$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft File: 8psj6k4RTNycptN_Xvee9MNccoI.mft (raw, json) Hash identifier: L7e0PTrgWM7iHnjmje33BUouUVB+zlbD56hViljn6zo= Subject key identifier: DD:48:C4:11:3B:84:0E:3D:BB:7A:0D:1B:32:3A:8D:F5:CE:D3:E9:62 Authority key identifier: F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 Certificate issuer: /CN=A91C0372/serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft Manifest number: 013C Signing time: Sat 23 Aug 2025 04:35:45 +0000 Manifest this update: Sat 23 Aug 2025 04:35:45 +0000 Manifest next update: Sat 30 Aug 2025 04:35:45 +0000 Files and hashes: 1: 8psj6k4RTNycptN_Xvee9MNccoI.crl (hash: 251AsDV2rtnGumit4DdwmTezsJlyAW6PIkaM1Bw+EyE=) 2: 4B42335C9D8711EEAF2A6E25C4F9AE02.roa (hash: fBtaOlMCOFGQQtGdBagxQGnrYFNg/qX3d4dMpzhuZnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0372, serialNumber=F29B23EA4E114CDC9CA6D37F5EF79EF4C35C7282 Validity Not Before: Aug 23 04:35:45 2025 GMT Not After : Aug 30 04:35:45 2025 GMT Subject: CN=68a94521-4b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:21:32:3c:bc:4c:84:9f:11:8d:ce:ca:fb: 54:6b:9b:a3:4c:49:83:16:ff:57:85:ec:45:d6:2b: 50:fe:77:b5:79:20:b2:11:33:9a:3b:97:f8:89:11: d7:45:11:6d:d3:d8:16:79:e5:3a:92:bc:7d:21:9e: ff:4a:56:4b:5a:5d:d8:8c:0e:9f:c3:36:d4:5d:53: 25:63:04:74:0c:04:f8:e8:f5:a4:84:c7:1c:22:7c: 6b:8e:65:10:11:1e:c3:9b:de:c1:e6:00:46:b0:cf: 0e:ee:3a:9b:19:36:3b:b8:15:d3:bd:b7:96:5e:a4: 01:06:58:f8:4e:5a:c9:c6:0c:a1:a5:a1:bd:f3:4a: 51:26:7c:65:d8:9b:fe:64:66:9f:e0:12:0d:0b:81: 4f:81:c8:36:fb:43:bd:f6:4f:75:a6:a2:b9:b2:ac: e8:54:0f:2d:41:ed:c1:f9:46:13:b1:a8:37:bf:05: 12:2b:e3:c2:ce:82:3e:d3:87:d1:b8:3c:9f:d6:2c: 4f:67:0c:36:f8:23:26:2c:6d:89:d4:71:c9:ed:54: 42:69:0e:16:fa:33:c0:57:83:71:99:fb:98:e0:56: 6e:25:b3:88:26:0d:01:6e:54:31:01:a8:f3:f3:28: ed:9c:f0:15:20:b0:cb:b2:1b:f9:84:1b:0b:d5:aa: cd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:48:C4:11:3B:84:0E:3D:BB:7A:0D:1B:32:3A:8D:F5:CE:D3:E9:62 X509v3 Authority Key Identifier: keyid:F2:9B:23:EA:4E:11:4C:DC:9C:A6:D3:7F:5E:F7:9E:F4:C3:5C:72:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8psj6k4RTNycptN_Xvee9MNccoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0372/20A54FC89D8511EE9181C121C4F9AE02/8psj6k4RTNycptN_Xvee9MNccoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:b6:dd:78:cf:47:c2:50:93:57:bd:cb:a3:12:28:61:ec:39: 17:56:1c:67:dd:b5:2d:05:d0:2d:7f:8b:6c:f2:1d:b0:c6:20: d5:53:ef:6a:6e:9f:91:64:be:6d:f2:0a:ed:62:3a:4e:91:3c: 84:2d:c5:38:80:80:f3:b3:0e:ab:5b:61:d7:b4:e9:50:3d:ef: 89:54:41:a5:73:85:8e:dc:f0:63:2b:bd:9c:d5:74:d6:95:a5: e6:21:29:e7:d4:3d:a0:1b:92:9b:58:ed:fe:31:0a:a9:ed:99: 0b:a4:38:02:60:65:27:40:12:5a:57:6b:e3:3c:31:cd:16:45: 50:ef:0b:f1:68:5b:2a:23:8e:55:d1:16:9d:ba:3a:9c:f9:42: a3:29:22:2e:77:86:fc:7d:0d:58:21:27:96:de:0a:cd:15:cb: 5c:6c:1a:1a:15:02:0a:64:83:c6:6d:e2:17:7b:66:be:10:fd: 66:94:56:4e:d8:e9:d6:0c:51:bd:08:eb:33:82:0d:d4:71:c3: 3f:ce:f7:e1:56:f0:2b:dd:e9:37:e1:0f:cf:37:c6:b5:d7:fa: 58:a3:3e:77:eb:59:80:ca:46:33:d9:f1:9f:00:05:f0:94:66: 3d:ae:fb:c8:de:de:02:dc:a1:45:e5:a7:66:56:b9:35:91:94: 35:e2:7b:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzAzNzIxMTAvBgNVBAUTKEYyOUIyM0VBNEUxMTRDREM5Q0E2RDM3RjVFRjc5RUY0 QzM1QzcyODIwHhcNMjUwODIzMDQzNTQ1WhcNMjUwODMwMDQzNTQ1WjAYMRYwFAYD VQQDEw02OGE5NDUyMS00YjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxPQhMjy8TISfEY3OyvtUa5ujTEmDFv9XhexF1itQ/ne1eSCyETOaO5f4iRHX RRFt09gWeeU6krx9IZ7/SlZLWl3YjA6fwzbUXVMlYwR0DAT46PWkhMccInxrjmUQ ER7Dm97B5gBGsM8O7jqbGTY7uBXTvbeWXqQBBlj4TlrJxgyhpaG980pRJnxl2Jv+ ZGaf4BINC4FPgcg2+0O99k91pqK5sqzoVA8tQe3B+UYTsag3vwUSK+PCzoI+04fR uDyf1ixPZww2+CMmLG2J1HHJ7VRCaQ4W+jPAV4NxmfuY4FZuJbOIJg0BblQxAajz 8yjtnPAVILDLshv5hBsL1arNUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN1IxBE7 hA49u3oNGzI6jfXO0+liMB8GA1UdIwQYMBaAFPKbI+pOEUzcnKbTf173nvTDXHKC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDM3Mi8yMEE1NEZDODlE ODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlROeWNwdE5fWHZlZTlNTmNj b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhwc2o2azRSVE55Y3B0Tl9YdmVlOU1OY2NvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDM3Mi8yMEE1NEZDODlEODUxMUVFOTE4MUMxMjFDNEY5QUUwMi84cHNqNms0UlRO eWNwdE5fWHZlZTlNTmNjb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHtt14z0fCUJNXvcujEihh7DkXVhxn3bUtBdAtf4ts8h2wxiDVU+9q bp+RZL5t8grtYjpOkTyELcU4gIDzsw6rW2HXtOlQPe+JVEGlc4WO3PBjK72c1XTW laXmISnn1D2gG5KbWO3+MQqp7ZkLpDgCYGUnQBJaV2vjPDHNFkVQ7wvxaFsqI45V 0Radujqc+UKjKSIud4b8fQ1YISeW3grNFctcbBoaFQIKZIPGbeIXe2a+EP1mlFZO 2OnWDFG9COszgg3UccM/zvfhVvAr3ek34Q/PN8a11/pYoz5361mAykYz2fGfAAXw lGY9rvvI3t4C3KFF5admVrk1kZQ14ntn -----END CERTIFICATE-----Generated at Sun Aug 24 00:36:56 2025 by rpki-client