$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft File: -8GBRK7YqJ12DV1eLe2MOPMeWeA.mft (raw, json) Hash identifier: vlaf5Qc1W6Hsc3eC2UnJoejoa+DnVDOt63InQkXrmv0= Subject key identifier: 47:CB:67:90:25:3C:3A:FE:65:25:C4:DF:E3:8D:9C:30:C9:C6:D3:72 Authority key identifier: FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 Certificate issuer: /CN=A91A4543/serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Certificate serial: 083D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft Manifest number: 0836 Signing time: Fri 22 Aug 2025 20:54:46 +0000 Manifest this update: Fri 22 Aug 2025 20:54:46 +0000 Manifest next update: Fri 29 Aug 2025 20:54:46 +0000 Files and hashes: 1: -8GBRK7YqJ12DV1eLe2MOPMeWeA.crl (hash: 842MFH+x+aKJ7J4qBp7G2gjEzbFpnenQILSG2uwP1iA=) 2: B3C41A60DD1B11EAAC9A0915C4F9AE02.roa (hash: pAtkMYoP9pyBPl/xXuNkKMm/3mhUwbxuTSTQt0etagU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2109 (0x83d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4543, serialNumber=FBC18144AED8A89D760D5D5E2DED8C38F31E59E0 Validity Not Before: Aug 22 20:54:46 2025 GMT Not After : Aug 29 20:54:46 2025 GMT Subject: CN=68a8d916-db5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bc:01:93:9a:cb:a1:e0:dd:0a:8c:8b:cf:87: 16:21:d9:61:f8:43:f9:b5:f2:26:0f:24:22:b5:ea: df:8a:d4:8a:02:10:3b:6b:22:bc:23:95:65:f6:48: 6e:d7:43:2b:bc:d7:e5:62:4e:03:f6:c9:aa:22:18: 46:7b:ef:5f:b5:23:bc:93:04:7f:35:69:60:e9:93: 11:bd:62:0a:e6:78:8d:fc:65:34:38:6d:50:b0:8e: d6:27:9a:af:a4:69:93:9b:d9:ee:ad:98:e7:0f:96: 35:21:3a:da:7c:0c:89:69:e1:c9:ac:b2:b0:8e:71: 06:bd:07:b4:13:46:ba:7a:4f:b3:86:45:c2:9e:78: 29:b4:11:f5:9a:b6:69:0f:65:07:84:c2:ef:d7:3f: 05:cf:4f:5f:4f:6b:0f:e3:89:08:5e:d6:83:de:5f: c5:c3:5b:1f:18:ef:99:28:f2:5f:b6:4d:ac:d5:06: dd:6f:af:bb:fc:38:3b:bf:1b:21:8b:f4:cf:1b:7b: ca:f3:d9:1a:1a:38:bb:01:70:dc:5d:59:f6:9a:25: b7:b7:bc:9e:fe:6d:86:98:98:a4:da:1a:ec:1b:10: 48:ee:a7:e2:d6:5e:9b:92:69:50:2b:b7:05:12:f0: b5:58:3b:48:10:0f:3e:15:e4:22:04:ee:16:4f:63: 28:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CB:67:90:25:3C:3A:FE:65:25:C4:DF:E3:8D:9C:30:C9:C6:D3:72 X509v3 Authority Key Identifier: keyid:FB:C1:81:44:AE:D8:A8:9D:76:0D:5D:5E:2D:ED:8C:38:F3:1E:59:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-8GBRK7YqJ12DV1eLe2MOPMeWeA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/57EF9F6CDD1A11EA8A439F13C4F9AE02/-8GBRK7YqJ12DV1eLe2MOPMeWeA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:e1:87:b8:d0:0b:d4:85:65:df:52:d2:50:30:d3:bd:72:cb: 88:a3:84:35:46:57:6f:0e:82:74:37:a1:64:62:e7:ba:54:fd: 95:33:f0:43:51:2d:33:eb:3d:28:c2:15:b6:fc:f6:09:a5:ac: 1f:a7:ce:03:32:03:18:7e:f0:ab:71:47:4c:df:fa:45:6f:d3: 32:dc:d3:aa:50:52:c8:d8:47:18:43:20:d9:4b:ab:00:cd:6d: b4:c5:6c:95:ac:8c:65:21:9d:d7:01:2f:34:70:9b:ba:a3:9f: c0:c0:91:13:8e:3b:c7:49:a7:90:71:88:2c:96:8d:51:34:40: c9:d8:5d:1a:92:c0:62:80:53:bd:02:5f:58:f7:8c:2c:19:98: 12:f6:ab:9d:e4:28:48:90:f2:e4:c6:b6:3f:14:f8:b0:c5:be: fd:8d:74:80:ed:4a:ea:04:65:8c:2f:d6:72:93:2f:9d:37:7d: 59:00:fd:1c:2d:8c:8b:02:08:af:af:95:22:3d:31:e1:c2:9c: 47:96:91:a6:4d:dc:da:2f:25:50:fd:74:69:db:1b:e3:9a:2c: 23:2d:7a:2c:38:ff:9a:c9:44:fd:4a:99:f7:5a:27:ab:52:67: a0:6c:70:20:5c:22:49:50:07:52:68:6b:3c:32:3e:ba:8e:3c: ac:c4:a0:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ1NDMxMTAvBgNVBAUTKEZCQzE4MTQ0QUVEOEE4OUQ3NjBENUQ1RTJERUQ4QzM4 RjMxRTU5RTAwHhcNMjUwODIyMjA1NDQ2WhcNMjUwODI5MjA1NDQ2WjAYMRYwFAYD VQQDEw02OGE4ZDkxNi1kYjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0bwBk5rLoeDdCoyLz4cWIdlh+EP5tfImDyQiterfitSKAhA7ayK8I5Vl9khu 10MrvNflYk4D9smqIhhGe+9ftSO8kwR/NWlg6ZMRvWIK5niN/GU0OG1QsI7WJ5qv pGmTm9nurZjnD5Y1ITrafAyJaeHJrLKwjnEGvQe0E0a6ek+zhkXCnngptBH1mrZp D2UHhMLv1z8Fz09fT2sP44kIXtaD3l/Fw1sfGO+ZKPJftk2s1Qbdb6+7/Dg7vxsh i/TPG3vK89kaGji7AXDcXVn2miW3t7ye/m2GmJik2hrsGxBI7qfi1l6bkmlQK7cF EvC1WDtIEA8+FeQiBO4WT2Mo1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfLZ5Al PDr+ZSXE3+ONnDDJxtNyMB8GA1UdIwQYMBaAFPvBgUSu2Kiddg1dXi3tjDjzHlng MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDU0My81N0VGOUY2Q0RE MUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFKMTJEVjFlTGUyTU9QTWVX ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy04R0JSSzdZcUoxMkRWMWVMZTJNT1BNZVdlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDU0My81N0VGOUY2Q0REMUExMUVBOEE0MzlGMTNDNEY5QUUwMi8tOEdCUks3WXFK MTJEVjFlTGUyTU9QTWVXZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI4Ye40AvUhWXfUtJQMNO9csuIo4Q1RldvDoJ0N6FkYue6VP2VM/BD US0z6z0owhW2/PYJpawfp84DMgMYfvCrcUdM3/pFb9My3NOqUFLI2EcYQyDZS6sA zW20xWyVrIxlIZ3XAS80cJu6o5/AwJETjjvHSaeQcYgslo1RNEDJ2F0aksBigFO9 Al9Y94wsGZgS9qud5ChIkPLkxrY/FPiwxb79jXSA7UrqBGWML9Zyky+dN31ZAP0c LYyLAgivr5UiPTHhwpxHlpGmTdzaLyVQ/XRp2xvjmiwjLXosOP+ayUT9Spn3Wier UmegbHAgXCJJUAdSaGs8Mj66jjysxKCm -----END CERTIFICATE-----Generated at Sun Aug 24 00:08:54 2025 by rpki-client