$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft File: S8VilW0H0G-q3JIziLmGYPcofJo.mft (raw, json) Hash identifier: 2qk8KZ5kRgJlNijuD8YL4/urJEWfvadKFMXwNs3rOMo= Subject key identifier: EE:F3:8A:97:71:8B:A6:E4:38:4A:8A:54:2F:07:6C:F0:28:8C:E6:02 Authority key identifier: 4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A Certificate issuer: /CN=A91BF039/serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A Certificate serial: 0B28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft Manifest number: 0B21 Signing time: Fri 22 Aug 2025 19:24:49 +0000 Manifest this update: Fri 22 Aug 2025 19:24:49 +0000 Manifest next update: Fri 29 Aug 2025 19:24:49 +0000 Files and hashes: 1: S8VilW0H0G-q3JIziLmGYPcofJo.crl (hash: ps2m5CfBJwzwX6rHlz7LSD3MdBQG459YjuzkqCbO724=) 2: 6D49440845BC11EAB591BD20C4F9AE02.roa (hash: d1emA2UMoO8VznsV+Ait8FlVXTOyXdepIAgXYTBBJeI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2856 (0xb28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF039, serialNumber=4BC562956D07D06FAADC923388B98660F7287C9A Validity Not Before: Aug 22 19:24:49 2025 GMT Not After : Aug 29 19:24:49 2025 GMT Subject: CN=68a8c401-dbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3c:b7:65:e7:60:cb:5a:23:f1:e6:45:b5:76: e3:b8:ac:58:f4:15:b7:e5:95:f0:65:7d:00:a6:31: ac:b8:f1:93:5f:80:f7:dd:1c:b8:c8:7d:da:e6:df: f3:97:59:04:70:c1:08:11:94:d4:53:ee:5b:d9:31: 3b:25:47:87:75:18:3c:41:ad:4f:e7:37:00:ca:2c: 42:a3:57:c3:0c:f4:b3:04:9a:76:39:92:b9:35:0b: 02:b3:ef:21:fe:38:ee:21:8c:9a:fd:72:09:a0:23: d4:fd:23:c7:db:f4:20:3d:c2:53:2f:e5:3e:34:e6: 70:43:ad:67:40:c1:2e:6c:7c:a2:06:37:9a:eb:66: 56:8d:cd:dc:2f:8c:6f:b9:17:0b:1d:1c:eb:3e:6a: 72:e4:06:c2:a5:bc:ff:05:21:6b:1d:94:61:05:33: 1e:6f:17:02:e8:bc:eb:57:a3:21:94:4c:d9:45:a5: 7c:ee:04:4f:93:3f:aa:a2:30:a6:05:b8:e7:2c:50: 8f:ed:19:95:56:7b:17:72:f2:33:3c:54:56:93:33: a7:06:60:b6:a8:6c:d9:96:70:e0:6c:22:e5:bb:ee: 1d:d3:83:65:bd:3a:e7:31:a5:c5:80:ee:67:a4:e3: 92:71:2b:a9:47:06:bb:20:cc:90:3b:1e:0b:93:06: 30:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F3:8A:97:71:8B:A6:E4:38:4A:8A:54:2F:07:6C:F0:28:8C:E6:02 X509v3 Authority Key Identifier: keyid:4B:C5:62:95:6D:07:D0:6F:AA:DC:92:33:88:B9:86:60:F7:28:7C:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S8VilW0H0G-q3JIziLmGYPcofJo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF039/25676DF045BB11EAA648771EC4F9AE02/S8VilW0H0G-q3JIziLmGYPcofJo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:b2:a5:0c:05:e1:8e:0b:4c:a6:f5:3a:4b:de:17:79:5e:20: c0:99:db:82:9a:e3:38:d7:61:de:12:07:45:12:c6:4e:f1:cf: 3a:13:69:2f:b6:e3:b8:01:c6:a9:eb:7a:80:4d:fe:6e:10:06: 30:a2:82:1e:4e:2a:3e:d9:56:e8:28:f0:e5:62:a5:f0:33:89: 95:d6:e7:dd:46:cc:b4:d9:cf:ac:fd:82:35:c0:9a:2f:b3:04: f4:df:d8:36:15:ed:18:79:ef:04:4b:81:b7:35:a7:48:ca:9e: 59:ef:87:dd:7f:4b:e1:c0:91:d7:54:e3:29:e0:78:ac:07:18: 08:ce:b8:2e:7d:2b:a7:aa:cf:99:68:1e:62:fd:1f:23:9a:6f: fd:97:57:68:be:84:90:c9:d4:78:3a:ff:a5:a5:81:2e:44:8f: 43:4d:36:36:4a:13:da:85:13:55:5c:9f:88:00:34:67:0d:3b: b3:fd:dd:ca:30:bd:a3:89:1f:f0:da:8b:99:2d:26:75:1a:35: 1c:97:0c:09:a6:aa:f9:85:3d:75:0a:87:54:16:50:e8:c0:ac: 97:fd:9f:83:7d:27:19:b6:5b:7e:3c:8a:a1:b4:8f:de:d7:57: 00:25:af:1a:e3:d6:d6:1d:f4:00:19:25:aa:7b:02:1e:93:02: 29:f4:15:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMzkxMTAvBgNVBAUTKDRCQzU2Mjk1NkQwN0QwNkZBQURDOTIzMzg4Qjk4NjYw RjcyODdDOUEwHhcNMjUwODIyMTkyNDQ5WhcNMjUwODI5MTkyNDQ5WjAYMRYwFAYD VQQDEw02OGE4YzQwMS1kYmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Dy3Zedgy1oj8eZFtXbjuKxY9BW35ZXwZX0ApjGsuPGTX4D33Ry4yH3a5t/z l1kEcMEIEZTUU+5b2TE7JUeHdRg8Qa1P5zcAyixCo1fDDPSzBJp2OZK5NQsCs+8h /jjuIYya/XIJoCPU/SPH2/QgPcJTL+U+NOZwQ61nQMEubHyiBjea62ZWjc3cL4xv uRcLHRzrPmpy5AbCpbz/BSFrHZRhBTMebxcC6LzrV6MhlEzZRaV87gRPkz+qojCm BbjnLFCP7RmVVnsXcvIzPFRWkzOnBmC2qGzZlnDgbCLlu+4d04NlvTrnMaXFgO5n pOOScSupRwa7IMyQOx4LkwYwxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7zipdx i6bkOEqKVC8HbPAojOYCMB8GA1UdIwQYMBaAFEvFYpVtB9BvqtySM4i5hmD3KHya MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAzOS8yNTY3NkRGMDQ1 QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBHLXEzSkl6aUxtR1lQY29m Sm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1M4VmlsVzBIMEctcTNKSXppTG1HWVBjb2ZKby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjAzOS8yNTY3NkRGMDQ1QkIxMUVBQTY0ODc3MUVDNEY5QUUwMi9TOFZpbFcwSDBH LXEzSkl6aUxtR1lQY29mSm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBisqUMBeGOC0ym9TpL3hd5XiDAmduCmuM412HeEgdFEsZO8c86E2kv tuO4Acap63qATf5uEAYwooIeTio+2VboKPDlYqXwM4mV1ufdRsy02c+s/YI1wJov swT039g2Fe0Yee8ES4G3NadIyp5Z74fdf0vhwJHXVOMp4HisBxgIzrgufSunqs+Z aB5i/R8jmm/9l1dovoSQydR4Ov+lpYEuRI9DTTY2ShPahRNVXJ+IADRnDTuz/d3K ML2jiR/w2ouZLSZ1GjUclwwJpqr5hT11CodUFlDowKyX/Z+DfScZtlt+PIqhtI/e 11cAJa8a49bWHfQAGSWqewIekwIp9BWz -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:49 2025 by rpki-client