$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft File: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft (raw, json) Hash identifier: YxaxySM64TVB+falIV7RYTKG3CdL10bJT0iFBm2mZyA= Subject key identifier: 0C:BB:69:00:7C:BE:5A:D7:85:5A:D1:74:03:7D:E8:84:05:22:C7:C3 Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 Certificate issuer: /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft Manifest number: 8D Signing time: Sat 09 Aug 2025 07:03:30 +0000 Manifest this update: Sat 09 Aug 2025 07:03:29 +0000 Manifest next update: Sat 16 Aug 2025 07:03:29 +0000 Files and hashes: 1: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl (hash: 1RTaA3EpqDhHhqLygpEij9VQIHrha/PRfmaTmeLtLPg=) 2: D660AB1CD87D11EF9992CD41C4F9AE02.roa (hash: WnrI0aIYZih3vM/sW5dubGcnSTElOMwHaTB7siLqQR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Validity Not Before: Aug 9 07:03:29 2025 GMT Not After : Aug 16 07:03:29 2025 GMT Subject: CN=6896f2c2-4443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a7:e9:66:95:d4:9d:58:c3:dc:b9:97:e1:b6: 69:cf:c6:6c:a8:d1:2f:19:af:58:1a:ee:3f:ed:5f: 07:f9:f1:9d:74:1e:ab:a6:c6:f6:00:c6:12:7e:c9: 9c:46:37:81:b4:cb:53:da:c9:14:78:80:36:88:f9: 15:c0:54:20:9b:0e:70:08:07:a6:6b:8e:16:94:7f: d3:c8:20:0c:fe:cd:8b:2b:b6:c4:4f:37:5c:f3:98: e9:fd:4f:43:69:9e:b1:a0:83:c5:ea:f1:b8:7a:38: f1:70:0f:fb:2d:aa:e1:8c:2d:4c:a9:f7:0d:16:51: ec:2d:a5:5a:59:61:ad:15:80:01:37:35:4c:bb:f9: 52:db:7e:c9:26:cf:f6:35:74:ec:2a:a9:61:53:0c: d2:2b:95:40:3e:1e:50:8a:21:e8:98:9e:e0:42:1c: 9a:db:b4:c2:a8:25:42:4d:52:a7:91:00:42:05:b4: b1:a9:8f:5d:51:d3:51:29:50:32:72:87:42:40:6a: 39:74:fb:76:e8:1d:e6:37:ae:4b:17:c8:dd:26:f3: 88:a4:59:77:2a:a5:d8:7a:39:52:52:c0:74:52:92: 0b:26:92:1b:5d:fb:46:f6:7a:fd:72:e4:2f:f2:0b: 72:8a:9a:53:fe:a6:7a:bb:48:b1:74:a9:f2:94:1d: 74:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:BB:69:00:7C:BE:5A:D7:85:5A:D1:74:03:7D:E8:84:05:22:C7:C3 X509v3 Authority Key Identifier: keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:f2:04:cb:7c:a3:88:b2:f7:6d:9f:de:66:b0:28:4a:f7:f2: 98:db:e4:86:91:71:cd:4f:d8:cd:9d:1d:22:89:60:40:c5:22: b8:69:86:d9:a7:fe:db:57:59:fb:9c:41:36:f7:35:6e:ca:23: f9:d7:98:3d:0c:38:51:b2:91:0a:cd:48:d5:6b:f7:0d:1a:8d: 43:49:f2:a3:3b:6e:64:69:eb:b7:5e:0b:66:6c:82:d9:de:06: f4:d1:bb:a9:e0:0c:28:94:45:b2:a7:f0:b5:7a:e1:71:09:83: 44:b3:46:43:c2:da:29:bd:76:76:cf:c5:ff:c0:a3:14:32:df: d5:98:8d:ae:4e:2d:70:ca:07:b2:f7:bc:86:ef:55:9c:02:fb: ee:7f:3b:b0:33:03:3c:46:b7:8f:30:ff:65:31:36:af:f6:0d: 67:26:d0:d4:1e:a0:44:86:e0:fe:10:1a:d9:a3:af:0b:18:d6: 39:a3:c0:d4:5a:9a:dd:17:04:90:30:95:f7:67:ce:3e:01:a5: c7:30:ff:e7:47:ad:29:40:56:7b:0e:75:b0:5a:39:7c:96:13: 00:a6:e0:c0:64:25:ad:10:c8:34:44:a9:d2:56:33:36:e6:af: e9:fb:24:b5:b8:e2:dd:09:2f:69:41:32:f9:fb:33:99:6b:c9: e4:77:02:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5QkMxMTAvBgNVBAUTKEYxNUQxMTc5MEIwRTc1MzU3NDA2NjExREM1NzA1OEY2 OURDNTc4QTAwHhcNMjUwODA5MDcwMzI5WhcNMjUwODE2MDcwMzI5WjAYMRYwFAYD VQQDEw02ODk2ZjJjMi00NDQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9qfpZpXUnVjD3LmX4bZpz8ZsqNEvGa9YGu4/7V8H+fGddB6rpsb2AMYSfsmc RjeBtMtT2skUeIA2iPkVwFQgmw5wCAema44WlH/TyCAM/s2LK7bETzdc85jp/U9D aZ6xoIPF6vG4ejjxcA/7LarhjC1MqfcNFlHsLaVaWWGtFYABNzVMu/lS237JJs/2 NXTsKqlhUwzSK5VAPh5QiiHomJ7gQhya27TCqCVCTVKnkQBCBbSxqY9dUdNRKVAy codCQGo5dPt26B3mN65LF8jdJvOIpFl3KqXYejlSUsB0UpILJpIbXftG9nr9cuQv 8gtyippT/qZ6u0ixdKnylB10QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAy7aQB8 vlrXhVrRdAN96IQFIsfDMB8GA1UdIwQYMBaAFPFdEXkLDnU1dAZhHcVwWPadxXig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlCQy9DQjg4MkU3RUE3 MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi84VjBSZVFzT2RUVjBCbUVkeFhCWTlwM0Zl S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhWMFJlUXNPZFRWMEJtRWR4WEJZOXAzRmVLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlCQy9DQjg4MkU3RUE3MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi84VjBSZVFzT2RU VjBCbUVkeFhCWTlwM0ZlS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw8gTLfKOIsvdtn95msChK9/KY2+SGkXHNT9jNnR0iiWBAxSK4aYbZ p/7bV1n7nEE29zVuyiP515g9DDhRspEKzUjVa/cNGo1DSfKjO25kaeu3XgtmbILZ 3gb00bup4AwolEWyp/C1euFxCYNEs0ZDwtopvXZ2z8X/wKMUMt/VmI2uTi1wygey 97yG71WcAvvufzuwMwM8RrePMP9lMTav9g1nJtDUHqBEhuD+EBrZo68LGNY5o8DU WprdFwSQMJX3Z84+AaXHMP/nR60pQFZ7DnWwWjl8lhMApuDAZCWtEMg0RKnSVjM2 5q/p+yS1uOLdCS9pQTL5+zOZa8nkdwL5 -----END CERTIFICATE-----Generated at Sun Aug 10 05:42:12 2025 by rpki-client