$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: 1T3JAGiU3pMLOxniFHid9CPl0nJQ51QnAALLbRo0g3M= Subject key identifier: F2:DF:60:A2:29:2C:CF:C4:3C:82:D6:7B:43:E4:F0:EA:ED:FA:29:1F Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 0185 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 0182 Signing time: Thu 07 Aug 2025 04:05:15 +0000 Manifest this update: Thu 07 Aug 2025 04:05:15 +0000 Manifest next update: Thu 14 Aug 2025 04:05:15 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: Di0dRXAx7W4lnp9QW1cOOuOKV2tMpKLztTJzIAbrt7E=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: JUSU1VmCrt2YGTrN+Q0jV8oiBs7Aumf+6ve9iuHLrvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 04:05:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: Aug 7 04:05:15 2025 GMT Not After : Aug 14 04:05:15 2025 GMT Subject: CN=689425fb-559c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c8:18:12:23:ac:7e:17:87:8c:36:0e:e0:65: 47:ee:b9:ee:ba:13:01:db:73:a4:d0:b3:d6:c0:59: 02:b9:8a:04:73:82:f9:6e:08:4f:19:87:c1:17:37: 49:cb:52:00:01:f8:c8:45:21:0e:08:24:ea:a8:37: 4e:ee:db:c3:2e:6e:a4:2c:a4:e9:df:50:8c:fa:b5: dd:4c:5e:e2:4e:5c:df:25:40:89:40:aa:8e:ae:31: b5:b3:12:67:b0:3f:6d:68:b1:d8:69:d8:13:19:3b: 8e:22:fa:38:ea:2e:73:ec:02:4c:07:96:cc:9f:c7: 0f:32:27:37:47:e4:30:4c:77:af:9d:a2:5a:57:9b: ce:3e:11:4f:76:96:39:b9:4e:6a:05:62:60:bd:fa: 19:e4:91:ab:31:e7:5d:38:ec:10:8c:88:ea:96:47: 8c:e2:fe:7e:9c:4f:b8:3a:0f:69:b2:e0:aa:f8:f3: 88:8a:aa:b2:d7:a7:b1:fd:ae:d8:35:b1:4b:d8:2c: c9:56:c3:77:9f:64:87:9a:e6:69:fd:17:de:d4:2c: 0b:78:79:f0:c4:82:27:80:f1:ff:00:fd:45:a5:b2: 99:ff:2d:42:4d:f2:0b:05:98:69:43:c1:7d:2c:51: db:af:94:f5:20:9b:b2:dc:91:bb:66:54:3f:6a:82: 9c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DF:60:A2:29:2C:CF:C4:3C:82:D6:7B:43:E4:F0:EA:ED:FA:29:1F X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c0:5d:f4:87:0a:a9:64:1a:bd:94:61:8b:9c:70:74:74:72: 41:50:d5:96:ae:8b:36:28:4c:0f:33:78:41:93:50:e1:5b:4d: 12:4f:e4:59:16:af:5a:62:1b:99:4b:34:89:f6:c1:dd:7b:9e: 68:27:97:88:d3:87:da:16:e1:aa:cb:ec:ff:18:f0:23:ad:90: 5c:c4:99:25:91:13:04:ec:6a:26:9f:30:7b:9e:71:16:59:6c: bf:94:3b:b6:40:66:a1:45:73:a9:31:e3:8b:46:44:32:b8:38: 07:47:da:34:a4:1e:51:c4:00:60:d6:6e:52:7f:12:bb:93:9a: 7d:85:17:8a:ee:76:6d:0e:f8:b3:18:09:19:10:d6:28:f6:23: 39:4e:7e:6d:72:3a:fa:8c:02:49:3f:96:47:1c:75:29:dd:a7: 0a:15:33:bc:c0:ff:2b:e5:91:05:73:c4:f3:cf:61:8f:9a:9e: 71:2c:78:2d:da:b3:9a:3d:1f:ae:df:84:ef:95:d9:b6:88:1e: 8c:e7:4f:77:76:52:c6:2c:39:59:d3:7a:89:e2:f5:ae:b7:03: b7:bb:1e:71:90:8d:18:cd:25:57:af:c2:ee:f0:23:c0:11:99: 90:09:e5:a3:e0:96:90:84:5e:b3:60:ff:47:d6:b2:8e:85:bf: 5f:3a:d9:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjUwODA3MDQwNTE1WhcNMjUwODE0MDQwNTE1WjAYMRYwFAYD VQQDEw02ODk0MjVmYi01NTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8sgYEiOsfheHjDYO4GVH7rnuuhMB23Ok0LPWwFkCuYoEc4L5bghPGYfBFzdJ y1IAAfjIRSEOCCTqqDdO7tvDLm6kLKTp31CM+rXdTF7iTlzfJUCJQKqOrjG1sxJn sD9taLHYadgTGTuOIvo46i5z7AJMB5bMn8cPMic3R+QwTHevnaJaV5vOPhFPdpY5 uU5qBWJgvfoZ5JGrMeddOOwQjIjqlkeM4v5+nE+4Og9psuCq+POIiqqy16ex/a7Y NbFL2CzJVsN3n2SHmuZp/Rfe1CwLeHnwxIIngPH/AP1FpbKZ/y1CTfILBZhpQ8F9 LFHbr5T1IJuy3JG7ZlQ/aoKcfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLfYKIp LM/EPILWe0Pk8Ort+ikfMB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/wF30hwqpZBq9lGGLnHB0dHJBUNWWros2KEwPM3hBk1DhW00ST+RZ Fq9aYhuZSzSJ9sHde55oJ5eI04faFuGqy+z/GPAjrZBcxJklkRME7GomnzB7nnEW WWy/lDu2QGahRXOpMeOLRkQyuDgHR9o0pB5RxABg1m5SfxK7k5p9hReK7nZtDviz GAkZENYo9iM5Tn5tcjr6jAJJP5ZHHHUp3acKFTO8wP8r5ZEFc8Tzz2GPmp5xLHgt 2rOaPR+u34Tvldm2iB6M5093dlLGLDlZ03qJ4vWutwO3ux5xkI0YzSVXr8Lu8CPA EZmQCeWj4JaQhF6zYP9H1rKOhb9fOtnj -----END CERTIFICATE-----Generated at Sat Aug 9 01:03:12 2025 by rpki-client