$ rpki-client -vvf rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft File: A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft (raw, json) Hash identifier: f0IY2WRWHDgYDcfpjfNes/xg7e1XYqCEsBr/W2C6eTw= Subject key identifier: 07:41:CA:41:FB:F0:22:2E:F8:B4:20:70:D0:FD:B6:E1:8E:D5:70:08 Authority key identifier: 03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 Certificate issuer: /CN=A918CFAD/serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft Manifest number: 0106 Signing time: Sat 23 Aug 2025 05:10:12 +0000 Manifest this update: Sat 23 Aug 2025 05:10:12 +0000 Manifest next update: Sat 30 Aug 2025 05:10:12 +0000 Files and hashes: 1: A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl (hash: uK4vmUv9VQR/N34iGe96Gi2sYYdJEvMU3XWP7ibXSGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CFAD, serialNumber=03FF0657C0ECF873983033F7C6C6488B33789C43 Validity Not Before: Aug 23 05:10:12 2025 GMT Not After : Aug 30 05:10:12 2025 GMT Subject: CN=68a94d34-657f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4a:b7:1d:98:0d:f1:95:28:6c:41:29:5a:93: 9c:69:05:0a:a2:21:62:08:68:b3:c9:03:68:eb:61: 91:50:fb:63:db:b3:e8:ba:cd:3a:14:c7:7a:de:82: a7:53:b8:35:7a:e9:38:bc:85:0e:41:62:25:c0:d4: e5:4f:fa:aa:36:88:df:60:be:13:f7:b6:a0:2f:4c: b8:aa:9c:e6:62:50:9c:13:c6:a8:ca:4f:8e:66:93: c8:a6:0d:c0:ab:f1:08:5d:ce:cd:5f:66:d4:aa:a8: 04:4f:41:eb:e8:9e:f0:2c:6d:4e:73:36:9c:8f:fd: c9:13:7f:11:19:46:f1:9b:b0:2e:76:e6:44:bc:af: 0f:73:dd:45:ba:03:90:8a:7c:ae:6f:0c:87:7b:6b: ba:1b:b3:f6:b1:d1:59:5b:f8:cc:95:c5:2f:f3:0e: 30:1d:f5:75:c7:a3:6b:4a:cb:aa:12:5a:7d:2b:51: fe:72:70:d4:46:c2:e6:f3:5e:ac:7a:4a:80:55:5b: b8:e4:88:00:bc:67:a1:03:0c:66:9a:04:67:50:2f: 9e:c1:62:2e:eb:6e:6e:07:9e:b7:0e:5c:ba:9d:0a: 93:a8:a4:57:62:a4:2c:18:da:f2:35:97:58:4e:3b: f5:94:52:89:23:88:01:da:fe:62:47:ea:b1:0c:e7: 7c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:41:CA:41:FB:F0:22:2E:F8:B4:20:70:D0:FD:B6:E1:8E:D5:70:08 X509v3 Authority Key Identifier: keyid:03:FF:06:57:C0:EC:F8:73:98:30:33:F7:C6:C6:48:8B:33:78:9C:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_8GV8Ds-HOYMDP3xsZIizN4nEM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CFAD/561D662EEA0411EE92D10611C4F9AE02/A_8GV8Ds-HOYMDP3xsZIizN4nEM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:40:87:a6:02:3d:ec:76:25:77:80:64:8b:9e:47:b3:15:9b: 78:0d:58:a9:5a:86:b1:8d:19:ac:9a:de:9a:a3:8d:99:38:34: 19:9e:c9:f1:48:8a:78:ce:79:ce:c6:11:ca:ce:f1:49:20:a9: 1f:ff:a3:28:70:49:dc:0e:9a:e6:28:09:d4:c9:6d:84:bf:02: ce:48:bb:a0:20:c5:93:33:64:ae:68:b4:29:2b:03:76:29:3c: 97:c3:08:ab:6f:6f:02:8c:08:88:0d:35:97:3f:4c:49:a0:cf: c1:13:6c:68:88:d9:cc:62:35:16:d4:95:e1:ef:9f:87:24:f4: 98:b0:5c:e5:82:85:d0:0e:07:7a:7f:fe:8b:01:d0:cd:dd:cc: 5a:35:05:35:a8:90:d8:d1:eb:95:7d:88:e3:f1:a8:d8:93:bb: 23:f8:e8:87:c4:f3:59:6b:07:a3:63:67:11:18:cd:e6:9a:cf: 62:cd:2b:96:72:3e:28:0f:14:e1:9d:3a:e0:37:a6:e7:6c:c6: 93:b8:25:92:14:9d:65:55:a6:07:89:82:b6:27:54:9d:ae:51: 60:2d:d0:fc:1a:c5:bd:5d:1f:07:43:d8:3a:1a:65:66:c3:e6: 05:84:d5:0a:a3:31:a2:5d:d5:d4:d1:b1:a0:a0:39:0b:b7:f5: c4:83:91:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENGQUQxMTAvBgNVBAUTKDAzRkYwNjU3QzBFQ0Y4NzM5ODMwMzNGN0M2QzY0ODhC MzM3ODlDNDMwHhcNMjUwODIzMDUxMDEyWhcNMjUwODMwMDUxMDEyWjAYMRYwFAYD VQQDEw02OGE5NGQzNC02NTdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAykq3HZgN8ZUobEEpWpOcaQUKoiFiCGizyQNo62GRUPtj27Pous06FMd63oKn U7g1euk4vIUOQWIlwNTlT/qqNojfYL4T97agL0y4qpzmYlCcE8aoyk+OZpPIpg3A q/EIXc7NX2bUqqgET0Hr6J7wLG1Oczacj/3JE38RGUbxm7AuduZEvK8Pc91FugOQ inyubwyHe2u6G7P2sdFZW/jMlcUv8w4wHfV1x6NrSsuqElp9K1H+cnDURsLm816s ekqAVVu45IgAvGehAwxmmgRnUC+ewWIu625uB563Dly6nQqTqKRXYqQsGNryNZdY Tjv1lFKJI4gB2v5iR+qxDOd8XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdBykH7 8CIu+LQgcND9tuGO1XAIMB8GA1UdIwQYMBaAFAP/BlfA7PhzmDAz98bGSIszeJxD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0ZBRC81NjFENjYyRUVB MDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1IT1lNRFAzeHNaSWl6TjRu RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FfOEdWOERzLUhPWU1EUDN4c1pJaXpONG5FTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0ZBRC81NjFENjYyRUVBMDQxMUVFOTJEMTA2MTFDNEY5QUUwMi9BXzhHVjhEcy1I T1lNRFAzeHNaSWl6TjRuRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyQIemAj3sdiV3gGSLnkezFZt4DVipWoaxjRmsmt6ao42ZODQZnsnx SIp4znnOxhHKzvFJIKkf/6MocEncDprmKAnUyW2EvwLOSLugIMWTM2SuaLQpKwN2 KTyXwwirb28CjAiIDTWXP0xJoM/BE2xoiNnMYjUW1JXh75+HJPSYsFzlgoXQDgd6 f/6LAdDN3cxaNQU1qJDY0euVfYjj8ajYk7sj+OiHxPNZawejY2cRGM3mms9izSuW cj4oDxThnTrgN6bnbMaTuCWSFJ1lVaYHiYK2J1SdrlFgLdD8GsW9XR8HQ9g6GmVm w+YFhNUKozGiXdXU0bGgoDkLt/XEg5Hh -----END CERTIFICATE-----Generated at Sat Aug 23 19:32:26 2025 by rpki-client