$ rpki-client -vvf rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft File: 8RbpEqlQneSy1rPZPLwY9QA24Wg.mft (raw, json) Hash identifier: RX5lxHjmgO7YOz7DxS6KtpJIcREZ6aSKMIUu/CxnKgY= Subject key identifier: C8:24:74:84:CD:F5:9B:B7:BB:CF:FA:CA:99:1B:4F:4E:0E:2F:7A:E3 Authority key identifier: F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 Certificate issuer: /CN=A9156D54/serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Certificate serial: 02A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft Manifest number: 02A1 Signing time: Sat 23 Aug 2025 01:46:41 +0000 Manifest this update: Sat 23 Aug 2025 01:46:41 +0000 Manifest next update: Sat 30 Aug 2025 01:46:41 +0000 Files and hashes: 1: 8RbpEqlQneSy1rPZPLwY9QA24Wg.crl (hash: ycYzxIG4hcIyYcj7rLeoKnieFvVvYmgOYyYubEc9Y8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:46:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 673 (0x2a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156D54, serialNumber=F116E912A9509DE4B2D6B3D93CBC18F50036E168 Validity Not Before: Aug 23 01:46:41 2025 GMT Not After : Aug 30 01:46:41 2025 GMT Subject: CN=68a91d81-e4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:28:b8:77:94:31:ad:b3:37:78:74:51:b6:41: 1e:d7:1e:1b:be:16:51:78:e2:ef:69:73:63:e0:a5: 0b:8f:15:1a:c5:cc:e8:48:69:99:66:18:60:20:fa: d8:59:7e:aa:f6:b0:83:b3:18:02:43:cf:e2:84:13: 0b:06:f8:35:b9:d9:b9:75:f0:02:a6:ed:65:94:a7: 9c:17:3a:39:2a:e7:ed:c2:56:bd:6c:6a:25:28:58: b2:08:8f:2c:6e:9c:b0:1c:87:54:46:15:3c:62:df: 72:d6:e8:c9:7f:8d:77:ce:59:19:bd:7d:ec:28:0a: 74:b5:0a:87:b8:46:8a:a3:f0:45:fb:ec:a8:5f:09: 4c:f8:10:18:db:aa:1b:cd:aa:64:80:bf:3c:f1:04: 29:db:1c:3e:f5:89:e0:9e:f9:41:3f:ee:68:f4:4b: 44:89:9f:b5:1e:00:9b:a6:85:fc:9d:df:e1:c9:55: 58:60:30:92:17:b7:4c:ae:7c:ae:ae:a2:10:a1:8a: 00:92:35:63:ce:de:9c:cf:9a:e5:79:66:1f:2b:d2: 97:ad:cf:ed:dd:81:01:42:b7:bd:44:32:2d:47:0f: 40:a6:25:85:c1:3d:03:f1:4a:6e:31:5c:09:47:21: 1a:b3:76:d8:36:97:78:0e:1b:71:de:6d:b6:2d:d1: 2d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:24:74:84:CD:F5:9B:B7:BB:CF:FA:CA:99:1B:4F:4E:0E:2F:7A:E3 X509v3 Authority Key Identifier: keyid:F1:16:E9:12:A9:50:9D:E4:B2:D6:B3:D9:3C:BC:18:F5:00:36:E1:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8RbpEqlQneSy1rPZPLwY9QA24Wg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156D54/8527E4B60C9411EDB71BC02FC4F9AE02/8RbpEqlQneSy1rPZPLwY9QA24Wg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:10:a6:6c:1e:fc:3c:1a:b1:ec:ed:84:ac:f4:30:0b:a4:2f: ca:ed:66:c9:ce:dd:1f:82:5a:ed:80:53:3a:f9:7f:22:e2:c0: 20:7c:49:36:09:30:8c:54:94:ef:3d:d4:05:dc:b6:b2:78:e4: 3f:2d:ee:62:60:cc:ac:ed:96:9e:25:31:75:71:ba:18:4c:2c: bc:67:60:02:87:6b:f7:d1:0f:f0:46:1c:8f:da:27:bc:d9:0d: 70:a7:7c:60:d9:24:93:78:c2:65:dd:ca:96:94:53:18:11:af: 62:11:77:e0:de:45:6a:2d:10:cb:39:82:de:a8:ef:82:3e:bd: f0:54:e8:6b:96:b2:11:90:0d:49:2d:0c:f2:ea:7c:ba:34:f8: 60:ea:b5:88:fb:6d:23:97:01:20:ef:16:ae:29:dc:c2:de:aa: 95:04:92:c9:56:91:77:5d:4f:b5:44:d3:8f:33:4c:aa:34:b9: ea:48:21:3e:3f:f3:77:44:38:58:2b:cf:65:70:7b:78:2c:22: 31:e1:d1:6b:8b:47:c8:3d:f3:a1:aa:ee:da:f5:52:cd:fd:48: 58:73:36:c5:68:4d:b6:c6:01:62:5c:09:b2:38:4b:8d:6a:ae: 2c:3e:ec:47:1a:55:42:72:82:ae:16:7b:74:6e:95:1a:4b:4a: 7d:4b:47:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTZENTQxMTAvBgNVBAUTKEYxMTZFOTEyQTk1MDlERTRCMkQ2QjNEOTNDQkMxOEY1 MDAzNkUxNjgwHhcNMjUwODIzMDE0NjQxWhcNMjUwODMwMDE0NjQxWjAYMRYwFAYD VQQDEw02OGE5MWQ4MS1lNGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Si4d5QxrbM3eHRRtkEe1x4bvhZReOLvaXNj4KULjxUaxczoSGmZZhhgIPrY WX6q9rCDsxgCQ8/ihBMLBvg1udm5dfACpu1llKecFzo5Kuftwla9bGolKFiyCI8s bpywHIdURhU8Yt9y1ujJf413zlkZvX3sKAp0tQqHuEaKo/BF++yoXwlM+BAY26ob zapkgL888QQp2xw+9YngnvlBP+5o9EtEiZ+1HgCbpoX8nd/hyVVYYDCSF7dMrnyu rqIQoYoAkjVjzt6cz5rleWYfK9KXrc/t3YEBQre9RDItRw9ApiWFwT0D8UpuMVwJ RyEas3bYNpd4Dhtx3m22LdEt0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMgkdITN 9Zu3u8/6ypkbT04OL3rjMB8GA1UdIwQYMBaAFPEW6RKpUJ3kstaz2Ty8GPUANuFo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NkQ1NC84NTI3RTRCNjBD OTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5lU3kxclBaUEx3WTlRQTI0 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSYnBFcWxRbmVTeTFyUFpQTHdZOVFBMjRXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NkQ1NC84NTI3RTRCNjBDOTQxMUVEQjcxQkMwMkZDNEY5QUUwMi84UmJwRXFsUW5l U3kxclBaUEx3WTlRQTI0V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8EKZsHvw8GrHs7YSs9DALpC/K7WbJzt0fglrtgFM6+X8i4sAgfEk2 CTCMVJTvPdQF3LayeOQ/Le5iYMys7ZaeJTF1cboYTCy8Z2ACh2v30Q/wRhyP2ie8 2Q1wp3xg2SSTeMJl3cqWlFMYEa9iEXfg3kVqLRDLOYLeqO+CPr3wVOhrlrIRkA1J LQzy6ny6NPhg6rWI+20jlwEg7xauKdzC3qqVBJLJVpF3XU+1RNOPM0yqNLnqSCE+ P/N3RDhYK89lcHt4LCIx4dFri0fIPfOhqu7a9VLN/UhYczbFaE22xgFiXAmyOEuN aq4sPuxHGlVCcoKuFnt0bpUaS0p9S0cr -----END CERTIFICATE-----Generated at Sun Aug 24 03:10:57 2025 by rpki-client