$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft File: -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json) Hash identifier: zQ1fkbII6bop+AlvTFEwa7ko0N9Z0mBOL0gOvjJxG3A= Subject key identifier: 2D:68:2D:E3:5B:57:A5:35:3F:13:D2:9F:EA:A7:ED:A7:E1:BE:21:C8 Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 Certificate issuer: /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Certificate serial: 10BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft Manifest number: 197C Signing time: Fri 22 Aug 2025 17:27:34 +0000 Manifest this update: Fri 22 Aug 2025 17:27:33 +0000 Manifest next update: Fri 29 Aug 2025 17:27:33 +0000 Files and hashes: 1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: NxKh81m6iUNNGbhJT899eRES+dNXKn5jUxHCo9aJjYY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:27:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4283 (0x10bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Validity Not Before: Aug 22 17:27:33 2025 GMT Not After : Aug 29 17:27:33 2025 GMT Subject: CN=68a8a886-f442 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:8d:47:ba:60:d9:9d:ad:81:93:bc:5b:c1:6a: 5c:ca:2a:90:10:42:fc:16:41:7a:54:29:23:dd:33: 10:dd:ba:25:a2:fe:34:17:54:41:fe:fd:e5:07:4a: e5:e9:2c:c3:f1:a9:f6:45:87:32:0b:0a:bc:cb:21: f0:12:2f:a8:ef:01:19:17:7e:ae:13:ce:47:eb:d5: 5a:fb:01:44:f0:4d:d0:a2:67:be:d8:36:35:a1:fe: 73:77:a0:41:5c:05:e0:0c:8a:a2:8d:32:83:1b:28: c1:8c:bc:0f:4e:ec:b8:f1:4b:1e:db:31:70:52:9f: 66:bb:4c:19:c4:06:60:04:75:d8:2c:37:ca:e2:bd: 24:3b:a2:ac:76:56:3d:35:62:ec:5c:ca:f4:d4:6f: d3:27:29:40:5c:eb:e7:29:87:3b:58:5d:8a:08:95: 30:fb:b0:d1:96:14:87:23:de:fe:49:18:7e:fa:62: 7c:47:25:b0:50:08:35:6e:2b:d1:2a:9f:b6:4d:0c: 8e:88:7c:b8:de:1c:4a:b0:5f:1b:c4:5e:94:40:9f: 75:2a:43:fb:54:28:09:20:7a:21:dc:72:86:51:19: 0a:ba:37:db:1e:23:86:ac:60:54:3b:37:cf:43:31: d3:29:14:d7:87:75:b5:48:23:1d:c0:34:47:2d:69: 90:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:68:2D:E3:5B:57:A5:35:3F:13:D2:9F:EA:A7:ED:A7:E1:BE:21:C8 X509v3 Authority Key Identifier: keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:12:ac:ae:d4:87:38:52:b7:d6:62:b4:5d:fd:a0:04:4d:db: 1a:21:ad:70:bf:c0:84:91:e6:a5:aa:70:89:85:dd:aa:59:6b: 97:1e:18:05:fd:a7:70:9f:31:0f:09:c0:33:d3:3d:ed:50:49: bf:30:5f:2a:1d:54:10:d3:1c:6d:76:18:ee:0d:31:e5:8a:6b: 6a:b5:12:9c:83:e7:5c:a4:ca:4d:7b:c6:c0:a8:dd:2d:d4:24: 8b:7d:eb:54:04:93:75:56:59:87:f4:2f:9e:3f:7e:a8:2d:82: 8e:63:b0:b9:06:50:f5:9d:44:8d:5b:eb:a1:a9:e4:74:20:35: 32:df:0e:cb:72:14:5c:be:04:b3:70:c3:3f:a4:dd:a5:e7:4c: 76:e5:39:95:75:93:77:85:80:c0:f5:d1:c3:dd:74:75:c4:3c: 87:26:f7:2d:aa:5e:65:27:a0:4b:46:c9:48:09:34:33:7f:9f: 39:cd:13:6a:5b:42:c7:ed:c9:85:f8:73:53:af:e7:9f:04:67: ce:46:02:44:63:aa:60:56:84:11:99:6b:64:6f:b7:7c:8e:b8: 79:74:67:82:b2:09:20:cb:fa:fe:ff:27:01:35:58:59:9f:31: 82:95:78:f9:c2:98:09:b7:45:63:11:fc:ba:f1:1f:55:5f:a8: e2:a5:88:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKEY5Q0YwNDk3Q0ZCNjdFMTYyNzI5MTA5OEYxMUYxNzg2 RUI4OUZGNTAwHhcNMjUwODIyMTcyNzMzWhcNMjUwODI5MTcyNzMzWjAYMRYwFAYD VQQDEw02OGE4YTg4Ni1mNDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+o1HumDZna2Bk7xbwWpcyiqQEEL8FkF6VCkj3TMQ3bolov40F1RB/v3lB0rl 6SzD8an2RYcyCwq8yyHwEi+o7wEZF36uE85H69Va+wFE8E3Qome+2DY1of5zd6BB XAXgDIqijTKDGyjBjLwPTuy48Use2zFwUp9mu0wZxAZgBHXYLDfK4r0kO6KsdlY9 NWLsXMr01G/TJylAXOvnKYc7WF2KCJUw+7DRlhSHI97+SRh++mJ8RyWwUAg1bivR Kp+2TQyOiHy43hxKsF8bxF6UQJ91KkP7VCgJIHoh3HKGURkKujfbHiOGrGBUOzfP QzHTKRTXh3W1SCMdwDRHLWmQ7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1oLeNb V6U1PxPSn+qn7afhviHIMB8GA1UdIwQYMBaAFPnPBJfPtn4WJykQmPEfF4brif9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZoWW5LUkNZOFI4WGh1dUpf MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jOEVsOC0yZmhZbktSQ1k4UjhYaHV1Sl8xQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZo WW5LUkNZOFI4WGh1dUpfMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdEqyu1Ic4UrfWYrRd/aAETdsaIa1wv8CEkealqnCJhd2qWWuXHhgF /adwnzEPCcAz0z3tUEm/MF8qHVQQ0xxtdhjuDTHlimtqtRKcg+dcpMpNe8bAqN0t 1CSLfetUBJN1VlmH9C+eP36oLYKOY7C5BlD1nUSNW+uhqeR0IDUy3w7LchRcvgSz cMM/pN2l50x25TmVdZN3hYDA9dHD3XR1xDyHJvctql5lJ6BLRslICTQzf585zRNq W0LH7cmF+HNTr+efBGfORgJEY6pgVoQRmWtkb7d8jrh5dGeCsgkgy/r+/ycBNVhZ nzGClXj5wpgJt0VjEfy68R9VX6jipYgE -----END CERTIFICATE-----Generated at Sat Aug 23 20:24:24 2025 by rpki-client