$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft File: 8U1sPT3myxB096LpBdn4VFEEWmU.mft (raw, json) Hash identifier: SN48KCzt54Z4Ul9TVhUkiY0oE55kjMJ83ai1J3hHja8= Subject key identifier: F0:15:11:91:25:5B:8A:31:96:F4:04:8F:7D:36:86:1A:41:8B:D1:40 Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 Certificate issuer: /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Certificate serial: 048A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft Manifest number: 0486 Signing time: Sat 09 Aug 2025 00:31:45 +0000 Manifest this update: Sat 09 Aug 2025 00:31:44 +0000 Manifest next update: Sat 16 Aug 2025 00:31:44 +0000 Files and hashes: 1: 8U1sPT3myxB096LpBdn4VFEEWmU.crl (hash: j9YnHrvunVAft0P8rKJkcZDYTXwf7z65gb+OX40gDLU=) 2: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (hash: F010fbR+bi9xTUBl3AUBVvzkCJVPeJDxWa/Ivtr1ZK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1162 (0x48a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2089, serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Validity Not Before: Aug 9 00:31:44 2025 GMT Not After : Aug 16 00:31:44 2025 GMT Subject: CN=689696f1-d747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:21:41:28:51:ed:0e:0e:a3:0d:a7:b6:2f:0a: b4:eb:52:07:d0:88:3a:4e:9a:1e:b8:49:c6:f9:e9: aa:58:80:c9:b3:f7:eb:bd:9a:11:86:55:52:d6:90: dd:98:03:0a:c4:17:56:15:2e:c4:7e:a2:90:75:a5: 40:ff:bf:10:be:1f:77:77:5b:a1:a7:01:16:cb:53: fb:e5:7f:61:90:6a:11:45:04:0a:a1:e9:bb:ce:26: f7:56:23:35:78:80:4d:01:b8:79:6e:37:40:65:4f: 8c:b2:e3:24:08:39:86:2f:6e:1b:43:55:8c:80:9d: 00:e8:21:b9:8a:8c:de:38:56:dc:a6:1f:00:28:ab: 3a:f5:7a:94:03:12:22:fa:7a:c3:bd:c2:93:44:36: e0:55:ae:6e:6d:88:d9:2d:fb:91:f4:27:ea:3f:76: 42:df:1e:d8:c7:35:ea:5c:a1:4a:16:6c:71:10:11: 03:bc:55:5f:62:a4:23:40:3f:54:ac:e1:1c:db:4d: f6:32:4a:35:2a:88:34:c7:a3:01:e7:c1:7b:98:3e: 2e:2f:c6:82:7e:9f:99:11:03:f4:14:96:73:df:f6: 8f:43:60:26:44:10:0a:11:14:f8:a6:d7:bf:8e:e6: a5:59:4e:b9:c5:68:f7:38:21:ba:ae:80:5d:dd:a9: ff:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:15:11:91:25:5B:8A:31:96:F4:04:8F:7D:36:86:1A:41:8B:D1:40 X509v3 Authority Key Identifier: keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:48:7c:49:4c:86:eb:4f:82:c3:bd:af:7f:14:f6:08:f9:fb: 2a:07:0b:15:00:b0:18:a3:0a:56:87:8a:ae:2e:8e:fd:db:ae: e3:66:1f:0f:71:5a:15:40:2e:e7:25:ff:b2:46:e4:c7:a5:e1: a9:91:18:84:f2:78:66:4a:3b:96:d6:49:9b:43:ed:62:19:ed: c8:ae:b7:d7:4e:05:49:ba:f6:c6:e9:54:7c:ac:dc:df:82:5c: 5e:90:d8:be:03:89:75:e6:fb:15:e1:a9:9f:bd:34:91:11:79: 88:47:82:3c:ca:52:f7:84:f7:26:aa:1b:25:96:3d:7a:24:f8: f7:9e:4f:91:7f:b2:6e:5a:85:f4:b8:33:cd:2f:9f:3a:5e:21: 7b:ae:90:b9:92:4f:d0:41:ed:f8:ab:3f:55:32:62:23:50:c5: 7a:09:71:3c:21:3d:9d:5a:46:4c:44:a0:df:d1:72:3e:20:bc: d5:74:78:b0:ed:e0:13:37:d0:6e:dd:15:b9:14:fe:f8:0f:99: a6:5c:e7:ef:f2:03:30:e2:a1:ad:ec:d3:5f:9d:b8:0a:8e:ff: 73:c3:22:55:2a:68:d5:56:dd:47:bc:ac:ed:f3:09:fa:57:de: dd:84:08:38:65:96:fd:90:72:6b:29:7c:af:d7:32:f8:1d:23: ea:3b:60:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwODkxMTAvBgNVBAUTKEYxNEQ2QzNEM0RFNkNCMTA3NEY3QTJFOTA1RDlGODU0 NTEwNDVBNjUwHhcNMjUwODA5MDAzMTQ0WhcNMjUwODE2MDAzMTQ0WjAYMRYwFAYD VQQDEw02ODk2OTZmMS1kNzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9yFBKFHtDg6jDae2Lwq061IH0Ig6TpoeuEnG+emqWIDJs/frvZoRhlVS1pDd mAMKxBdWFS7EfqKQdaVA/78Qvh93d1uhpwEWy1P75X9hkGoRRQQKoem7zib3ViM1 eIBNAbh5bjdAZU+MsuMkCDmGL24bQ1WMgJ0A6CG5iozeOFbcph8AKKs69XqUAxIi +nrDvcKTRDbgVa5ubYjZLfuR9CfqP3ZC3x7YxzXqXKFKFmxxEBEDvFVfYqQjQD9U rOEc2032Mko1Kog0x6MB58F7mD4uL8aCfp+ZEQP0FJZz3/aPQ2AmRBAKERT4pte/ jualWU65xWj3OCG6roBd3an/cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPAVEZEl W4oxlvQEj302hhpBi9FAMB8GA1UdIwQYMBaAFPFNbD095ssQdPei6QXZ+FRRBFpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA4OS9FMUM0QTQxRTRD RTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4QjA5NkxwQmRuNFZGRUVX bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhVMXNQVDNteXhCMDk2THBCZG40VkZFRVdtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA4OS9FMUM0QTQxRTRDRTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4 QjA5NkxwQmRuNFZGRUVXbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuSHxJTIbrT4LDva9/FPYI+fsqBwsVALAYowpWh4quLo79267jZh8P cVoVQC7nJf+yRuTHpeGpkRiE8nhmSjuW1kmbQ+1iGe3IrrfXTgVJuvbG6VR8rNzf glxekNi+A4l15vsV4amfvTSREXmIR4I8ylL3hPcmqhsllj16JPj3nk+Rf7JuWoX0 uDPNL586XiF7rpC5kk/QQe34qz9VMmIjUMV6CXE8IT2dWkZMRKDf0XI+ILzVdHiw 7eATN9Bu3RW5FP74D5mmXOfv8gMw4qGt7NNfnbgKjv9zwyJVKmjVVt1HvKzt8wn6 V97dhAg4ZZb9kHJrKXyv1zL4HSPqO2Cc -----END CERTIFICATE-----Generated at Sun Aug 10 05:45:00 2025 by rpki-client