$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft File: 8yjXnK7LFF8i39-M3sLQVpxpdnw.mft (raw, json) Hash identifier: RX03lDERAV9cCJOvwM+TClSuVULVa9bb70VeRVYfFcQ= Subject key identifier: 45:A2:25:2E:9C:82:C4:78:4B:86:6B:30:89:44:81:1F:86:CD:1D:86 Authority key identifier: F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C Certificate issuer: /CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Certificate serial: 0A97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft Manifest number: 13C5 Signing time: Fri 22 Aug 2025 19:41:47 +0000 Manifest this update: Fri 22 Aug 2025 19:41:46 +0000 Manifest next update: Fri 29 Aug 2025 19:41:46 +0000 Files and hashes: 1: 8yjXnK7LFF8i39-M3sLQVpxpdnw.crl (hash: cH4heVXL4kd+Pbos99mvZhx/7Ty0DypfXvqApTqrFNs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2711 (0xa97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Validity Not Before: Aug 22 19:41:46 2025 GMT Not After : Aug 29 19:41:46 2025 GMT Subject: CN=68a8c7fa-4070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:d7:af:64:80:fa:f7:7b:f0:72:ba:a5:02: ee:94:35:5e:9e:ee:c4:13:95:9d:f9:f9:e4:e5:de: ec:b5:59:39:57:bd:5f:9e:30:91:69:a2:d8:fd:ec: f6:b2:a2:15:8b:25:28:73:61:f0:5b:7d:0f:ff:25: ab:3f:ae:7b:59:17:40:4e:cd:d6:d7:b3:40:21:f0: 62:39:e7:fa:72:a1:3a:80:b3:88:37:a3:43:34:3f: e2:70:16:6b:8b:ac:46:74:8a:35:a9:fd:c9:9e:d5: 89:b5:72:af:f8:6c:3a:76:68:57:18:a6:e3:8e:55: 87:a9:68:93:ba:c0:bc:14:3e:41:ed:37:3c:e4:20: 26:12:e6:1f:be:82:f1:fc:aa:10:eb:b4:19:a1:85: f9:ff:97:78:47:0f:a6:06:e2:f5:72:36:44:d3:e7: 0e:f6:5d:c4:53:c3:a8:12:cb:2f:31:b2:7b:02:9c: 3f:d4:78:3c:5b:7e:af:65:10:24:3f:ad:d9:8d:be: 19:b2:ac:f8:ab:df:a5:60:99:b5:bb:d3:1d:93:04: 04:a9:61:25:a9:44:54:7b:84:b0:c7:0f:58:b7:f5: 79:1b:d0:be:71:17:af:a0:dc:0f:de:51:d5:03:bc: 16:43:ac:47:d2:ee:a4:d8:8e:d7:17:2c:3d:bd:26: 62:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A2:25:2E:9C:82:C4:78:4B:86:6B:30:89:44:81:1F:86:CD:1D:86 X509v3 Authority Key Identifier: keyid:F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:9c:ce:e7:2d:e1:16:23:74:f7:df:55:06:27:eb:de:db:92: b0:11:c7:36:78:0b:18:1f:ca:4c:7c:bf:be:51:5f:f3:9f:74: 34:3b:c2:0b:de:6c:db:92:13:05:a8:d0:b6:60:2e:41:1d:db: 77:28:61:31:a9:54:f1:fd:50:b9:6f:09:03:95:54:d5:7c:f6: a4:2b:d8:e5:99:1f:bb:78:87:b8:5c:34:69:3a:f6:89:a1:85: 55:e0:14:8c:58:48:db:48:27:30:4a:35:db:e6:f2:93:a7:bc: 9b:8f:76:55:b4:24:fd:a1:25:17:06:51:dd:8a:b8:6b:56:b8: 6d:2d:8a:dc:9f:a7:fc:77:2c:7a:9e:5e:36:2d:39:a0:87:07: 04:53:b1:92:7e:6c:98:9a:93:f2:0b:f7:cb:ba:0d:69:d6:13: 1f:e8:e0:6e:b8:a2:3f:0f:c6:8b:fe:94:e5:df:c1:44:fb:f5: bf:85:e0:25:66:1d:2b:85:1a:42:c0:25:ba:1d:5c:43:bb:75: d6:13:0d:d4:24:a7:2b:17:ec:1b:6f:fd:28:31:c8:d1:3f:b7: 60:51:9c:20:12:e2:50:e3:fe:bc:cc:be:86:82:bd:63:4e:c5: 6b:c2:ee:a3:f7:87:70:ea:30:8b:e1:56:66:fc:dd:ba:0d:90: f0:dd:a0:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKEYzMjhENzlDQUVDQjE0NUYyMkRGREY4Q0RFQzJEMDU2 OUM2OTc2N0MwHhcNMjUwODIyMTk0MTQ2WhcNMjUwODI5MTk0MTQ2WjAYMRYwFAYD VQQDEw02OGE4YzdmYS00MDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5XXr2SA+vd78HK6pQLulDVenu7EE5Wd+fnk5d7stVk5V71fnjCRaaLY/ez2 sqIViyUoc2HwW30P/yWrP657WRdATs3W17NAIfBiOef6cqE6gLOIN6NDND/icBZr i6xGdIo1qf3JntWJtXKv+Gw6dmhXGKbjjlWHqWiTusC8FD5B7Tc85CAmEuYfvoLx /KoQ67QZoYX5/5d4Rw+mBuL1cjZE0+cO9l3EU8OoEssvMbJ7Apw/1Hg8W36vZRAk P63Zjb4Zsqz4q9+lYJm1u9MdkwQEqWElqURUe4Swxw9Yt/V5G9C+cRevoNwP3lHV A7wWQ6xH0u6k2I7XFyw9vSZiaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWiJS6c gsR4S4ZrMIlEgR+GzR2GMB8GA1UdIwQYMBaAFPMo15yuyxRfIt/fjN7C0FacaXZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZGOGkzOS1NM3NMUVZweHBk bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh5alhuSzdMRkY4aTM5LU0zc0xRVnB4cGRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZG OGkzOS1NM3NMUVZweHBkbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCnM7nLeEWI3T331UGJ+ve25KwEcc2eAsYH8pMfL++UV/zn3Q0O8IL 3mzbkhMFqNC2YC5BHdt3KGExqVTx/VC5bwkDlVTVfPakK9jlmR+7eIe4XDRpOvaJ oYVV4BSMWEjbSCcwSjXb5vKTp7ybj3ZVtCT9oSUXBlHdirhrVrhtLYrcn6f8dyx6 nl42LTmghwcEU7GSfmyYmpPyC/fLug1p1hMf6OBuuKI/D8aL/pTl38FE+/W/heAl Zh0rhRpCwCW6HVxDu3XWEw3UJKcrF+wbb/0oMcjRP7dgUZwgEuJQ4/68zL6Ggr1j TsVrwu6j94dw6jCL4VZm/N26DZDw3aAf -----END CERTIFICATE-----Generated at Sat Aug 23 15:14:18 2025 by rpki-client