$ rpki-client -vvf rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft File: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft (raw, json) Hash identifier: TSh+2LK8KMulRN95iyaAUoft0kKkF8GILbazl4tqvx8= Subject key identifier: 58:84:38:AC:18:02:87:0D:AC:3B:00:41:3C:06:E6:BC:82:9E:7A:BB Authority key identifier: F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F Certificate issuer: /CN=A9159ECD/serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Certificate serial: 0559 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft Manifest number: 0551 Signing time: Fri 22 Aug 2025 23:38:29 +0000 Manifest this update: Fri 22 Aug 2025 23:38:28 +0000 Manifest next update: Fri 29 Aug 2025 23:38:28 +0000 Files and hashes: 1: 8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl (hash: /84v+BtO4IYJ8ISItRbYNenWWAzTkOMk+pYHi5vzVjU=) 2: C309F5BA017011ECB98B2F33C4F9AE02.roa (hash: aXSQnMlRqYHjlA+sWyHQ/h8SKDapqi9yLmH+QCm7j5U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1369 (0x559) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9159ECD, serialNumber=F1BA943C3036C69B44A75970A44D92905689A90F Validity Not Before: Aug 22 23:38:28 2025 GMT Not After : Aug 29 23:38:28 2025 GMT Subject: CN=68a8ff74-6d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:45:dd:ca:b0:08:8a:5c:6e:40:e6:59:4b:bf: de:06:7e:10:1c:7e:3c:26:3c:fb:91:ba:ab:32:f0: c7:8f:71:7e:43:93:2c:82:a2:ed:24:64:52:71:0e: ab:35:67:1a:41:ab:26:a0:b5:93:f3:61:bd:ee:6b: 15:6b:e0:d7:ce:f2:26:49:92:fb:84:a7:be:f1:9e: 54:11:d0:8c:ef:87:10:84:70:03:0c:0d:e2:43:bc: 11:35:bb:72:92:1b:dd:86:10:f9:60:f8:06:48:0b: 89:dd:4c:e5:29:5e:0a:bc:8d:1e:fb:19:f2:76:cf: 0c:e8:c4:41:64:4a:75:a7:e9:7a:49:3c:58:7b:67: 30:19:68:c7:6d:49:fe:8a:57:5d:62:4d:c7:ef:0a: 82:6a:b3:6d:4c:7d:24:38:02:47:7c:81:29:02:02: d4:8c:ea:a3:3e:c0:54:69:2c:74:f9:87:86:44:d9: 9c:97:26:b0:72:c4:57:a5:71:10:b5:2c:a9:e8:a7: f2:c0:99:fb:0d:d1:05:73:7d:75:17:e4:f7:a6:0e: 8d:21:d6:28:2e:cc:b3:41:f1:d0:a8:9b:b5:fd:37: a4:3d:e3:23:11:ac:4a:f0:53:d4:41:7b:ce:77:0b: 28:90:dc:bf:14:b0:01:05:d1:58:0f:5f:c3:2e:9b: db:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:84:38:AC:18:02:87:0D:AC:3B:00:41:3C:06:E6:BC:82:9E:7A:BB X509v3 Authority Key Identifier: keyid:F1:BA:94:3C:30:36:C6:9B:44:A7:59:70:A4:4D:92:90:56:89:A9:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bqUPDA2xptEp1lwpE2SkFaJqQ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159ECD/7AC5154C016A11ECB2B00C37C4F9AE02/8bqUPDA2xptEp1lwpE2SkFaJqQ8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:0b:1e:74:01:f3:7d:67:8b:a8:4b:da:7e:2b:1d:67:be:49: 7d:f6:3c:a7:74:20:51:c6:d5:83:a2:93:4a:50:e2:b2:f1:28: f5:8d:fe:18:8d:99:e2:80:f3:4d:eb:e8:13:d6:c1:b4:04:6e: 1f:14:03:65:70:01:8b:10:91:76:2b:12:7c:d3:1e:83:b6:ab: 5e:b1:16:bc:ae:0f:e7:c7:ea:b3:1b:19:36:f7:f3:40:23:84: 9a:e5:37:3f:77:47:f9:48:1d:85:20:5f:4b:12:3f:e1:03:1e: b2:e5:9d:e4:d0:1f:73:d7:80:43:d5:7d:eb:95:3c:2b:be:8c: f5:19:8c:17:e5:25:1d:9c:11:01:8f:b6:17:2f:1b:e9:e6:0c: 06:f5:47:2f:19:7f:d7:3a:f7:c4:57:e2:3f:15:6c:1c:0f:6e: fb:44:44:61:8d:8e:c8:b4:81:cb:22:59:b6:d6:e8:c6:f9:37: 3f:ec:bf:04:ac:79:04:32:5a:ab:d2:93:da:08:ea:b8:e5:6b: 01:6c:3d:50:5d:d6:c7:c8:88:90:28:c9:d3:a4:60:4a:1d:90: fb:f7:6a:57:29:c0:09:90:1d:dd:4d:2f:60:ec:22:81:59:ac: 40:01:dd:77:e8:a6:77:e5:61:52:45:fd:b4:25:cf:53:94:54: df:b4:52:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTlFQ0QxMTAvBgNVBAUTKEYxQkE5NDNDMzAzNkM2OUI0NEE3NTk3MEE0NEQ5Mjkw NTY4OUE5MEYwHhcNMjUwODIyMjMzODI4WhcNMjUwODI5MjMzODI4WjAYMRYwFAYD VQQDEw02OGE4ZmY3NC02ZDE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzUXdyrAIilxuQOZZS7/eBn4QHH48Jjz7kbqrMvDHj3F+Q5MsgqLtJGRScQ6r NWcaQasmoLWT82G97msVa+DXzvImSZL7hKe+8Z5UEdCM74cQhHADDA3iQ7wRNbty khvdhhD5YPgGSAuJ3UzlKV4KvI0e+xnyds8M6MRBZEp1p+l6STxYe2cwGWjHbUn+ ilddYk3H7wqCarNtTH0kOAJHfIEpAgLUjOqjPsBUaSx0+YeGRNmclyawcsRXpXEQ tSyp6KfywJn7DdEFc311F+T3pg6NIdYoLsyzQfHQqJu1/TekPeMjEaxK8FPUQXvO dwsokNy/FLABBdFYD1/DLpvbXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiEOKwY AocNrDsAQTwG5ryCnnq7MB8GA1UdIwQYMBaAFPG6lDwwNsabRKdZcKRNkpBWiakP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1OUVDRC83QUM1MTU0QzAx NkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhwdEVwMWx3cEUyU2tGYUpx UTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhicVVQREEyeHB0RXAxbHdwRTJTa0ZhSnFROC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 OUVDRC83QUM1MTU0QzAxNkExMUVDQjJCMDBDMzdDNEY5QUUwMi84YnFVUERBMnhw dEVwMWx3cEUyU2tGYUpxUTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvCx50AfN9Z4uoS9p+Kx1nvkl99jyndCBRxtWDopNKUOKy8Sj1jf4Y jZnigPNN6+gT1sG0BG4fFANlcAGLEJF2KxJ80x6DtqtesRa8rg/nx+qzGxk29/NA I4Sa5Tc/d0f5SB2FIF9LEj/hAx6y5Z3k0B9z14BD1X3rlTwrvoz1GYwX5SUdnBEB j7YXLxvp5gwG9UcvGX/XOvfEV+I/FWwcD277RERhjY7ItIHLIlm21ujG+Tc/7L8E rHkEMlqr0pPaCOq45WsBbD1QXdbHyIiQKMnTpGBKHZD792pXKcAJkB3dTS9g7CKB WaxAAd136KZ35WFSRf20Jc9TlFTftFI7 -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:58 2025 by rpki-client