$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft File: 8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json) Hash identifier: nXb7yO8wlOdJdOhoiKW1g0Qeat2GefaQp5GHIotSB+A= Subject key identifier: F7:C2:9C:F0:39:2B:6C:9B:03:88:3F:EE:80:A1:FE:D2:AB:3E:C3:2D Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 Certificate issuer: /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691 Certificate serial: 320F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft Manifest number: 320F Signing time: Sun 10 Aug 2025 15:22:38 +0000 Manifest this update: Sun 10 Aug 2025 15:22:37 +0000 Manifest next update: Sun 17 Aug 2025 15:22:37 +0000 Files and hashes: 1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: clIQ1HGJINAjvjtrgje+AkR8LkFFD8Gxx4dl8bputFE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12815 (0x320f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5AAA, serialNumber=F186830045AE5486E90973437DA9D207A5668691 Validity Not Before: Aug 10 15:22:37 2025 GMT Not After : Aug 17 15:22:37 2025 GMT Subject: CN=6898b93d-8729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:22:e1:55:87:9b:c1:e4:90:cb:da:76:87:e9: 09:cc:99:10:e4:8b:52:60:42:6f:de:fd:48:e5:b3: 88:70:6d:85:08:80:24:8b:56:09:e7:ff:f0:84:e2: 2a:db:c9:e0:30:26:a0:59:63:f3:b0:36:dd:d1:3b: 65:f8:2b:a1:96:29:cf:d5:b1:95:44:f7:89:3f:38: 9a:93:d1:cd:ea:c5:41:be:db:40:4b:96:25:26:bd: 45:ec:70:59:e1:dd:4d:e9:14:0e:a5:a0:56:78:de: 29:05:26:b9:02:a9:ae:86:41:7b:f5:5d:c6:f7:b7: e4:8e:4d:d9:e0:a6:74:5d:65:a7:d8:91:f5:c2:1c: 9b:10:b3:6b:ae:e1:8b:bd:e4:4b:01:3a:55:99:19: 2d:40:56:c1:e9:3a:05:30:35:e8:4f:76:8f:e5:aa: a2:4d:db:57:13:71:e5:31:fc:47:fa:bf:05:f7:d1: 1e:43:37:25:46:9b:5b:6a:9d:ff:26:8a:76:c2:17: ef:f0:92:7f:e4:b9:40:32:62:ed:b6:76:3c:0e:a3: 24:14:b4:07:ff:42:80:bc:80:7c:2c:f5:fc:bc:9a: 2e:bf:9b:2c:5c:72:33:89:6e:7a:88:94:15:6d:42: 2b:58:d4:a4:34:3d:08:e4:3f:49:8b:79:9a:fb:1a: 02:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C2:9C:F0:39:2B:6C:9B:03:88:3F:EE:80:A1:FE:D2:AB:3E:C3:2D X509v3 Authority Key Identifier: keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d0:49:37:e6:6c:6a:f8:72:f9:03:31:09:a4:e4:2a:38:6a: 76:21:89:82:1a:92:95:fb:61:93:fe:27:e5:e4:15:fa:2c:47: ab:c2:57:f2:8c:11:66:5c:ee:24:82:69:29:8c:e0:ff:e4:09: 5a:f1:4c:5a:6e:82:2b:09:32:d1:f2:f4:5a:b8:d3:f9:6c:86: 7a:bc:58:5b:b2:8a:88:d2:98:0c:28:11:9a:71:c8:9d:5e:82: c3:a7:fd:e9:aa:9b:b2:bf:6a:a0:e9:bb:ac:18:7d:bd:2c:f4: 38:41:f9:b2:fa:81:52:49:fd:b5:88:c3:3a:bb:b5:30:a1:cc: ca:65:ca:50:22:ef:83:02:4d:cb:c1:75:e3:23:04:c4:e5:e6: 0b:ac:d2:be:5c:bc:c3:7f:fa:98:5f:68:68:e4:33:0d:0b:df: fe:87:20:58:f4:49:2f:72:a4:3b:f5:82:6e:1f:ce:92:50:fb: 2c:f7:26:f7:1c:97:d6:4b:bd:2b:26:af:7d:43:64:5b:15:6d: 5d:41:92:a1:47:17:2f:72:ec:b8:bf:1d:d6:d7:64:8c:6b:e0: 54:b2:b3:9e:b9:9d:a6:9d:26:69:47:e2:c1:42:5e:1a:e6:0e: 76:63:df:4c:9f:14:18:23:51:f1:db:bf:80:70:07:06:f6:3f: ef:13:37:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVBQUExMTAvBgNVBAUTKEYxODY4MzAwNDVBRTU0ODZFOTA5NzM0MzdEQTlEMjA3 QTU2Njg2OTEwHhcNMjUwODEwMTUyMjM3WhcNMjUwODE3MTUyMjM3WjAYMRYwFAYD VQQDEw02ODk4YjkzZC04NzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziLhVYebweSQy9p2h+kJzJkQ5ItSYEJv3v1I5bOIcG2FCIAki1YJ5//whOIq 28ngMCagWWPzsDbd0Ttl+CuhlinP1bGVRPeJPziak9HN6sVBvttAS5YlJr1F7HBZ 4d1N6RQOpaBWeN4pBSa5AqmuhkF79V3G97fkjk3Z4KZ0XWWn2JH1whybELNrruGL veRLATpVmRktQFbB6ToFMDXoT3aP5aqiTdtXE3HlMfxH+r8F99EeQzclRptbap3/ Jop2whfv8JJ/5LlAMmLttnY8DqMkFLQH/0KAvIB8LPX8vJouv5ssXHIziW56iJQV bUIrWNSkND0I5D9Ji3ma+xoCnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfCnPA5 K2ybA4g/7oCh/tKrPsMtMB8GA1UdIwQYMBaAFPGGgwBFrlSG6QlzQ32p0gelZoaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBQS84QjI4MjQ1MjlG RjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJYnBDWE5EZmFuU0I2Vm1o cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZYURBRVd1VklicENYTkRmYW5TQjZWbWhwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUFBQS84QjI4MjQ1MjlGRjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJ YnBDWE5EZmFuU0I2Vm1ocEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb0Ek35mxq+HL5AzEJpOQqOGp2IYmCGpKV+2GT/ifl5BX6LEerwlfy jBFmXO4kgmkpjOD/5Ala8UxaboIrCTLR8vRauNP5bIZ6vFhbsoqI0pgMKBGaccid XoLDp/3pqpuyv2qg6busGH29LPQ4Qfmy+oFSSf21iMM6u7UwoczKZcpQIu+DAk3L wXXjIwTE5eYLrNK+XLzDf/qYX2ho5DMNC9/+hyBY9EkvcqQ79YJuH86SUPss9yb3 HJfWS70rJq99Q2RbFW1dQZKhRxcvcuy4vx3W12SMa+BUsrOeuZ2mnSZpR+LBQl4a 5g52Y99MnxQYI1Hx27+AcAcG9j/vEzfm -----END CERTIFICATE-----Generated at Mon Aug 11 04:13:58 2025 by rpki-client