$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft File: 8rcLSXMivuZoIO0_ziiqeW2wkVM.mft (raw, json) Hash identifier: rL7kU/7hd0xOmVD2OH0oxfK0S84wk7oCQI8QszwZY30= Subject key identifier: 76:72:8D:F5:EF:9C:10:FA:7A:D9:4A:E9:D4:97:C9:A8:55:2F:9D:81 Authority key identifier: F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 Certificate issuer: /CN=A91B43D7/serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Certificate serial: 06DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft Manifest number: 06D7 Signing time: Fri 22 Aug 2025 22:11:59 +0000 Manifest this update: Fri 22 Aug 2025 22:11:59 +0000 Manifest next update: Fri 29 Aug 2025 22:11:59 +0000 Files and hashes: 1: 8rcLSXMivuZoIO0_ziiqeW2wkVM.crl (hash: Iu+gDY1tzL6op5E9xvJYx5X48uf7wDJrs3uu4BHfbvU=) 2: 643961CCB39811EBBD3F524CC4F9AE02.roa (hash: Zn98IKw1ORShKjYTsznVV3Nuz5otGr6pldJ4tgtNf00=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1756 (0x6dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B43D7, serialNumber=F2B70B497322BEE66820ED3FCE28AA796DB09153 Validity Not Before: Aug 22 22:11:59 2025 GMT Not After : Aug 29 22:11:59 2025 GMT Subject: CN=68a8eb2f-af05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5c:87:b9:18:fa:35:a0:b4:55:8d:48:b9:eb: 7c:1e:40:23:b4:90:ff:4d:2b:11:78:a0:19:0a:09: 6c:c5:9d:25:dc:36:6c:ef:4b:79:12:62:1a:19:57: 75:7b:57:c3:bb:ca:cb:cc:b2:59:34:ef:33:a9:b0: 87:ea:3e:d9:ef:42:54:be:01:09:56:23:62:86:e8: 3f:b1:fa:d5:ea:68:54:1a:65:ee:56:1f:41:1a:a0: 20:e0:21:65:51:b8:82:4a:61:28:51:ca:2f:df:42: 63:2d:77:81:ea:f1:b4:12:1d:44:fb:05:38:9a:05: da:51:c9:0f:4d:89:53:ab:81:50:66:e0:5e:77:cc: f7:58:1f:18:a5:bc:eb:75:ee:d6:ee:f9:3f:2c:a6: d0:1a:51:3f:0e:f9:ca:0c:22:38:1c:3a:21:ed:14: 06:97:a2:1d:e8:40:b6:90:a7:54:43:02:40:cb:93: 70:d0:9f:22:99:31:56:d7:1b:a1:41:ed:33:e8:b0: bb:ab:32:17:3e:f9:0f:d4:b3:a3:8a:13:38:36:ac: ec:66:a7:3f:89:e6:54:b3:c5:01:cc:a6:9a:cd:fd: d7:ef:1f:56:07:24:1b:e9:ad:72:4d:8f:ef:6d:fb: 1b:82:29:83:8c:b4:d5:8e:2c:f0:73:b5:ff:50:a2: 83:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:72:8D:F5:EF:9C:10:FA:7A:D9:4A:E9:D4:97:C9:A8:55:2F:9D:81 X509v3 Authority Key Identifier: keyid:F2:B7:0B:49:73:22:BE:E6:68:20:ED:3F:CE:28:AA:79:6D:B0:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8rcLSXMivuZoIO0_ziiqeW2wkVM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43D7/E9F5D93E652411EB983F1B11C4F9AE02/8rcLSXMivuZoIO0_ziiqeW2wkVM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:2a:a9:1b:6e:bd:24:16:32:ab:00:08:b1:38:a7:f1:f6:10: ca:a9:7a:61:a8:d1:bb:4a:e1:7e:ae:8d:d2:9a:e7:49:67:50: 39:61:42:57:d3:23:f3:ee:60:5a:23:1f:37:4f:df:b0:c5:7f: 56:74:7b:90:f6:b0:28:ff:1b:0e:d3:6b:13:8c:d1:44:d1:36: bd:ea:5e:fa:71:ad:48:32:25:24:9d:4a:d8:c2:64:81:a1:ee: b2:a6:3b:9c:12:7f:1e:03:77:02:e1:3e:65:7b:35:1f:0e:74: 7c:c6:d4:c3:ac:ed:d2:ad:f4:38:e4:85:e5:a8:d1:4f:fd:39: d5:d4:2f:d0:fc:b8:31:65:63:9b:62:67:23:d9:70:48:41:8b: 21:48:77:d8:0a:4e:4a:b1:3d:2a:ed:96:74:ac:89:c8:4a:73: 0b:0b:03:16:df:ff:4c:1a:88:70:f5:2a:a8:7c:96:c2:d3:0d: 07:3e:87:8f:30:86:a4:b8:f3:2a:7e:cd:be:1b:78:4f:2b:3f: fd:53:a4:84:23:08:7a:0b:55:aa:eb:93:ba:49:b3:f0:d7:97: 72:a8:c6:af:53:31:7b:f4:06:4f:41:14:e4:95:25:01:23:cc: 1d:c6:dd:3d:75:b5:da:0e:3e:72:63:13:c7:47:2d:07:91:69: a2:99:2b:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBtwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQzRDcxMTAvBgNVBAUTKEYyQjcwQjQ5NzMyMkJFRTY2ODIwRUQzRkNFMjhBQTc5 NkRCMDkxNTMwHhcNMjUwODIyMjIxMTU5WhcNMjUwODI5MjIxMTU5WjAYMRYwFAYD VQQDEw02OGE4ZWIyZi1hZjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1yHuRj6NaC0VY1Iuet8HkAjtJD/TSsReKAZCglsxZ0l3DZs70t5EmIaGVd1 e1fDu8rLzLJZNO8zqbCH6j7Z70JUvgEJViNihug/sfrV6mhUGmXuVh9BGqAg4CFl UbiCSmEoUcov30JjLXeB6vG0Eh1E+wU4mgXaUckPTYlTq4FQZuBed8z3WB8Ypbzr de7W7vk/LKbQGlE/DvnKDCI4HDoh7RQGl6Id6EC2kKdUQwJAy5Nw0J8imTFW1xuh Qe0z6LC7qzIXPvkP1LOjihM4NqzsZqc/ieZUs8UBzKaazf3X7x9WByQb6a1yTY/v bfsbgimDjLTVjizwc7X/UKKDWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZyjfXv nBD6etlK6dSXyahVL52BMB8GA1UdIwQYMBaAFPK3C0lzIr7maCDtP84oqnltsJFT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDNENy9FOUY1RDkzRTY1 MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1Wm9JTzBfemlpcWVXMndr Vk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhyY0xTWE1pdnVab0lPMF96aWlxZVcyd2tWTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDNENy9FOUY1RDkzRTY1MjQxMUVCOTgzRjFCMTFDNEY5QUUwMi84cmNMU1hNaXZ1 Wm9JTzBfemlpcWVXMndrVk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARKqkbbr0kFjKrAAixOKfx9hDKqXphqNG7SuF+ro3SmudJZ1A5YUJX 0yPz7mBaIx83T9+wxX9WdHuQ9rAo/xsO02sTjNFE0Ta96l76ca1IMiUknUrYwmSB oe6ypjucEn8eA3cC4T5lezUfDnR8xtTDrO3SrfQ45IXlqNFP/TnV1C/Q/LgxZWOb Ymcj2XBIQYshSHfYCk5KsT0q7ZZ0rInISnMLCwMW3/9MGohw9SqofJbC0w0HPoeP MIakuPMqfs2+G3hPKz/9U6SEIwh6C1Wq65O6SbPw15dyqMavUzF79AZPQRTklSUB I8wdxt09dbXaDj5yYxPHRy0HkWmimSv0 -----END CERTIFICATE-----Generated at Sat Aug 23 19:01:10 2025 by rpki-client