$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json) Hash identifier: mA3Np2odh7nWXQOyv0S/ICVPGHzjKyKuAFqKCwHYb2Q= Subject key identifier: 45:79:A6:4A:28:6E:44:EF:16:A2:53:E0:FC:AF:4F:EA:A1:1B:11:6F Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Certificate serial: 2495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft Manifest number: 2475 Signing time: Sun 10 Aug 2025 15:44:59 +0000 Manifest this update: Sun 10 Aug 2025 15:44:58 +0000 Manifest next update: Sun 17 Aug 2025 15:44:58 +0000 Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: 10Mp/VUBkyn4SbEsFWhSaYaCX9nQV2+sWFCsJZWVhGQ=) 2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: +ttwdPCfkA5o4U1d3HtcdyMxofKcodTHs7x31tg/unw=) 3: 3FC484EE710211F0BD347869C4F9AE02.roa (hash: GhF9PvzI5x/9vujTT/xlTVo+qNPcjDRdk9u4YkdwFYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9365 (0x2495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Validity Not Before: Aug 10 15:44:58 2025 GMT Not After : Aug 17 15:44:58 2025 GMT Subject: CN=6898be7b-6c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:a4:26:51:c6:0d:70:74:a4:04:be:52:c0: be:56:dc:dc:67:35:00:aa:0b:8d:43:74:99:4e:aa: 41:4f:15:a2:c9:79:b4:3b:52:06:9f:bf:4d:c5:c2: 75:67:8c:5c:1a:e7:92:5f:50:0e:ff:73:b4:c6:bf: d8:07:28:50:39:a3:3b:59:a0:ae:53:dd:0d:6f:68: 67:4d:dd:ab:a7:db:7c:2d:4d:23:a0:c2:e4:19:9f: 85:7c:87:0b:52:77:81:48:bc:a8:30:6a:56:91:4c: 3f:42:d6:e2:c4:36:c4:db:1a:0f:be:e3:32:ec:79: 67:72:83:6e:17:15:4d:c5:00:3c:d9:cd:19:9f:ba: 0e:30:81:f0:dc:bb:a1:da:c7:1f:23:b8:3b:41:9c: e1:1b:bf:e5:ec:bd:99:4b:53:e6:fe:47:5a:41:e4: 63:41:dd:b9:1d:ae:69:5e:2d:98:28:68:2b:ff:0f: ae:2f:93:5f:bc:63:90:e9:5e:9d:79:40:aa:dc:a4: 6f:c6:73:91:0b:2c:ee:99:e4:be:d8:66:50:2b:e3: fd:6e:77:bc:6e:b4:ee:21:c2:22:45:7f:5f:6a:fb: 9a:f7:f9:02:97:61:c3:d6:63:b7:b3:f0:05:ad:5f: c9:7e:c3:52:ec:61:65:df:05:00:54:06:4c:c2:ff: 4c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:79:A6:4A:28:6E:44:EF:16:A2:53:E0:FC:AF:4F:EA:A1:1B:11:6F X509v3 Authority Key Identifier: keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:37:fd:50:7b:68:13:18:8f:9d:f7:dc:91:81:5d:49:98:dd: e2:9d:d9:42:ab:3f:72:64:01:83:28:de:26:c4:d9:82:0b:3d: 7d:f0:b8:5b:11:bb:44:70:08:67:4a:44:2d:b6:00:04:e4:91: 25:77:d6:5a:18:92:7d:0e:9b:85:56:6c:c0:d2:3c:9e:e2:82: f2:92:aa:36:55:f2:e1:2f:61:73:fb:15:72:0a:cc:22:07:9b: a7:97:de:bc:2f:f8:dd:e7:0e:44:40:41:4b:d0:27:6e:12:74: 4d:d8:dd:41:57:31:c5:16:2b:f2:95:71:0f:4d:db:75:1c:0d: 07:27:7a:c7:9c:4b:36:f4:ed:64:fb:f4:5c:60:7a:aa:8e:8b: 98:29:db:ba:6e:82:ca:d1:98:7a:58:c2:ce:01:e0:ab:a4:b7: 21:81:c9:dd:35:8e:bc:9f:bc:74:ee:1a:32:7c:af:a8:8a:91: fb:cd:bf:07:ef:d8:0e:43:92:36:6b:89:23:0f:75:13:71:dd: 22:09:5c:d7:28:fc:5c:fc:4a:9b:3b:5b:7d:64:e7:af:29:5e: 38:d5:0b:c6:a7:ed:ce:11:fb:e8:d3:58:a9:fb:83:46:7d:eb: eb:7b:d0:d2:e5:74:5d:50:67:4e:1c:fb:45:8c:1d:54:d2:bc: bd:ef:f3:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy ODM1MkFFMjgwHhcNMjUwODEwMTU0NDU4WhcNMjUwODE3MTU0NDU4WjAYMRYwFAYD VQQDEw02ODk4YmU3Yi02YzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TikJlHGDXB0pAS+UsC+VtzcZzUAqguNQ3SZTqpBTxWiyXm0O1IGn79NxcJ1 Z4xcGueSX1AO/3O0xr/YByhQOaM7WaCuU90Nb2hnTd2rp9t8LU0joMLkGZ+FfIcL UneBSLyoMGpWkUw/QtbixDbE2xoPvuMy7HlncoNuFxVNxQA82c0Zn7oOMIHw3Luh 2scfI7g7QZzhG7/l7L2ZS1Pm/kdaQeRjQd25Ha5pXi2YKGgr/w+uL5NfvGOQ6V6d eUCq3KRvxnORCyzumeS+2GZQK+P9bne8brTuIcIiRX9favua9/kCl2HD1mO3s/AF rV/JfsNS7GFl3wUAVAZMwv9M3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEV5pkoo bkTvFqJT4PyvT+qhGxFvMB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0 OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk0Qi81REU5MjFGQzU0OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1 NEN6STJSa3B0dFVvTlNyaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdN/1Qe2gTGI+d99yRgV1JmN3indlCqz9yZAGDKN4mxNmCCz198Lhb EbtEcAhnSkQttgAE5JEld9ZaGJJ9DpuFVmzA0jye4oLykqo2VfLhL2Fz+xVyCswi B5unl968L/jd5w5EQEFL0CduEnRN2N1BVzHFFivylXEPTdt1HA0HJ3rHnEs29O1k +/RcYHqqjouYKdu6boLK0Zh6WMLOAeCrpLchgcndNY68n7x07hoyfK+oipH7zb8H 79gOQ5I2a4kjD3UTcd0iCVzXKPxc/EqbO1t9ZOevKV441QvGp+3OEfvo01ip+4NG fevre9DS5XRdUGdOHPtFjB1U0ry97/MW -----END CERTIFICATE-----Generated at Mon Aug 11 01:49:32 2025 by rpki-client