$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft File: r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft (raw, json) Hash identifier: 7fR9pWtePDtwHjbUM3oc6fdOOnQOhqxi0no62pEL/2Y= Subject key identifier: BC:84:96:D2:85:4E:33:ED:86:59:1A:FE:8E:91:D2:F9:88:7F:19:A6 Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A Certificate issuer: /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft Manifest number: 015F Signing time: Sat 23 Aug 2025 04:09:08 +0000 Manifest this update: Sat 23 Aug 2025 04:09:08 +0000 Manifest next update: Sat 30 Aug 2025 04:09:08 +0000 Files and hashes: 1: r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl (hash: Q42Q8wuBZTbIMc+ayPPfNzP+gHl8UW+FbiXBlE+cUhc=) 2: 583FA34E672E11EEB31AC02CC4F9AE02.roa (hash: UDY5XZZpboPOe4PuKIjoZcv8Z+maPhsL8V3N8OWNJu4=) 3: 810B798472CC11EEA1A5574DC4F9AE02.roa (hash: QxDb9utS5i/B8urK72tRRFJFcT0cVUwBUSamNqzNfT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A Validity Not Before: Aug 23 04:09:08 2025 GMT Not After : Aug 30 04:09:08 2025 GMT Subject: CN=68a93ee4-8a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:47:4c:4c:51:ba:8d:c4:e7:a6:5c:36:b0:f8: 02:c6:fd:6b:e0:fb:2c:64:3f:d4:b7:2b:ed:ba:ba: 2f:48:e0:f4:14:c0:a9:ec:31:52:09:31:e2:c9:74: d7:1d:df:83:47:ce:5f:de:b2:05:70:16:1a:33:e8: 8b:48:13:cf:9f:5c:c6:ae:94:de:92:8a:e1:d7:02: ac:f7:5f:36:d0:0f:d0:63:e6:7e:61:cb:b9:2c:10: 46:36:15:9f:fe:90:3e:63:c4:f3:84:de:b0:08:2f: 10:c3:60:0c:d0:24:76:d8:79:5d:67:62:c2:2b:42: e0:a6:48:29:fa:07:bc:86:e7:40:2a:ae:df:22:f7: 9f:6b:80:41:56:98:99:f9:4c:0a:1c:9d:43:ca:04: 3e:f2:65:03:b9:84:21:a3:45:4c:6e:95:80:58:86: bf:3c:29:9d:7b:30:4c:de:28:0f:6d:ee:90:4e:1b: e2:d3:64:b1:80:84:56:22:34:22:72:65:2c:ad:b0: 1d:66:d0:a2:38:07:6e:da:a2:84:b3:9b:84:9d:5a: 15:d1:69:7a:1c:e4:82:58:cc:4d:5c:79:1f:7c:0f: 5d:f3:11:a5:64:5f:03:ee:26:fc:67:cd:a9:f7:47: 6f:cd:16:cd:a8:97:a1:d3:70:c4:8d:a9:b3:cd:9b: 67:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:84:96:D2:85:4E:33:ED:86:59:1A:FE:8E:91:D2:F9:88:7F:19:A6 X509v3 Authority Key Identifier: keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:37:7b:b5:8e:95:dd:18:a6:92:25:20:84:ff:b5:6f:86:30: 3a:8c:a2:37:fe:d7:bb:24:6d:5b:69:79:2f:fa:81:62:1f:b9: b9:90:8b:c5:bf:47:ef:79:1f:ad:36:aa:69:9b:02:59:45:1f: 94:5e:ed:64:c9:bc:4c:fd:f6:93:78:88:10:a6:99:16:52:68: b1:c0:5d:30:13:5c:dd:87:41:33:db:fa:0b:d8:87:07:ce:d8: 9d:77:c8:1e:54:27:3b:82:fb:d3:39:df:89:a8:07:62:9e:75: cd:98:b5:37:76:54:49:cd:02:00:39:5d:6e:9e:24:fe:d9:3f: 70:13:7c:88:57:d7:23:ca:6f:b5:b2:75:29:c5:da:37:1f:17: 1a:b5:fc:13:02:bb:a6:13:b1:33:a3:07:c6:2f:41:7b:9e:24: 0e:ac:e6:0e:25:f2:de:53:db:8f:9c:14:dd:d2:6e:bf:bd:ba: 08:c2:c3:08:18:e8:88:f9:ff:00:5e:14:87:37:8a:fc:fe:ab: 33:25:aa:b0:e6:c8:26:ff:28:89:5f:14:52:83:f5:a5:74:5c: 66:6f:7e:e6:98:f9:1c:4d:c7:e3:26:49:d7:fd:80:fa:dd:fe: fd:ca:9a:ab:c6:da:d7:6a:04:17:86:46:65:ee:05:85:c9:a6: 64:7d:32:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzA2NEMxMTAvBgNVBAUTKEFGQzMxNzQ3NjdFNEVBRkM0REVFMEY0OTI1QTFDNjVD REM1OUZBMkEwHhcNMjUwODIzMDQwOTA4WhcNMjUwODMwMDQwOTA4WjAYMRYwFAYD VQQDEw02OGE5M2VlNC04YTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnUdMTFG6jcTnplw2sPgCxv1r4PssZD/UtyvturovSOD0FMCp7DFSCTHiyXTX Hd+DR85f3rIFcBYaM+iLSBPPn1zGrpTekorh1wKs91820A/QY+Z+Ycu5LBBGNhWf /pA+Y8TzhN6wCC8Qw2AM0CR22HldZ2LCK0Lgpkgp+ge8hudAKq7fIvefa4BBVpiZ +UwKHJ1DygQ+8mUDuYQho0VMbpWAWIa/PCmdezBM3igPbe6QThvi02SxgIRWIjQi cmUsrbAdZtCiOAdu2qKEs5uEnVoV0Wl6HOSCWMxNXHkffA9d8xGlZF8D7ib8Z82p 90dvzRbNqJeh03DEjamzzZtnNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLyEltKF TjPthlka/o6R0vmIfxmmMB8GA1UdIwQYMBaAFK/DF0dn5Or8Te4PSSWhxlzcWfoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMDY0Qy82ODNDOUQ5ODY3 MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2eE43ZzlKSmFIR1hOeFot aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I4TVhSMmZrNnZ4TjdnOUpKYUhHWE54Wi1pby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MDY0Qy82ODNDOUQ5ODY3MkQxMUVFOUM4MDlGMTJDNEY5QUUwMi9yOE1YUjJmazZ2 eE43ZzlKSmFIR1hOeFotaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgN3u1jpXdGKaSJSCE/7VvhjA6jKI3/te7JG1baXkv+oFiH7m5kIvF v0fveR+tNqppmwJZRR+UXu1kybxM/faTeIgQppkWUmixwF0wE1zdh0Ez2/oL2IcH ztidd8geVCc7gvvTOd+JqAdinnXNmLU3dlRJzQIAOV1uniT+2T9wE3yIV9cjym+1 snUpxdo3HxcatfwTArumE7EzowfGL0F7niQOrOYOJfLeU9uPnBTd0m6/vboIwsMI GOiI+f8AXhSHN4r8/qszJaqw5sgm/yiJXxRSg/WldFxmb37mmPkcTcfjJknX/YD6 3f79ypqrxtrXagQXhkZl7gWFyaZkfTKS -----END CERTIFICATE-----Generated at Sat Aug 23 21:07:10 2025 by rpki-client