$ rpki-client -vvf rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft File: g8xy3n1cH-U_wUH4vBrCex3zA7E.mft (raw, json) Hash identifier: PeTvJyVEroQX6HQkKcycPsMLiRq9NA9CTokb6Ko3ZLQ= Subject key identifier: 73:D0:83:38:F3:56:2D:90:B5:91:20:3B:E3:92:69:72:FF:96:B4:91 Authority key identifier: 83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 Certificate issuer: /CN=A914A594/serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Certificate serial: 09B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft Manifest number: 09AB Signing time: Fri 22 Aug 2025 20:09:20 +0000 Manifest this update: Fri 22 Aug 2025 20:09:20 +0000 Manifest next update: Fri 29 Aug 2025 20:09:20 +0000 Files and hashes: 1: g8xy3n1cH-U_wUH4vBrCex3zA7E.crl (hash: s8OPQjraRMZ07hmQn8lVC8HtcanD8oQjDyYrZF5Asek=) 2: 88F058948E7E11EA955D1E64C4F9AE02.roa (hash: LjFZkARdigofgjMJFtc/qBM/m3OntU9kJkRF62lZTLE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:09:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2481 (0x9b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A594, serialNumber=83CC72DE7D5C1FE53FC141F8BC1AC27B1DF303B1 Validity Not Before: Aug 22 20:09:20 2025 GMT Not After : Aug 29 20:09:20 2025 GMT Subject: CN=68a8ce70-b499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c1:17:a7:8e:69:fe:d0:e8:dd:60:39:c0:33: 4d:68:68:d0:86:bd:11:c2:53:bb:3d:5d:29:2c:25: 04:78:8b:74:ef:24:35:28:65:b1:56:a1:fa:9e:73: f2:7c:78:95:79:19:32:06:26:8d:e7:d3:4f:e8:8d: 9f:2d:4c:55:91:e6:de:17:88:7c:72:e0:34:a5:2d: 7e:e1:48:3c:44:95:ac:db:39:27:06:3d:7e:aa:94: 9a:52:29:1f:84:07:eb:13:96:37:3e:27:6f:a7:03: 00:70:0d:81:35:f2:00:ee:d7:a2:34:1e:bb:1d:ea: 4c:e5:72:2d:74:8f:fe:7e:2d:1a:59:a3:ca:2b:37: ba:3e:27:5d:30:19:c1:8a:e0:24:09:92:b7:26:0d: fb:4b:62:01:8a:b2:cb:aa:f6:e3:46:9e:b1:81:06: 26:9a:ec:36:96:ce:9b:dd:9d:57:17:03:39:f3:6a: b5:b4:07:de:f7:cf:97:c9:2d:2d:e2:4a:6c:a1:b0: f8:02:57:54:a2:8f:ed:1d:7e:e4:e8:9e:5d:47:bf: 88:95:1f:fb:e1:68:b8:d8:d8:f6:58:71:66:cb:07: 69:16:5e:35:71:be:d5:24:bb:ac:74:f8:d3:96:24: 33:f0:17:d2:8b:0a:c5:47:09:9d:42:17:b0:01:05: 26:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D0:83:38:F3:56:2D:90:B5:91:20:3B:E3:92:69:72:FF:96:B4:91 X509v3 Authority Key Identifier: keyid:83:CC:72:DE:7D:5C:1F:E5:3F:C1:41:F8:BC:1A:C2:7B:1D:F3:03:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g8xy3n1cH-U_wUH4vBrCex3zA7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A594/53179FF88E7D11EAB5F33261C4F9AE02/g8xy3n1cH-U_wUH4vBrCex3zA7E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:00:c8:49:e9:96:26:bd:34:67:99:ee:cc:fa:e9:ad:58:56: e8:70:84:81:b1:cc:29:31:8d:5c:25:66:c2:4e:f1:4a:45:87: 34:25:58:cb:90:a5:8f:60:c3:b7:b7:d3:9e:87:df:db:4f:38: f3:24:2d:21:65:b9:d0:d0:61:da:c8:be:6a:92:ed:df:f7:f4: 20:fd:48:d9:9f:92:e4:3b:65:80:25:ee:d5:c8:11:84:b3:d3: d7:8a:fb:d8:36:25:77:41:fe:ec:e8:5d:d1:85:5e:ba:69:25: 10:05:df:7d:7e:d5:08:2c:00:6d:32:cb:b8:d8:2e:55:e9:9b: d6:ec:5a:5a:24:54:ea:0c:b6:fa:50:fd:3b:22:97:bd:c4:9c: 4a:1d:6a:45:b9:b7:8d:ce:35:1e:17:1e:c0:37:bc:9a:35:35: db:fd:5a:8e:c3:bb:4c:b2:f7:ba:be:49:58:08:79:8b:4c:24: 0e:16:b1:a3:b2:11:cc:d3:2f:3a:e5:3b:4f:c0:e2:2b:84:ee: 57:d3:6b:d9:26:f7:8f:ea:dd:96:f6:2e:b7:77:fc:9c:5b:48: 38:42:4d:ae:2a:00:87:46:4e:de:ac:33:b7:95:a0:4a:7e:d6: 34:f5:dd:83:97:52:35:be:d1:fc:41:10:fe:7f:3f:18:47:f9: 07:96:78:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEE1OTQxMTAvBgNVBAUTKDgzQ0M3MkRFN0Q1QzFGRTUzRkMxNDFGOEJDMUFDMjdC MURGMzAzQjEwHhcNMjUwODIyMjAwOTIwWhcNMjUwODI5MjAwOTIwWjAYMRYwFAYD VQQDEw02OGE4Y2U3MC1iNDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6cEXp45p/tDo3WA5wDNNaGjQhr0RwlO7PV0pLCUEeIt07yQ1KGWxVqH6nnPy fHiVeRkyBiaN59NP6I2fLUxVkebeF4h8cuA0pS1+4Ug8RJWs2zknBj1+qpSaUikf hAfrE5Y3PidvpwMAcA2BNfIA7teiNB67HepM5XItdI/+fi0aWaPKKze6PiddMBnB iuAkCZK3Jg37S2IBirLLqvbjRp6xgQYmmuw2ls6b3Z1XFwM582q1tAfe98+XyS0t 4kpsobD4AldUoo/tHX7k6J5dR7+IlR/74Wi42Nj2WHFmywdpFl41cb7VJLusdPjT liQz8BfSiwrFRwmdQhewAQUmHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPQgzjz Vi2QtZEgO+OSaXL/lrSRMB8GA1UdIwQYMBaAFIPMct59XB/lP8FB+Lwawnsd8wOx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTU5NC81MzE3OUZGODhF N0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gtVV93VUg0dkJyQ2V4M3pB N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c4eHkzbjFjSC1VX3dVSDR2QnJDZXgzekE3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTU5NC81MzE3OUZGODhFN0QxMUVBQjVGMzMyNjFDNEY5QUUwMi9nOHh5M24xY0gt VV93VUg0dkJyQ2V4M3pBN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUAMhJ6ZYmvTRnme7M+umtWFbocISBscwpMY1cJWbCTvFKRYc0JVjL kKWPYMO3t9Oeh9/bTzjzJC0hZbnQ0GHayL5qku3f9/Qg/UjZn5LkO2WAJe7VyBGE s9PXivvYNiV3Qf7s6F3RhV66aSUQBd99ftUILABtMsu42C5V6ZvW7FpaJFTqDLb6 UP07Ipe9xJxKHWpFubeNzjUeFx7AN7yaNTXb/VqOw7tMsve6vklYCHmLTCQOFrGj shHM0y865TtPwOIrhO5X02vZJveP6t2W9i63d/ycW0g4Qk2uKgCHRk7erDO3laBK ftY09d2Dl1I1vtH8QRD+fz8YR/kHlngU -----END CERTIFICATE-----Generated at Sun Aug 24 04:50:13 2025 by rpki-client