:ec:43:5d:8d:62:8e:10:19: 98:15:50:4d:64:22:66:42:d1:b8:db:40:ae:aa:b7:eb:02:90: 53:74:da:f5:41:a7:05:c5:c8:f8:2b:ca:99:a9:1b:bd:ec:0f: 1c:34:38:e2:4a:f0:7c:3f:83:39:00:71:02:77:49:5c:c1:e0: b7:bf:89:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjUwODA4MTgzNTM0WhcNMjUwODE1MTgzNTM0WjAYMRYwFAYD VQQDEw02ODk2NDM3Ni00ZmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjnPcXqdGC+HEYKTWGhqgs0D3PTweap6w1jYLmwR2Fhi32v8FtAG/m2rKK4E DFqSfZKvm56eoNjLDA56G644ChvUmzKhI5jMfngFC3rGFksf3Y4KoZ4Gq0zXmQq2 DeXZgZXj3C9QRhDTmkk1ntOgKx5ffNcutDc6hE97qdafxApBxS3MyAm1ODz8MdL5 oqs4Lztz1lZLCXI1p+0ut6oSZ087wWsk1Cd1jSMKiuZAoBK1H6gnPuEKMsHRPKFv MnVXduxmmskMn5zhH452ckREsKWAOTjFYzRCkIKq9n1cBCyM5XRNirgBeqhLGKO7 kZizeKRjnjLcB48/pzNLlup5xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeu7NsX YQ6BrIT/t2FT6jSbKrEdMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCYx2IEX8+qSced3n+DkMOcrevkwV9cP2qoNeRIuU8rwa0hqVWwTQHW xKtiI0c4pCOWxivZjrJ8+IpLVRiEZGChJXyFojsrEvGYIn0oQkO1w1ZZGjsR3H7E fninK9tvCYpnORCBT/2G5hZYZcNynB6TBJ6Ftyw4XphyNoJcJ3rmXFnRVhSQuRRK UVq2r+JXp7AOdrCpIR/w3L24vm0p+khhNGQKsFVr473OifrOp+vg4Xwhbp8aBT5O fHx+gVg27ENdjWKOEBmYFVBNZCJmQtG420CuqrfrApBTdNr1QacFxcj4K8qZqRu9 7A8cNDjiSvB8P4M5AHECd0lcweC3v4l1 -----END CERTIFICATE-----Generated at Sun Aug 10 13:54:08 2025 by rpki-client