$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: mzTXbIUOVt278LUJLyp6FPyLsgIvKLzxa0WT1IZF8+w= Subject key identifier: 3D:C4:16:B4:2E:1E:FC:A1:57:33:3E:E8:4E:C5:8E:59:78:7B:3F:89 Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 0217 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 0209 Signing time: Sat 23 Aug 2025 02:26:29 +0000 Manifest this update: Sat 23 Aug 2025 02:26:29 +0000 Manifest next update: Sat 30 Aug 2025 02:26:29 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: xoL8+8cUbWEvck4lUD4ZNcfH5oYnG59XVwh+kP0m+OQ=) 2: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: u6i0aL0lGd+DkS8Cd1HM9x+4U1BJruGUogvC+Sy1wtw=) 3: 7BDFD4929CF211ED8BD2B02FC4F9AE02.roa (hash: IIRWaPut9Ga2CFDh4DoBpgMGLj7TDwhjoYp6oTvz8Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 535 (0x217) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Aug 23 02:26:29 2025 GMT Not After : Aug 30 02:26:29 2025 GMT Subject: CN=68a926d5-30a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:91:5c:2f:48:9c:4f:ce:d1:c9:1b:49:11:b4: 7f:89:d9:ba:16:72:4b:de:8e:cd:9f:bb:d6:64:fc: 65:aa:1c:b9:a0:89:41:a7:f2:25:ee:a3:4c:af:4f: d4:49:de:ac:43:0d:3b:2d:26:b2:60:99:e1:3d:27: b3:da:7a:a4:fc:28:3d:4c:17:2d:9d:4e:34:89:23: 56:79:61:da:44:b8:30:25:66:cc:1d:29:68:4b:3f: cd:5a:93:b1:db:6a:4d:45:b6:85:de:6e:20:3e:04: c1:d0:a5:a8:ea:ec:7a:04:e6:0d:97:37:27:57:a3: 67:47:93:d5:82:5b:7f:86:5d:aa:5d:e8:db:c7:cf: 80:be:83:8a:26:7c:ce:c9:2f:a7:a8:89:c7:8d:e4: 8b:94:21:a3:2c:ba:78:7d:b5:01:45:87:f5:a8:d8: fc:f7:b0:7d:4f:d9:42:89:e6:6d:61:41:b8:1c:3a: 99:15:eb:8d:9c:c9:bf:9c:52:66:77:52:01:71:03: ea:74:c0:aa:6b:a5:ff:45:07:44:37:64:39:05:9b: ae:45:47:ea:fe:2e:8f:d0:3f:37:e0:b4:19:a2:ee: 8c:03:fe:73:cd:da:e3:ba:22:8a:6a:07:9a:6e:01: 26:96:ce:cf:5c:cb:6c:9a:de:a8:bf:9f:b5:e9:57: 16:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C4:16:B4:2E:1E:FC:A1:57:33:3E:E8:4E:C5:8E:59:78:7B:3F:89 X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:b8:bb:76:ea:ad:17:80:e0:e8:d2:5b:24:80:ba:9e:44:52: 91:14:ca:3c:c5:b8:b5:10:4d:a2:ac:20:72:5b:0f:88:f4:4d: 10:c5:02:2e:d0:63:9a:b4:91:b8:c0:e4:53:6b:c2:1e:26:0b: 54:34:82:62:73:27:40:e6:35:97:53:33:2d:ea:fd:25:e4:8c: 91:18:8c:f7:af:46:aa:fa:ea:19:cc:b1:22:04:12:30:ae:02: ef:10:55:f0:d2:1e:9d:08:ac:0a:02:59:e9:9c:46:4d:74:ca: ee:d5:0b:85:18:eb:40:04:80:76:a6:ab:38:8d:5e:c5:91:4c: c7:14:dc:54:c7:d7:1a:08:78:3f:0f:e7:ed:e2:c6:ad:4b:1b: bc:86:e4:58:39:e7:9f:ab:f4:05:dd:b1:f8:d3:58:db:5e:a2: 67:27:6f:d4:8a:14:63:85:f7:d1:7a:cc:f8:26:35:db:9c:a7: be:54:cb:c2:07:ee:11:20:2a:e5:e3:74:1d:10:cc:ca:a0:37: 98:10:cd:9b:5c:b2:86:73:29:ad:fd:a3:c3:14:b4:2e:02:89: 98:82:f7:15:6b:d0:04:4a:4b:60:7f:0d:c8:99:ba:11:fb:c1: 9a:8f:a0:d0:23:c4:e3:dc:4f:dc:5f:22:6f:30:18:7e:69:dd: c0:77:6d:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjUwODIzMDIyNjI5WhcNMjUwODMwMDIyNjI5WjAYMRYwFAYD VQQDEw02OGE5MjZkNS0zMGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxJFcL0icT87RyRtJEbR/idm6FnJL3o7Nn7vWZPxlqhy5oIlBp/Il7qNMr0/U Sd6sQw07LSayYJnhPSez2nqk/Cg9TBctnU40iSNWeWHaRLgwJWbMHSloSz/NWpOx 22pNRbaF3m4gPgTB0KWo6ux6BOYNlzcnV6NnR5PVglt/hl2qXejbx8+AvoOKJnzO yS+nqInHjeSLlCGjLLp4fbUBRYf1qNj897B9T9lCieZtYUG4HDqZFeuNnMm/nFJm d1IBcQPqdMCqa6X/RQdEN2Q5BZuuRUfq/i6P0D834LQZou6MA/5zzdrjuiKKagea bgEmls7PXMtsmt6ov5+16VcWlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3EFrQu HvyhVzM+6E7Fjll4ez+JMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmuLt26q0XgODo0lskgLqeRFKRFMo8xbi1EE2irCByWw+I9E0QxQIu 0GOatJG4wORTa8IeJgtUNIJicydA5jWXUzMt6v0l5IyRGIz3r0aq+uoZzLEiBBIw rgLvEFXw0h6dCKwKAlnpnEZNdMru1QuFGOtABIB2pqs4jV7FkUzHFNxUx9caCHg/ D+ft4satSxu8huRYOeefq/QF3bH401jbXqJnJ2/UihRjhffResz4JjXbnKe+VMvC B+4RICrl43QdEMzKoDeYEM2bXLKGcymt/aPDFLQuAomYgvcVa9AESktgfw3ImboR +8Gaj6DQI8Tj3E/cXyJvMBh+ad3Ad22/ -----END CERTIFICATE-----Generated at Sun Aug 24 03:13:28 2025 by rpki-client