$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: cZCRM/OR9xMoR44N3mEoB3eVYL30v+4TKKSkL8VaxIE= Subject key identifier: 6E:83:F1:67:5E:F2:F9:6A:E1:D6:E3:3B:D8:7E:76:6C:E0:96:10:ED Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 0176 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 016F Signing time: Sat 23 Aug 2025 03:59:36 +0000 Manifest this update: Sat 23 Aug 2025 03:59:36 +0000 Manifest next update: Sat 30 Aug 2025 03:59:36 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: fKyfk3mLJAsZPu9r91at87yksthtI9h4Gk6xDlzNpzk=) 2: CE74C490AA4911EF80B4D381C4F9AE02.roa (hash: 9trSPATG6e6kZcNLx6FEo2PvgXLIh+akuZgMM6SjcBw=) 3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XwxYtSorve+SAC3u+XigKdLjB1a8nt+xDntpvYaL7J8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:59:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 374 (0x176) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Aug 23 03:59:36 2025 GMT Not After : Aug 30 03:59:36 2025 GMT Subject: CN=68a93ca8-311d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:e4:83:2d:b2:78:a6:19:e0:e6:43:02:65: 2e:12:10:46:ac:67:34:83:b0:36:f8:29:b4:e6:bb: 50:0b:7c:47:b1:fb:fb:21:44:27:4c:74:c3:6a:d7: a4:8a:2c:00:33:93:dd:95:21:8b:58:3d:bb:d3:ca: 92:ff:6c:9a:b6:c9:b1:cb:2b:d9:dc:84:d4:98:c9: ab:f5:9b:94:2d:90:aa:95:f7:48:a5:59:d4:7e:68: 6d:cf:a2:cb:f3:7f:8a:5a:cd:6b:4d:5a:a6:f9:36: 0e:f5:24:31:68:09:c9:45:2c:61:6b:d9:af:c4:72: ba:ec:5f:fe:e9:94:dc:f3:49:70:2e:d1:12:ac:35: b1:87:03:42:46:b5:16:d6:3d:06:36:20:6a:e9:1e: 95:db:33:99:80:d3:e3:b0:26:26:26:47:20:17:88: a9:6d:ba:90:3b:c8:c2:22:0b:f0:3c:35:67:71:c4: 57:20:6c:ae:59:e7:e7:13:9c:c0:1d:17:87:75:fb: b3:3a:96:3e:c6:2b:ec:e2:4a:82:94:bb:5c:6f:b7: b2:a5:8c:c9:bb:bc:4f:b5:68:18:5b:d5:0f:53:9d: ee:d9:36:f7:26:54:b7:18:0a:86:a3:e2:4e:65:13: f3:dc:2d:44:08:08:f0:d7:95:8d:2f:7b:66:5d:26: cb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:83:F1:67:5E:F2:F9:6A:E1:D6:E3:3B:D8:7E:76:6C:E0:96:10:ED X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:db:3e:97:9f:cc:ed:77:cf:2b:16:c0:d0:fa:6c:8d:47:29: fb:46:97:35:50:94:f6:20:de:8e:1f:8f:28:fa:49:48:99:fa: 00:f8:83:9b:2d:f8:00:0d:18:72:45:13:83:38:67:db:68:c3: c6:73:37:1d:ec:6c:ec:41:80:9c:8c:30:a7:dd:d2:67:97:ff: 66:73:69:d3:ff:09:18:9a:d9:ec:ab:58:22:09:47:f3:b3:e2: 2c:e1:ac:8e:e2:5e:6e:0f:20:40:cd:1c:e2:c7:91:bf:30:64: 62:f9:9e:d7:f4:84:74:77:6e:2a:0d:fb:d5:68:c6:4c:f2:e1: ab:43:61:7e:55:90:a6:89:66:c7:2b:3f:46:7d:79:2f:d2:62: 23:35:47:27:a9:5d:21:40:5e:30:c9:6b:97:61:ec:80:de:55: ed:16:34:c5:a1:a7:43:3b:e8:9e:68:7d:12:fa:87:74:1d:af: 73:07:9b:e6:7a:7b:8c:4e:64:6f:c0:b5:d8:c7:65:5a:27:84: 5d:cb:98:38:07:3d:06:aa:dd:1a:06:78:2b:6a:a3:f9:83:fc: 21:93:ae:27:d1:e7:cc:ef:a2:e8:0e:64:1f:1f:b8:32:0c:c6: 10:91:63:67:16:4d:ff:a4:be:d8:35:16:97:91:ae:47:fc:9a: fb:07:c2:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjUwODIzMDM1OTM2WhcNMjUwODMwMDM1OTM2WjAYMRYwFAYD VQQDEw02OGE5M2NhOC0zMTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu03kgy2yeKYZ4OZDAmUuEhBGrGc0g7A2+Cm05rtQC3xHsfv7IUQnTHTDatek iiwAM5PdlSGLWD2708qS/2yatsmxyyvZ3ITUmMmr9ZuULZCqlfdIpVnUfmhtz6LL 83+KWs1rTVqm+TYO9SQxaAnJRSxha9mvxHK67F/+6ZTc80lwLtESrDWxhwNCRrUW 1j0GNiBq6R6V2zOZgNPjsCYmJkcgF4ipbbqQO8jCIgvwPDVnccRXIGyuWefnE5zA HReHdfuzOpY+xivs4kqClLtcb7eypYzJu7xPtWgYW9UPU53u2Tb3JlS3GAqGo+JO ZRPz3C1ECAjw15WNL3tmXSbLpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6D8Wde 8vlq4dbjO9h+dmzglhDtMB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBX2z6Xn8ztd88rFsDQ+myNRyn7Rpc1UJT2IN6OH48o+klImfoA+IOb LfgADRhyRRODOGfbaMPGczcd7GzsQYCcjDCn3dJnl/9mc2nT/wkYmtnsq1giCUfz s+Is4ayO4l5uDyBAzRzix5G/MGRi+Z7X9IR0d24qDfvVaMZM8uGrQ2F+VZCmiWbH Kz9GfXkv0mIjNUcnqV0hQF4wyWuXYeyA3lXtFjTFoadDO+ieaH0S+od0Ha9zB5vm enuMTmRvwLXYx2VaJ4Rdy5g4Bz0Gqt0aBngraqP5g/whk64n0efM76LoDmQfH7gy DMYQkWNnFk3/pL7YNRaXka5H/Jr7B8IG -----END CERTIFICATE-----Generated at Sun Aug 24 00:19:15 2025 by rpki-client