$ rpki-client -vvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft File: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft (raw, json) Hash identifier: DvBXhVZkcxhUQWi72+TcIzQnY6crSLBU0sC4D+emLE4= Subject key identifier: AA:0A:22:34:D8:5F:36:70:A8:4E:51:8A:06:36:0C:03:62:50:22:5B Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA Certificate issuer: /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA Certificate serial: 09EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft Manifest number: 09E4 Signing time: Fri 22 Aug 2025 20:01:41 +0000 Manifest this update: Fri 22 Aug 2025 20:01:41 +0000 Manifest next update: Fri 29 Aug 2025 20:01:41 +0000 Files and hashes: 1: 8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl (hash: +zlAbhNknkCuw6cTdXQa8lP5qNNdfuC06CSWLUCYv4M=) 2: 7F4DB79C82F211EAAC592A59C4F9AE02.roa (hash: IErhN2Rb0g9VI5rW4Q/U0ihFngJbQko3OlSb8ST5oQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2538 (0x9ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91206B5, serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA Validity Not Before: Aug 22 20:01:41 2025 GMT Not After : Aug 29 20:01:41 2025 GMT Subject: CN=68a8cca5-edc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:61:4e:d3:45:c2:2d:c7:81:a6:6e:2b:12: 06:c8:01:8f:19:1a:09:f5:50:26:62:4a:66:54:90: a9:1f:46:b3:a1:c4:0f:37:90:d3:38:1d:cf:07:34: d4:c3:88:94:7e:a7:6a:28:5c:6f:e3:be:79:29:f6: 45:95:2f:19:af:c3:30:8c:51:28:a9:71:37:61:7a: 79:b7:6b:6d:fa:bf:14:09:21:36:d7:21:98:5c:a6: 83:5b:67:20:1a:33:51:3c:c3:4c:79:22:ea:1d:35: 25:24:d3:93:8a:74:2c:a1:34:b5:55:20:2c:29:a9: 67:fe:01:b4:b9:34:68:99:c4:2e:a6:1c:bd:70:98: be:0d:bc:6e:0f:8e:13:ad:63:58:77:fd:fa:e8:0e: 1a:ce:96:47:e4:9d:a9:c5:60:6d:4f:be:59:1f:cd: e8:50:7f:0f:56:25:b8:3c:81:20:7e:af:2f:41:c5: b0:69:30:95:5d:16:1d:de:d7:67:16:34:ac:76:32: 3f:50:cb:cb:b9:f2:b8:e1:5c:2e:c8:6e:13:db:d9: 87:09:f5:05:06:78:c1:ee:18:c5:98:af:d3:1b:7d: 22:38:e4:55:dc:ed:db:05:fb:27:34:27:4e:8a:10: a6:85:e7:37:2c:b2:95:b4:ea:16:2e:0a:71:87:1b: 7b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:0A:22:34:D8:5F:36:70:A8:4E:51:8A:06:36:0C:03:62:50:22:5B X509v3 Authority Key Identifier: keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:19:51:24:58:9a:26:38:4c:e2:d6:3d:34:51:d0:62:5a:7e: 76:85:a9:2b:dd:cb:59:33:1a:20:b7:ca:89:06:b6:c3:0e:f0: 3b:8e:b5:13:0e:d5:6a:43:0a:1b:4e:d6:d4:57:5d:8d:b6:59: 21:35:eb:6e:cf:30:fa:d3:5e:ae:4c:b8:32:83:ab:ad:1f:7e: 7d:7a:7c:05:0d:b5:4e:04:10:ff:41:08:d5:9d:ad:4d:1a:54: 78:54:06:55:51:7a:a0:cf:99:53:12:c4:32:29:d4:89:e2:e6: f6:ad:e7:69:3d:61:b2:ce:6a:84:8c:ff:46:ca:4d:8e:74:72: 63:fe:0c:44:4d:fe:68:34:d4:f8:82:8e:6b:a2:9b:1a:54:8c: 01:1a:4f:9a:93:e3:70:8d:75:8e:3b:e7:aa:4f:3a:0e:d2:19: fa:b6:d2:50:28:8e:d1:a4:15:09:c8:ab:81:24:0e:9c:8a:3c: b7:72:ad:bf:9e:a8:ae:a9:6d:3b:ec:2c:13:a0:9d:28:51:73: e8:c9:d9:7c:c8:91:e9:f0:af:77:c9:4b:4f:9b:34:d2:0e:54: 2f:a3:12:7a:a5:5e:87:c2:9f:47:6d:08:56:e2:c9:e7:fc:ea: 1d:ed:26:bc:90:6c:65:03:a1:80:c5:20:2f:a1:ef:d9:da:1f: ba:83:85:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCeowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjA2QjUxMTAvBgNVBAUTKEYzMDEyQ0VEMTc2OERFQUE2NEM0RTkzNkI4NkNCMzFF MTZDRUZDQkEwHhcNMjUwODIyMjAwMTQxWhcNMjUwODI5MjAwMTQxWjAYMRYwFAYD VQQDEw02OGE4Y2NhNS1lZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6xhTtNFwi3HgaZuKxIGyAGPGRoJ9VAmYkpmVJCpH0azocQPN5DTOB3PBzTU w4iUfqdqKFxv4755KfZFlS8Zr8MwjFEoqXE3YXp5t2tt+r8UCSE21yGYXKaDW2cg GjNRPMNMeSLqHTUlJNOTinQsoTS1VSAsKaln/gG0uTRomcQuphy9cJi+DbxuD44T rWNYd/366A4azpZH5J2pxWBtT75ZH83oUH8PViW4PIEgfq8vQcWwaTCVXRYd3tdn FjSsdjI/UMvLufK44VwuyG4T29mHCfUFBnjB7hjFmK/TG30iOORV3O3bBfsnNCdO ihCmhec3LLKVtOoWLgpxhxt7aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKoKIjTY XzZwqE5RigY2DANiUCJbMB8GA1UdIwQYMBaAFPMBLO0XaN6qZMTpNrhssx4Wzvy6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDZCNS8wRjVBMDE0MDgy RjAxMUVBQUFEQTczNTRDNEY5QUUwMi84d0VzN1JkbzNxcGt4T2sydUd5ekhoYk9f TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh3RXM3UmRvM3Fwa3hPazJ1R3l6SGhiT19Mby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MDZCNS8wRjVBMDE0MDgyRjAxMUVBQUFEQTczNTRDNEY5QUUwMi84d0VzN1JkbzNx cGt4T2sydUd5ekhoYk9fTG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwGVEkWJomOEzi1j00UdBiWn52hakr3ctZMxogt8qJBrbDDvA7jrUT DtVqQwobTtbUV12NtlkhNetuzzD6016uTLgyg6utH359enwFDbVOBBD/QQjVna1N GlR4VAZVUXqgz5lTEsQyKdSJ4ub2redpPWGyzmqEjP9Gyk2OdHJj/gxETf5oNNT4 go5ropsaVIwBGk+ak+NwjXWOO+eqTzoO0hn6ttJQKI7RpBUJyKuBJA6cijy3cq2/ nqiuqW077CwToJ0oUXPoydl8yJHp8K93yUtPmzTSDlQvoxJ6pV6Hwp9HbQhW4snn /Ood7Sa8kGxlA6GAxSAvoe/Z2h+6g4UV -----END CERTIFICATE-----Generated at Sat Aug 23 20:33:08 2025 by rpki-client