$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft File: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft (raw, json) Hash identifier: 4Mbfkoc00iN2Mkw0AXvXbNuopxnRiqvQJDJg6Q3FbRI= Subject key identifier: 0E:99:7E:C5:B7:61:1B:73:D8:D3:4D:8C:8F:8E:86:E1:4E:2C:D2:0B Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft Manifest number: 017D Signing time: Sat 09 Aug 2025 04:03:07 +0000 Manifest this update: Sat 09 Aug 2025 04:03:06 +0000 Manifest next update: Sat 16 Aug 2025 04:03:06 +0000 Files and hashes: 1: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl (hash: iCl/w6LvG4Io2oP/dCpTZjOvfOOXn/eeu0vM87EIDIk=) 2: 98DB93A4301011EEA92BE919C4F9AE02.roa (hash: MrKs9S+pIK9ruhlRFpWtUpK3GffZ/Q4iUqs1HpDuQLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BDA, serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Validity Not Before: Aug 9 04:03:06 2025 GMT Not After : Aug 16 04:03:06 2025 GMT Subject: CN=6896c87b-471a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:9b:d6:bc:e0:5e:13:dd:1d:85:5c:40:78: 16:d8:1f:e3:73:86:f2:1e:62:05:48:91:c5:a3:a1: 70:5b:94:5a:b2:d4:3d:ec:c8:f2:16:0f:df:90:f1: 42:fa:15:5d:2f:6d:38:b4:65:c0:39:85:bd:76:8e: d5:b8:a5:14:33:69:fd:81:ce:8e:49:fb:de:e0:63: 7d:f0:d3:8b:2c:af:cd:43:44:0d:fd:38:25:ad:41: e1:09:62:17:2a:3c:38:aa:e4:88:3f:d3:99:ae:9d: 6e:f9:42:13:0b:51:91:88:a8:00:ce:96:2e:e1:bb: 1b:cb:48:27:1f:11:fa:8e:48:3d:8e:b2:51:59:eb: 70:e0:e7:83:07:ea:1f:1a:77:2d:8d:e2:66:e8:64: 72:01:41:16:a4:22:b7:f9:c7:8d:0b:bd:e2:5d:21: 68:e0:42:7a:1f:61:ea:51:b6:72:a4:f3:10:25:83: d3:26:42:4f:d2:df:5a:81:fd:bf:17:a1:6e:77:67: 3d:ea:d9:df:dd:3f:9d:05:9e:ff:a0:5a:73:15:38: 01:19:7a:65:b5:bd:58:bb:68:35:21:d8:d5:a6:b7: 1b:b8:b5:28:da:88:cc:af:f7:29:5c:74:0f:ba:c2: 58:82:85:82:c2:44:c9:da:2d:26:46:9b:0f:62:4a: 81:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:99:7E:C5:B7:61:1B:73:D8:D3:4D:8C:8F:8E:86:E1:4E:2C:D2:0B X509v3 Authority Key Identifier: keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cc:24:7e:37:32:61:c4:30:f2:64:b4:bc:40:bd:b0:14:1f:84: 2a:88:6e:36:d5:2e:60:10:c1:eb:98:be:77:eb:ce:6d:9f:6f: bb:73:0c:0c:f9:24:20:f8:3c:69:13:bd:6b:d7:f3:35:ac:13: 9e:be:9c:5a:86:47:2c:a9:ad:88:3b:b2:35:22:44:c4:4c:00: 80:b6:81:f1:25:6d:7d:52:9a:72:18:12:ec:0a:23:63:32:ac: 1a:d0:40:d0:6b:9c:b7:17:08:2d:f2:e0:7a:ee:d6:39:22:b2: 6f:92:6d:b0:f9:43:a3:b9:88:9b:78:34:be:0a:bf:f6:be:49: 3d:d4:7c:3e:7a:78:34:8a:f4:a1:0e:27:5d:c9:98:5a:ff:63: 2a:f7:ea:90:3e:ca:11:4e:97:90:3d:9a:63:80:ba:f0:36:6d: 2d:97:ce:40:a6:4a:ee:17:dd:68:18:90:6f:2d:0c:b8:c2:eb: c5:d6:55:f2:2e:99:aa:1b:1e:3e:85:14:49:91:1e:50:32:ab: c9:ec:02:c7:fb:6e:c6:9c:5b:5c:ef:09:68:0b:62:27:b2:3b: ea:d5:73:a2:ac:d4:c4:c7:70:f0:dc:ff:9b:6f:bd:9e:b2:59: 6a:e3:5d:06:e9:39:a5:d8:ac:37:ba:2d:86:3a:b3:44:fe:2c: 1e:bd:d9:41 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCREExMTAvBgNVBAUTKEQ4QUYwN0Q0M0E5QjhCQkI4MUQ2MEU0QzE3N0VBODE4 RUM4QjczRTUwHhcNMjUwODA5MDQwMzA2WhcNMjUwODE2MDQwMzA2WjAYMRYwFAYD VQQDEw02ODk2Yzg3Yi00NzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBub1rzgXhPdHYVcQHgW2B/jc4byHmIFSJHFo6FwW5RastQ97MjyFg/fkPFC +hVdL204tGXAOYW9do7VuKUUM2n9gc6OSfve4GN98NOLLK/NQ0QN/TglrUHhCWIX Kjw4quSIP9OZrp1u+UITC1GRiKgAzpYu4bsby0gnHxH6jkg9jrJRWetw4OeDB+of GnctjeJm6GRyAUEWpCK3+ceNC73iXSFo4EJ6H2HqUbZypPMQJYPTJkJP0t9agf2/ F6Fud2c96tnf3T+dBZ7/oFpzFTgBGXpltb1Yu2g1IdjVprcbuLUo2ojMr/cpXHQP usJYgoWCwkTJ2i0mRpsPYkqB5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6ZfsW3 YRtz2NNNjI+OhuFOLNILMB8GA1UdIwQYMBaAFNivB9Q6m4u7gdYOTBd+qBjsi3Pl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJEQS9GNzNGMjBBNjMw MEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3dUIxZzVNRjM2b0dPeUxj LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLOEgxRHFiaTd1QjFnNU1GMzZvR095TGMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJEQS9GNzNGMjBBNjMwMEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3 dUIxZzVNRjM2b0dPeUxjLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDMJH43MmHEMPJktLxAvbAUH4QqiG421S5gEMHrmL53685tn2+7cwwM +SQg+DxpE71r1/M1rBOevpxahkcsqa2IO7I1IkTETACAtoHxJW19UppyGBLsCiNj Mqwa0EDQa5y3Fwgt8uB67tY5IrJvkm2w+UOjuYibeDS+Cr/2vkk91Hw+eng0ivSh DiddyZha/2Mq9+qQPsoRTpeQPZpjgLrwNm0tl85ApkruF91oGJBvLQy4wuvF1lXy LpmqGx4+hRRJkR5QMqvJ7ALH+27GnFtc7wloC2Insjvq1XOirNTEx3Dw3P+bb72e sllq410G6Tml2Kw3ui2GOrNE/iwevdlB -----END CERTIFICATE-----Generated at Mon Aug 11 04:17:53 2025 by rpki-client