$ rpki-client -vvf rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft File: k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft (raw, json) Hash identifier: DE5Vx86UbqjyN05nnZ0LKdduO4gq8KyLKfBfM5amTXo= Subject key identifier: C1:0B:00:A0:8A:FD:26:E4:10:AA:34:AA:AF:E7:03:9E:26:DC:00:C6 Authority key identifier: 93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 Certificate issuer: /CN=A91C56FB/serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Certificate serial: 148C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft Manifest number: 146B Signing time: Fri 22 Aug 2025 17:02:09 +0000 Manifest this update: Fri 22 Aug 2025 17:02:09 +0000 Manifest next update: Fri 29 Aug 2025 17:02:09 +0000 Files and hashes: 1: k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl (hash: Cjy8nUz+B/91/48Db0Upk21B7iqgQTM4+B4GFVjrNyo=) 2: 6BB6EF78EB5F11ECB4060F86C4F9AE02.roa (hash: bw2KVyHN6CitUBxUyBMWnfwdT8P8OVOkY8BYkur67D8=) 3: B6DA2BD8E33F11EB9832A354C4F9AE02.roa (hash: u7oqRMExCmv2yUvpdQUhy93ikSgUZkKJq35cWOYkBRM=) 4: B7F93F86E33F11EB9832A354C4F9AE02.roa (hash: F7sXs8wz7vi0K+MviVDC99PWP7OiPZ+mlBu4ZQRrCgU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5260 (0x148c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C56FB, serialNumber=93C058A0DF1773012459164B5A80D85372C7E292 Validity Not Before: Aug 22 17:02:09 2025 GMT Not After : Aug 29 17:02:09 2025 GMT Subject: CN=68a8a291-2dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1a:f6:8a:34:7c:ab:d9:ad:60:6d:57:bc:f5: 7e:4c:fd:2f:4f:1a:aa:7d:2e:08:27:92:42:4e:e3: 00:8a:fe:27:65:a0:7d:73:c9:2b:91:1b:36:8c:ac: 6d:09:e1:27:d3:8b:24:f8:7d:cc:96:fd:e0:8c:1a: 8e:73:e7:68:32:09:be:d3:da:05:b3:83:3a:1d:82: 21:3d:2c:67:24:16:5d:b0:94:86:79:e6:f0:80:5c: 66:70:44:80:1c:27:8b:1a:81:60:cc:17:39:8d:fb: 95:a9:2b:c8:92:b1:97:19:d8:87:25:52:05:53:e2: a3:56:5b:69:7b:19:20:e0:ba:7e:a7:66:2f:62:00: 1e:d3:de:b0:df:a4:01:07:5a:2e:5d:4e:4a:a6:8d: 62:04:cf:3a:4a:91:7e:fb:d3:1f:c9:ee:e0:30:eb: ae:d5:fe:32:59:c7:8c:de:61:55:33:02:9a:e5:e9: 91:3c:b4:43:12:1b:07:88:dd:7c:82:be:3c:47:1a: 53:45:d1:55:c1:b8:6c:ca:11:4a:c5:a7:bf:2c:c4: 8f:a5:2d:ce:eb:89:ff:a9:2d:d9:91:dc:74:9d:d8: 22:f1:f7:1a:f4:f9:86:da:6f:7d:a8:01:a6:58:03: fc:f8:83:88:55:e1:b9:32:3f:59:f5:44:c0:c5:ed: 9b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0B:00:A0:8A:FD:26:E4:10:AA:34:AA:AF:E7:03:9E:26:DC:00:C6 X509v3 Authority Key Identifier: keyid:93:C0:58:A0:DF:17:73:01:24:59:16:4B:5A:80:D8:53:72:C7:E2:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k8BYoN8XcwEkWRZLWoDYU3LH4pI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C56FB/E9F51046783A11E8907D521AC4F9AE02/k8BYoN8XcwEkWRZLWoDYU3LH4pI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4e:20:68:3a:b8:b0:a3:96:6b:66:e4:b3:61:00:f5:8b:6f: 3e:aa:ca:eb:98:24:69:11:6b:1c:32:ad:31:ba:b7:bc:5d:e2: 19:50:72:4a:22:cf:fb:57:51:91:97:ed:39:2e:87:6a:3f:19: 8e:a9:de:b3:a0:d4:22:51:3c:3f:9b:34:c9:7b:82:10:70:fe: bd:d5:39:b2:0a:d5:0d:45:33:96:01:f5:a4:bc:56:40:9b:84: 93:e9:7f:5a:03:41:7d:1f:c4:fa:3c:7e:60:80:5f:6d:09:f7: 9a:92:64:60:ae:ab:19:ba:e2:55:ce:82:58:93:df:92:58:22: 3a:5e:15:7b:dc:fc:97:48:96:30:19:fd:31:67:3c:dc:31:e4: 0e:a6:47:53:c4:e2:1b:3e:0e:79:31:04:fd:af:0f:71:36:d0: 19:f8:2c:df:63:4f:55:fc:04:61:7d:9b:c0:f3:35:83:55:68: 4d:0e:c9:0d:d0:50:97:53:79:70:bf:c3:c0:ba:73:08:14:67: 42:f2:85:d3:8d:81:a1:cf:12:e3:ec:f6:36:16:36:7e:9d:b8: f2:08:c5:2e:71:42:b7:71:a3:0f:e2:d5:48:69:a5:e0:21:1a: 04:94:09:b2:79:2d:dd:3f:ca:00:f7:cb:1e:9d:6f:31:9a:c8: c4:04:3e:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU2RkIxMTAvBgNVBAUTKDkzQzA1OEEwREYxNzczMDEyNDU5MTY0QjVBODBEODUz NzJDN0UyOTIwHhcNMjUwODIyMTcwMjA5WhcNMjUwODI5MTcwMjA5WjAYMRYwFAYD VQQDEw02OGE4YTI5MS0yZGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxr2ijR8q9mtYG1XvPV+TP0vTxqqfS4IJ5JCTuMAiv4nZaB9c8krkRs2jKxt CeEn04sk+H3Mlv3gjBqOc+doMgm+09oFs4M6HYIhPSxnJBZdsJSGeebwgFxmcESA HCeLGoFgzBc5jfuVqSvIkrGXGdiHJVIFU+KjVltpexkg4Lp+p2YvYgAe096w36QB B1ouXU5Kpo1iBM86SpF++9Mfye7gMOuu1f4yWceM3mFVMwKa5emRPLRDEhsHiN18 gr48RxpTRdFVwbhsyhFKxae/LMSPpS3O64n/qS3Zkdx0ndgi8fca9PmG2m99qAGm WAP8+IOIVeG5Mj9Z9UTAxe2bTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMELAKCK /SbkEKo0qq/nA54m3ADGMB8GA1UdIwQYMBaAFJPAWKDfF3MBJFkWS1qA2FNyx+KS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTZGQi9FOUY1MTA0Njc4 M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3RWtXUlpMV29EWVUzTEg0 cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s4QllvTjhYY3dFa1dSWkxXb0RZVTNMSDRwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTZGQi9FOUY1MTA0Njc4M0ExMUU4OTA3RDUyMUFDNEY5QUUwMi9rOEJZb044WGN3 RWtXUlpMV29EWVUzTEg0cEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/TiBoOriwo5ZrZuSzYQD1i28+qsrrmCRpEWscMq0xure8XeIZUHJK Is/7V1GRl+05LodqPxmOqd6zoNQiUTw/mzTJe4IQcP691TmyCtUNRTOWAfWkvFZA m4ST6X9aA0F9H8T6PH5ggF9tCfeakmRgrqsZuuJVzoJYk9+SWCI6XhV73PyXSJYw Gf0xZzzcMeQOpkdTxOIbPg55MQT9rw9xNtAZ+CzfY09V/ARhfZvA8zWDVWhNDskN 0FCXU3lwv8PAunMIFGdC8oXTjYGhzxLj7PY2FjZ+nbjyCMUucUK3caMP4tVIaaXg IRoElAmyeS3dP8oA98senW8xmsjEBD6P -----END CERTIFICATE-----Generated at Sat Aug 23 17:07:17 2025 by rpki-client