$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft File: AI8syGQkHehjXpOldED5wusli7M.mft (raw, json) Hash identifier: GHl7nni/Lquj5U0RmSBzKlYdULhC+BgW9U6XwS0cp7E= Subject key identifier: D2:59:79:6E:45:A1:8F:E8:C4:AC:4B:E1:87:8E:B0:9C:F7:3D:29:0E Authority key identifier: 00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3 Certificate issuer: /CN=A917AC3B/serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3 Certificate serial: 011B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft Manifest number: 0119 Signing time: Sat 23 Aug 2025 04:57:31 +0000 Manifest this update: Sat 23 Aug 2025 04:57:31 +0000 Manifest next update: Sat 30 Aug 2025 04:57:31 +0000 Files and hashes: 1: AI8syGQkHehjXpOldED5wusli7M.crl (hash: tA8QB/o7040uzS4d9nSD8j8V9l3We/5/sUNdK8RkWG0=) 2: 2C24CB26CECC11EEAFCD520AC4F9AE02.roa (hash: irE7drsVeTTk7a2RFFZcS/J6SNQBkLx5nAZFgDb1h5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 283 (0x11b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917AC3B, serialNumber=008F2CC864241DE8635E93A57440F9C2EB258BB3 Validity Not Before: Aug 23 04:57:31 2025 GMT Not After : Aug 30 04:57:31 2025 GMT Subject: CN=68a94a3b-d7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7c:d6:be:c5:26:84:9b:36:cd:7f:ce:1f:61: 22:17:a0:d8:e7:ed:9c:ae:03:f8:11:5b:7b:0c:56: 10:ff:b2:5c:3e:6f:eb:2c:63:4f:d4:dc:47:b6:a8: 7c:6d:1b:4a:67:b9:92:03:5e:00:f8:01:c4:9a:72: f7:2e:42:05:a3:12:69:bf:49:9b:e7:f3:8f:e1:b8: 54:e7:54:48:78:69:80:86:72:9f:95:2c:df:2b:a9: 3f:a1:db:66:46:cb:56:91:e5:c5:d2:ef:2d:73:c6: 55:d8:79:90:cb:7a:b5:3f:e3:7b:29:ea:0d:c6:3c: 6a:db:f3:87:6c:77:7a:a6:4f:84:3d:93:b8:cb:6d: 07:f0:45:30:5f:03:1a:97:ce:d8:1a:0d:82:c6:82: 91:e1:22:3b:77:5f:72:59:18:20:7a:b6:84:ea:fb: 51:ed:a3:13:25:c0:2c:9a:98:32:57:38:cb:15:3d: a2:9c:ee:49:c9:56:3e:da:63:a4:f0:b8:80:4a:00: 10:39:24:bf:3c:3d:93:eb:f6:e6:d2:58:01:bd:84: 12:4d:be:23:b7:75:08:fc:75:4b:5b:22:61:e3:ec: 64:88:ea:d9:80:d9:83:0b:29:05:16:a0:78:8f:40: c1:47:c5:e4:be:62:bf:1c:63:15:5c:c4:06:0c:b6: b4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:59:79:6E:45:A1:8F:E8:C4:AC:4B:E1:87:8E:B0:9C:F7:3D:29:0E X509v3 Authority Key Identifier: keyid:00:8F:2C:C8:64:24:1D:E8:63:5E:93:A5:74:40:F9:C2:EB:25:8B:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI8syGQkHehjXpOldED5wusli7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC3B/957B2440CECB11EEB0305587C4F9AE02/AI8syGQkHehjXpOldED5wusli7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:1e:ec:9b:3a:99:97:79:09:74:76:69:f1:1c:e6:3a:38:6b: 71:14:75:70:e5:fb:6f:48:d7:a8:9e:06:39:f3:70:69:e9:93: da:f9:6a:72:3e:23:74:bb:7b:57:fe:98:7a:9e:60:b4:e0:6a: c6:15:a5:79:92:ae:44:86:f9:47:54:e7:08:24:d2:37:f4:35: 1d:4e:08:bf:2d:fb:7b:10:dd:e9:4b:67:da:ae:55:d9:ee:70: 1a:fd:e5:b8:bc:fc:f1:ee:cf:28:43:5c:bb:ae:8c:08:90:e5: 94:73:79:1f:eb:64:86:a4:75:52:cd:4f:41:9a:9e:8c:fc:1f: 2e:9d:01:77:ca:df:42:b1:21:54:35:8d:2f:da:78:60:cf:5a: c5:a3:6e:5c:55:3b:aa:af:e6:ca:87:cb:e2:1e:d0:20:a1:6d: ef:94:dd:45:30:cb:e3:35:45:45:40:c9:78:9f:de:ef:2c:89: 60:60:8f:d5:d9:f9:7b:0d:1b:53:f7:8f:a9:12:e2:08:e1:d4: 77:10:6f:6c:9f:c8:6b:09:6e:2a:f6:c6:19:eb:ca:82:12:95: c9:af:1a:c9:1d:54:10:6d:73:cd:c4:d5:b5:00:1b:c0:a8:f3: 4f:26:b9:97:b1:33:a9:12:77:b2:fa:41:b2:2a:05:77:4c:cf: 28:e6:89:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDM0IxMTAvBgNVBAUTKDAwOEYyQ0M4NjQyNDFERTg2MzVFOTNBNTc0NDBGOUMy RUIyNThCQjMwHhcNMjUwODIzMDQ1NzMxWhcNMjUwODMwMDQ1NzMxWjAYMRYwFAYD VQQDEw02OGE5NGEzYi1kN2RiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXzWvsUmhJs2zX/OH2EiF6DY5+2crgP4EVt7DFYQ/7JcPm/rLGNP1NxHtqh8 bRtKZ7mSA14A+AHEmnL3LkIFoxJpv0mb5/OP4bhU51RIeGmAhnKflSzfK6k/odtm RstWkeXF0u8tc8ZV2HmQy3q1P+N7KeoNxjxq2/OHbHd6pk+EPZO4y20H8EUwXwMa l87YGg2CxoKR4SI7d19yWRggeraE6vtR7aMTJcAsmpgyVzjLFT2inO5JyVY+2mOk 8LiASgAQOSS/PD2T6/bm0lgBvYQSTb4jt3UI/HVLWyJh4+xkiOrZgNmDCykFFqB4 j0DBR8XkvmK/HGMVXMQGDLa0UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJZeW5F oY/oxKxL4YeOsJz3PSkOMB8GA1UdIwQYMBaAFACPLMhkJB3oY16TpXRA+cLrJYuz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUMzQi85NTdCMjQ0MENF Q0IxMUVFQjAzMDU1ODdDNEY5QUUwMi9BSThzeUdRa0hlaGpYcE9sZEVENXd1c2xp N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FJOHN5R1FrSGVoalhwT2xkRUQ1d3VzbGk3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QUMzQi85NTdCMjQ0MENFQ0IxMUVFQjAzMDU1ODdDNEY5QUUwMi9BSThzeUdRa0hl aGpYcE9sZEVENXd1c2xpN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2HuybOpmXeQl0dmnxHOY6OGtxFHVw5ftvSNeongY583Bp6ZPa+Wpy PiN0u3tX/ph6nmC04GrGFaV5kq5EhvlHVOcIJNI39DUdTgi/Lft7EN3pS2farlXZ 7nAa/eW4vPzx7s8oQ1y7rowIkOWUc3kf62SGpHVSzU9Bmp6M/B8unQF3yt9CsSFU NY0v2nhgz1rFo25cVTuqr+bKh8viHtAgoW3vlN1FMMvjNUVFQMl4n97vLIlgYI/V 2fl7DRtT94+pEuII4dR3EG9sn8hrCW4q9sYZ68qCEpXJrxrJHVQQbXPNxNW1ABvA qPNPJrmXsTOpEney+kGyKgV3TM8o5ol3 -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:25 2025 by rpki-client