$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft File: 8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json) Hash identifier: Cxzw5ZbcbFBKA5BwGsFmtCkikmJ3oS8dxV10yzgEq5Q= Subject key identifier: 7E:9C:53:F9:5D:C7:60:69:4F:45:E3:16:EF:AE:D3:0E:20:D8:AD:8D Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 Certificate issuer: /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Certificate serial: 04B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft Manifest number: 04B5 Signing time: Mon 11 Aug 2025 00:00:24 +0000 Manifest this update: Mon 11 Aug 2025 00:00:23 +0000 Manifest next update: Mon 18 Aug 2025 00:00:23 +0000 Files and hashes: 1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: d8+PJviMiJ5CHb7lwTYp2/xGWHl+9U3Ou24hmsQWijo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 00:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1208 (0x4b8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF70D, serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Validity Not Before: Aug 11 00:00:23 2025 GMT Not After : Aug 18 00:00:23 2025 GMT Subject: CN=68993297-d7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:04:2f:68:da:c1:bf:e0:b9:bc:17:ac:55:a4: 26:e9:ef:84:42:2f:6a:ac:4e:ea:bb:cf:ed:05:b5: bd:37:82:12:d3:fe:cc:cd:35:d7:22:a4:35:88:b6: b4:98:75:c9:27:4c:56:12:30:e3:de:74:df:55:83: cc:6a:2f:ae:ee:4b:98:dd:de:17:44:19:06:a4:4e: 22:c8:c9:7b:28:40:68:c8:3c:3d:1f:29:12:d2:5b: 36:39:5e:0c:03:3d:83:d7:4d:a5:22:77:a0:34:38: d5:eb:32:8b:dc:0d:ab:0d:62:16:84:10:8f:9a:e9: b0:92:12:da:57:16:f1:c2:e9:7e:68:6e:35:06:9c: 93:f5:5c:7b:26:78:97:82:c8:99:78:ba:77:14:ab: 9d:76:34:b7:dc:34:0e:d6:ba:4c:ee:c8:d6:7a:7e: e0:a6:b5:c8:18:e4:39:aa:20:be:be:63:41:81:d2: 69:c8:e0:c3:ed:e9:8f:33:c4:3f:45:c2:a5:2a:8c: ae:bf:56:56:5a:4d:80:cf:7a:25:bb:84:d4:dc:45: b1:12:52:68:50:fd:60:67:f0:c3:80:74:6a:af:8c: a7:26:7f:6c:87:9d:0e:5b:c1:14:82:44:64:b4:0a: 2c:55:0d:6f:fe:45:2b:2f:dd:4f:a8:52:ca:41:10: 76:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9C:53:F9:5D:C7:60:69:4F:45:E3:16:EF:AE:D3:0E:20:D8:AD:8D X509v3 Authority Key Identifier: keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:05:38:9b:c0:bf:14:b0:a7:fe:d3:99:8b:6f:87:65:11:7e: 35:f7:2b:a7:af:20:3e:cf:05:bc:2b:72:b2:e7:27:e5:fa:cd: 4a:5f:99:28:e3:06:3e:f5:3d:ad:b9:97:2f:9c:f1:b8:73:4c: 28:a3:9e:d5:e5:e3:4e:79:1a:54:87:fe:a4:cd:d1:40:53:69: 40:1a:c9:22:be:6a:7d:d8:ca:79:af:b5:2f:98:96:37:45:aa: 29:dd:82:28:f2:26:18:45:34:0f:b0:e1:1f:4c:36:af:fd:9d: b3:0e:c0:0a:f8:ee:bf:d1:36:2b:0a:cb:d3:9b:5f:aa:68:3d: fd:b7:d8:fa:6f:36:71:42:8c:e5:8c:c8:e2:19:b0:76:9c:30: 78:a3:7b:4c:d2:45:89:0e:2f:85:9f:fa:7f:94:3f:41:cb:cb: 5c:48:2d:1d:dd:8f:10:80:c3:1a:22:ae:7f:63:ea:04:72:f4: 85:d2:01:88:93:b4:1e:97:f6:f4:98:33:30:c0:9e:e8:5f:27: d0:11:4d:56:8d:7d:c8:23:e5:f3:ea:2b:33:2b:3f:50:27:74: a2:d5:49:c1:ca:10:61:0a:24:a6:5f:e6:a2:c2:29:07:49:ca: c8:66:1c:2e:aa:2d:e7:2e:ec:01:2b:0f:47:87:fa:fe:98:35: 58:98:8a:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY3MEQxMTAvBgNVBAUTKEYyMDVCMjhCQUM3RUVCQURFOUFGOUI2RDA0RkI0OTIw Rjk2MTNGODkwHhcNMjUwODExMDAwMDIzWhcNMjUwODE4MDAwMDIzWjAYMRYwFAYD VQQDEw02ODk5MzI5Ny1kN2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9AQvaNrBv+C5vBesVaQm6e+EQi9qrE7qu8/tBbW9N4IS0/7MzTXXIqQ1iLa0 mHXJJ0xWEjDj3nTfVYPMai+u7kuY3d4XRBkGpE4iyMl7KEBoyDw9HykS0ls2OV4M Az2D102lInegNDjV6zKL3A2rDWIWhBCPmumwkhLaVxbxwul+aG41BpyT9Vx7JniX gsiZeLp3FKuddjS33DQO1rpM7sjWen7gprXIGOQ5qiC+vmNBgdJpyODD7emPM8Q/ RcKlKoyuv1ZWWk2Az3olu4TU3EWxElJoUP1gZ/DDgHRqr4ynJn9sh50OW8EUgkRk tAosVQ1v/kUrL91PqFLKQRB2IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6cU/ld x2BpT0XjFu+u0w4g2K2NMB8GA1UdIwQYMBaAFPIFsousfuut6a+bbQT7SSD5YT+J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjcwRC9GNkE5RDdENjM3 QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2M3ByNXR0QlB0SklQbGhQ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnV3lpNngtNjYzcHI1dHRCUHRKSVBsaFA0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjcwRC9GNkE5RDdENjM3QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2 M3ByNXR0QlB0SklQbGhQNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5BTibwL8UsKf+05mLb4dlEX419yunryA+zwW8K3Ky5yfl+s1KX5ko 4wY+9T2tuZcvnPG4c0woo57V5eNOeRpUh/6kzdFAU2lAGskivmp92Mp5r7UvmJY3 Raop3YIo8iYYRTQPsOEfTDav/Z2zDsAK+O6/0TYrCsvTm1+qaD39t9j6bzZxQozl jMjiGbB2nDB4o3tM0kWJDi+Fn/p/lD9By8tcSC0d3Y8QgMMaIq5/Y+oEcvSF0gGI k7Qel/b0mDMwwJ7oXyfQEU1WjX3II+Xz6iszKz9QJ3Si1UnByhBhCiSmX+aiwikH ScrIZhwuqi3nLuwBKw9Hh/r+mDVYmIo3 -----END CERTIFICATE-----Generated at Tue Aug 12 14:02:11 2025 by rpki-client