$ rpki-client -vvf rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft File: 8n_4duRl5zyaUv04SNvXZb-yNdQ.mft (raw, json) Hash identifier: LrAlB0bF2HS6oa2Jm0lk5I2lOOscbSEIIFO3MIilY3o= Subject key identifier: 80:69:3F:4E:5F:C7:4F:69:14:C6:4E:29:0B:FA:3F:7C:EF:2E:A9:C7 Authority key identifier: F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4 Certificate issuer: /CN=A91175FF/serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4 Certificate serial: 0D87 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft Manifest number: 0D79 Signing time: Fri 22 Aug 2025 18:04:07 +0000 Manifest this update: Fri 22 Aug 2025 18:04:07 +0000 Manifest next update: Fri 29 Aug 2025 18:04:07 +0000 Files and hashes: 1: 8n_4duRl5zyaUv04SNvXZb-yNdQ.crl (hash: l1JVcwxpYg788RPLOj9GZfjlJT6TdbZCwgt0pTxV3nM=) 2: 3833FD20D09711E987F73A60C4F9AE02.roa (hash: IUQ+m8jWqnf3vf6hcCuC0VogjthEOWb1ceqBAZq2VPM=) 3: 8A00E9284FB111EDBE702516C4F9AE02.roa (hash: s8FViwNwbQunitwqHzsjUNkNGV0Mlz+MOgwlD5JB+Bs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3463 (0xd87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175FF, serialNumber=F27FF876E465E73C9A52FD3848DBD765BFB235D4 Validity Not Before: Aug 22 18:04:07 2025 GMT Not After : Aug 29 18:04:07 2025 GMT Subject: CN=68a8b117-0e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:56:b5:77:53:bd:77:82:71:0c:fa:5c:af: 55:53:86:9d:9e:02:5e:0e:2f:9a:50:a1:bf:51:7f: d5:0c:4b:88:46:af:ca:cd:77:b8:6e:01:77:20:a0: e7:87:b7:00:64:b4:f7:de:8b:43:39:f1:19:70:7c: 68:52:c6:1c:90:65:02:64:be:65:45:1f:b8:b1:13: 8e:4a:c8:a2:60:2c:2f:ff:69:cb:f7:16:25:19:45: 4f:84:b5:78:d3:3e:17:50:54:fd:eb:ac:99:9d:bf: d0:4a:73:14:d4:b0:b8:da:0d:be:c4:d0:b2:a2:54: d7:0f:62:9c:a1:42:75:90:f8:c1:cb:89:bb:b8:b4: 72:7e:a8:3d:77:f6:eb:6f:83:59:b8:2e:a8:27:c2: 44:00:42:61:e4:26:05:b4:81:8c:21:d8:da:87:eb: 90:fc:ef:37:2f:c3:d2:19:36:07:fc:d7:d6:42:1d: ef:cf:8d:ec:ee:9e:ef:47:ef:00:c9:7b:e4:74:6d: 02:a0:84:86:1f:d3:78:73:71:3b:4d:32:17:e4:d4: bb:8d:a2:9b:b3:31:13:be:4b:57:e3:5a:fd:be:39: 1b:01:25:14:83:1d:19:eb:14:1b:47:67:97:df:e4: d3:57:e4:bf:a6:38:2b:78:92:32:df:e2:c8:a3:22: 24:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:69:3F:4E:5F:C7:4F:69:14:C6:4E:29:0B:FA:3F:7C:EF:2E:A9:C7 X509v3 Authority Key Identifier: keyid:F2:7F:F8:76:E4:65:E7:3C:9A:52:FD:38:48:DB:D7:65:BF:B2:35:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8n_4duRl5zyaUv04SNvXZb-yNdQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175FF/E176D67AD09511E9B345A05DC4F9AE02/8n_4duRl5zyaUv04SNvXZb-yNdQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:60:dd:3e:e3:f7:a9:23:06:d2:fd:1d:e3:a3:d8:e2:18:16: 71:e6:3c:ff:ba:5c:fd:f4:a2:75:b3:32:42:ff:d6:33:81:32: f5:fb:da:18:fa:51:a8:fd:6a:be:8c:b3:3c:16:ef:37:fe:df: ad:26:c4:71:da:bb:6b:85:5f:bb:95:ae:73:91:f0:7c:e4:89: 9f:53:f0:8b:f7:9b:e0:21:dc:5e:60:64:c3:0d:f8:53:04:b1: 99:b9:d6:36:82:c8:90:cd:cb:aa:3f:a2:2f:c1:ac:b5:7e:6a: 61:8b:4d:ea:7a:86:7e:8f:58:0d:ec:d7:42:90:c8:ad:9c:8f: 0c:71:34:28:93:1b:19:5a:15:57:1b:c1:97:94:23:43:00:8d: 47:19:3a:ef:19:3c:c8:65:80:c1:0f:bd:a9:1d:47:66:70:32: 9c:e6:8a:60:98:56:6d:a4:00:08:3a:4b:9d:4d:a1:53:8a:9d: a5:33:d4:d7:f7:22:e9:c3:8e:7c:e9:f6:dd:0d:34:fe:e4:30: ef:59:18:88:6e:0c:8e:0a:59:d7:3d:10:10:94:a5:46:38:41: 49:36:b2:f5:e7:12:ce:22:17:32:95:42:6f:5a:f9:72:51:c3: 98:c5:46:26:0a:a0:fb:84:35:4c:04:64:96:c8:95:09:6f:10: 48:88:fd:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1RkYxMTAvBgNVBAUTKEYyN0ZGODc2RTQ2NUU3M0M5QTUyRkQzODQ4REJENzY1 QkZCMjM1RDQwHhcNMjUwODIyMTgwNDA3WhcNMjUwODI5MTgwNDA3WjAYMRYwFAYD VQQDEw02OGE4YjExNy0wZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurlWtXdTvXeCcQz6XK9VU4adngJeDi+aUKG/UX/VDEuIRq/KzXe4bgF3IKDn h7cAZLT33otDOfEZcHxoUsYckGUCZL5lRR+4sROOSsiiYCwv/2nL9xYlGUVPhLV4 0z4XUFT966yZnb/QSnMU1LC42g2+xNCyolTXD2KcoUJ1kPjBy4m7uLRyfqg9d/br b4NZuC6oJ8JEAEJh5CYFtIGMIdjah+uQ/O83L8PSGTYH/NfWQh3vz43s7p7vR+8A yXvkdG0CoISGH9N4c3E7TTIX5NS7jaKbszETvktX41r9vjkbASUUgx0Z6xQbR2eX 3+TTV+S/pjgreJIy3+LIoyIkrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBpP05f x09pFMZOKQv6P3zvLqnHMB8GA1UdIwQYMBaAFPJ/+HbkZec8mlL9OEjb12W/sjXU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVGRi9FMTc2RDY3QUQw OTUxMUU5QjM0NUEwNURDNEY5QUUwMi84bl80ZHVSbDV6eWFVdjA0U052WFpiLXlO ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhuXzRkdVJsNXp5YVV2MDRTTnZYWmIteU5kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzVGRi9FMTc2RDY3QUQwOTUxMUU5QjM0NUEwNURDNEY5QUUwMi84bl80ZHVSbDV6 eWFVdjA0U052WFpiLXlOZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUYN0+4/epIwbS/R3jo9jiGBZx5jz/ulz99KJ1szJC/9YzgTL1+9oY +lGo/Wq+jLM8Fu83/t+tJsRx2rtrhV+7la5zkfB85ImfU/CL95vgIdxeYGTDDfhT BLGZudY2gsiQzcuqP6Ivway1fmphi03qeoZ+j1gN7NdCkMitnI8McTQokxsZWhVX G8GXlCNDAI1HGTrvGTzIZYDBD72pHUdmcDKc5opgmFZtpAAIOkudTaFTip2lM9TX 9yLpw4586fbdDTT+5DDvWRiIbgyOClnXPRAQlKVGOEFJNrL15xLOIhcylUJvWvly UcOYxUYmCqD7hDVMBGSWyJUJbxBIiP3W -----END CERTIFICATE-----Generated at Sun Aug 24 03:03:24 2025 by rpki-client