$ rpki-client -vvf rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft File: s8jMSc2pmXofeyj1RvyRIdqhkzw.mft (raw, json) Hash identifier: 2DZxJ0qJQTbYL4FN8X41ixPbsg4yp8E6E0NZgIU8wno= Subject key identifier: FA:E9:A6:A8:07:E1:81:E2:FB:2A:13:00:00:7D:6C:C9:05:09:EF:B3 Authority key identifier: B3:C8:CC:49:CD:A9:99:7A:1F:7B:28:F5:46:FC:91:21:DA:A1:93:3C Certificate issuer: /CN=A913E83E/serialNumber=B3C8CC49CDA9997A1F7B28F546FC9121DAA1933C Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft Manifest number: 1D Signing time: Sat 23 Aug 2025 08:06:41 +0000 Manifest this update: Sat 23 Aug 2025 08:06:41 +0000 Manifest next update: Sat 30 Aug 2025 08:06:41 +0000 Files and hashes: 1: s8jMSc2pmXofeyj1RvyRIdqhkzw.crl (hash: XLgDYDCeoPqVfgYtiqNL+yzyrctycs8YPH0sYbBKwR8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.crl rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E83E, serialNumber=B3C8CC49CDA9997A1F7B28F546FC9121DAA1933C Validity Not Before: Aug 23 08:06:41 2025 GMT Not After : Aug 30 08:06:41 2025 GMT Subject: CN=68a97691-dd01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fc:78:aa:47:ec:e9:00:d8:fc:86:46:0a:cf: fa:04:19:e8:e7:2c:8d:4b:38:f7:bd:f0:46:00:01: 0d:e1:c0:12:bd:cf:2d:3e:65:e7:7f:5e:4b:c1:2e: 47:da:b9:37:e4:ef:ba:a1:62:e0:75:e9:d7:1e:eb: 98:d2:ae:d5:d3:c3:a9:2c:dc:30:f7:f2:be:d6:01: e1:75:b6:6a:81:42:5f:80:c1:83:60:b6:5f:08:c0: c8:f9:e6:cb:0a:d6:4a:46:17:9f:ce:e4:5f:63:8a: f4:de:e1:07:74:76:ec:1b:38:80:5d:4f:89:0d:09: 55:f4:4a:30:b9:1a:9e:23:08:33:df:cb:c3:92:23: 4d:67:d7:96:03:33:3f:bf:41:ea:5a:05:7e:d6:fd: d3:bd:df:30:c4:f0:b1:8d:5a:aa:f3:2b:bc:c5:1f: 82:c2:80:5a:db:be:68:58:3e:6e:47:89:4f:22:e4: 8a:26:3a:26:ac:f6:22:03:b3:f6:f4:74:bc:1f:ed: c8:ca:6b:a8:b6:95:8b:d5:50:53:44:cc:fb:64:b0: a1:82:6a:59:58:ff:96:fa:a3:d4:05:74:ef:98:5f: 6a:cf:cb:de:13:78:3b:b3:ad:2e:6d:f1:2d:81:a8: 5d:dc:51:2c:a4:d4:02:1a:b2:87:c9:5f:2c:ab:00: 17:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E9:A6:A8:07:E1:81:E2:FB:2A:13:00:00:7D:6C:C9:05:09:EF:B3 X509v3 Authority Key Identifier: keyid:B3:C8:CC:49:CD:A9:99:7A:1F:7B:28:F5:46:FC:91:21:DA:A1:93:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5e:39:fd:f5:ea:71:23:ab:5f:1d:e5:e7:2d:d7:57:6f:86: 1f:39:33:dc:bc:79:9e:91:5d:53:a5:44:87:5c:b4:6f:22:42: 19:80:69:d9:a3:c0:19:0f:8b:e6:a6:7c:b8:0b:c6:89:50:23: 1a:e1:3f:0c:03:a5:9c:1f:4c:3a:e4:03:0f:87:38:d8:17:8c: e3:45:88:67:32:37:a3:2d:b0:7f:e2:7d:c7:56:74:92:53:09: e9:e5:f4:55:ef:5a:5b:bc:08:d4:70:8d:a2:d5:65:6e:aa:ba: fa:9f:f5:d8:9b:2c:47:8c:99:dd:9d:63:cd:5f:f1:3b:25:77: 63:17:81:9e:e6:cf:ec:86:5b:f0:ef:0f:d4:ca:cd:92:bc:24: 74:8e:0b:80:b8:c1:53:2d:05:37:23:57:83:48:31:d2:5d:9e: c9:4a:51:df:8f:28:cf:cf:f0:38:80:da:2c:cb:2b:cc:9c:0c: 88:12:3a:9a:19:1e:6e:b6:46:d4:5b:48:dc:41:c1:d3:d7:92: 84:f2:e5:78:91:f5:0c:a7:87:22:26:7d:c1:7d:58:45:f1:4b: bf:91:66:c9:29:1e:a7:eb:cb:b3:a2:0c:3a:46:7d:43:3e:98: 6e:d1:ed:9a:c7:c3:98:2e:02:88:e6:14:95:7a:5b:55:d2:e4: e9:a6:1a:79 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTgzRTExMC8GA1UEBRMoQjNDOENDNDlDREE5OTk3QTFGN0IyOEY1NDZGQzkxMjFE QUExOTMzQzAeFw0yNTA4MjMwODA2NDFaFw0yNTA4MzAwODA2NDFaMBgxFjAUBgNV BAMTDTY4YTk3NjkxLWRkMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDI/HiqR+zpANj8hkYKz/oEGejnLI1LOPe98EYAAQ3hwBK9zy0+Zed/XkvBLkfa uTfk77qhYuB16dce65jSrtXTw6ks3DD38r7WAeF1tmqBQl+AwYNgtl8IwMj55ssK 1kpGF5/O5F9jivTe4Qd0duwbOIBdT4kNCVX0SjC5Gp4jCDPfy8OSI01n15YDMz+/ QepaBX7W/dO93zDE8LGNWqrzK7zFH4LCgFrbvmhYPm5HiU8i5IomOias9iIDs/b0 dLwf7cjKa6i2lYvVUFNEzPtksKGCallY/5b6o9QFdO+YX2rPy94TeDuzrS5t8S2B qF3cUSyk1AIasofJXyyrABfTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+ummqAfh geL7KhMAAH1syQUJ77MwHwYDVR0jBBgwFoAUs8jMSc2pmXofeyj1RvyRIdqhkzww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFODNFL0YzOTEwQzkwNTYz MTExRjBBMUFBRTI0REM0RjlBRTAyL3M4ak1TYzJwbVhvZmV5ajFSdnlSSWRxaGt6 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvczhqTVNjMnBtWG9mZXlqMVJ2eVJJZHFoa3p3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF ODNFL0YzOTEwQzkwNTYzMTExRjBBMUFBRTI0REM0RjlBRTAyL3M4ak1TYzJwbVhv ZmV5ajFSdnlSSWRxaGt6dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC5eOf316nEjq18d5ect11dvhh85M9y8eZ6RXVOlRIdctG8iQhmAadmj wBkPi+amfLgLxolQIxrhPwwDpZwfTDrkAw+HONgXjONFiGcyN6MtsH/ifcdWdJJT Cenl9FXvWlu8CNRwjaLVZW6quvqf9dibLEeMmd2dY81f8Tsld2MXgZ7mz+yGW/Dv D9TKzZK8JHSOC4C4wVMtBTcjV4NIMdJdnslKUd+PKM/P8DiA2izLK8ycDIgSOpoZ Hm62RtRbSNxBwdPXkoTy5XiR9QynhyImfcF9WEXxS7+RZskpHqfry7OiDDpGfUM+ mG7R7ZrHw5guAojmFJV6W1XS5OmmGnk= -----END CERTIFICATE-----Generated at Sat Aug 23 20:30:23 2025 by rpki-client