$ rpki-client -vvf rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft File: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft (raw, json) Hash identifier: pPARxuPUn3D/VN447rrO5k3cy9Ascyv9UbpOIQO4TKI= Subject key identifier: 10:95:BA:FE:6A:10:2D:7A:6C:5A:35:0B:D3:73:96:CA:9F:26:2E:2C Authority key identifier: F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05 Certificate issuer: /CN=A9140332/serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft Manifest number: 1B Signing time: Sat 23 Aug 2025 08:16:22 +0000 Manifest this update: Sat 23 Aug 2025 08:16:22 +0000 Manifest next update: Sat 30 Aug 2025 08:16:22 +0000 Files and hashes: 1: 8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl (hash: thz2RPq9EPC2+nkscfoKd6hAp18tm8T+0SiWorsTWE4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140332, serialNumber=F142FA9074F155593D44C3D1D014A7DE39737305 Validity Not Before: Aug 23 08:16:22 2025 GMT Not After : Aug 30 08:16:22 2025 GMT Subject: CN=68a978d6-c92f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cc:d6:35:7d:5b:68:b7:2e:da:b4:39:3d:78: 35:ae:df:8a:29:c0:30:cb:3e:6f:42:3b:30:e6:5a: ad:0f:7e:d8:b4:63:d7:6a:d5:be:90:bd:57:63:4b: b2:b2:4f:15:35:26:ab:fd:22:9f:c2:f1:8e:00:0c: b6:b1:f3:74:7f:e1:19:f0:fe:23:02:06:a7:2b:d2: 62:22:f1:7f:a8:27:a9:3b:8d:61:f7:af:0a:ae:d8: f6:1f:c7:53:66:5b:49:bc:86:aa:ba:bc:82:2e:6b: 41:6a:4f:d3:d7:47:bc:8b:fb:15:2f:72:b4:56:14: fe:43:55:60:0a:e6:4a:94:bd:dd:04:0a:70:77:90: 57:ec:22:1c:42:05:b9:69:26:9c:70:66:50:9d:0b: 0b:4b:37:ed:72:8e:ed:df:de:bb:e5:b7:be:dc:36: 3b:c0:71:3f:bf:16:eb:1a:b3:13:78:f0:88:73:1c: 20:d4:57:97:6a:cf:1a:0c:8c:cd:b7:4e:54:f9:82: df:4c:48:d3:1a:a2:26:fb:cd:80:21:2a:b8:a4:c8: 7c:9d:61:1f:17:bd:1d:0b:83:0b:ab:f2:ac:87:ff: b9:ad:f7:2d:60:fe:64:61:72:c1:30:dd:c8:8a:3f: f7:54:61:95:54:b2:f6:0e:e1:c3:ef:a7:b5:da:15: 7c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:95:BA:FE:6A:10:2D:7A:6C:5A:35:0B:D3:73:96:CA:9F:26:2E:2C X509v3 Authority Key Identifier: keyid:F1:42:FA:90:74:F1:55:59:3D:44:C3:D1:D0:14:A7:DE:39:73:73:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8UL6kHTxVVk9RMPR0BSn3jlzcwU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140332/47E1C61665F211F081B9F11DC4F9AE02/8UL6kHTxVVk9RMPR0BSn3jlzcwU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ea:3f:7c:7d:4a:07:4a:fb:95:06:58:6c:35:e0:82:b6:3f: 25:88:86:84:ea:fe:c0:e9:5d:41:b2:6f:35:3d:6a:6c:c2:04: 92:6e:78:ca:bc:58:c3:3c:64:15:a8:47:c2:cf:57:8f:8c:1c: 4e:26:16:4b:76:57:f5:bb:78:3e:e4:8c:bf:8e:71:66:ed:f3: e7:8e:87:c2:92:d3:18:f2:89:24:61:01:b6:ab:11:78:cd:b2: 6b:f2:eb:fc:26:64:10:ea:13:12:f2:e1:96:41:76:cf:e8:13: 5e:f3:5e:de:99:96:46:e6:89:6e:fc:a6:30:09:2c:08:bf:ad: 00:a4:5c:fc:21:6e:c6:3c:43:fc:ee:e7:58:98:87:bd:9e:fd: 1e:9c:e5:49:8d:5a:22:7b:c8:54:af:11:e0:93:e2:58:f4:06: 07:d6:b5:0d:b3:44:ab:07:18:c7:d9:38:b5:43:cf:32:6c:97: 36:46:96:52:1a:a0:e5:40:9f:58:97:88:0f:36:e1:a4:27:64: ca:60:2f:21:01:07:66:ba:ce:53:51:b1:16:db:9c:31:c4:d0: 8b:c9:83:70:40:8b:cb:e3:ca:29:c0:52:ce:27:3a:5d:b5:18: 3d:69:5b:f4:00:b4:6c:8c:84:5a:8d:47:73:b3:3e:5b:6f:5e: 28:d4:29:e2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MDMzMjExMC8GA1UEBRMoRjE0MkZBOTA3NEYxNTU1OTNENDRDM0QxRDAxNEE3REUz OTczNzMwNTAeFw0yNTA4MjMwODE2MjJaFw0yNTA4MzAwODE2MjJaMBgxFjAUBgNV BAMTDTY4YTk3OGQ2LWM5MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUzNY1fVtoty7atDk9eDWu34opwDDLPm9COzDmWq0Pfti0Y9dq1b6QvVdjS7Ky TxU1Jqv9Ip/C8Y4ADLax83R/4Rnw/iMCBqcr0mIi8X+oJ6k7jWH3rwqu2PYfx1Nm W0m8hqq6vIIua0FqT9PXR7yL+xUvcrRWFP5DVWAK5kqUvd0ECnB3kFfsIhxCBblp JpxwZlCdCwtLN+1yju3f3rvlt77cNjvAcT+/FusasxN48IhzHCDUV5dqzxoMjM23 TlT5gt9MSNMaoib7zYAhKrikyHydYR8XvR0Lgwur8qyH/7mt9y1g/mRhcsEw3ciK P/dUYZVUsvYO4cPvp7XaFXznAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEJW6/moQ LXpsWjUL03OWyp8mLiwwHwYDVR0jBBgwFoAU8UL6kHTxVVk9RMPR0BSn3jlzcwUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQwMzMyLzQ3RTFDNjE2NjVG MjExRjA4MUI5RjExREM0RjlBRTAyLzhVTDZrSFR4VlZrOVJNUFIwQlNuM2psemN3 VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOFVMNmtIVHhWVms5Uk1QUjBCU24zamx6Y3dVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQw MzMyLzQ3RTFDNjE2NjVGMjExRjA4MUI5RjExREM0RjlBRTAyLzhVTDZrSFR4VlZr OVJNUFIwQlNuM2psemN3VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAXqP3x9SgdK+5UGWGw14IK2PyWIhoTq/sDpXUGybzU9amzCBJJueMq8 WMM8ZBWoR8LPV4+MHE4mFkt2V/W7eD7kjL+OcWbt8+eOh8KS0xjyiSRhAbarEXjN smvy6/wmZBDqExLy4ZZBds/oE17zXt6ZlkbmiW78pjAJLAi/rQCkXPwhbsY8Q/zu 51iYh72e/R6c5UmNWiJ7yFSvEeCT4lj0BgfWtQ2zRKsHGMfZOLVDzzJslzZGllIa oOVAn1iXiA824aQnZMpgLyEBB2a6zlNRsRbbnDHE0IvJg3BAi8vjyinAUs4nOl21 GD1pW/QAtGyMhFqNR3OzPltvXijUKeI= -----END CERTIFICATE-----Generated at Sun Aug 24 01:00:52 2025 by rpki-client