$ rpki-client -vvf rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft File: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft (raw, json) Hash identifier: wWx7aaXi9rra/mfKKY81U4+Vsa9NflcyeTKHKeE8wwY= Subject key identifier: 79:A2:1D:FC:ED:C0:7C:90:0F:C6:87:B6:C6:F8:96:0E:86:02:5B:F7 Authority key identifier: F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11 Certificate issuer: /CN=A913A5AF/serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611 Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft Manifest number: 79 Signing time: Sat 23 Aug 2025 07:01:08 +0000 Manifest this update: Sat 23 Aug 2025 07:01:07 +0000 Manifest next update: Sat 30 Aug 2025 07:01:07 +0000 Files and hashes: 1: 8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl (hash: sHSatae3Hr3nFi2WstX00swow0w0qRFds3kRIlors4A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913A5AF, serialNumber=F3EBBFB4A9380FE09A561FC6AFA2A1CC21488611 Validity Not Before: Aug 23 07:01:07 2025 GMT Not After : Aug 30 07:01:07 2025 GMT Subject: CN=68a96733-15c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:7b:df:01:19:0a:5e:75:3e:8e:f5:b9:46: a6:b0:3e:d4:db:8a:f8:ec:fa:d0:e1:f6:85:d7:0e: 79:8f:fa:62:1b:a6:29:d1:a0:8f:8b:ee:82:e2:d2: 0d:31:5d:1f:0f:91:59:fb:fa:e4:c1:5b:79:bc:25: 94:8a:56:f4:f9:ac:a0:74:f8:d3:50:8a:2a:cb:d1: ef:c0:fb:55:ed:ca:e8:7f:77:14:34:78:e1:2a:a5: 61:d2:e6:7f:a8:26:b5:ec:6c:94:1e:ca:15:87:93: 1f:82:36:1c:62:82:c7:7c:5f:cb:76:7f:c8:01:44: 7c:22:f7:7b:22:bc:4e:47:4c:49:93:82:58:8e:1d: 4d:2e:d5:5e:46:2e:62:84:66:ea:b8:1d:31:97:33: e5:29:0c:a5:1a:12:43:c7:ea:50:d4:83:dd:e6:be: 79:f9:0d:94:9b:a8:ee:f9:ca:a1:05:b1:50:cc:da: ad:07:98:5c:1e:d0:52:23:08:23:7c:b0:14:a9:c1: 87:d5:b0:27:bc:c9:1c:8d:d5:16:c6:aa:34:b1:5e: 72:e2:87:d4:11:80:6d:4e:f1:fa:e8:59:35:2e:26: 9b:72:5f:e9:2f:ae:7f:bb:fe:fe:55:5f:91:81:18: c1:72:fc:8d:2a:f2:55:5d:fd:a4:1b:f1:5d:66:df: ee:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A2:1D:FC:ED:C0:7C:90:0F:C6:87:B6:C6:F8:96:0E:86:02:5B:F7 X509v3 Authority Key Identifier: keyid:F3:EB:BF:B4:A9:38:0F:E0:9A:56:1F:C6:AF:A2:A1:CC:21:48:86:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A5AF/88DBA982CBC111EF9CD19D44C4F9AE02/8-u_tKk4D-CaVh_Gr6KhzCFIhhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:fa:30:6b:90:ae:63:6d:c7:10:c3:f9:ca:41:ae:88:22:92: 4f:01:2b:17:52:6b:6a:62:8a:89:d7:88:f8:ef:5d:23:3e:0f: 27:d5:06:57:fb:58:0e:41:ff:34:88:be:42:56:66:c3:33:38: b5:d1:01:9e:3d:f5:ee:bd:94:25:3f:55:0a:8d:5c:57:75:00: df:f1:5e:62:04:11:cc:a0:25:1a:4c:f3:86:83:44:d8:59:3f: bd:78:d2:fd:4e:0e:bd:65:f9:95:6b:9d:32:3f:bc:76:06:a6: e6:08:f7:2b:e7:dc:74:c3:4f:3f:4d:e6:18:05:57:f6:0c:6d: a0:18:18:8e:68:8c:f6:ef:2e:c0:eb:78:55:b9:2f:80:ac:99: 20:7d:b3:cc:c3:24:43:18:89:c7:3a:b8:a3:fa:e8:60:22:bc: 56:d2:e5:65:8d:85:3a:0a:c9:aa:d9:07:25:81:b7:54:7d:6b: f1:5f:02:02:f6:df:10:87:39:61:47:2e:43:69:98:f5:5e:94: af:cb:87:65:a4:cb:dc:c6:09:87:f7:ed:8c:7b:6d:cc:28:f0: 63:8b:f4:9b:65:8a:be:8f:d9:f6:e6:fa:7f:f5:5d:04:5a:23: 7f:55:2e:11:a1:93:9d:f5:73:c3:f1:64:54:0b:82:27:13:0e: 36:4a:64:d0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz QTVBRjExMC8GA1UEBRMoRjNFQkJGQjRBOTM4MEZFMDlBNTYxRkM2QUZBMkExQ0My MTQ4ODYxMTAeFw0yNTA4MjMwNzAxMDdaFw0yNTA4MzAwNzAxMDdaMBgxFjAUBgNV BAMTDTY4YTk2NzMzLTE1YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNBHvfARkKXnU+jvW5RqawPtTbivjs+tDh9oXXDnmP+mIbpinRoI+L7oLi0g0x XR8PkVn7+uTBW3m8JZSKVvT5rKB0+NNQiirL0e/A+1Xtyuh/dxQ0eOEqpWHS5n+o JrXsbJQeyhWHkx+CNhxigsd8X8t2f8gBRHwi93sivE5HTEmTgliOHU0u1V5GLmKE Zuq4HTGXM+UpDKUaEkPH6lDUg93mvnn5DZSbqO75yqEFsVDM2q0HmFwe0FIjCCN8 sBSpwYfVsCe8yRyN1RbGqjSxXnLih9QRgG1O8froWTUuJptyX+kvrn+7/v5VX5GB GMFy/I0q8lVd/aQb8V1m3+4PAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUeaId/O3A fJAPxoe2xviWDoYCW/cwHwYDVR0jBBgwFoAU8+u/tKk4D+CaVh/Gr6KhzCFIhhEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNBNUFGLzg4REJBOTgyQ0JD MTExRUY5Q0QxOUQ0NEM0RjlBRTAyLzgtdV90S2s0RC1DYVZoX0dyNktoekNGSWho RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOC11X3RLazRELUNhVmhfR3I2S2h6Q0ZJaGhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNB NUFGLzg4REJBOTgyQ0JDMTExRUY5Q0QxOUQ0NEM0RjlBRTAyLzgtdV90S2s0RC1D YVZoX0dyNktoekNGSWhoRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGP6MGuQrmNtxxDD+cpBrogikk8BKxdSa2piionXiPjvXSM+DyfVBlf7 WA5B/zSIvkJWZsMzOLXRAZ499e69lCU/VQqNXFd1AN/xXmIEEcygJRpM84aDRNhZ P7140v1ODr1l+ZVrnTI/vHYGpuYI9yvn3HTDTz9N5hgFV/YMbaAYGI5ojPbvLsDr eFW5L4CsmSB9s8zDJEMYicc6uKP66GAivFbS5WWNhToKyarZByWBt1R9a/FfAgL2 3xCHOWFHLkNpmPVelK/Lh2Wky9zGCYf37Yx7bcwo8GOL9Jtlir6P2fbm+n/1XQRa I39VLhGhk531c8PxZFQLgicTDjZKZNA= -----END CERTIFICATE-----Generated at Sun Aug 24 07:01:58 2025 by rpki-client