$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json) Hash identifier: s7kyJ4bTGtQIUyiqrnKMw+n4ZcTRansxKbtOgVNvQ8o= Subject key identifier: 07:73:31:A4:82:8B:90:8B:72:A7:7F:33:D3:AB:85:83:F5:21:49:52 Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft Manifest number: B6 Signing time: Fri 22 Aug 2025 14:23:16 +0000 Manifest this update: Fri 22 Aug 2025 14:23:15 +0000 Manifest next update: Fri 29 Aug 2025 14:23:15 +0000 Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: 4hdbfQErkCsbOydRgp+DHC6ZWIzN4MBq9AGsQDmisMY=) 2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: J/A0Tcht/6BAxrksZsepsZObquBupiicduR/i0K3+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Validity Not Before: Aug 22 14:23:15 2025 GMT Not After : Aug 29 14:23:15 2025 GMT Subject: CN=68a87d54-ebda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d5:27:54:49:54:d0:1a:de:ec:e8:58:4d:c5: fc:84:bb:53:9e:76:f9:6a:fc:3f:35:45:63:55:97: a1:80:a3:2c:93:20:e1:bd:2b:88:db:63:9a:5e:f0: 0e:24:51:6f:a8:6f:38:55:24:00:5b:48:5c:37:84: bf:30:5e:fb:5b:93:ad:dd:6d:a4:37:66:86:d8:fd: fe:65:27:74:3f:9f:04:2c:a0:ee:cd:fd:47:14:ad: 53:1f:94:88:72:06:22:9e:b5:cf:17:d7:6a:65:35: 07:8c:0c:b0:a1:89:43:7c:b4:9e:9e:4d:d0:a7:cc: fa:96:1a:74:22:be:96:42:6b:06:ab:33:d0:8a:a2: ca:aa:ed:b8:7c:2a:d0:61:75:eb:41:04:a7:25:92: a8:e3:68:73:bc:f3:62:ea:97:54:75:2c:f5:de:7c: 20:61:b7:bb:87:2e:bf:90:5c:fd:5f:62:43:96:c3: d5:c9:bb:00:6c:a9:a8:1c:b7:dc:c9:5f:cb:ed:b8: f5:bf:17:4f:e6:8b:61:34:68:0d:48:c0:11:92:11: ee:e0:35:3a:49:6d:28:a8:cb:5b:03:07:e1:c2:78: eb:92:42:da:6c:05:80:1b:c9:fb:86:ca:ec:38:5c: 3c:f9:1f:55:00:11:34:4a:8c:2e:34:9c:4d:88:84: 74:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:73:31:A4:82:8B:90:8B:72:A7:7F:33:D3:AB:85:83:F5:21:49:52 X509v3 Authority Key Identifier: keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ca:93:0b:34:84:a1:26:73:c7:45:8a:e8:46:48:22:d3:13: e1:96:f3:25:ed:6f:d4:11:d4:6e:b0:89:eb:f6:33:6e:44:a0: 43:06:91:61:e6:22:d6:a5:58:73:77:d9:de:51:3e:9d:6b:79: d4:f1:4a:22:50:bf:4a:0f:0c:51:2c:53:c5:78:20:47:0c:07: eb:6c:a7:5f:74:9a:74:8e:f4:91:d7:cb:73:fc:da:a0:0c:5b: 44:b0:83:c6:fe:ca:9c:74:62:93:86:4e:72:e2:6c:73:61:8a: d2:6d:35:8d:0f:63:61:f8:34:45:3a:a0:ab:cd:24:05:67:16: cf:78:bb:67:b0:ae:75:40:60:18:24:60:54:52:60:4d:99:92: 93:ec:e7:a5:79:3f:83:de:5f:62:0a:67:bb:c0:1f:ff:34:d0: 25:be:1a:7e:74:c1:a8:b2:8c:ee:3f:a2:04:11:fd:42:8d:ab: 04:15:20:61:bc:29:6d:7e:21:ac:f8:2e:f3:d1:a0:83:e7:8d: 41:44:c8:75:b2:52:13:27:f2:d4:40:27:e1:af:2d:a9:20:e3: 32:30:c2:e9:0c:f6:c0:eb:f6:d5:b1:80:94:22:20:8c:fc:8c: bf:2d:e6:0d:26:e6:5b:5c:3f:62:48:70:3b:d0:82:f4:cc:fa: c8:85:30:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEYxQzk0MjYzMkZBNkZDNzcxMDgxNjA4OEYwQ0I4QzEz MzUyNTFDREQwHhcNMjUwODIyMTQyMzE1WhcNMjUwODI5MTQyMzE1WjAYMRYwFAYD VQQDEw02OGE4N2Q1NC1lYmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNUnVElU0Bre7OhYTcX8hLtTnnb5avw/NUVjVZehgKMskyDhvSuI22OaXvAO JFFvqG84VSQAW0hcN4S/MF77W5Ot3W2kN2aG2P3+ZSd0P58ELKDuzf1HFK1TH5SI cgYinrXPF9dqZTUHjAywoYlDfLSenk3Qp8z6lhp0Ir6WQmsGqzPQiqLKqu24fCrQ YXXrQQSnJZKo42hzvPNi6pdUdSz13nwgYbe7hy6/kFz9X2JDlsPVybsAbKmoHLfc yV/L7bj1vxdP5othNGgNSMARkhHu4DU6SW0oqMtbAwfhwnjrkkLabAWAG8n7hsrs OFw8+R9VABE0SowuNJxNiIR0VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdzMaSC i5CLcqd/M9OrhYP1IUlSMB8GA1UdIwQYMBaAFPHJQmMvpvx3EIFgiPDLjBM1JRzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy84MDdEQkNCQzZF NDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9IY1FnV0NJOE11TUV6VWxI TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhjbENZeS1tX0hjUWdXQ0k4TXVNRXpVbEhOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy84MDdEQkNCQzZFNDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9I Y1FnV0NJOE11TUV6VWxITjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4ypMLNIShJnPHRYroRkgi0xPhlvMl7W/UEdRusInr9jNuRKBDBpFh 5iLWpVhzd9neUT6da3nU8UoiUL9KDwxRLFPFeCBHDAfrbKdfdJp0jvSR18tz/Nqg DFtEsIPG/sqcdGKThk5y4mxzYYrSbTWND2Nh+DRFOqCrzSQFZxbPeLtnsK51QGAY JGBUUmBNmZKT7OeleT+D3l9iCme7wB//NNAlvhp+dMGosozuP6IEEf1CjasEFSBh vCltfiGs+C7z0aCD541BRMh1slITJ/LUQCfhry2pIOMyMMLpDPbA6/bVsYCUIiCM /Iy/LeYNJuZbXD9iSHA70IL0zPrIhTDW -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:59 2025 by rpki-client