$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft File: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json) Hash identifier: FBYOhpDbO/bKmY/P/wW+66BDUUkR1RZb4bVHygsU10g= Subject key identifier: C0:EE:98:A3:CC:28:C9:CC:80:E1:9F:2F:3A:06:DC:77:A7:D1:AF:55 Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Certificate serial: 0A82 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft Manifest number: 0A7A Signing time: Fri 22 Aug 2025 19:45:22 +0000 Manifest this update: Fri 22 Aug 2025 19:45:22 +0000 Manifest next update: Fri 29 Aug 2025 19:45:22 +0000 Files and hashes: 1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: +1GeG25iGs0eH1xJb2qzqYEB22QzL2SsOQz2/FGQUS8=) 2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: bm4J9Gs8kg53MtutKeTvvvRSq0MtCTJcSE5YLit7Dts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2690 (0xa82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Validity Not Before: Aug 22 19:45:22 2025 GMT Not After : Aug 29 19:45:22 2025 GMT Subject: CN=68a8c8d2-25fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:7e:d2:ae:93:bf:a0:25:a5:62:f1:3d:0b:bf: 91:46:b6:ce:a6:b0:bd:51:d8:10:4e:e4:89:15:bd: 00:b9:05:d7:70:8d:47:2b:5b:f1:c7:00:f1:6a:72: 8d:98:31:1a:77:0b:5c:dc:b8:0b:40:18:6e:47:8e: b0:00:6d:08:ff:5b:a7:29:fd:cc:b2:77:ec:c6:9f: 2a:e3:a9:09:af:e2:0b:34:6e:d7:8a:64:cf:8b:00: a2:9a:d9:cf:11:b8:11:8e:be:b1:de:26:75:24:c5: 2b:53:e2:8a:6a:59:e0:1f:9d:16:5d:6c:73:7b:7a: a9:01:b9:6f:24:bb:94:a0:95:18:e5:25:2c:28:72: 70:2e:fc:c1:c9:14:6e:48:a1:55:07:f1:5b:3b:19: 9a:3b:9a:14:47:4d:b2:8c:a4:b7:b4:e7:0d:02:78: 00:e3:40:2f:7a:82:65:a8:17:74:42:ed:d6:bc:68: a2:fe:36:0d:75:07:4b:5b:6c:67:1b:5c:e3:85:47: 3b:33:e0:b0:f8:ab:de:81:16:18:4a:02:9c:45:fd: b5:2c:22:8b:5d:5e:1e:e7:c4:f1:ca:13:b2:25:a5: 81:9c:9c:76:9d:24:01:18:5e:29:70:d4:e6:91:44: 90:da:c4:b1:94:ab:08:67:73:45:e3:6a:29:20:b4: 40:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EE:98:A3:CC:28:C9:CC:80:E1:9F:2F:3A:06:DC:77:A7:D1:AF:55 X509v3 Authority Key Identifier: keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:9d:90:a7:c3:bd:fa:bf:de:b3:b0:aa:fd:5e:35:23:34:c9: 75:22:1f:de:6a:75:bf:5c:5b:d1:87:d7:fa:33:e9:32:4f:25: a4:eb:11:05:ab:e2:12:0b:d8:75:8d:86:70:d4:c0:24:dd:65: d2:41:c9:9c:dd:ab:da:fe:d5:ea:47:5b:61:36:05:c3:74:ee: 38:ae:36:a3:eb:a9:d0:b6:55:1a:3d:17:ec:bb:70:c5:5e:e6: f0:fa:c0:e9:f7:f2:e4:ed:e7:e9:99:b4:80:a5:dd:4c:81:6a: 21:5f:7b:de:48:bd:fc:e6:91:1f:09:fc:89:48:b6:a1:6c:a5: 36:cb:15:42:d8:34:ae:33:b9:46:4e:53:a5:a6:71:ad:9b:41: 8b:71:2d:31:f0:4b:bd:89:d0:fc:2f:5a:3d:72:59:ff:56:d4: e7:78:07:ca:64:c3:23:c0:63:34:50:e5:7f:5f:aa:c1:1d:8e: 43:6d:38:23:0d:24:25:b7:f5:b6:48:5b:d1:a0:65:ca:0f:d2: a2:09:32:ea:67:d3:3b:da:9f:b3:8b:7b:5e:be:42:b6:eb:3e: e0:1b:dd:1a:b8:bb:df:1f:0d:f3:8f:7d:f7:b2:3d:67:f4:6c: 69:a3:07:4b:b5:09:6c:04:66:2a:8e:9c:bc:29:d8:c1:4a:56: 1d:52:0e:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RDExMTAvBgNVBAUTKEYwNDY2NTkzQzJCNkNFQTlDQkYwMkUyNkFBRTZCRjc5 MEY1MjdFQTgwHhcNMjUwODIyMTk0NTIyWhcNMjUwODI5MTk0NTIyWjAYMRYwFAYD VQQDEw02OGE4YzhkMi0yNWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvH7SrpO/oCWlYvE9C7+RRrbOprC9UdgQTuSJFb0AuQXXcI1HK1vxxwDxanKN mDEadwtc3LgLQBhuR46wAG0I/1unKf3Msnfsxp8q46kJr+ILNG7XimTPiwCimtnP EbgRjr6x3iZ1JMUrU+KKalngH50WXWxze3qpAblvJLuUoJUY5SUsKHJwLvzByRRu SKFVB/FbOxmaO5oUR02yjKS3tOcNAngA40AveoJlqBd0Qu3WvGii/jYNdQdLW2xn G1zjhUc7M+Cw+KvegRYYSgKcRf21LCKLXV4e58TxyhOyJaWBnJx2nSQBGF4pcNTm kUSQ2sSxlKsIZ3NF42opILRAnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMDumKPM KMnMgOGfLzoG3Hen0a9VMB8GA1UdIwQYMBaAFPBGZZPCts6py/AuJqrmv3kPUn6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhEMS83QzRFMzRCQzY3 NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpxbkw4QzRtcXVhX2VROVNm cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFWmxrOEsyenFuTDhDNG1xdWFfZVE5U2ZxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhEMS83QzRFMzRCQzY3NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpx bkw4QzRtcXVhX2VROVNmcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBInZCnw736v96zsKr9XjUjNMl1Ih/eanW/XFvRh9f6M+kyTyWk6xEF q+ISC9h1jYZw1MAk3WXSQcmc3ava/tXqR1thNgXDdO44rjaj66nQtlUaPRfsu3DF Xubw+sDp9/Lk7efpmbSApd1MgWohX3veSL385pEfCfyJSLahbKU2yxVC2DSuM7lG TlOlpnGtm0GLcS0x8Eu9idD8L1o9cln/VtTneAfKZMMjwGM0UOV/X6rBHY5DbTgj DSQlt/W2SFvRoGXKD9KiCTLqZ9M72p+zi3tevkK26z7gG90auLvfHw3zj333sj1n 9GxpowdLtQlsBGYqjpy8KdjBSlYdUg4I -----END CERTIFICATE-----Generated at Sat Aug 23 22:25:56 2025 by rpki-client