$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json) Hash identifier: Z7fJkf96ql1teGRBSWIG29+ZUrvCjr16SG49NqMZ+w4= Subject key identifier: 63:38:48:29:D7:5C:90:A7:21:85:B7:58:73:BC:14:47:31:8F:AD:21 Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 0896 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft Manifest number: 0891 Signing time: Fri 22 Aug 2025 20:42:14 +0000 Manifest this update: Fri 22 Aug 2025 20:42:14 +0000 Manifest next update: Fri 29 Aug 2025 20:42:14 +0000 Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: xjDH5iu1yZVhGpuRj5dKpb9znUskLmR4/inz3iUm2Hk=) 2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: cbktrrt4RsOUs9FstYccY602a8M1M48rOaYFq7f84Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2198 (0x896) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: Aug 22 20:42:14 2025 GMT Not After : Aug 29 20:42:14 2025 GMT Subject: CN=68a8d626-26f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:54:9d:80:4f:cd:30:fb:45:01:e8:8e:72: 6f:8f:46:b9:a8:7a:a7:1a:d8:31:6b:96:1f:e6:0b: af:57:bd:7f:e9:da:14:8f:82:d3:98:33:6b:ad:43: 65:12:16:35:b9:cb:f8:94:bc:27:cf:13:09:e1:dc: 75:66:0a:47:35:f1:74:63:a5:a9:21:96:ef:1f:06: ae:e3:8c:c3:df:e2:d2:e7:49:24:68:e7:3b:16:a1: 28:c5:71:9c:1e:f6:e3:2a:78:e0:98:3e:42:5a:94: 7d:62:f0:d7:98:7f:3e:06:f7:57:2b:9d:88:39:e7: f1:2b:69:21:34:0f:1a:f9:76:f6:02:27:d4:61:45: 90:ef:f2:3c:e4:ce:e4:bd:51:bd:64:e7:cc:6c:6b: be:93:91:59:29:79:1c:bb:7c:37:1b:13:fc:4b:5d: 0e:04:26:d9:04:46:9d:3b:dd:d2:7f:7e:6f:ad:b9: 33:96:eb:ac:3b:2c:19:ee:88:c9:09:48:c2:1a:47: 3d:2d:ce:d7:18:0c:13:cd:6c:97:59:d5:fd:cc:fe: cf:a7:49:0b:2b:ea:03:1c:f4:9f:c5:3c:2f:8c:e0: 5c:d2:da:a6:74:f7:b5:c0:3d:70:d2:2d:2f:c9:c7: 48:05:7d:a6:9a:cc:0f:0a:34:6a:83:bf:ca:68:c5: fc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:38:48:29:D7:5C:90:A7:21:85:B7:58:73:BC:14:47:31:8F:AD:21 X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:34:af:6d:76:81:23:25:89:c4:53:98:69:5d:eb:07:56:54: 83:e9:0f:29:71:87:2a:85:5f:8b:fb:de:5b:b8:ed:b7:4b:8f: 33:a4:f4:4a:6c:60:85:19:85:83:03:bf:fc:e3:86:bd:39:09: 65:ea:14:06:5f:56:1f:2c:7d:05:45:db:b6:fa:80:9c:5c:3c: ed:fc:7a:34:f7:d0:d1:41:7d:b9:fd:f5:c5:c3:2a:b4:83:a9: 13:07:2d:6c:c9:61:07:f1:c7:e9:fa:d3:aa:f2:e4:36:9e:f4: 27:a0:04:df:fd:c3:7a:a2:17:bd:7e:35:b4:7f:4b:4d:a4:3c: 1e:33:aa:00:88:e8:e8:82:a0:75:44:e9:b2:c5:ca:2f:3f:d0: b7:37:1e:a6:4f:73:15:12:aa:f2:9d:9e:f3:24:6c:22:b4:b6: f7:d3:ee:92:19:09:e9:2a:4f:5c:48:89:27:a1:f9:64:b0:9f: c8:a3:a5:52:3f:50:4d:15:35:f2:f1:9a:a0:d4:0a:73:44:2e: 86:37:95:10:73:15:ab:56:34:8f:79:cb:05:61:af:33:f6:47: e6:c4:59:7b:a5:d4:60:56:a7:91:26:11:59:4e:2b:df:ad:05: 72:40:da:71:e2:f6:73:7e:c8:98:80:69:f8:fa:35:59:39:76: 4f:5e:9e:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjUwODIyMjA0MjE0WhcNMjUwODI5MjA0MjE0WjAYMRYwFAYD VQQDEw02OGE4ZDYyNi0yNmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7tUnYBPzTD7RQHojnJvj0a5qHqnGtgxa5Yf5guvV71/6doUj4LTmDNrrUNl EhY1ucv4lLwnzxMJ4dx1ZgpHNfF0Y6WpIZbvHwau44zD3+LS50kkaOc7FqEoxXGc HvbjKnjgmD5CWpR9YvDXmH8+BvdXK52IOefxK2khNA8a+Xb2AifUYUWQ7/I85M7k vVG9ZOfMbGu+k5FZKXkcu3w3GxP8S10OBCbZBEadO93Sf35vrbkzluusOywZ7ojJ CUjCGkc9Lc7XGAwTzWyXWdX9zP7Pp0kLK+oDHPSfxTwvjOBc0tqmdPe1wD1w0i0v ycdIBX2mmswPCjRqg7/KaMX8vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGM4SCnX XJCnIYW3WHO8FEcxj60hMB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTUyMS9DOUZBRTdDQUM0RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1 S2dyQW8yWWlFZDRYODBrNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJNK9tdoEjJYnEU5hpXesHVlSD6Q8pcYcqhV+L+95buO23S48zpPRK bGCFGYWDA7/844a9OQll6hQGX1YfLH0FRdu2+oCcXDzt/Ho099DRQX25/fXFwyq0 g6kTBy1syWEH8cfp+tOq8uQ2nvQnoATf/cN6ohe9fjW0f0tNpDweM6oAiOjogqB1 ROmyxcovP9C3Nx6mT3MVEqrynZ7zJGwitLb30+6SGQnpKk9cSIknoflksJ/Io6VS P1BNFTXy8Zqg1ApzRC6GN5UQcxWrVjSPecsFYa8z9kfmxFl7pdRgVqeRJhFZTivf rQVyQNpx4vZzfsiYgGn4+jVZOXZPXp5R -----END CERTIFICATE-----Generated at Sun Aug 24 04:39:25 2025 by rpki-client