$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json) Hash identifier: hLgg1+33XnUSnB6aN3Ir8hAmkZZnLAL9GunO2ok77BY= Subject key identifier: 8F:61:9E:62:3A:14:58:73:99:E2:5E:D8:C0:F8:63:E4:1B:A8:CC:D4 Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Certificate serial: 0790 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft Manifest number: 0C9D Signing time: Mon 04 Aug 2025 21:48:38 +0000 Manifest this update: Mon 04 Aug 2025 21:48:37 +0000 Manifest next update: Mon 11 Aug 2025 21:48:37 +0000 Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: CgdcZTnMMkPvjoXzdp7oufQVQeq/E96Ci4u2+38ps78=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1936 (0x790) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Validity Not Before: Aug 4 21:48:37 2025 GMT Not After : Aug 11 21:48:37 2025 GMT Subject: CN=68912ab6-9cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9d:89:19:86:78:af:2b:ec:c2:d2:7b:12:1b: bd:26:06:c9:55:97:91:68:50:fa:ea:d8:9a:aa:68: 6d:4d:6a:9f:dd:4e:b0:6a:77:30:a1:d0:e4:d6:ec: 06:83:e0:ae:59:ef:15:78:b3:ca:6e:6f:02:b5:92: f1:88:37:c7:c9:fd:46:74:73:e9:b0:cb:dc:46:cf: d8:aa:ce:75:3c:ef:cb:2a:4f:db:1a:c3:3b:42:3d: d4:1b:d8:a8:2c:d7:b3:f6:bb:6d:10:87:20:4e:af: 72:59:54:ce:14:b2:8b:a7:e2:0b:81:d4:6e:c0:24: f2:d0:48:90:77:04:02:e6:e7:f6:d8:2a:b7:31:4c: dd:f2:3a:54:b8:56:28:38:4a:da:d8:41:3b:f5:ec: 55:e8:04:aa:aa:bd:b6:56:c8:05:d4:f3:82:60:e9: d0:26:f8:1d:32:b5:39:cd:56:97:ef:8b:43:07:d2: 09:fd:74:a0:de:a8:ae:55:70:bf:6c:79:e0:ea:44: 36:6f:b4:c6:25:dc:fd:cf:1f:d2:18:0a:0f:5f:d9: fc:b9:57:0a:fc:df:e8:59:34:0d:25:ce:6c:b3:0a: 42:b3:7d:f6:ba:45:6f:16:a6:00:c5:da:9b:27:01: 68:00:5d:46:60:64:b0:be:cc:e7:1f:30:d2:d7:1e: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:61:9E:62:3A:14:58:73:99:E2:5E:D8:C0:F8:63:E4:1B:A8:CC:D4 X509v3 Authority Key Identifier: keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:20:e5:e8:1c:b7:49:64:be:65:5a:b6:30:52:1a:21:86:39: 23:e1:1e:27:45:ec:47:fa:bc:f1:44:b2:e9:a0:f5:b9:ec:2a: dc:66:5e:f5:03:c0:ed:45:89:d3:32:68:e7:a8:96:13:e8:64: 2f:d8:7f:8f:7e:54:ce:78:d6:c6:26:f0:2a:93:b0:79:7a:40: 95:2f:49:d3:ef:62:8b:43:97:ea:91:21:eb:62:71:d8:bc:7d: 0d:1f:3d:ba:0b:1d:0a:0f:bc:a4:4f:25:e4:e4:54:bf:ee:b9: af:65:7c:d2:1e:a5:98:0f:1b:f7:40:d9:18:c9:6b:92:33:b4: 11:5d:19:53:da:c6:0d:35:83:27:52:1e:0a:6b:d1:a8:ef:19: 9a:3f:23:9a:7c:aa:5b:84:28:95:0a:33:97:30:45:65:cd:e0: 3d:24:d9:dc:63:a3:cc:f9:9c:bb:07:4a:3f:f1:2a:40:26:8c: 04:96:d3:de:6f:a6:8d:87:aa:62:68:a1:2e:af:45:3f:72:5f: d1:96:ce:80:47:52:18:4b:2f:50:3f:9f:be:2e:d3:65:96:b5: 2c:83:a6:09:d6:eb:c5:3d:2c:f3:62:9c:63:b2:dc:52:c1:02: 84:dd:7f:10:55:08:12:92:a2:47:6b:f1:82:53:43:40:8a:4d: 65:95:1e:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKEIzQzg5MTM4MDAzNjkxNURFNUVBQTg0Q0YxMzNBQjNC MzVCM0U5RDMwHhcNMjUwODA0MjE0ODM3WhcNMjUwODExMjE0ODM3WjAYMRYwFAYD VQQDEw02ODkxMmFiNi05Y2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Z2JGYZ4ryvswtJ7Ehu9JgbJVZeRaFD66tiaqmhtTWqf3U6wancwodDk1uwG g+CuWe8VeLPKbm8CtZLxiDfHyf1GdHPpsMvcRs/Yqs51PO/LKk/bGsM7Qj3UG9io LNez9rttEIcgTq9yWVTOFLKLp+ILgdRuwCTy0EiQdwQC5uf22Cq3MUzd8jpUuFYo OEra2EE79exV6ASqqr22VsgF1POCYOnQJvgdMrU5zVaX74tDB9IJ/XSg3qiuVXC/ bHng6kQ2b7TGJdz9zx/SGAoPX9n8uVcK/N/oWTQNJc5sswpCs332ukVvFqYAxdqb JwFoAF1GYGSwvsznHzDS1x475wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9hnmI6 FFhzmeJe2MD4Y+QbqMzUMB8GA1UdIwQYMBaAFLPIkTgANpFd5eqoTPEzqzs1s+nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtWM2w2cWhNOFRPck96V3o2 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4aVJPQUEya1YzbDZxaE04VE9yT3pXejZkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtW M2w2cWhNOFRPck96V3o2ZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEIOXoHLdJZL5lWrYwUhohhjkj4R4nRexH+rzxRLLpoPW57CrcZl71 A8DtRYnTMmjnqJYT6GQv2H+PflTOeNbGJvAqk7B5ekCVL0nT72KLQ5fqkSHrYnHY vH0NHz26Cx0KD7ykTyXk5FS/7rmvZXzSHqWYDxv3QNkYyWuSM7QRXRlT2sYNNYMn Uh4Ka9Go7xmaPyOafKpbhCiVCjOXMEVlzeA9JNncY6PM+Zy7B0o/8SpAJowEltPe b6aNh6piaKEur0U/cl/Rls6AR1IYSy9QP5++LtNllrUsg6YJ1uvFPSzzYpxjstxS wQKE3X8QVQgSkqJHa/GCU0NAik1llR52 -----END CERTIFICATE-----Generated at Wed Aug 6 04:07:41 2025 by rpki-client