$ rpki-client -vvf rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft File: e8dWLzeFS9JjniQQ1nPld8v7MR8.mft (raw, json) Hash identifier: eGWIEUv6ZBI+cxeKXC188bjTGohltUWGRbLbOHBs/w8= Subject key identifier: 20:BB:89:04:85:7B:BD:84:CC:81:DF:11:59:CC:2F:73:4F:52:0D:54 Authority key identifier: 7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F Certificate issuer: /CN=A91C36C2/serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft Manifest number: 66 Signing time: Sat 23 Aug 2025 07:18:39 +0000 Manifest this update: Sat 23 Aug 2025 07:18:39 +0000 Manifest next update: Sat 30 Aug 2025 07:18:39 +0000 Files and hashes: 1: e8dWLzeFS9JjniQQ1nPld8v7MR8.crl (hash: UI9pLWeCy4kvhoyWxhIlQv26bCt52bCrWA6MBKM+LCM=) 2: C6D4BDF8ECFC11EF9447031DC4F9AE02.roa (hash: vKvGvc7f1ooIQwok9o5vzvjlKuAVRyu9TkNTlmBt1ZE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:18:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C36C2, serialNumber=7BC7562F37854BD2639E2410D673E577CBFB311F Validity Not Before: Aug 23 07:18:39 2025 GMT Not After : Aug 30 07:18:39 2025 GMT Subject: CN=68a96b4f-dba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7f:19:d0:85:40:fc:5a:22:04:c6:a3:2e:1b: 39:76:c4:c9:08:ce:5a:1b:9c:eb:ba:c3:e2:06:c0: d5:92:4f:4d:36:89:1b:1d:23:b5:d5:de:c3:bf:23: 86:79:2a:da:ac:5c:f6:b6:21:e7:c9:33:2d:ad:51: 40:06:35:e8:eb:1e:a3:06:e9:f5:ee:3e:16:dc:d7: c6:d7:a7:3d:87:06:ef:ca:75:35:41:0e:6c:04:a8: 92:da:ce:fe:db:c6:a9:ab:1d:ce:c2:3a:9e:ea:39: 2d:f8:0c:de:43:eb:79:13:ce:72:d9:7b:c9:ca:cd: b9:c2:1b:c0:b7:9d:85:61:60:bb:ee:e8:f4:54:c8: c3:4e:1c:6c:cc:f9:8a:49:62:8e:f1:6f:6a:77:21: 78:8e:6e:f9:b1:9c:5b:ac:70:44:c6:b6:78:fa:cc: 14:58:46:f9:07:8a:ee:f2:f4:82:b6:96:69:55:90: 68:bd:9a:a2:18:9d:db:e2:47:5f:1e:07:72:38:9a: 11:5e:23:61:1a:4e:ef:4c:5a:32:b4:22:4e:b6:ef: fa:f9:97:37:2b:ec:20:bd:79:15:d3:ed:97:c6:8c: 6e:b5:ae:9d:da:27:e7:5b:ed:0f:60:aa:90:49:ff: f9:83:ab:bd:67:11:88:11:32:6c:6e:35:56:fb:33: 53:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:BB:89:04:85:7B:BD:84:CC:81:DF:11:59:CC:2F:73:4F:52:0D:54 X509v3 Authority Key Identifier: keyid:7B:C7:56:2F:37:85:4B:D2:63:9E:24:10:D6:73:E5:77:CB:FB:31:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e8dWLzeFS9JjniQQ1nPld8v7MR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C36C2/50FB9070EC3911EF81E00986C4F9AE02/e8dWLzeFS9JjniQQ1nPld8v7MR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:ef:4c:fc:41:5a:b6:fd:28:b7:b3:8f:11:fa:be:63:97:51: 9a:e1:20:66:41:c6:0d:20:76:c9:d2:cb:31:66:99:f4:bf:4f: bd:ff:ed:9a:a0:17:ba:b2:0f:73:95:93:2e:32:64:0b:c4:28: 6c:69:e6:be:43:80:67:ba:52:fa:8a:17:09:74:99:10:f9:e7: 0a:38:8d:aa:97:fb:79:e4:d2:d4:fd:e7:91:02:68:c4:3e:8f: b7:4c:1e:26:98:96:b0:8c:f0:de:0d:6b:fe:90:5e:2d:70:cc: e8:bb:01:3c:ec:b3:77:ca:64:12:29:9d:cc:16:03:a1:2a:70: 49:3c:3c:b5:4e:e8:c0:59:67:2f:bc:36:da:89:0d:33:8d:e7: 38:a6:2c:e8:ac:f8:f8:07:e3:d9:de:ed:12:d0:e4:5f:b1:09: cf:4c:a0:29:7a:0e:b2:c9:29:14:15:1a:81:76:12:ab:4f:c0: 2b:61:1a:a5:93:31:37:53:e9:ac:74:21:0a:91:68:33:52:c8: d8:c3:7b:54:bc:b5:73:3d:84:6f:5b:18:ee:41:e3:bc:63:3c: 49:ee:9a:27:5b:e3:10:5c:7d:c6:56:a5:1c:f7:fe:64:4c:40: 6d:41:6d:ef:58:e8:96:b5:b5:b2:d7:2b:5e:eb:50:db:3c:a3: 4c:b9:ef:c0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MzZDMjExMC8GA1UEBRMoN0JDNzU2MkYzNzg1NEJEMjYzOUUyNDEwRDY3M0U1NzdD QkZCMzExRjAeFw0yNTA4MjMwNzE4MzlaFw0yNTA4MzAwNzE4MzlaMBgxFjAUBgNV BAMTDTY4YTk2YjRmLWRiYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkfxnQhUD8WiIExqMuGzl2xMkIzlobnOu6w+IGwNWST002iRsdI7XV3sO/I4Z5 KtqsXPa2IefJMy2tUUAGNejrHqMG6fXuPhbc18bXpz2HBu/KdTVBDmwEqJLazv7b xqmrHc7COp7qOS34DN5D63kTznLZe8nKzbnCG8C3nYVhYLvu6PRUyMNOHGzM+YpJ Yo7xb2p3IXiObvmxnFuscETGtnj6zBRYRvkHiu7y9IK2lmlVkGi9mqIYndviR18e B3I4mhFeI2EaTu9MWjK0Ik627/r5lzcr7CC9eRXT7ZfGjG61rp3aJ+db7Q9gqpBJ //mDq71nEYgRMmxuNVb7M1O3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUILuJBIV7 vYTMgd8RWcwvc09SDVQwHwYDVR0jBBgwFoAUe8dWLzeFS9JjniQQ1nPld8v7MR8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMzNkMyLzUwRkI5MDcwRUMz OTExRUY4MUUwMDk4NkM0RjlBRTAyL2U4ZFdMemVGUzlKam5pUVExblBsZDh2N01S OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZThkV0x6ZUZTOUpqbmlRUTFuUGxkOHY3TVI4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMz NkMyLzUwRkI5MDcwRUMzOTExRUY4MUUwMDk4NkM0RjlBRTAyL2U4ZFdMemVGUzlK am5pUVExblBsZDh2N01SOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJbvTPxBWrb9KLezjxH6vmOXUZrhIGZBxg0gdsnSyzFmmfS/T73/7Zqg F7qyD3OVky4yZAvEKGxp5r5DgGe6UvqKFwl0mRD55wo4jaqX+3nk0tT955ECaMQ+ j7dMHiaYlrCM8N4Na/6QXi1wzOi7ATzss3fKZBIpncwWA6EqcEk8PLVO6MBZZy+8 NtqJDTON5zimLOis+PgH49ne7RLQ5F+xCc9MoCl6DrLJKRQVGoF2EqtPwCthGqWT MTdT6ax0IQqRaDNSyNjDe1S8tXM9hG9bGO5B47xjPEnumidb4xBcfcZWpRz3/mRM QG1Bbe9Y6Ja1tbLXK17rUNs8o0y578A= -----END CERTIFICATE-----Generated at Sat Aug 23 19:03:15 2025 by rpki-client