$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft File: k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft (raw, json) Hash identifier: 2fwJfijkwYbg46frL0GDoaE2jwcfMqGhLOoHgd+ViNI= Subject key identifier: 3B:0E:D2:3D:55:E9:1D:66:97:B6:2A:BF:6B:39:0C:43:8B:1D:B2:1B Authority key identifier: 93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9 Certificate issuer: /CN=A91E3D15/serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9 Certificate serial: 13EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft Manifest number: 13CF Signing time: Sun 10 Aug 2025 16:56:29 +0000 Manifest this update: Sun 10 Aug 2025 16:56:28 +0000 Manifest next update: Sun 17 Aug 2025 16:56:28 +0000 Files and hashes: 1: k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl (hash: N7ezSqMu1ZwSXB0hmBaAC/zErtgVYolKjVdzU4Tq8no=) 2: A04E05E42CE911EC8F99F486C4F9AE02.roa (hash: bw4oyTaqoqfdp29e2lYAU370gy2twH+W8CpSCQrTXLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5098 (0x13ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D15, serialNumber=93C4D74D18F52CEA585280BB3312F310E120C0E9 Validity Not Before: Aug 10 16:56:28 2025 GMT Not After : Aug 17 16:56:28 2025 GMT Subject: CN=6898cf3d-f202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:58:b2:f9:12:18:34:85:ee:ba:b4:0c:ee:25: 70:9c:c1:00:31:46:80:0e:f1:11:16:5a:5b:44:44: ab:76:0e:09:26:7a:77:24:6b:97:21:ec:2f:3a:6d: 8d:ca:c5:c4:71:f6:f6:7b:d7:27:29:c5:c5:2a:f6: bc:65:ac:d1:51:55:c8:3a:d9:9c:b0:2e:dd:11:49: c3:83:66:18:98:3e:04:18:2c:61:41:b4:d6:a6:21: 13:ed:39:e0:bb:b4:0a:02:4a:3a:f3:d6:b3:4e:50: 9f:d4:31:2a:bf:fa:54:d2:a0:5e:66:0a:6c:5f:4e: 75:f2:00:e9:97:3a:53:78:cc:86:69:8e:f1:ec:20: a5:06:78:f2:63:08:d5:1f:22:ae:77:46:34:f4:7e: f1:dc:33:b7:cf:18:82:ae:11:44:24:4f:9f:2e:3d: d1:ea:fe:0b:c0:27:85:1a:06:ef:91:2a:c2:7b:77: b7:c4:cf:fc:57:f4:fe:b5:2e:fb:bd:2d:e0:9c:d5: 69:24:2a:cd:e1:df:d9:d7:db:89:7a:2a:ea:7d:b9: 7e:b1:45:1c:0b:a9:a2:d8:d8:1c:68:81:6f:a4:ea: 35:5f:89:02:33:ff:41:25:24:17:01:5a:34:7e:f5: 62:87:32:e0:0d:b0:35:5a:79:10:1e:36:c2:0a:55: 4c:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0E:D2:3D:55:E9:1D:66:97:B6:2A:BF:6B:39:0C:43:8B:1D:B2:1B X509v3 Authority Key Identifier: keyid:93:C4:D7:4D:18:F5:2C:EA:58:52:80:BB:33:12:F3:10:E1:20:C0:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8TXTRj1LOpYUoC7MxLzEOEgwOk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D15/7C685A8295B911E8A688B60EC4F9AE02/k8TXTRj1LOpYUoC7MxLzEOEgwOk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:e6:b7:68:7d:20:6f:00:be:8c:32:03:f9:ec:92:35:13:c7: 60:22:8c:92:95:99:5d:c9:a5:53:54:6d:87:83:b6:43:69:4a: e7:95:69:79:10:e9:33:53:4d:37:93:e6:11:6e:0b:14:cd:3e: 2d:5b:46:cc:ce:d9:95:a6:a2:ac:42:85:a2:47:79:03:c8:5b: 80:f9:2e:f3:53:47:5a:ee:43:8e:90:52:b0:c9:15:8b:54:94: 0c:94:a2:ad:9e:be:e8:c3:bf:76:62:e4:f8:f3:cb:f7:95:47: dc:71:9c:64:1c:3b:20:5b:e7:9a:42:92:26:69:ed:2e:3a:47: 47:8d:bf:c1:16:78:01:a2:47:86:83:17:03:c6:9b:61:80:48: 10:ef:7a:a9:60:f4:26:20:57:ec:69:f2:cc:7c:fe:ef:ef:d7: f4:1f:8b:a4:af:cf:31:eb:31:31:fb:c4:c7:ae:f7:3b:87:c5: 7c:3f:f3:98:91:1a:0d:0f:39:78:4c:59:4a:17:17:02:ed:8f: 8b:f9:a8:e6:15:5f:61:65:c5:6a:4e:c6:2a:b8:20:c1:4c:ba: 85:a4:dd:51:e9:4e:49:20:51:9c:8b:a5:ad:49:ca:58:63:25: ae:38:61:4c:a0:28:73:57:41:22:70:f4:2b:8b:bd:f9:24:6b: c5:c2:e1:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNEMTUxMTAvBgNVBAUTKDkzQzRENzREMThGNTJDRUE1ODUyODBCQjMzMTJGMzEw RTEyMEMwRTkwHhcNMjUwODEwMTY1NjI4WhcNMjUwODE3MTY1NjI4WjAYMRYwFAYD VQQDEw02ODk4Y2YzZC1mMjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo1iy+RIYNIXuurQM7iVwnMEAMUaADvERFlpbRESrdg4JJnp3JGuXIewvOm2N ysXEcfb2e9cnKcXFKva8ZazRUVXIOtmcsC7dEUnDg2YYmD4EGCxhQbTWpiET7Tng u7QKAko689azTlCf1DEqv/pU0qBeZgpsX0518gDplzpTeMyGaY7x7CClBnjyYwjV HyKud0Y09H7x3DO3zxiCrhFEJE+fLj3R6v4LwCeFGgbvkSrCe3e3xM/8V/T+tS77 vS3gnNVpJCrN4d/Z19uJeirqfbl+sUUcC6mi2NgcaIFvpOo1X4kCM/9BJSQXAVo0 fvVihzLgDbA1WnkQHjbCClVMTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDsO0j1V 6R1ml7Yqv2s5DEOLHbIbMB8GA1UdIwQYMBaAFJPE100Y9SzqWFKAuzMS8xDhIMDp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0QxNS83QzY4NUE4Mjk1 QjkxMUU4QTY4OEI2MEVDNEY5QUUwMi9rOFRYVFJqMUxPcFlVb0M3TXhMekVPRWd3 T2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4VFhUUmoxTE9wWVVvQzdNeEx6RU9FZ3dPay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0QxNS83QzY4NUE4Mjk1QjkxMUU4QTY4OEI2MEVDNEY5QUUwMi9rOFRYVFJqMUxP cFlVb0M3TXhMekVPRWd3T2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAI5rdofSBvAL6MMgP57JI1E8dgIoySlZldyaVTVG2Hg7ZDaUrnlWl5 EOkzU003k+YRbgsUzT4tW0bMztmVpqKsQoWiR3kDyFuA+S7zU0da7kOOkFKwyRWL VJQMlKKtnr7ow792YuT488v3lUfccZxkHDsgW+eaQpImae0uOkdHjb/BFngBokeG gxcDxpthgEgQ73qpYPQmIFfsafLMfP7v79f0H4ukr88x6zEx+8THrvc7h8V8P/OY kRoNDzl4TFlKFxcC7Y+L+ajmFV9hZcVqTsYquCDBTLqFpN1R6U5JIFGci6WtScpY YyWuOGFMoChzV0EicPQri735JGvFwuFl -----END CERTIFICATE-----Generated at Sun Aug 10 21:01:42 2025 by rpki-client