$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft File: 8eArOUb---b0ZPQ0jvIVX2HQehs.mft (raw, json) Hash identifier: vxWBhVw4qbsVJorrKaz+OXePU+JXmm9+ord2uZAtrdw= Subject key identifier: E7:B8:58:C0:55:CF:64:10:76:D9:70:4E:04:D2:AA:1F:52:EB:9D:26 Authority key identifier: F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B Certificate issuer: /CN=A91FF4FC/serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Certificate serial: 0E05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft Manifest number: 0DFF Signing time: Fri 08 Aug 2025 18:03:50 +0000 Manifest this update: Fri 08 Aug 2025 18:03:49 +0000 Manifest next update: Fri 15 Aug 2025 18:03:49 +0000 Files and hashes: 1: 8eArOUb---b0ZPQ0jvIVX2HQehs.crl (hash: H7MNknAJkrt8CbD76YsuM+4CCJC8EBnARGPTBp78U08=) 2: A280C1FCA06D11EB92FB3739C4F9AE02.roa (hash: 0IBVwDZ7i+J4nVvUTeF7Wzqm6YjeaulpyuMa4quZjWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3589 (0xe05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF4FC, serialNumber=F1E02B3946FEFBE6F464F4348EF2155F61D07A1B Validity Not Before: Aug 8 18:03:49 2025 GMT Not After : Aug 15 18:03:49 2025 GMT Subject: CN=68963c05-b95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:e1:c7:41:e8:00:47:0d:5e:56:2f:d5:a9: e6:f8:ba:85:a9:18:91:70:c4:03:e2:a5:68:0f:8e: 2a:5a:c2:36:c4:4a:5f:82:c3:51:c9:23:e2:36:34: d9:b1:d5:5b:f8:67:db:a0:07:be:fe:ad:ef:3a:a9: bc:02:0a:3d:d4:75:79:df:4f:d6:84:81:8b:5f:7d: b5:e7:24:06:c5:d5:03:95:05:b9:bf:81:f6:0b:a3: ae:4a:05:8d:06:4b:91:16:9c:4b:c3:68:c2:3d:3f: 75:3a:b5:c5:b9:c6:53:e5:7e:50:ff:9c:a1:52:da: 87:56:37:41:8b:53:ca:fb:a9:30:5e:f9:fb:21:ab: b3:dd:9e:d0:d6:0f:3b:38:30:13:38:2d:70:08:ca: 70:9f:a6:ac:b9:39:39:cf:0f:b3:b0:82:a8:2f:ac: d6:c4:af:2c:a8:11:9d:34:a4:dc:6a:0a:dd:fe:86: 95:d2:c9:11:1a:84:09:93:54:94:7d:e8:49:f3:14: 27:a0:d7:82:11:b2:dc:88:98:64:bd:67:35:e4:6b: ee:cc:a2:aa:e9:91:3a:a4:07:6a:c3:92:7e:3a:f5: fb:aa:a0:0c:ef:4d:44:27:6a:5a:f8:61:20:0d:49: 93:75:7f:29:49:79:6a:fc:ea:97:7d:f2:8a:6a:db: 74:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B8:58:C0:55:CF:64:10:76:D9:70:4E:04:D2:AA:1F:52:EB:9D:26 X509v3 Authority Key Identifier: keyid:F1:E0:2B:39:46:FE:FB:E6:F4:64:F4:34:8E:F2:15:5F:61:D0:7A:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8eArOUb---b0ZPQ0jvIVX2HQehs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF4FC/3B634BBEB44411E986713D1DC4F9AE02/8eArOUb---b0ZPQ0jvIVX2HQehs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:d5:68:14:6d:15:5c:e4:3e:18:23:23:23:5d:35:34:d4:c8: fd:b4:47:bd:41:cd:e1:73:6a:ca:da:17:c9:ac:9c:bf:86:28: b3:08:61:3b:3c:09:07:62:63:aa:70:8e:d0:47:89:d2:db:b0: 08:1b:e6:08:ae:d4:2c:1c:0f:c9:68:1e:7a:8f:8f:e8:0f:84: b3:53:e8:8b:8b:aa:1e:77:c8:b2:20:77:17:38:23:d6:4b:38: 0d:de:0c:4c:db:23:1b:f3:8a:ba:cc:97:da:91:7b:a5:25:0d: e4:89:a5:a1:14:6c:84:e6:04:f0:d3:c3:3a:0c:8c:15:99:d8: 15:22:b2:d7:77:16:b7:89:f7:01:55:29:0a:4f:47:b4:71:cd: 36:0f:e9:ce:00:70:0e:fa:a6:63:64:f1:4e:60:c5:ad:ae:9c: 79:14:32:32:c7:6b:a9:15:24:13:1f:9f:7e:c7:d5:d6:28:25: 3e:47:71:5d:de:1d:9f:33:a1:47:25:19:08:ed:f8:8e:79:f3: 21:98:4c:38:02:c3:8d:ef:fa:2f:ff:f8:f3:02:8d:fc:15:30: a3:07:41:8f:76:c8:7b:91:c0:ae:96:c8:84:8c:f5:07:8e:3e: b9:a2:7d:0c:23:3d:4f:fc:b5:e3:4b:1b:29:56:6a:a0:f7:f6: d9:91:97:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY0RkMxMTAvBgNVBAUTKEYxRTAyQjM5NDZGRUZCRTZGNDY0RjQzNDhFRjIxNTVG NjFEMDdBMUIwHhcNMjUwODA4MTgwMzQ5WhcNMjUwODE1MTgwMzQ5WjAYMRYwFAYD VQQDEw02ODk2M2MwNS1iOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzk/hx0HoAEcNXlYv1anm+LqFqRiRcMQD4qVoD44qWsI2xEpfgsNRySPiNjTZ sdVb+GfboAe+/q3vOqm8Ago91HV530/WhIGLX3215yQGxdUDlQW5v4H2C6OuSgWN BkuRFpxLw2jCPT91OrXFucZT5X5Q/5yhUtqHVjdBi1PK+6kwXvn7Iauz3Z7Q1g87 ODATOC1wCMpwn6asuTk5zw+zsIKoL6zWxK8sqBGdNKTcagrd/oaV0skRGoQJk1SU fehJ8xQnoNeCEbLciJhkvWc15GvuzKKq6ZE6pAdqw5J+OvX7qqAM701EJ2pa+GEg DUmTdX8pSXlq/OqXffKKatt0rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOe4WMBV z2QQdtlwTgTSqh9S650mMB8GA1UdIwQYMBaAFPHgKzlG/vvm9GT0NI7yFV9h0Hob MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjRGQy8zQjYzNEJCRUI0 NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0tYjBaUFEwanZJVlgySFFl aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhlQXJPVWItLS1iMFpQUTBqdklWWDJIUWVocy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjRGQy8zQjYzNEJCRUI0NDQxMUU5ODY3MTNEMURDNEY5QUUwMi84ZUFyT1ViLS0t YjBaUFEwanZJVlgySFFlaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDT1WgUbRVc5D4YIyMjXTU01Mj9tEe9Qc3hc2rK2hfJrJy/hiizCGE7 PAkHYmOqcI7QR4nS27AIG+YIrtQsHA/JaB56j4/oD4SzU+iLi6oed8iyIHcXOCPW SzgN3gxM2yMb84q6zJfakXulJQ3kiaWhFGyE5gTw08M6DIwVmdgVIrLXdxa3ifcB VSkKT0e0cc02D+nOAHAO+qZjZPFOYMWtrpx5FDIyx2upFSQTH59+x9XWKCU+R3Fd 3h2fM6FHJRkI7fiOefMhmEw4AsON7/ov//jzAo38FTCjB0GPdsh7kcCulsiEjPUH jj65on0MIz1P/LXjSxspVmqg9/bZkZcw -----END CERTIFICATE-----Generated at Sat Aug 9 22:39:34 2025 by rpki-client