$ rpki-client -vvf rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft File: 8gl4uKIsE6CwK586X8LUiKuovtU.mft (raw, json) Hash identifier: X5qfvdbwN7NdgreNQ7RY+KVguGlQsxJ9l0YO/w1m/sY= Subject key identifier: C3:B8:88:CE:35:CD:AD:21:FE:79:64:04:5E:45:7C:22:C1:08:4F:96 Authority key identifier: F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5 Certificate issuer: /CN=A914653C/serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5 Certificate serial: 0A1B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft Manifest number: 0A15 Signing time: Fri 22 Aug 2025 19:56:00 +0000 Manifest this update: Fri 22 Aug 2025 19:56:00 +0000 Manifest next update: Fri 29 Aug 2025 19:56:00 +0000 Files and hashes: 1: 8gl4uKIsE6CwK586X8LUiKuovtU.crl (hash: FvZx/wtuXwiY+OZOlJ/A980cZd4xtEa9y8R5nADnwMI=) 2: BD7E578079E011EA8DD5907FC4F9AE02.roa (hash: iYxIY6VXdTf7gHnwepU+/VGZkh/V1c1cIjc+gsTh8TE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2587 (0xa1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914653C, serialNumber=F20978B8A22C13A0B02B9F3A5FC2D488ABA8BED5 Validity Not Before: Aug 22 19:56:00 2025 GMT Not After : Aug 29 19:56:00 2025 GMT Subject: CN=68a8cb50-0262 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:c9:2a:d9:05:4d:10:02:a1:1e:55:9e:db: af:1b:c3:8c:21:62:ce:f8:7d:e0:f0:7b:fb:8b:c2: 7c:8a:80:86:9b:2d:cd:35:1a:aa:04:95:7e:cc:ae: 3d:36:07:0f:ed:33:aa:8f:e3:19:bd:06:30:0b:35: ad:31:3c:8f:cd:af:ec:f4:0f:b9:d4:21:e8:c7:5c: 41:95:e5:8c:d1:08:4e:60:61:ef:ce:ac:5a:13:e9: 2a:ae:0c:cd:f4:62:ef:3e:d3:ae:6d:d6:69:ea:23: f4:66:b5:6c:56:88:20:7a:7e:75:46:7e:82:dc:8b: 64:9a:b7:ca:14:e1:de:58:f3:ef:f3:ce:77:8a:66: 92:1e:4e:a3:71:23:25:64:0e:8e:4d:bb:9d:5a:59: 48:1a:02:82:a5:17:35:c5:20:57:b0:ad:98:6d:35: c0:95:0a:f8:6b:8e:cd:70:cf:30:52:5c:39:22:47: 21:70:cd:f1:69:64:48:de:59:d1:d9:45:4e:31:6e: a1:5c:81:b9:aa:99:91:41:f9:0a:d6:26:ed:df:33: 7c:7a:4f:ff:5d:5a:ea:ff:51:3c:d7:5e:8d:9a:8c: 47:ca:63:22:4b:da:b9:93:bb:37:df:d0:03:e0:f5: 22:ea:74:80:4a:56:54:e5:f9:e6:cb:ee:f2:8e:35: 05:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B8:88:CE:35:CD:AD:21:FE:79:64:04:5E:45:7C:22:C1:08:4F:96 X509v3 Authority Key Identifier: keyid:F2:09:78:B8:A2:2C:13:A0:B0:2B:9F:3A:5F:C2:D4:88:AB:A8:BE:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gl4uKIsE6CwK586X8LUiKuovtU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914653C/5BA8782079DF11EABC9D977DC4F9AE02/8gl4uKIsE6CwK586X8LUiKuovtU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:f3:16:4c:cb:04:ad:13:8a:b2:1e:94:d2:37:90:6f:a0:77: aa:d3:2e:11:5f:1b:f4:27:ce:17:9c:32:b6:1a:06:96:10:db: 74:d6:d7:45:31:4c:51:b1:ac:74:f6:aa:69:ee:31:c0:0e:34: f2:4a:09:71:91:ca:34:5e:4d:c1:54:74:2f:e8:04:bc:56:6d: d9:09:47:df:48:2f:ff:1c:e1:5d:bc:b2:57:e3:66:83:5c:14: 65:26:d6:87:8b:b5:5d:fd:90:09:b6:a3:de:cf:05:f6:91:ce: 6d:69:d5:85:86:03:a3:bf:b3:88:b2:be:61:5d:7b:16:68:e0: 65:e4:5a:4e:2d:35:42:24:50:7a:78:22:fc:55:fd:dc:0d:4b: 89:59:63:28:3d:50:93:34:d8:94:09:7e:27:31:4e:95:26:2e: 69:66:7b:f6:cd:da:b2:79:ba:3a:c5:66:48:6c:23:0c:6e:93: 66:82:04:4f:b4:6b:32:9d:25:f2:d3:28:35:b1:44:84:98:d1: 17:fa:ae:21:85:e5:37:2b:df:ed:ca:e1:6e:69:32:05:b9:0c: 53:62:e5:96:06:e5:14:8a:7b:68:53:b3:d9:57:f9:9b:b0:fb: 70:69:67:90:30:c0:cf:5c:d3:fc:83:0d:a5:e0:6a:b4:49:5d: f4:25:22:98 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDY1M0MxMTAvBgNVBAUTKEYyMDk3OEI4QTIyQzEzQTBCMDJCOUYzQTVGQzJENDg4 QUJBOEJFRDUwHhcNMjUwODIyMTk1NjAwWhcNMjUwODI5MTk1NjAwWjAYMRYwFAYD VQQDEw02OGE4Y2I1MC0wMjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qPJKtkFTRACoR5VntuvG8OMIWLO+H3g8Hv7i8J8ioCGmy3NNRqqBJV+zK49 NgcP7TOqj+MZvQYwCzWtMTyPza/s9A+51CHox1xBleWM0QhOYGHvzqxaE+kqrgzN 9GLvPtOubdZp6iP0ZrVsVoggen51Rn6C3ItkmrfKFOHeWPPv8853imaSHk6jcSMl ZA6OTbudWllIGgKCpRc1xSBXsK2YbTXAlQr4a47NcM8wUlw5IkchcM3xaWRI3lnR 2UVOMW6hXIG5qpmRQfkK1ibt3zN8ek//XVrq/1E8116NmoxHymMiS9q5k7s339AD 4PUi6nSASlZU5fnmy+7yjjUFSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMO4iM41 za0h/nlkBF5FfCLBCE+WMB8GA1UdIwQYMBaAFPIJeLiiLBOgsCufOl/C1IirqL7V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjUzQy81QkE4NzgyMDc5 REYxMUVBQkM5RDk3N0RDNEY5QUUwMi84Z2w0dUtJc0U2Q3dLNTg2WDhMVWlLdW92 dFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnbDR1S0lzRTZDd0s1ODZYOExVaUt1b3Z0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NjUzQy81QkE4NzgyMDc5REYxMUVBQkM5RDk3N0RDNEY5QUUwMi84Z2w0dUtJc0U2 Q3dLNTg2WDhMVWlLdW92dFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC38xZMywStE4qyHpTSN5BvoHeq0y4RXxv0J84XnDK2GgaWENt01tdF MUxRsax09qpp7jHADjTySglxkco0Xk3BVHQv6AS8Vm3ZCUffSC//HOFdvLJX42aD XBRlJtaHi7Vd/ZAJtqPezwX2kc5tadWFhgOjv7OIsr5hXXsWaOBl5FpOLTVCJFB6 eCL8Vf3cDUuJWWMoPVCTNNiUCX4nMU6VJi5pZnv2zdqyebo6xWZIbCMMbpNmggRP tGsynSXy0yg1sUSEmNEX+q4hheU3K9/tyuFuaTIFuQxTYuWWBuUUintoU7PZV/mb sPtwaWeQMMDPXNP8gw2l4Gq0SV30JSKY -----END CERTIFICATE-----Generated at Sat Aug 23 14:24:56 2025 by rpki-client