$ rpki-client -vvf rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft File: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft (raw, json) Hash identifier: nakHRoArMtHDBd/REpHwZxz7DGeiK/84iIvdb5mksow= Subject key identifier: 66:78:FC:7A:07:0A:DB:72:0E:FB:98:A2:29:58:F5:24:60:7D:BA:BB Authority key identifier: F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78 Certificate issuer: /CN=A91955D9/serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78 Certificate serial: 92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft Manifest number: 91 Signing time: Sat 23 Aug 2025 06:42:50 +0000 Manifest this update: Sat 23 Aug 2025 06:42:49 +0000 Manifest next update: Sat 30 Aug 2025 06:42:49 +0000 Files and hashes: 1: 8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl (hash: u0GrVIDZ30/ReiSqLt9wjf/sJ0ox419Tw/5fwsxubEE=) 2: 0D041790A28611EFBD5A8C11C4F9AE02.roa (hash: 97I65+Q066TDiRkq5FVajUp8ATxWSUAGmGMHS8ACfSY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 146 (0x92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91955D9, serialNumber=F26A8101916952FB20BE01E8FC7C90EDC9EE9F78 Validity Not Before: Aug 23 06:42:49 2025 GMT Not After : Aug 30 06:42:49 2025 GMT Subject: CN=68a962ea-b82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:32:ac:a1:11:63:5b:c6:7e:65:30:68:13:02: aa:5b:82:2b:c5:9b:73:ec:90:9e:ad:c8:44:8f:11: 85:b2:f9:ec:99:c5:de:6d:93:22:85:48:7c:00:07: bb:ff:ff:45:a7:5c:e2:50:7d:66:ca:55:f4:38:5e: 60:3e:c6:b2:bc:b2:e1:de:d2:76:c6:23:97:4d:3b: ad:a1:ba:5c:f8:a0:c2:f9:d1:8e:4a:ce:82:9e:c8: 33:47:33:39:7c:03:3e:18:17:00:90:64:0e:56:40: 53:eb:9a:83:cd:a6:f8:d3:b2:08:4d:0f:8c:a7:62: 8f:98:58:87:0f:c2:f9:94:43:c5:0c:a9:57:87:4d: 87:d8:3b:95:1b:25:09:df:fc:6c:c3:61:a5:6a:a3: 41:6e:d3:7e:6e:db:49:c6:b8:af:a4:14:80:bd:97: d8:f0:ab:84:ef:46:5a:a6:dc:18:fe:85:ed:11:2c: e2:5f:c2:1e:c0:90:fa:39:e6:99:a4:5c:14:2d:c2: e1:9e:27:b1:eb:32:59:27:58:a7:31:d5:00:19:e5: e0:8f:e8:16:ba:cb:92:bf:b7:ab:7d:8f:a4:7d:e8: d3:87:96:ea:4a:43:54:0b:2d:e3:d2:4b:36:d1:a1: c5:1d:bf:82:dd:b7:2a:be:c4:fe:b3:b1:0e:d5:01: 6c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:78:FC:7A:07:0A:DB:72:0E:FB:98:A2:29:58:F5:24:60:7D:BA:BB X509v3 Authority Key Identifier: keyid:F2:6A:81:01:91:69:52:FB:20:BE:01:E8:FC:7C:90:ED:C9:EE:9F:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mqBAZFpUvsgvgHo_HyQ7cnun3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91955D9/CD54D738A28511EFB66B1811C4F9AE02/8mqBAZFpUvsgvgHo_HyQ7cnun3g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b1:29:a7:f3:1e:cd:23:83:27:19:4f:be:a4:1b:9a:3c:06:9e: 5e:19:74:04:99:8a:21:2c:52:bd:fc:17:d2:3e:08:b2:7f:94: dc:32:d0:a2:cb:1d:0a:5d:4e:f0:e0:b0:53:16:9f:3e:1a:06: c8:26:fd:a2:69:93:0d:f0:57:79:9e:c7:8f:f9:b0:31:d8:42: d1:eb:85:f8:c1:27:7f:a4:ed:be:9b:8b:cb:4c:cc:14:b7:ab: 73:98:09:f6:a9:79:d8:bb:9c:d5:f6:cb:9b:47:6f:04:d6:85: 22:16:a4:b1:82:4b:93:41:79:41:31:84:26:6a:77:cb:a7:cb: f1:c9:1d:7b:a9:78:b7:d7:c4:d0:3a:93:9c:fb:fe:a8:fd:7e: 61:29:b7:c7:fb:56:b3:89:94:f0:4d:3c:91:0f:6f:b1:45:f5: 87:61:0d:b0:a0:51:c0:82:73:db:02:2b:e5:c4:64:19:d3:36: 93:34:d9:be:52:04:89:da:bf:b9:cc:06:12:c6:d4:d9:a4:4f: 93:d4:55:8a:c7:a7:20:62:f8:61:91:e2:74:5c:a3:6c:e3:0d: 17:9c:bd:d9:36:d7:46:9d:2a:55:75:5b:8e:cd:5f:e1:2b:21: e5:1a:f2:b2:92:c3:4f:39:dc:fd:11:93:07:e5:da:a4:6e:f6: 33:79:1f:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU1RDkxMTAvBgNVBAUTKEYyNkE4MTAxOTE2OTUyRkIyMEJFMDFFOEZDN0M5MEVE QzlFRTlGNzgwHhcNMjUwODIzMDY0MjQ5WhcNMjUwODMwMDY0MjQ5WjAYMRYwFAYD VQQDEw02OGE5NjJlYS1iODJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTKsoRFjW8Z+ZTBoEwKqW4IrxZtz7JCerchEjxGFsvnsmcXebZMihUh8AAe7 //9Fp1ziUH1mylX0OF5gPsayvLLh3tJ2xiOXTTutobpc+KDC+dGOSs6CnsgzRzM5 fAM+GBcAkGQOVkBT65qDzab407IITQ+Mp2KPmFiHD8L5lEPFDKlXh02H2DuVGyUJ 3/xsw2GlaqNBbtN+bttJxrivpBSAvZfY8KuE70ZaptwY/oXtESziX8IewJD6OeaZ pFwULcLhniex6zJZJ1inMdUAGeXgj+gWusuSv7erfY+kfejTh5bqSkNUCy3j0ks2 0aHFHb+C3bcqvsT+s7EO1QFsAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZ4/HoH CttyDvuYoilY9SRgfbq7MB8GA1UdIwQYMBaAFPJqgQGRaVL7IL4B6Px8kO3J7p94 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTVEOS9DRDU0RDczOEEy ODUxMUVGQjY2QjE4MTFDNEY5QUUwMi84bXFCQVpGcFV2c2d2Z0hvX0h5UTdjbnVu M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhtcUJBWkZwVXZzZ3ZnSG9fSHlRN2NudW4zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTVEOS9DRDU0RDczOEEyODUxMUVGQjY2QjE4MTFDNEY5QUUwMi84bXFCQVpGcFV2 c2d2Z0hvX0h5UTdjbnVuM2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCxKafzHs0jgycZT76kG5o8Bp5eGXQEmYohLFK9/BfSPgiyf5TcMtCi yx0KXU7w4LBTFp8+GgbIJv2iaZMN8Fd5nseP+bAx2ELR64X4wSd/pO2+m4vLTMwU t6tzmAn2qXnYu5zV9subR28E1oUiFqSxgkuTQXlBMYQmanfLp8vxyR17qXi318TQ OpOc+/6o/X5hKbfH+1aziZTwTTyRD2+xRfWHYQ2woFHAgnPbAivlxGQZ0zaTNNm+ UgSJ2r+5zAYSxtTZpE+T1FWKx6cgYvhhkeJ0XKNs4w0XnL3ZNtdGnSpVdVuOzV/h KyHlGvKyksNPOdz9EZMH5dqkbvYzeR+x -----END CERTIFICATE-----Generated at Sat Aug 23 19:14:54 2025 by rpki-client