$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft File: F8IFAD4uuR49xG6qyJD20LUN5uI.mft (raw, json) Hash identifier: k4D/H3oT2JpQ0RWRa7qvihN5rqhZXZXf+3elHlTCIQ8= Subject key identifier: 27:2B:C0:75:D0:30:3A:10:A8:02:5B:39:27:70:79:A8:83:98:B7:5B Authority key identifier: 17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2 Certificate issuer: /CN=A9146AD7/serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2 Certificate serial: 01 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft Manifest number: 01 Signing time: Fri 22 Aug 2025 16:32:49 +0000 Manifest this update: Fri 22 Aug 2025 16:32:48 +0000 Manifest next update: Fri 29 Aug 2025 16:32:48 +0000 Files and hashes: 1: F8IFAD4uuR49xG6qyJD20LUN5uI.crl (hash: c+EfjuHejQsbJo/aOnx70vUCxidIYllMSmWxv0GQkkI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1 (0x1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146AD7, serialNumber=17C205003E2EB91E3DC46EAAC890F6D0B50DE6E2 Validity Not Before: Aug 22 16:32:48 2025 GMT Not After : Aug 29 16:32:48 2025 GMT Subject: CN=68a89bb1-09e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:2d:15:bd:79:ac:aa:7f:3f:e1:09:4f:7e: 78:58:bd:7c:2f:a7:cc:22:d7:bc:b4:45:a7:01:06: c7:95:26:bd:0b:5b:ba:d0:6f:b7:5c:44:09:17:2c: 4a:b6:00:3e:76:e3:da:74:16:01:11:f3:6d:c2:c9: ac:d0:5a:8c:9b:4f:d2:2b:92:8a:ee:a3:2a:b3:25: 26:23:12:02:f1:75:c9:39:44:67:4b:fb:36:ed:80: 59:63:b5:20:c7:26:43:af:2e:11:35:ed:64:9e:e9: d5:72:34:65:b2:1b:71:65:81:37:df:fb:24:e2:26: 1a:93:fa:8e:23:91:6f:e5:06:8a:51:eb:a3:6d:b8: e5:43:9b:e8:68:da:9c:bb:67:c1:b4:08:4a:7c:ec: eb:6c:f6:d7:0d:a8:66:dc:88:e3:6e:f3:8f:b2:37: 9d:5a:0a:36:24:4a:f6:b1:7e:82:26:ea:2f:0e:e2: be:5b:cc:11:c1:4c:19:86:38:56:15:c0:44:23:cd: d8:70:ec:99:92:ee:d8:15:6d:5f:24:46:f3:0b:55: d0:98:9e:53:51:71:17:8d:b7:78:e5:2e:d2:40:0d: 0d:9c:ab:f5:48:ec:b0:42:72:9d:df:18:c5:e4:58: 7d:de:92:8d:e7:c9:5b:09:9c:98:ca:5b:2b:b2:97: fe:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2B:C0:75:D0:30:3A:10:A8:02:5B:39:27:70:79:A8:83:98:B7:5B X509v3 Authority Key Identifier: keyid:17:C2:05:00:3E:2E:B9:1E:3D:C4:6E:AA:C8:90:F6:D0:B5:0D:E6:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F8IFAD4uuR49xG6qyJD20LUN5uI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/98CE88107F7511F0BD0F0863C4F9AE02/F8IFAD4uuR49xG6qyJD20LUN5uI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:1d:35:9b:f5:03:02:bc:1d:61:f8:67:41:49:af:d3:52:97: 86:81:89:1b:49:8f:14:a1:58:16:53:6e:a0:1c:01:cb:3e:a7: 0c:15:66:8e:d9:78:4d:ef:e2:28:db:f0:7f:a3:66:c1:bd:25: 0f:32:2c:d8:4c:cf:88:29:06:05:7e:af:0e:70:e4:a9:cd:a7: 2c:29:67:61:ff:6c:1b:fc:0b:df:dc:79:e9:bb:02:e4:aa:64: 1f:ac:e5:05:b1:51:18:b6:c2:84:87:06:1a:cc:23:c0:36:38: d4:e9:62:61:66:08:20:d9:42:12:d1:b1:ff:60:e7:b8:6c:51: 30:f0:9d:ec:69:64:52:54:f5:32:ba:89:eb:4f:16:d5:64:cc: 3a:4a:5b:95:7f:97:cc:2b:7c:03:c8:2e:96:f5:cd:43:2c:53: 8d:77:e6:4d:cc:69:d6:a3:e4:eb:9f:da:97:b7:7b:4f:1d:4a: f7:fd:88:bb:95:e8:a8:8b:a0:fb:00:8e:02:59:89:46:c1:48: cc:d4:cc:80:0d:3d:a7:6b:a0:60:3d:ea:e6:df:4b:7b:0e:ac: 52:b8:52:8d:17:e8:a0:42:1c:9c:d4:f9:78:b7:03:86:ef:0f: 0a:9c:be:be:0c:7a:ff:d7:1a:6c:2a:4f:67:df:2c:98:a1:81: d5:8d:8b:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBATANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NkFENzExMC8GA1UEBRMoMTdDMjA1MDAzRTJFQjkxRTNEQzQ2RUFBQzg5MEY2RDBC NTBERTZFMjAeFw0yNTA4MjIxNjMyNDhaFw0yNTA4MjkxNjMyNDhaMBgxFjAUBgNV BAMTDTY4YTg5YmIxLTA5ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7ri0VvXmsqn8/4QlPfnhYvXwvp8wi17y0RacBBseVJr0LW7rQb7dcRAkXLEq2 AD5249p0FgER823CyazQWoybT9IrkoruoyqzJSYjEgLxdck5RGdL+zbtgFljtSDH JkOvLhE17WSe6dVyNGWyG3FlgTff+yTiJhqT+o4jkW/lBopR66NtuOVDm+ho2py7 Z8G0CEp87Ots9tcNqGbciONu84+yN51aCjYkSvaxfoIm6i8O4r5bzBHBTBmGOFYV wEQjzdhw7JmS7tgVbV8kRvMLVdCYnlNRcReNt3jlLtJADQ2cq/VI7LBCcp3fGMXk WH3eko3nyVsJnJjKWyuyl/6bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJyvAddAw OhCoAls5J3B5qIOYt1swHwYDVR0jBBgwFoAUF8IFAD4uuR49xG6qyJD20LUN5uIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2QUQ3Lzk4Q0U4ODEwN0Y3 NTExRjBCRDBGMDg2M0M0RjlBRTAyL0Y4SUZBRDR1dVI0OXhHNnF5SkQyMExVTjV1 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjhJRkFENHV1UjQ5eEc2cXlKRDIwTFVONXVJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2 QUQ3Lzk4Q0U4ODEwN0Y3NTExRjBCRDBGMDg2M0M0RjlBRTAyL0Y4SUZBRDR1dVI0 OXhHNnF5SkQyMExVTjV1SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACYdNZv1AwK8HWH4Z0FJr9NSl4aBiRtJjxShWBZTbqAcAcs+pwwVZo7Z eE3v4ijb8H+jZsG9JQ8yLNhMz4gpBgV+rw5w5KnNpywpZ2H/bBv8C9/ceem7AuSq ZB+s5QWxURi2woSHBhrMI8A2ONTpYmFmCCDZQhLRsf9g57hsUTDwnexpZFJU9TK6 ietPFtVkzDpKW5V/l8wrfAPILpb1zUMsU4135k3Madaj5Ouf2pe3e08dSvf9iLuV 6KiLoPsAjgJZiUbBSMzUzIANPadroGA96ubfS3sOrFK4Uo0X6KBCHJzU+Xi3A4bv Dwqcvr4Mev/XGmwqT2ffLJihgdWNi4U= -----END CERTIFICATE-----Generated at Sat Aug 23 12:32:23 2025 by rpki-client