$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft File: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json) Hash identifier: ouyZzPpsLaApjQ8P+iaFaDiDCxd7N7ExcfA5FOYGyjA= Subject key identifier: 54:DD:A3:EB:A2:EB:9C:BF:D5:11:31:03:1A:C9:3A:71:E9:9D:7D:12 Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3 Certificate issuer: /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3 Certificate serial: 01B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft Manifest number: 01AE Signing time: Sat 23 Aug 2025 03:17:14 +0000 Manifest this update: Sat 23 Aug 2025 03:17:13 +0000 Manifest next update: Sat 30 Aug 2025 03:17:13 +0000 Files and hashes: 1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: PwOAAZnNtXlL95bjH13vthFCn56Wy84J3zBKXEobiRA=) 2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: f37dHVQCBKGAv6cZ++QH+hDhUU+kBGU4CSkotJ/zJb4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:17:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 433 (0x1b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3 Validity Not Before: Aug 23 03:17:13 2025 GMT Not After : Aug 30 03:17:13 2025 GMT Subject: CN=68a932b9-f7de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:35:e9:96:fe:35:71:f3:2e:e5:5d:4c:3c:dc: c3:17:9e:b5:c9:a4:83:5b:c5:d0:1d:14:9d:e8:80: 2e:87:18:10:73:31:94:c7:1f:0d:b0:37:6e:c4:c2: df:0c:58:c4:c9:aa:3d:bd:0a:13:06:2f:76:3f:df: a0:73:e0:c0:3b:cc:85:71:51:3c:f0:44:ad:f0:d5: 24:99:78:fd:2d:fb:0b:26:96:db:25:90:e0:77:af: 10:3b:ff:b3:75:5a:41:fd:56:f6:84:bf:54:1e:8a: 30:42:0c:da:2d:91:97:e3:2a:18:52:dd:b9:a4:d5: 25:f2:0c:af:43:54:5a:f8:31:1e:10:b2:95:ab:db: a2:f1:b2:72:ca:17:03:9e:a6:29:af:88:5e:9b:d1: 60:59:e5:23:53:9e:97:9f:3c:a3:7a:8d:90:15:0d: c6:8c:5a:81:7b:11:0a:39:4f:e7:60:9d:2f:1f:5b: ef:14:59:57:53:59:4b:ee:a7:a7:35:da:4f:d6:36: 7f:3c:a5:2a:11:ef:76:88:37:63:b9:e5:bd:51:59: d8:d9:9e:b0:99:c4:dd:72:ed:30:dc:2e:7d:c4:6e: 8e:b2:d6:9a:4b:44:be:32:76:33:1b:a0:3e:95:1c: 15:76:32:fc:e8:dd:f3:00:ac:4f:c8:71:1c:71:6a: 02:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DD:A3:EB:A2:EB:9C:BF:D5:11:31:03:1A:C9:3A:71:E9:9D:7D:12 X509v3 Authority Key Identifier: keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:46:02:f6:8d:85:4e:c9:92:ac:f1:ab:6d:1c:28:eb:47:27: 51:65:80:18:95:7f:dd:a3:0f:02:8e:48:92:fa:07:f6:9c:e9: 89:35:a9:eb:d0:11:5a:d5:bf:0e:cf:9b:95:8e:7a:32:3e:6f: 4f:d9:90:08:ca:47:92:76:c9:6b:12:3b:66:eb:62:60:c2:3f: 81:13:1f:08:fc:92:dd:bb:13:76:4f:6e:c1:f4:90:39:5a:d7: 84:48:e5:06:33:bc:2a:fd:54:b6:96:f2:da:15:65:53:fa:47: 2e:40:13:c0:23:96:86:5f:90:6c:18:5c:10:74:b2:ae:c4:de: 49:21:63:80:ab:75:73:d4:3a:52:08:f6:21:86:d8:03:dd:26: f9:f1:c4:a7:86:f7:47:28:20:b3:b3:59:75:6b:77:7e:62:39: 0d:59:e7:8a:ad:fc:ed:1e:d2:3c:90:b2:62:a7:42:1f:b0:cd: d6:01:99:be:af:db:af:90:01:c4:c5:41:66:cf:dc:58:a4:f5: 3c:9d:89:7f:ab:c9:23:f1:c6:b3:bc:a4:47:43:1b:d9:a1:e1: 66:1e:c7:3b:87:2a:b9:68:10:9e:17:6f:13:b8:22:cd:28:f6: 51:b0:b0:29:81:27:a5:23:95:06:e4:10:67:bb:d8:0a:21:f7: 9e:1d:33:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY0OEQxMTAvBgNVBAUTKEYxN0I1MzIxQTU4RDc5RTIzMDUzMUM1QUEwRjBCMjRF MUQ4MTIxQTMwHhcNMjUwODIzMDMxNzEzWhcNMjUwODMwMDMxNzEzWjAYMRYwFAYD VQQDEw02OGE5MzJiOS1mN2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDXplv41cfMu5V1MPNzDF561yaSDW8XQHRSd6IAuhxgQczGUxx8NsDduxMLf DFjEyao9vQoTBi92P9+gc+DAO8yFcVE88ESt8NUkmXj9LfsLJpbbJZDgd68QO/+z dVpB/Vb2hL9UHoowQgzaLZGX4yoYUt25pNUl8gyvQ1Ra+DEeELKVq9ui8bJyyhcD nqYpr4hem9FgWeUjU56Xnzyjeo2QFQ3GjFqBexEKOU/nYJ0vH1vvFFlXU1lL7qen NdpP1jZ/PKUqEe92iDdjueW9UVnY2Z6wmcTdcu0w3C59xG6OstaaS0S+MnYzG6A+ lRwVdjL86N3zAKxPyHEccWoCjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFTdo+ui 65y/1RExAxrJOnHpnX0SMB8GA1UdIwQYMBaAFPF7UyGljXniMFMcWqDwsk4dgSGj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjQ4RC9DM0VFRTJBOEVG RTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVlSXdVeHhhb1BDeVRoMkJJ YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYdFRJYVdOZWVJd1V4eGFvUEN5VGgyQklhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjQ4RC9DM0VFRTJBOEVGRTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVl SXdVeHhhb1BDeVRoMkJJYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFRgL2jYVOyZKs8attHCjrRydRZYAYlX/dow8CjkiS+gf2nOmJNanr 0BFa1b8Oz5uVjnoyPm9P2ZAIykeSdslrEjtm62Jgwj+BEx8I/JLduxN2T27B9JA5 WteESOUGM7wq/VS2lvLaFWVT+kcuQBPAI5aGX5BsGFwQdLKuxN5JIWOAq3Vz1DpS CPYhhtgD3Sb58cSnhvdHKCCzs1l1a3d+YjkNWeeKrfztHtI8kLJip0IfsM3WAZm+ r9uvkAHExUFmz9xYpPU8nYl/q8kj8cazvKRHQxvZoeFmHsc7hyq5aBCeF28TuCLN KPZRsLApgSelI5UG5BBnu9gKIfeeHTOB -----END CERTIFICATE-----Generated at Sun Aug 24 04:56:14 2025 by rpki-client