$ rpki-client -vvf rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft File: 8Os9EfDsrmhzaV1az7e0rcVfNFg.mft (raw, json) Hash identifier: jAsBwtD9LxpD3s2lcu6Efxl06sNhUyGvNspVvbf1jw4= Subject key identifier: 90:26:F3:86:D1:A4:6C:CB:CE:03:1C:F4:69:EC:8F:FB:24:17:2E:8C Authority key identifier: F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 Certificate issuer: /CN=A91499BB/serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Certificate serial: 14D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft Manifest number: 14CC Signing time: Fri 22 Aug 2025 16:59:06 +0000 Manifest this update: Fri 22 Aug 2025 16:59:06 +0000 Manifest next update: Fri 29 Aug 2025 16:59:06 +0000 Files and hashes: 1: 8Os9EfDsrmhzaV1az7e0rcVfNFg.crl (hash: nkNjhng9tudC850xQtuOFMhvpdGqF2GDg3GX0GIWABw=) 2: 5F150B08D48611E9A4473984C4F9AE02.roa (hash: oH35QJywcYwQK9w172Dp8G4g95WEClMxQ6f9cBdl364=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5334 (0x14d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91499BB, serialNumber=F0EB3D11F0ECAE6873695D5ACFB7B4ADC55F3458 Validity Not Before: Aug 22 16:59:06 2025 GMT Not After : Aug 29 16:59:06 2025 GMT Subject: CN=68a8a1da-dbe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:05:2b:60:6b:5a:35:15:1d:ec:70:14:2b: ed:0b:f5:42:e3:8f:cd:79:ff:6b:bb:53:68:77:21: 15:3c:39:b1:20:30:b4:9b:cc:bb:0b:2f:67:31:b1: 1b:b4:3d:04:6a:f8:9e:e7:fc:24:74:5c:9a:8a:70: d7:19:ab:04:7f:f1:b0:dd:0c:3f:29:96:3f:d3:89: a6:a4:6d:50:20:54:51:bc:7d:a0:d3:11:48:80:6d: 47:f1:5c:61:da:41:f5:75:ec:a8:7c:e7:f4:70:f0: e4:0e:b2:98:ca:75:2e:33:60:7e:17:5f:75:6e:f9: 21:c4:28:0f:90:ae:c5:6d:8b:4a:65:3f:9d:f9:e1: d3:e0:3b:a1:c8:6f:d6:45:58:b2:fd:2a:d2:24:6d: db:9a:7d:3d:66:4a:b5:f5:e1:8a:2b:15:e2:0b:ec: d1:6b:94:44:de:b0:cf:b5:18:24:60:5d:f6:af:90: 2b:a8:d0:26:89:7f:03:68:77:37:75:3c:37:f7:3b: 33:9a:ae:d7:aa:e4:16:04:65:20:5f:f1:3a:51:e7: 06:e4:7b:3b:58:8f:ca:a4:0c:70:0f:15:ae:b7:c3: fc:1d:da:56:ed:3c:36:08:27:56:0a:26:65:67:a0: 61:60:18:d7:0f:46:ef:4a:f0:96:38:b9:1b:e5:31: fc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:26:F3:86:D1:A4:6C:CB:CE:03:1C:F4:69:EC:8F:FB:24:17:2E:8C X509v3 Authority Key Identifier: keyid:F0:EB:3D:11:F0:EC:AE:68:73:69:5D:5A:CF:B7:B4:AD:C5:5F:34:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Os9EfDsrmhzaV1az7e0rcVfNFg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91499BB/AB1CAC86609711E8B74A861AC4F9AE02/8Os9EfDsrmhzaV1az7e0rcVfNFg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:43:46:9b:b2:91:7d:3b:df:8d:a0:b8:14:62:16:bd:47:a4: 93:a3:ed:3d:a5:6e:0b:29:d4:c9:3b:b2:55:5d:c2:a6:f1:2a: 7e:13:e9:f0:2a:a1:63:c8:36:a1:f5:9c:76:b3:3b:5b:77:8c: 0e:06:c0:c2:72:85:af:a3:23:ac:4d:80:6d:c1:70:77:a6:45: 8a:fe:69:df:31:02:33:50:fd:98:5d:43:43:a4:78:49:5e:81: e9:f4:2a:76:88:97:6f:fd:a4:a2:a8:95:08:25:ee:1b:75:c9: 21:f2:4d:b3:a8:0d:60:8a:06:a6:54:11:de:5b:9c:48:e5:23: 00:da:d9:12:45:2c:18:86:8e:0f:4a:20:0c:8d:7e:fb:86:de: 3b:00:e1:7a:14:53:35:6a:b4:9a:92:70:70:0c:f5:05:64:03: e8:20:08:f6:1c:38:2c:5f:00:3b:c5:21:06:f4:ee:fb:2b:34: 71:83:20:96:95:4c:5e:46:0f:18:3f:31:ef:fc:b5:28:b2:92: 71:cf:67:f6:7e:7d:7a:11:e0:ac:e2:d5:64:42:81:fb:7e:a8: b2:4a:dd:90:93:c3:58:a7:5f:44:05:22:af:6b:96:91:19:0a: 03:34:be:da:de:02:ac:b0:e1:1b:3a:69:7d:7b:87:03:15:a3: 5a:b7:7b:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDk5QkIxMTAvBgNVBAUTKEYwRUIzRDExRjBFQ0FFNjg3MzY5NUQ1QUNGQjdCNEFE QzU1RjM0NTgwHhcNMjUwODIyMTY1OTA2WhcNMjUwODI5MTY1OTA2WjAYMRYwFAYD VQQDEw02OGE4YTFkYS1kYmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq2EFK2BrWjUVHexwFCvtC/VC44/Nef9ru1NodyEVPDmxIDC0m8y7Cy9nMbEb tD0Eavie5/wkdFyainDXGasEf/Gw3Qw/KZY/04mmpG1QIFRRvH2g0xFIgG1H8Vxh 2kH1deyofOf0cPDkDrKYynUuM2B+F191bvkhxCgPkK7FbYtKZT+d+eHT4DuhyG/W RViy/SrSJG3bmn09Zkq19eGKKxXiC+zRa5RE3rDPtRgkYF32r5ArqNAmiX8DaHc3 dTw39zszmq7XquQWBGUgX/E6UecG5Hs7WI/KpAxwDxWut8P8HdpW7Tw2CCdWCiZl Z6BhYBjXD0bvSvCWOLkb5TH8vwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAm84bR pGzLzgMc9Gnsj/skFy6MMB8GA1UdIwQYMBaAFPDrPRHw7K5oc2ldWs+3tK3FXzRY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTlCQi9BQjFDQUM4NjYw OTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3JtaHphVjFhejdlMHJjVmZO RmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhPczlFZkRzcm1oemFWMWF6N2UwcmNWZk5GZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTlCQi9BQjFDQUM4NjYwOTcxMUU4Qjc0QTg2MUFDNEY5QUUwMi84T3M5RWZEc3Jt aHphVjFhejdlMHJjVmZORmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRQ0abspF9O9+NoLgUYha9R6STo+09pW4LKdTJO7JVXcKm8Sp+E+nw KqFjyDah9Zx2sztbd4wOBsDCcoWvoyOsTYBtwXB3pkWK/mnfMQIzUP2YXUNDpHhJ XoHp9Cp2iJdv/aSiqJUIJe4bdckh8k2zqA1gigamVBHeW5xI5SMA2tkSRSwYho4P SiAMjX77ht47AOF6FFM1arSaknBwDPUFZAPoIAj2HDgsXwA7xSEG9O77KzRxgyCW lUxeRg8YPzHv/LUospJxz2f2fn16EeCs4tVkQoH7fqiySt2Qk8NYp19EBSKva5aR GQoDNL7a3gKssOEbOml9e4cDFaNat3u6 -----END CERTIFICATE-----Generated at Sun Aug 24 09:05:59 2025 by rpki-client