$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft File: _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json) Hash identifier: VY5sMIHn3xbms5YKErT/rm0ay6OY7yyr0ox18/9LyPE= Subject key identifier: 4E:6D:99:2C:E7:66:64:16:CA:F1:62:6D:F7:87:35:9E:FE:B2:9B:53 Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA Certificate issuer: /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Certificate serial: 04C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft Manifest number: 04C0 Signing time: Sat 23 Aug 2025 00:04:44 +0000 Manifest this update: Sat 23 Aug 2025 00:04:44 +0000 Manifest next update: Sat 30 Aug 2025 00:04:44 +0000 Files and hashes: 1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: 1n7phx7soWkTJh47rrV/qKhChkWQBcvfHF/FvASbZpM=) 2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: zdwLUFrK62NtcQ/mdbUvAzqM7ityQdkX7IQIHBe+tG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1220 (0x4c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB508, serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA Validity Not Before: Aug 23 00:04:44 2025 GMT Not After : Aug 30 00:04:44 2025 GMT Subject: CN=68a9059c-9218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5b:02:35:6d:40:da:fe:29:7f:36:c1:8e:9a: f8:56:7e:ec:6c:a7:bc:91:83:df:e5:10:15:d3:f5: ee:4b:12:00:64:ec:25:85:be:ef:71:47:c9:a0:d1: 10:23:d2:ef:31:9b:b1:32:1f:c1:2f:03:e8:03:ea: ef:2e:6f:1f:4d:36:83:1f:a4:79:72:d2:2d:16:bf: 79:01:61:67:13:ba:6e:84:8b:e8:45:ae:67:9c:b7: de:c8:de:ed:42:20:ba:22:ff:f8:e2:43:4c:ad:17: f2:5c:f8:dd:82:40:59:a0:b4:64:f3:66:2c:7f:2d: 49:e2:f9:3a:23:be:4f:30:62:95:0f:da:91:b9:1f: 61:f5:fc:82:2d:02:cc:f5:c1:42:54:d9:a5:36:78: c5:9d:2a:2e:9e:4b:16:76:4b:35:e3:d5:01:e4:e4: b8:24:4d:c4:b4:8b:12:e7:25:e1:23:dc:6b:33:d0: ff:a5:bf:b2:81:5c:4a:f9:be:3c:73:62:f8:51:ed: be:83:e4:e5:6a:6d:2f:5c:ba:77:30:f3:a9:80:3c: ff:46:4f:80:ce:6f:92:6c:05:a1:44:68:2c:09:36: b8:8a:f2:20:b7:a6:1e:10:f1:f9:bc:d4:40:4b:46: f1:ee:8b:54:ec:c4:00:29:74:70:15:77:05:72:1a: d9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6D:99:2C:E7:66:64:16:CA:F1:62:6D:F7:87:35:9E:FE:B2:9B:53 X509v3 Authority Key Identifier: keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e4:5d:c5:b1:7f:c1:ac:06:d6:4b:37:a4:08:fc:86:50:2b: 64:ac:bf:0c:53:23:12:ae:67:02:2c:7e:fe:9d:c0:03:df:8a: c3:5f:20:f5:49:ca:ef:b0:85:36:15:6e:e9:f9:18:f6:82:e8: 3e:44:69:ac:f3:d6:58:59:58:f9:78:20:07:df:c2:37:51:3b: 2d:bd:74:63:8f:97:42:f2:3c:2b:e5:eb:cd:1f:1d:16:80:fb: 14:6c:dc:9e:f5:59:5c:02:47:90:d0:6a:1f:29:71:5b:da:44: 5b:6b:60:66:33:a8:87:d3:8a:b7:bb:4a:24:a6:8b:07:da:a4: 9c:20:b8:0d:de:7a:d1:5d:96:8d:db:33:47:32:4a:3c:d3:9e: d9:3b:32:c2:d0:4e:d2:70:85:0d:11:a5:ef:dd:d8:43:14:d4: c8:bc:65:b7:76:b0:ee:56:5a:a2:36:fb:a1:36:d6:29:ac:ba: 71:3a:d8:88:88:f6:d5:9a:ee:5f:91:67:3d:97:43:e7:08:d2: 59:1d:90:74:58:8a:32:d1:90:b3:e1:03:d0:04:01:15:2d:e1: b4:91:9f:4c:6d:df:8f:1b:c6:63:f6:8f:e0:05:53:6e:38:3c: 5a:6b:45:f0:91:93:c4:57:d0:c1:a8:0c:6a:66:91:a7:60:5f: a0:21:e4:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1MDgxMTAvBgNVBAUTKEZGQzI4NEFDMUIxQTVGMDg0M0VCNTc1QjhCMDVERTIy NEZGQUUxRkEwHhcNMjUwODIzMDAwNDQ0WhcNMjUwODMwMDAwNDQ0WjAYMRYwFAYD VQQDEw02OGE5MDU5Yy05MjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4FsCNW1A2v4pfzbBjpr4Vn7sbKe8kYPf5RAV0/XuSxIAZOwlhb7vcUfJoNEQ I9LvMZuxMh/BLwPoA+rvLm8fTTaDH6R5ctItFr95AWFnE7puhIvoRa5nnLfeyN7t QiC6Iv/44kNMrRfyXPjdgkBZoLRk82Ysfy1J4vk6I75PMGKVD9qRuR9h9fyCLQLM 9cFCVNmlNnjFnSounksWdks149UB5OS4JE3EtIsS5yXhI9xrM9D/pb+ygVxK+b48 c2L4Ue2+g+Tlam0vXLp3MPOpgDz/Rk+Azm+SbAWhRGgsCTa4ivIgt6YeEPH5vNRA S0bx7otU7MQAKXRwFXcFchrZrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5tmSzn ZmQWyvFibfeHNZ7+sptTMB8GA1UdIwQYMBaAFP/ChKwbGl8IQ+tXW4sF3iJP+uH6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjUwOC83QTMzNzkxRTM5 NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3aEQ2MWRiaXdYZUlrXzY0 Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL184S0VyQnNhWHdoRDYxZGJpd1hlSWtfNjRmby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjUwOC83QTMzNzkxRTM5NTcxMUVDQUJENDM3NkVDNEY5QUUwMi9fOEtFckJzYVh3 aEQ2MWRiaXdYZUlrXzY0Zm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBL5F3FsX/BrAbWSzekCPyGUCtkrL8MUyMSrmcCLH7+ncAD34rDXyD1 ScrvsIU2FW7p+Rj2gug+RGms89ZYWVj5eCAH38I3UTstvXRjj5dC8jwr5evNHx0W gPsUbNye9VlcAkeQ0GofKXFb2kRba2BmM6iH04q3u0okposH2qScILgN3nrRXZaN 2zNHMko8057ZOzLC0E7ScIUNEaXv3dhDFNTIvGW3drDuVlqiNvuhNtYprLpxOtiI iPbVmu5fkWc9l0PnCNJZHZB0WIoy0ZCz4QPQBAEVLeG0kZ9Mbd+PG8Zj9o/gBVNu ODxaa0XwkZPEV9DBqAxqZpGnYF+gIeTh -----END CERTIFICATE-----Generated at Sat Aug 23 17:12:32 2025 by rpki-client