$ rpki-client -vvf rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft File: 8uBzCSl2BY65hlYUFDf4-2i3IV0.mft (raw, json) Hash identifier: XBOkgEMcHdaum1glpoIyRLcM6huW+/p+Ss7TgKxe/Dc= Subject key identifier: 9B:43:FD:A2:91:5F:E9:C5:75:9A:5B:24:91:76:33:CF:CA:BC:7F:6D Authority key identifier: F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D Certificate issuer: /CN=A913E62B/serialNumber=F2E073092976058EB98656141437F8FB68B7215D Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft Manifest number: 3E Signing time: Sat 23 Aug 2025 07:44:56 +0000 Manifest this update: Sat 23 Aug 2025 07:44:56 +0000 Manifest next update: Sat 30 Aug 2025 07:44:56 +0000 Files and hashes: 1: 8uBzCSl2BY65hlYUFDf4-2i3IV0.crl (hash: Dh+RokkU7Ri5BG6sQVyqAo6pMaNU6OPX1LeGqBrH5pU=) 2: CFED56A4240411F0B73CB374C4F9AE02.roa (hash: Zn3nz0esus3n+Qr7MjHUDFZOowDDsYzs6GVur4c4Gdw=) 3: CF53E5E6240411F0B73CB374C4F9AE02.roa (hash: aGXXY3h8pMjRmE6vJ9+0EmvsUGymYki2tMrN0LjTaWE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:44:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E62B, serialNumber=F2E073092976058EB98656141437F8FB68B7215D Validity Not Before: Aug 23 07:44:56 2025 GMT Not After : Aug 30 07:44:56 2025 GMT Subject: CN=68a97178-0791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:54:fd:10:cb:02:f7:4a:11:1b:91:b9:91:1b: a8:db:1b:2f:26:94:2d:74:8f:63:f5:5a:20:25:01: 82:2b:12:30:3f:60:63:71:01:b7:55:51:91:c8:91: 6f:27:2e:dc:6e:e2:8a:51:6e:45:bf:44:ab:33:b6: 58:2f:b9:77:50:51:8c:66:7c:b0:c4:90:80:1c:ea: 8b:3e:b8:76:9c:bc:d3:66:b9:98:f2:b7:ce:6b:69: 4f:b4:27:10:23:27:d9:77:5c:eb:f9:07:e1:79:a6: 03:ef:20:1e:0b:fe:e7:41:bd:d3:ce:d2:3e:d5:e8: fc:cd:e9:f8:2d:84:8d:90:4f:33:3b:a6:0a:46:8f: 88:7c:22:d8:8a:05:57:2f:0d:b5:97:c0:1c:b5:d9: 82:33:6f:e6:8e:9e:73:80:74:c4:dc:5b:f7:9e:b1: d4:ab:ff:1f:52:1e:a7:47:65:9a:87:02:2c:c9:23: 3a:1d:1a:7f:cb:e4:ab:d0:fc:a8:e1:46:4e:a5:0f: 5f:1e:99:7b:3a:3e:f7:21:99:9f:6c:69:bd:05:58: 9c:ef:64:1f:47:fc:49:09:b1:4b:c8:a6:02:e6:5e: 13:07:f6:d9:0b:26:ff:26:40:6f:0a:3e:3e:2b:51: ec:5a:b9:13:b7:28:a5:36:b4:f3:60:c4:23:05:b8: a1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:43:FD:A2:91:5F:E9:C5:75:9A:5B:24:91:76:33:CF:CA:BC:7F:6D X509v3 Authority Key Identifier: keyid:F2:E0:73:09:29:76:05:8E:B9:86:56:14:14:37:F8:FB:68:B7:21:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uBzCSl2BY65hlYUFDf4-2i3IV0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E62B/61B35616240411F0A4D07273C4F9AE02/8uBzCSl2BY65hlYUFDf4-2i3IV0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:aa:c3:eb:73:fe:df:85:28:08:25:84:5f:d1:70:fe:69:32: ed:49:92:86:cc:e4:82:cb:41:a8:f7:db:0e:d1:9b:e6:88:d1: d3:af:82:c5:42:b1:19:b7:f1:4c:33:fc:ff:1d:7a:07:a2:d1: 7e:36:df:ce:fa:fb:0d:6f:10:91:70:2c:ec:ef:ca:06:d6:b9: 74:83:f5:af:c6:8c:37:5c:23:33:63:4d:28:e0:f4:38:e0:bb: 31:05:11:1d:a2:48:24:b7:f3:73:6a:8d:f5:7c:dd:c5:5c:6c: 9a:a3:f7:05:54:37:46:dd:d1:0e:9e:a0:93:e7:26:18:d4:9a: 2e:b7:46:fd:e7:49:53:96:6b:08:d6:d1:92:68:a5:0e:74:13: 0b:b2:8b:13:eb:a9:b8:15:db:2f:bc:d4:cd:84:18:40:56:ce: f3:53:69:34:19:7c:61:e0:47:55:d5:60:b5:ff:c5:06:23:da: a7:4b:c0:45:65:71:59:4d:6c:0d:d4:c9:5f:23:ed:28:81:83: 3f:54:b6:8a:18:4b:31:2a:c2:75:de:83:cb:46:4e:fe:93:a0: 77:d1:f5:43:bf:62:11:14:24:43:f1:f4:c0:50:71:ae:da:c4: 7e:08:2d:63:80:ff:df:9a:26:fa:f3:da:2d:3a:d4:70:f2:f9: bc:c8:d8:28 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTYyQjExMC8GA1UEBRMoRjJFMDczMDkyOTc2MDU4RUI5ODY1NjE0MTQzN0Y4RkI2 OEI3MjE1RDAeFw0yNTA4MjMwNzQ0NTZaFw0yNTA4MzAwNzQ0NTZaMBgxFjAUBgNV BAMTDTY4YTk3MTc4LTA3OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiVP0QywL3ShEbkbmRG6jbGy8mlC10j2P1WiAlAYIrEjA/YGNxAbdVUZHIkW8n Ltxu4opRbkW/RKsztlgvuXdQUYxmfLDEkIAc6os+uHacvNNmuZjyt85raU+0JxAj J9l3XOv5B+F5pgPvIB4L/udBvdPO0j7V6PzN6fgthI2QTzM7pgpGj4h8ItiKBVcv DbWXwBy12YIzb+aOnnOAdMTcW/eesdSr/x9SHqdHZZqHAizJIzodGn/L5KvQ/Kjh Rk6lD18emXs6PvchmZ9sab0FWJzvZB9H/EkJsUvIpgLmXhMH9tkLJv8mQG8KPj4r UexauRO3KKU2tPNgxCMFuKENAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUm0P9opFf 6cV1mlskkXYzz8q8f20wHwYDVR0jBBgwFoAU8uBzCSl2BY65hlYUFDf4+2i3IV0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNjJCLzYxQjM1NjE2MjQw NDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2NWhsWVVGRGY0LTJpM0lW MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHVCekNTbDJCWTY1aGxZVUZEZjQtMmkzSVYwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF NjJCLzYxQjM1NjE2MjQwNDExRjBBNEQwNzI3M0M0RjlBRTAyLzh1QnpDU2wyQlk2 NWhsWVVGRGY0LTJpM0lWMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMWqw+tz/t+FKAglhF/RcP5pMu1JkobM5ILLQaj32w7Rm+aI0dOvgsVC sRm38Uwz/P8degei0X423876+w1vEJFwLOzvygbWuXSD9a/GjDdcIzNjTSjg9Djg uzEFER2iSCS383NqjfV83cVcbJqj9wVUN0bd0Q6eoJPnJhjUmi63Rv3nSVOWawjW 0ZJopQ50EwuyixPrqbgV2y+81M2EGEBWzvNTaTQZfGHgR1XVYLX/xQYj2qdLwEVl cVlNbA3UyV8j7SiBgz9UtooYSzEqwnXeg8tGTv6ToHfR9UO/YhEUJEPx9MBQca7a xH4ILWOA/9+aJvrz2i061HDy+bzI2Cg= -----END CERTIFICATE-----Generated at Sat Aug 23 16:38:23 2025 by rpki-client