$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft File: 80xSFZH7LNAtxnvdctzyiwekL_Y.mft (raw, json) Hash identifier: hUpv8zx2KfYLtuXb1dkK7So8mzMmxxxFtH/KD0NrCeg= Subject key identifier: C2:68:F6:78:C0:05:61:7A:03:45:D9:3A:42:05:A2:B6:B3:41:3A:AB Authority key identifier: F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6 Certificate issuer: /CN=A91B8CE1/serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft Manifest number: 07 Signing time: Sat 23 Aug 2025 08:22:50 +0000 Manifest this update: Sat 23 Aug 2025 08:22:49 +0000 Manifest next update: Sat 30 Aug 2025 08:22:49 +0000 Files and hashes: 1: 80xSFZH7LNAtxnvdctzyiwekL_Y.crl (hash: whSEntIUlITqI9TkBIkjqzkSwXZELzy714yc25/9Vtg=) 2: 5C2EA0E477D111F0940AFF7AC4F9AE02.roa (hash: 6XTjIZuui64Zt7h8q158hY/yPZ00zRaoK7PVf/jp3D4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8CE1, serialNumber=F34C521591FB2CD02DC67BDD72DCF28B07A42FF6 Validity Not Before: Aug 23 08:22:49 2025 GMT Not After : Aug 30 08:22:49 2025 GMT Subject: CN=68a97a59-3556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:10:f4:7e:65:b9:91:40:85:bd:43:20:64:a5: 4a:92:1c:f2:22:37:ed:68:a3:89:45:e6:28:12:15: 1e:c5:4e:67:ea:b6:7a:57:58:4a:a2:88:00:85:d3: 05:e5:59:dc:44:ec:40:68:ad:29:4c:48:11:a7:d2: 43:e6:5b:f6:4c:f2:df:69:28:1b:26:c0:01:7d:1d: 3d:45:bc:fd:38:a4:77:b9:3c:b1:2c:0e:fb:26:98: 2a:86:0b:36:f7:2c:ac:aa:1b:e2:db:14:63:3e:8e: 20:d1:ac:7a:17:16:54:1b:3c:5e:0c:e4:02:84:d2: da:49:f0:e4:a8:37:f9:6a:18:52:30:20:e4:e5:2b: 86:2b:63:17:20:f9:39:dd:32:00:ba:a6:0e:d7:3e: 8a:9d:40:34:4d:08:52:ab:46:d4:0c:61:a1:26:c7: f0:b3:1c:39:83:20:6c:f4:2c:20:9c:6b:95:d7:01: 18:7e:01:4d:2b:3c:09:7e:b0:7b:d2:21:22:90:92: cc:0c:f6:18:74:83:fc:8c:b8:8c:7c:ba:b3:db:ee: 54:66:06:85:e9:3f:4a:ae:9b:d7:82:b4:e1:9b:a7: df:f0:9d:cc:e0:37:be:b2:42:cb:b4:f1:2d:ff:2f: f8:b5:4b:b1:07:fe:95:c0:e8:5c:9d:4f:ce:ac:b5: 57:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:68:F6:78:C0:05:61:7A:03:45:D9:3A:42:05:A2:B6:B3:41:3A:AB X509v3 Authority Key Identifier: keyid:F3:4C:52:15:91:FB:2C:D0:2D:C6:7B:DD:72:DC:F2:8B:07:A4:2F:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/80xSFZH7LNAtxnvdctzyiwekL_Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8CE1/6790BE5C77CE11F0B557404CC4F9AE02/80xSFZH7LNAtxnvdctzyiwekL_Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:6b:40:82:2b:cb:01:c4:57:68:9d:f9:80:6e:51:90:97:14: 12:39:75:10:69:4d:f7:26:d5:cb:f0:24:2e:13:ff:39:9d:4c: 9a:f3:99:9c:47:7e:f3:d0:b5:0f:03:8d:93:c8:6b:f6:c0:3a: 91:8c:00:09:da:53:5a:82:55:21:18:c5:9e:93:a1:29:fe:21: 77:df:0c:0d:22:35:f6:a0:a3:9f:ca:b9:ad:3c:2b:96:c6:8f: ff:d5:f7:7f:5c:dd:5e:e2:87:3e:d2:e4:fa:25:40:a8:88:70: 4a:6c:60:36:a4:c7:08:6c:ef:04:3a:3a:4d:6e:b1:8b:7f:98: aa:16:6f:82:22:2b:64:6b:cc:86:4d:04:0b:b2:aa:66:7b:27: df:11:f5:cc:39:51:45:74:01:20:23:7b:ae:3c:2e:51:71:25: 0d:01:c4:53:b9:e0:61:6f:84:2d:3a:46:59:18:f9:50:1d:10: 0b:45:0d:24:4a:e3:d8:e0:96:07:91:4f:4e:2d:8b:dd:fe:77: f9:e2:87:7b:f6:76:c4:3d:26:6e:47:e1:2c:08:3e:fa:ae:68: fa:74:4d:5f:32:9e:e8:c0:ba:35:94:69:15:65:93:19:d3:e2: 19:46:e8:d7:88:b4:b7:24:30:c8:a1:00:dc:34:8e:0f:fe:7f: 3e:19:9a:32 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OENFMTExMC8GA1UEBRMoRjM0QzUyMTU5MUZCMkNEMDJEQzY3QkRENzJEQ0YyOEIw N0E0MkZGNjAeFw0yNTA4MjMwODIyNDlaFw0yNTA4MzAwODIyNDlaMBgxFjAUBgNV BAMTDTY4YTk3YTU5LTM1NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDwEPR+ZbmRQIW9QyBkpUqSHPIiN+1oo4lF5igSFR7FTmfqtnpXWEqiiACF0wXl WdxE7EBorSlMSBGn0kPmW/ZM8t9pKBsmwAF9HT1FvP04pHe5PLEsDvsmmCqGCzb3 LKyqG+LbFGM+jiDRrHoXFlQbPF4M5AKE0tpJ8OSoN/lqGFIwIOTlK4YrYxcg+Tnd MgC6pg7XPoqdQDRNCFKrRtQMYaEmx/CzHDmDIGz0LCCca5XXARh+AU0rPAl+sHvS ISKQkswM9hh0g/yMuIx8urPb7lRmBoXpP0qum9eCtOGbp9/wnczgN76yQsu08S3/ L/i1S7EH/pXA6FydT86stVcNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUwmj2eMAF YXoDRdk6QgWitrNBOqswHwYDVR0jBBgwFoAU80xSFZH7LNAtxnvdctzyiwekL/Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4Q0UxLzY3OTBCRTVDNzdD RTExRjBCNTU3NDA0Q0M0RjlBRTAyLzgweFNGWkg3TE5BdHhudmRjdHp5aXdla0xf WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvODB4U0ZaSDdMTkF0eG52ZGN0enlpd2VrTF9ZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4 Q0UxLzY3OTBCRTVDNzdDRTExRjBCNTU3NDA0Q0M0RjlBRTAyLzgweFNGWkg3TE5B dHhudmRjdHp5aXdla0xfWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFVrQIIrywHEV2id+YBuUZCXFBI5dRBpTfcm1cvwJC4T/zmdTJrzmZxH fvPQtQ8DjZPIa/bAOpGMAAnaU1qCVSEYxZ6ToSn+IXffDA0iNfago5/Kua08K5bG j//V939c3V7ihz7S5PolQKiIcEpsYDakxwhs7wQ6Ok1usYt/mKoWb4IiK2RrzIZN BAuyqmZ7J98R9cw5UUV0ASAje648LlFxJQ0BxFO54GFvhC06RlkY+VAdEAtFDSRK 49jglgeRT04ti93+d/nih3v2dsQ9Jm5H4SwIPvquaPp0TV8ynujAujWUaRVlkxnT 4hlG6NeItLckMMihANw0jg/+fz4ZmjI= -----END CERTIFICATE-----Generated at Sun Aug 24 03:12:36 2025 by rpki-client