$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft File: 8P2iSILGdaPGAdv6XAJjwjppKiI.mft (raw, json) Hash identifier: qqy6k5rcM2MJjF4slOVTz3y+645e1GOk6JRgN76EQWg= Subject key identifier: D3:C2:52:5B:1E:E5:CA:67:39:8A:E8:78:D9:5D:67:1A:E2:98:09:BE Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 Certificate issuer: /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Certificate serial: 0A28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft Manifest number: 0A22 Signing time: Mon 04 Aug 2025 20:03:16 +0000 Manifest this update: Mon 04 Aug 2025 20:03:15 +0000 Manifest next update: Mon 11 Aug 2025 20:03:15 +0000 Files and hashes: 1: 8P2iSILGdaPGAdv6XAJjwjppKiI.crl (hash: 6E0276sjtiWiLh269yOn/W+jgjrkA8fcxPla8qovDwA=) 2: 8880996075DC11EA84E0A94CC4F9AE02.roa (hash: ssJ1fisDF6kXo2lAemHozKuEtDu93oVtWqiWY4t+lWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2600 (0xa28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F18DE, serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Validity Not Before: Aug 4 20:03:15 2025 GMT Not After : Aug 11 20:03:15 2025 GMT Subject: CN=68911204-063a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:7f:82:b3:12:f8:6a:0a:2f:90:60:55:2d: b5:ed:95:19:ed:3f:ab:9d:3d:46:94:00:e0:64:94: 09:62:ef:2f:bd:a4:14:53:7e:7e:36:2b:59:97:3b: 13:96:00:f5:dd:e1:c9:12:fa:a9:bd:00:48:b0:4d: df:81:fd:1c:a0:75:42:e5:84:e1:2d:ba:7f:57:6d: 94:51:58:fe:31:7d:2b:c8:4d:af:23:bc:e5:47:79: 4d:7b:a6:40:84:d7:03:ae:3c:14:c5:7a:7b:71:c5: 59:69:cc:9f:f3:19:77:c9:6c:53:da:6c:ae:df:d1: f7:1b:57:9e:de:c3:32:4f:5a:86:75:bc:5d:7d:00: b4:87:95:4d:34:43:a9:86:d5:ff:1c:07:02:35:fa: 81:e7:29:d0:0d:7f:ca:39:80:f3:f5:22:ca:29:de: 66:9a:9b:27:2e:e9:a2:26:c1:1c:9e:83:4e:cd:b2: 33:31:c1:43:ab:3a:24:bf:13:04:b2:51:65:b8:3b: 95:81:f7:b2:e0:27:49:3d:03:dd:82:cd:e0:0d:d2: 0f:06:08:a8:fd:ac:00:25:5c:f5:02:24:70:39:31: a7:70:42:38:14:da:7b:34:2d:31:2b:99:8a:e4:1d: a9:bb:63:8f:73:2b:6b:e3:63:43:d9:fb:f6:81:fb: 47:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C2:52:5B:1E:E5:CA:67:39:8A:E8:78:D9:5D:67:1A:E2:98:09:BE X509v3 Authority Key Identifier: keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:f4:a2:94:19:0a:c5:36:6f:38:11:ce:11:63:c1:b6:6a:02: d1:e2:50:c3:f6:de:c5:22:27:9f:4e:b8:b5:33:c6:bf:21:9a: 4c:34:a1:65:b1:ee:be:fe:90:a1:55:92:c3:ed:5e:ab:2a:12: 37:e4:f2:67:e1:d2:54:98:5b:73:00:10:12:7f:a9:24:26:4c: b6:fd:16:5a:27:50:80:8c:62:90:81:dd:66:d1:fb:7d:f3:f2: fb:4f:22:57:41:3a:3e:28:fe:6a:ec:ff:0b:fc:9c:af:9b:e5: 4e:76:6e:bf:45:58:c0:f5:1d:e2:0b:d6:cf:3b:8e:a3:11:b6: 3c:48:4a:5f:d3:1b:c5:d1:16:7e:5e:3a:9c:57:5a:34:ee:6c: e1:de:2c:15:11:80:9f:02:f0:0c:6a:d8:f6:f7:d1:51:c2:0e: 96:7a:26:18:ed:97:76:e0:5a:72:c6:b1:9d:c8:02:21:fd:46: ed:b0:c5:ba:16:0c:37:9d:43:54:2c:e2:f4:ef:48:36:d0:01: 2d:c0:80:d4:62:79:47:4e:f0:c0:8d:84:7d:5c:a7:e8:7d:8c: 5a:52:11:d3:48:f2:80:82:da:1e:10:88:9d:2d:cb:03:f3:12: f2:82:74:dd:d1:c3:c7:57:13:3a:0c:c1:a4:5a:c5:ca:04:84: 8a:bd:da:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE4REUxMTAvBgNVBAUTKEYwRkRBMjQ4ODJDNjc1QTNDNjAxREJGQTVDMDI2M0My M0E2OTJBMjIwHhcNMjUwODA0MjAwMzE1WhcNMjUwODExMjAwMzE1WjAYMRYwFAYD VQQDEw02ODkxMTIwNC0wNjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArFB/grMS+GoKL5BgVS217ZUZ7T+rnT1GlADgZJQJYu8vvaQUU35+NitZlzsT lgD13eHJEvqpvQBIsE3fgf0coHVC5YThLbp/V22UUVj+MX0ryE2vI7zlR3lNe6ZA hNcDrjwUxXp7ccVZacyf8xl3yWxT2myu39H3G1ee3sMyT1qGdbxdfQC0h5VNNEOp htX/HAcCNfqB5ynQDX/KOYDz9SLKKd5mmpsnLumiJsEcnoNOzbIzMcFDqzokvxME slFluDuVgfey4CdJPQPdgs3gDdIPBgio/awAJVz1AiRwOTGncEI4FNp7NC0xK5mK 5B2pu2OPcytr42ND2fv2gftH2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNPCUlse 5cpnOYroeNldZxrimAm+MB8GA1UdIwQYMBaAFPD9okiCxnWjxgHb+lwCY8I6aSoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMThERS9FRUExM0M5Qzc1 REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2RhUEdBZHY2WEFKandqcHBL aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhQMmlTSUxHZGFQR0FkdjZYQUpqd2pwcEtpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MThERS9FRUExM0M5Qzc1REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2Rh UEdBZHY2WEFKandqcHBLaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp9KKUGQrFNm84Ec4RY8G2agLR4lDD9t7FIiefTri1M8a/IZpMNKFl se6+/pChVZLD7V6rKhI35PJn4dJUmFtzABASf6kkJky2/RZaJ1CAjGKQgd1m0ft9 8/L7TyJXQTo+KP5q7P8L/Jyvm+VOdm6/RVjA9R3iC9bPO46jEbY8SEpf0xvF0RZ+ XjqcV1o07mzh3iwVEYCfAvAMatj299FRwg6WeiYY7Zd24FpyxrGdyAIh/UbtsMW6 Fgw3nUNULOL070g20AEtwIDUYnlHTvDAjYR9XKfofYxaUhHTSPKAgtoeEIidLcsD 8xLygnTd0cPHVxM6DMGkWsXKBISKvdqD -----END CERTIFICATE-----Generated at Wed Aug 6 06:00:59 2025 by rpki-client