$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft File: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft (raw, json) Hash identifier: tszWN9ha9LYWr021O/IBiEkTivXqMN6K4e4yQ2Kd7sg= Subject key identifier: C1:77:DE:A0:75:5D:20:79:B5:DD:CA:6B:E6:B5:E1:6C:66:07:EF:B1 Authority key identifier: F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 Certificate issuer: /CN=A91B165F/serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft Manifest number: 8F Signing time: Sat 23 Aug 2025 06:43:23 +0000 Manifest this update: Sat 23 Aug 2025 06:43:23 +0000 Manifest next update: Sat 30 Aug 2025 06:43:23 +0000 Files and hashes: 1: 8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl (hash: o4KYkiVdg7/OqqOttwSEEW0ftaLTlORRa8uRGhFxsII=) 2: 1DF22790A4B611EF9CDA1A2CC4F9AE02.roa (hash: w3wkEl72R5yHh8FDEdSTJXXK4Ra1LhkLOkjK6q8uAIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=F04929EF743C54C08B45E19CFC51BF2AA559DAA1 Validity Not Before: Aug 23 06:43:23 2025 GMT Not After : Aug 30 06:43:23 2025 GMT Subject: CN=68a9630b-e66b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5d:47:1f:92:77:93:23:92:6f:f7:ee:42:9f: 26:4a:08:a2:87:f9:b5:11:38:84:3e:38:89:37:22: 6a:79:08:be:05:58:da:dc:9e:30:7d:38:be:d1:24: 50:37:3d:bc:dc:4f:1a:ff:e8:3e:3d:ed:fc:07:55: 51:31:89:0c:d3:d1:82:1c:e6:f4:88:a2:e0:65:5f: fd:38:ad:e8:9a:af:20:91:b6:2c:57:24:2b:17:cd: 00:1f:fe:bf:85:7f:9f:0e:f8:32:09:55:78:0a:99: 04:d4:2b:c4:06:37:15:82:4a:6d:9a:86:8d:4f:f7: 42:70:cf:2f:a3:b8:0b:99:8a:1b:21:cc:24:fd:70: 6b:9e:75:08:bb:44:e2:54:5b:41:2d:5a:51:70:cd: 15:21:66:8a:43:0e:06:f6:f0:08:d1:74:a0:86:85: f6:de:19:55:5b:46:57:98:d8:76:2e:27:a9:ba:f5: bf:0e:cc:cf:65:1b:e5:84:5d:ae:82:a5:e2:43:a0: a8:33:42:54:f9:0a:f0:3d:da:8a:08:4a:0c:55:65: c4:e7:b8:74:1c:38:13:b3:12:e6:74:f7:35:2b:a2: a5:dd:07:26:9a:69:59:a1:7c:2b:2b:3f:81:a9:e2: df:ff:2e:87:bc:e9:09:b0:07:a5:b0:5d:85:ab:06: d3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:77:DE:A0:75:5D:20:79:B5:DD:CA:6B:E6:B5:E1:6C:66:07:EF:B1 X509v3 Authority Key Identifier: keyid:F0:49:29:EF:74:3C:54:C0:8B:45:E1:9C:FC:51:BF:2A:A5:59:DA:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/8C214974A4B311EF889C7687C4F9AE02/8Ekp73Q8VMCLReGc_FG_KqVZ2qE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:77:2f:8b:92:63:a0:63:38:a2:75:c8:f9:15:eb:59:38:54: bd:61:ca:c6:ea:5b:e5:60:90:a9:65:1f:b4:a3:eb:64:88:aa: f5:3e:6e:1f:c7:da:a2:9d:26:b6:d8:e8:9c:64:2e:f4:d6:2c: af:cc:3b:7c:82:ed:7b:55:02:3c:19:50:0b:92:09:a8:38:91: 11:25:f8:39:6b:ed:6a:31:45:d6:94:04:82:ff:d8:90:fe:04: 43:a4:d5:0d:d8:3a:e0:28:6b:06:a8:26:51:a5:1b:85:e2:a4: 16:b5:c0:db:ca:ad:a1:7f:8f:e1:58:e5:3a:b7:31:69:cd:8e: 70:eb:1c:c6:7b:93:d4:a9:60:19:07:80:3b:de:35:26:7d:b5: e5:b3:a9:c0:9f:eb:d5:30:ac:a8:f7:54:b2:07:e7:de:c5:18: fe:97:5e:fb:95:c5:e7:dd:be:bb:a3:86:38:54:1d:62:9c:01: 56:d7:a6:ed:c8:e3:bc:5a:c7:70:bf:a6:63:40:f8:3d:b5:32: df:f7:7c:f7:9b:95:91:3c:fe:e4:d2:6f:93:c1:7e:3a:15:3c: e3:65:8c:ad:8f:df:06:43:3e:34:be:1d:9e:e7:73:fc:c4:d4: 46:55:e8:d3:fa:ed:6c:93:79:e8:96:40:8d:f4:03:79:9f:19: c9:52:11:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjE2NUYxMTAvBgNVBAUTKEYwNDkyOUVGNzQzQzU0QzA4QjQ1RTE5Q0ZDNTFCRjJB QTU1OURBQTEwHhcNMjUwODIzMDY0MzIzWhcNMjUwODMwMDY0MzIzWjAYMRYwFAYD VQQDEw02OGE5NjMwYi1lNjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA011HH5J3kyOSb/fuQp8mSgiih/m1ETiEPjiJNyJqeQi+BVja3J4wfTi+0SRQ Nz283E8a/+g+Pe38B1VRMYkM09GCHOb0iKLgZV/9OK3omq8gkbYsVyQrF80AH/6/ hX+fDvgyCVV4CpkE1CvEBjcVgkptmoaNT/dCcM8vo7gLmYobIcwk/XBrnnUIu0Ti VFtBLVpRcM0VIWaKQw4G9vAI0XSghoX23hlVW0ZXmNh2LiepuvW/DszPZRvlhF2u gqXiQ6CoM0JU+QrwPdqKCEoMVWXE57h0HDgTsxLmdPc1K6Kl3QcmmmlZoXwrKz+B qeLf/y6HvOkJsAelsF2FqwbThQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMF33qB1 XSB5td3Ka+a14WxmB++xMB8GA1UdIwQYMBaAFPBJKe90PFTAi0XhnPxRvyqlWdqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTY1Ri84QzIxNDk3NEE0 QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi84RWtwNzNROFZNQ0xSZUdjX0ZHX0txVloy cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFa3A3M1E4Vk1DTFJlR2NfRkdfS3FWWjJxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTY1Ri84QzIxNDk3NEE0QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi84RWtwNzNROFZN Q0xSZUdjX0ZHX0txVloycUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwdy+LkmOgYziidcj5FetZOFS9YcrG6lvlYJCpZR+0o+tkiKr1Pm4f x9qinSa22OicZC701iyvzDt8gu17VQI8GVALkgmoOJERJfg5a+1qMUXWlASC/9iQ /gRDpNUN2DrgKGsGqCZRpRuF4qQWtcDbyq2hf4/hWOU6tzFpzY5w6xzGe5PUqWAZ B4A73jUmfbXls6nAn+vVMKyo91SyB+fexRj+l177lcXn3b67o4Y4VB1inAFW16bt yOO8Wsdwv6ZjQPg9tTLf93z3m5WRPP7k0m+TwX46FTzjZYytj98GQz40vh2e53P8 xNRGVejT+u1sk3nolkCN9AN5nxnJUhF5 -----END CERTIFICATE-----Generated at Sat Aug 23 22:37:37 2025 by rpki-client