$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft File: b8ItMPMZzWXbXj9v_F0UHNAWaII.mft (raw, json) Hash identifier: MwlZNywRaJgMGJu+OjDuE+M7JrZ2rKWSQ+FL0nWMOaA= Subject key identifier: 74:B1:ED:9D:73:E7:89:EC:A0:A4:E3:49:8C:B2:5D:6E:A6:EB:A9:EF Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82 Certificate issuer: /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882 Certificate serial: 33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft Manifest number: 31 Signing time: Sat 23 Aug 2025 07:53:26 +0000 Manifest this update: Sat 23 Aug 2025 07:53:26 +0000 Manifest next update: Sat 30 Aug 2025 07:53:26 +0000 Files and hashes: 1: b8ItMPMZzWXbXj9v_F0UHNAWaII.crl (hash: piyTNnlpLlUJXFFeSZCd+7411EvUkUkCEULoi+PeEOg=) 2: F5D3BEF837FA11F083B5FC7DC4F9AE02.roa (hash: uo101jV5D+ClspePQe5MSA2kQIWF4csGlLsFWkLTXVc=) 3: F68ED40E37FA11F083B5FC7DC4F9AE02.roa (hash: 8dvGtU4/STS35lWSdlUQSQ3IYG+2zjb7Ya5wIRb/kvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:53:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51 (0x33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882 Validity Not Before: Aug 23 07:53:26 2025 GMT Not After : Aug 30 07:53:26 2025 GMT Subject: CN=68a97376-ce51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bc:cd:2c:5e:a8:82:ae:fb:cd:fc:e9:8c:a8: 2a:cd:00:de:b1:ad:29:e4:b9:e9:b7:ec:bb:87:27: 57:43:9f:e5:c2:18:9a:dc:74:d1:5f:b2:90:25:49: 6d:5b:b3:38:d7:f5:40:2d:e7:16:c6:74:7e:e4:f9: 41:fb:f8:57:6a:55:a4:3b:5c:fb:ea:ac:cb:86:c6: 1b:24:97:47:f3:3d:91:aa:51:6c:17:21:f4:53:3a: 60:99:83:58:b0:70:76:d7:13:f6:cd:a2:cf:16:17: a4:b2:22:83:13:60:96:6c:ed:30:1b:4d:76:55:97: 98:4a:f5:7d:55:5e:cf:b5:5e:d3:c0:27:4a:68:73: 7a:06:78:44:1f:78:8b:36:67:3d:7e:ff:64:f8:11: 7c:14:4a:95:79:f1:4f:3c:0d:cb:6a:2b:02:fb:e6: d8:42:63:0d:2f:b3:fb:09:3e:1e:67:51:5b:5b:68: 2a:06:c0:8e:63:23:73:6a:5a:97:d0:27:37:2d:8e: 47:b5:62:dc:d1:8d:f4:e1:cf:b7:22:75:e3:c0:2b: d9:75:35:aa:77:e3:60:8d:1f:43:da:05:b5:f1:b9: 2b:05:ef:92:d3:1e:b3:e4:2a:01:14:8d:c1:c3:9f: b6:90:f6:a8:b9:14:ac:c3:4a:3c:c7:94:53:48:65: 6a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B1:ED:9D:73:E7:89:EC:A0:A4:E3:49:8C:B2:5D:6E:A6:EB:A9:EF X509v3 Authority Key Identifier: keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:12:a7:bf:8e:d6:94:85:48:45:75:4d:4f:9e:f8:0a:73:56: 49:52:72:26:4e:24:41:be:0e:64:63:05:28:fc:d8:80:59:d6: e0:af:98:28:11:9c:5a:f9:1e:24:8e:b7:a9:97:03:28:c3:12: 61:de:6c:9a:4d:0d:0e:a1:d2:dc:27:26:31:c8:b3:8c:dd:62: fa:5c:e5:82:24:9f:bc:d1:30:83:46:77:38:97:e1:4b:2c:aa: 7f:86:a1:7b:d2:7a:40:5a:2f:d1:71:94:76:fe:65:dc:d0:8b: 37:23:e3:2c:23:56:c2:3c:15:f4:f5:63:a0:fd:2c:31:ed:38: ab:c0:b0:4f:cf:77:52:56:df:b2:2b:c6:45:9e:e4:bf:a2:e0: 37:02:b0:7b:50:bb:57:b5:aa:8d:35:c2:55:4f:8b:07:0f:77: b7:46:85:d8:ed:e8:ce:5c:05:11:2b:ee:8a:56:44:39:f5:7f: 40:57:be:03:2c:94:1a:e9:dd:a6:57:86:ac:20:0d:7b:fe:12: 55:ba:74:cd:16:bf:cc:a1:96:8f:24:23:f0:e9:90:37:82:89: 1f:c2:96:a9:3f:37:a5:2f:fd:37:37:24:60:98:e5:be:b5:d4: 45:74:96:4e:ef:69:f3:5b:e9:89:08:41:c7:ea:4b:42:40:bb: c0:eb:1f:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDkxNjExMC8GA1UEBRMoNkZDMjJEMzBGMzE5Q0Q2NURCNUUzRjZGRkM1RDE0MUNE MDE2Njg4MjAeFw0yNTA4MjMwNzUzMjZaFw0yNTA4MzAwNzUzMjZaMBgxFjAUBgNV BAMTDTY4YTk3Mzc2LWNlNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrvM0sXqiCrvvN/OmMqCrNAN6xrSnkuem37LuHJ1dDn+XCGJrcdNFfspAlSW1b szjX9UAt5xbGdH7k+UH7+FdqVaQ7XPvqrMuGxhskl0fzPZGqUWwXIfRTOmCZg1iw cHbXE/bNos8WF6SyIoMTYJZs7TAbTXZVl5hK9X1VXs+1XtPAJ0poc3oGeEQfeIs2 Zz1+/2T4EXwUSpV58U88DctqKwL75thCYw0vs/sJPh5nUVtbaCoGwI5jI3NqWpfQ Jzctjke1YtzRjfThz7cidePAK9l1Nap342CNH0PaBbXxuSsF75LTHrPkKgEUjcHD n7aQ9qi5FKzDSjzHlFNIZWqHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdLHtnXPn ieygpONJjLJdbqbrqe8wHwYDVR0jBBgwFoAUb8ItMPMZzWXbXj9v/F0UHNAWaIIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwOTE2LzA0MEI4N0JBMzY0 QTExRjA4MDRBREU1RUM0RjlBRTAyL2I4SXRNUE1aeldYYlhqOXZfRjBVSE5BV2FJ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjhJdE1QTVp6V1hiWGo5dl9GMFVITkFXYUlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw OTE2LzA0MEI4N0JBMzY0QTExRjA4MDRBREU1RUM0RjlBRTAyL2I4SXRNUE1aeldY YlhqOXZfRjBVSE5BV2FJSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH4Sp7+O1pSFSEV1TU+e+ApzVklSciZOJEG+DmRjBSj82IBZ1uCvmCgR nFr5HiSOt6mXAyjDEmHebJpNDQ6h0twnJjHIs4zdYvpc5YIkn7zRMINGdziX4Uss qn+GoXvSekBaL9FxlHb+ZdzQizcj4ywjVsI8FfT1Y6D9LDHtOKvAsE/Pd1JW37Ir xkWe5L+i4DcCsHtQu1e1qo01wlVPiwcPd7dGhdjt6M5cBREr7opWRDn1f0BXvgMs lBrp3aZXhqwgDXv+ElW6dM0Wv8yhlo8kI/DpkDeCiR/Clqk/N6Uv/Tc3JGCY5b61 1EV0lk7vafNb6YkIQcfqS0JAu8DrH38= -----END CERTIFICATE-----Generated at Sat Aug 23 15:52:51 2025 by rpki-client