$ rpki-client -vvf rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft File: 8D9Vyycfxbb31KiIeAuNi2qQWA0.mft (raw, json) Hash identifier: qKWLGtBuQEQiQ4X+lcdx1eFOsNACsJRCy6ZgzvkJMoo= Subject key identifier: 9F:DB:EF:D4:93:10:B6:A8:CD:9A:49:68:07:E1:F6:6D:C8:08:F6:48 Authority key identifier: F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D Certificate issuer: /CN=A91493CC/serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft Manifest number: 019B Signing time: Sat 23 Aug 2025 03:29:16 +0000 Manifest this update: Sat 23 Aug 2025 03:29:15 +0000 Manifest next update: Sat 30 Aug 2025 03:29:15 +0000 Files and hashes: 1: 8D9Vyycfxbb31KiIeAuNi2qQWA0.crl (hash: jTTWNFoYeRuSS+mDBncPz2fDeHw3p0RAKnOMbJCCO0s=) 2: B50741120AFF11EEBADB6A67C4F9AE02.roa (hash: 6xfHA0xOfSf1bsWXYgETgvu/Qg0LpdZ4QedkQYTwxII=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91493CC, serialNumber=F03F55CB271FC5B6F7D4A888780B8D8B6A90580D Validity Not Before: Aug 23 03:29:15 2025 GMT Not After : Aug 30 03:29:15 2025 GMT Subject: CN=68a9358b-96a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:1a:f7:b1:fa:cc:63:2b:61:fe:e9:96:ea: 60:3f:7d:c0:0c:12:8e:24:69:14:9d:0e:f7:5d:b2: c5:4b:cc:ba:e0:e0:4b:86:65:77:57:87:20:67:ae: ea:bf:16:d5:53:c3:aa:36:ad:6a:b5:ae:8d:5e:3f: d1:f4:d7:9f:3c:82:9a:67:3d:98:f8:84:0d:6c:7e: bc:3a:1a:ee:01:20:51:8a:e6:cf:82:89:ff:6b:82: e6:c5:10:21:21:57:e3:85:7b:20:b7:f2:81:b9:21: 7f:04:c8:55:c3:f7:20:73:9e:86:2f:f6:c4:ed:97: 55:b3:0a:a5:86:e1:37:28:63:2d:95:8e:d0:4e:47: 3b:a3:23:1b:e5:4e:33:07:90:fa:bf:1f:5f:71:e8: dd:3e:c8:a6:db:26:73:88:7c:da:4a:48:18:bd:15: 65:fb:59:e1:2b:3b:cc:b9:67:93:3a:10:97:64:31: 5e:fe:a0:d8:29:4f:54:70:22:e7:51:32:05:48:d8: 12:51:44:09:c9:f2:34:d6:b8:9e:4c:8e:86:ee:24: 86:42:36:91:3f:f3:43:39:25:9b:f3:54:f9:d7:84: 42:66:62:5d:fc:18:b9:a8:87:92:4c:8d:e7:59:08: 22:f0:7d:92:ed:62:39:c6:05:04:fd:10:d2:6c:57: 9c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DB:EF:D4:93:10:B6:A8:CD:9A:49:68:07:E1:F6:6D:C8:08:F6:48 X509v3 Authority Key Identifier: keyid:F0:3F:55:CB:27:1F:C5:B6:F7:D4:A8:88:78:0B:8D:8B:6A:90:58:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8D9Vyycfxbb31KiIeAuNi2qQWA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91493CC/EA1703640AFB11EEA06A2367C4F9AE02/8D9Vyycfxbb31KiIeAuNi2qQWA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:57:af:7b:84:86:71:1d:75:ad:2c:d7:2d:47:79:8e:ac:44: 29:ba:5c:fa:48:04:92:f1:7d:72:a7:e7:be:79:ec:a3:6b:38: c6:ae:e0:86:ce:d5:fe:1d:3b:26:5b:d9:9c:9c:b4:d3:1e:a5: aa:58:2a:ce:cd:7e:1e:28:d6:6f:10:3c:c5:45:fb:7a:9a:28: e5:85:c2:1c:ad:a6:fb:62:2a:1d:2d:36:a9:3f:94:0a:83:e0: 70:7c:d1:72:c7:b7:0d:51:b0:03:aa:88:49:c4:1b:dd:0b:56: ef:3b:2a:4f:32:81:11:95:b4:9e:32:16:20:31:e2:83:41:ee: e4:87:fa:cf:67:83:ff:48:83:10:b4:85:ff:b8:2d:43:8f:08: 1a:a0:ff:59:b4:28:c3:90:96:5c:eb:6f:11:08:73:bf:ef:4c: d3:5d:c3:b3:a3:e5:b0:f6:8f:f4:7c:80:f3:a4:08:51:21:25: a9:ee:ab:cf:1f:a1:68:e4:64:75:5c:ae:ca:f4:ae:86:3f:85: 4f:54:6a:40:e5:fe:7f:f8:94:3d:79:c8:24:aa:f3:39:3a:0f: a2:0b:2b:97:02:1d:93:b5:08:70:ec:1b:02:62:8d:c5:0f:64: 59:b8:05:39:ff:2f:b3:c9:22:0e:d5:29:c0:dd:49:ef:d7:61: bf:e1:7a:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkzQ0MxMTAvBgNVBAUTKEYwM0Y1NUNCMjcxRkM1QjZGN0Q0QTg4ODc4MEI4RDhC NkE5MDU4MEQwHhcNMjUwODIzMDMyOTE1WhcNMjUwODMwMDMyOTE1WjAYMRYwFAYD VQQDEw02OGE5MzU4Yi05NmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvMEa97H6zGMrYf7plupgP33ADBKOJGkUnQ73XbLFS8y64OBLhmV3V4cgZ67q vxbVU8OqNq1qta6NXj/R9NefPIKaZz2Y+IQNbH68OhruASBRiubPgon/a4LmxRAh IVfjhXsgt/KBuSF/BMhVw/cgc56GL/bE7ZdVswqlhuE3KGMtlY7QTkc7oyMb5U4z B5D6vx9fcejdPsim2yZziHzaSkgYvRVl+1nhKzvMuWeTOhCXZDFe/qDYKU9UcCLn UTIFSNgSUUQJyfI01rieTI6G7iSGQjaRP/NDOSWb81T514RCZmJd/Bi5qIeSTI3n WQgi8H2S7WI5xgUE/RDSbFecHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/b79ST ELaozZpJaAfh9m3ICPZIMB8GA1UdIwQYMBaAFPA/VcsnH8W299SoiHgLjYtqkFgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTNDQy9FQTE3MDM2NDBB RkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhiYjMxS2lJZUF1TmkycVFX QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhEOVZ5eWNmeGJiMzFLaUllQXVOaTJxUVdBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTNDQy9FQTE3MDM2NDBBRkIxMUVFQTA2QTIzNjdDNEY5QUUwMi84RDlWeXljZnhi YjMxS2lJZUF1TmkycVFXQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgV697hIZxHXWtLNctR3mOrEQpulz6SASS8X1yp+e+eeyjazjGruCG ztX+HTsmW9mcnLTTHqWqWCrOzX4eKNZvEDzFRft6mijlhcIcrab7YiodLTapP5QK g+BwfNFyx7cNUbADqohJxBvdC1bvOypPMoERlbSeMhYgMeKDQe7kh/rPZ4P/SIMQ tIX/uC1DjwgaoP9ZtCjDkJZc628RCHO/70zTXcOzo+Ww9o/0fIDzpAhRISWp7qvP H6Fo5GR1XK7K9K6GP4VPVGpA5f5/+JQ9ecgkqvM5Og+iCyuXAh2TtQhw7BsCYo3F D2RZuAU5/y+zySIO1SnA3Unv12G/4XrB -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:55 2025 by rpki-client