$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft File: 8bt55W0rCYaSzH0fIm91bHlh4Zs.mft (raw, json) Hash identifier: ufQeW+aaMzym/AguKGNZcUSjqhNANv8wcsp3tocI3co= Subject key identifier: DC:9A:D1:9B:93:37:5B:EA:06:42:C8:BE:E4:CD:B0:E8:40:E7:04:46 Authority key identifier: F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B Certificate issuer: /CN=A91A29A1/serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B Certificate serial: 0795 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft Manifest number: 078F Signing time: Fri 22 Aug 2025 21:37:14 +0000 Manifest this update: Fri 22 Aug 2025 21:37:13 +0000 Manifest next update: Fri 29 Aug 2025 21:37:13 +0000 Files and hashes: 1: 8bt55W0rCYaSzH0fIm91bHlh4Zs.crl (hash: WM/RxjfDd0ut4WPjmB38nuAmGsL04YLbIU/gR9BrrA8=) 2: FD33BACA1E5211EBA055EE2BC4F9AE02.roa (hash: Dkqf9iSh4QQJs2mZkJEMgbT0BzwzhORuJVYaCkXmjeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:37:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1941 (0x795) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29A1, serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B Validity Not Before: Aug 22 21:37:13 2025 GMT Not After : Aug 29 21:37:13 2025 GMT Subject: CN=68a8e309-767d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:c5:23:68:2e:08:ad:4a:67:d3:60:59:84: ce:62:a8:69:b5:88:16:10:b4:6c:43:1c:51:25:70: 68:17:a2:31:b6:1d:51:55:37:6a:73:ed:c7:15:d8: 2c:05:5f:d8:e0:3e:da:98:ac:53:17:ef:fd:26:10: b6:3e:5a:55:b9:f0:cc:88:89:c0:18:a0:b1:06:76: c1:f0:55:ed:49:4d:48:a2:b1:4a:6c:56:5c:96:68: 78:be:4a:07:e1:ea:1d:4c:ae:a8:da:de:6c:9b:11: 20:72:36:7f:9c:52:74:bc:d0:fc:f3:1a:82:0e:d3: af:80:56:f3:00:53:5a:46:66:7e:3b:8a:cb:b2:d0: 39:33:6b:e9:03:97:f3:c7:6b:5f:50:54:c2:98:13: 9e:4e:fe:5e:33:c1:f2:a1:14:ac:fc:43:a6:57:99: d3:67:84:38:4f:8b:f2:4f:ae:fb:8c:7a:b8:1e:da: c0:3d:b0:26:e4:b8:f1:20:5f:b9:2a:0d:7c:1e:97: 16:1c:9f:17:11:2e:e6:ed:a6:57:f8:c1:60:24:b3: b2:18:21:ff:dd:78:da:a0:d6:7c:f4:03:38:0c:30: 3f:24:1e:fe:c0:f5:85:14:37:fa:3a:0d:0b:2c:1b: 38:e3:65:04:35:db:24:43:58:26:9a:31:f5:46:94: 44:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9A:D1:9B:93:37:5B:EA:06:42:C8:BE:E4:CD:B0:E8:40:E7:04:46 X509v3 Authority Key Identifier: keyid:F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:dd:7a:fc:60:ac:be:20:f7:20:33:05:66:35:c6:ce:19:0c: 8a:05:7b:f4:78:8f:78:35:16:1c:45:9f:42:57:48:e8:4a:92: a2:b2:74:10:6b:df:1f:e1:37:c9:10:96:56:7f:fd:d9:07:21: 13:c9:00:4c:38:09:4a:4d:c9:84:42:46:d9:b2:ba:0b:18:0e: d8:75:7e:88:10:40:a1:72:78:5f:f7:9d:7f:4d:af:da:7d:8b: 06:01:f1:39:72:de:ff:6c:cc:3f:be:39:79:74:f6:ba:d0:c8: 7b:de:5b:f1:25:59:c1:20:5b:00:23:d7:98:44:22:fe:27:87: 2b:5e:0c:6b:7d:ad:24:5a:e1:6e:c6:2e:da:4e:1c:1a:ec:8c: 5f:12:78:f3:93:71:18:54:71:9a:af:c5:f7:1a:5f:c3:6e:c4: c2:18:4a:64:f2:39:d1:32:5e:d9:7e:a2:ac:6d:66:4f:22:d6: 11:5e:20:52:49:ce:c8:81:6d:00:c3:91:e8:94:6c:df:97:27: 26:75:c4:7f:8a:9b:13:19:0c:e1:cd:c6:86:bf:68:0e:63:46: 7e:99:e8:7d:42:8d:b3:d0:e1:21:ff:66:8f:a8:2f:a0:56:74: b9:27:5d:5d:41:d5:e2:52:83:de:b8:45:2a:3d:1e:fc:4d:06: a2:17:91:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5QTExMTAvBgNVBAUTKEYxQkI3OUU1NkQyQjA5ODY5MkNDN0QxRjIyNkY3NTZD Nzk2MUUxOUIwHhcNMjUwODIyMjEzNzEzWhcNMjUwODI5MjEzNzEzWjAYMRYwFAYD VQQDEw02OGE4ZTMwOS03NjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLnFI2guCK1KZ9NgWYTOYqhptYgWELRsQxxRJXBoF6Ixth1RVTdqc+3HFdgs BV/Y4D7amKxTF+/9JhC2PlpVufDMiInAGKCxBnbB8FXtSU1IorFKbFZclmh4vkoH 4eodTK6o2t5smxEgcjZ/nFJ0vND88xqCDtOvgFbzAFNaRmZ+O4rLstA5M2vpA5fz x2tfUFTCmBOeTv5eM8HyoRSs/EOmV5nTZ4Q4T4vyT677jHq4HtrAPbAm5LjxIF+5 Kg18HpcWHJ8XES7m7aZX+MFgJLOyGCH/3XjaoNZ89AM4DDA/JB7+wPWFFDf6Og0L LBs442UENdskQ1gmmjH1RpRECQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNya0ZuT N1vqBkLIvuTNsOhA5wRGMB8GA1UdIwQYMBaAFPG7eeVtKwmGksx9HyJvdWx5YeGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlBMS9GOEYwRUM5NjFF NTAxMUVCODIwNzg2MjZDNEY5QUUwMi84YnQ1NVcwckNZYVN6SDBmSW05MWJIbGg0 WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhidDU1VzByQ1lhU3pIMGZJbTkxYkhsaDRacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlBMS9GOEYwRUM5NjFFNTAxMUVCODIwNzg2MjZDNEY5QUUwMi84YnQ1NVcwckNZ YVN6SDBmSW05MWJIbGg0WnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu3Xr8YKy+IPcgMwVmNcbOGQyKBXv0eI94NRYcRZ9CV0joSpKisnQQ a98f4TfJEJZWf/3ZByETyQBMOAlKTcmEQkbZsroLGA7YdX6IEEChcnhf951/Ta/a fYsGAfE5ct7/bMw/vjl5dPa60Mh73lvxJVnBIFsAI9eYRCL+J4crXgxrfa0kWuFu xi7aThwa7IxfEnjzk3EYVHGar8X3Gl/DbsTCGEpk8jnRMl7ZfqKsbWZPItYRXiBS Sc7IgW0Aw5HolGzflycmdcR/ipsTGQzhzcaGv2gOY0Z+meh9Qo2z0OEh/2aPqC+g VnS5J11dQdXiUoPeuEUqPR78TQaiF5Hq -----END CERTIFICATE-----Generated at Sat Aug 23 17:08:20 2025 by rpki-client