$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft File: L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json) Hash identifier: wn8kobu9Qdb0P32G7PV9oCZoTDYW2/MZ66lFG08VG0s= Subject key identifier: C1:E0:EF:17:39:CE:B3:04:30:7A:74:66:41:4F:36:EC:7F:23:B7:5B Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Certificate serial: 02D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft Manifest number: 02CF Signing time: Sat 23 Aug 2025 01:37:26 +0000 Manifest this update: Sat 23 Aug 2025 01:37:25 +0000 Manifest next update: Sat 30 Aug 2025 01:37:25 +0000 Files and hashes: 1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: m7/ywHeYIjRhPLoidEPStXfeMMgIa/P3EMbwJXEF2qI=) 2: 3AA7B0EC6BC811F09EA1EF7EC4F9AE02.roa (hash: x1rSkmkOeFMCvZiNfKlKJPeeli2ytnKQuinhUVmkFyU=) 3: CC1ACE7A6BC711F098C3B76CC4F9AE02.roa (hash: 56NWFLr0dC6w6GZlh7YAHTC6nXr9P2oaly4CuqAwl34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 725 (0x2d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Validity Not Before: Aug 23 01:37:25 2025 GMT Not After : Aug 30 01:37:25 2025 GMT Subject: CN=68a91b55-9f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:62:65:94:04:36:dc:33:44:a4:88:79:95:ec: cb:3f:51:ff:61:20:7b:24:cb:1b:92:7a:fb:30:03: 5c:53:24:9a:75:1f:d8:1c:17:29:70:35:b4:f2:a1: 15:eb:5e:4c:d5:c2:e3:99:86:a8:e2:1f:0c:35:86: 6f:cd:16:71:20:ad:6d:63:76:be:26:90:5d:00:45: 34:ab:5e:88:55:06:48:36:8a:50:61:87:0c:dd:91: 1b:0a:e5:47:f6:c4:37:cd:3d:f6:95:57:2f:3b:df: 13:be:8c:d8:b5:8b:6d:6a:70:4a:cf:af:49:8d:f9: 64:9e:64:d8:1f:cf:60:57:52:db:0b:84:7f:41:0c: 95:5b:bd:55:ff:35:96:17:c4:dd:7e:6c:23:07:f0: 6f:b8:a8:bb:b2:91:ec:36:14:16:98:ed:54:9c:79: aa:75:3c:4a:8e:73:bf:5e:68:6b:80:75:53:00:5b: 87:7f:25:fd:d4:7f:4a:be:53:82:58:d7:c6:1c:c4: 39:1e:39:3a:7d:da:5b:64:94:a9:80:eb:11:01:4b: f0:86:a2:87:6e:45:56:30:aa:42:8d:61:e7:15:1a: c3:a9:3d:37:1a:3b:82:cd:28:e3:de:19:a5:c9:75: 10:08:b3:1c:49:b9:bf:68:41:96:61:e4:03:0d:19: d5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E0:EF:17:39:CE:B3:04:30:7A:74:66:41:4F:36:EC:7F:23:B7:5B X509v3 Authority Key Identifier: keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:3f:d3:c3:ad:f9:42:08:a1:87:35:60:36:ff:b8:8a:4a:3d: 52:ab:67:c9:11:16:ca:4d:dd:11:65:dd:3d:dd:80:67:70:3b: 44:5d:9f:76:f0:87:94:2b:63:e8:ca:82:63:43:6a:ff:fd:13: 17:41:b6:68:f4:ff:e4:a4:4c:09:cc:a6:92:8e:2c:12:bd:9e: b6:be:0e:e1:42:ae:4d:cf:ef:75:88:48:9f:3c:05:fe:6e:37: 6c:1f:59:b8:44:05:12:b5:2b:69:6d:fc:ca:f6:83:89:37:ba: f7:1a:77:0c:09:b5:74:bd:c5:53:ef:c1:7d:49:ff:e0:aa:ba: 98:ee:3b:c2:8f:78:f2:e6:ff:78:3b:6c:89:0e:cd:bc:41:90: 81:09:23:f3:df:bc:f5:97:37:bd:e6:78:3b:27:f1:3c:df:eb: 91:c6:00:7c:b1:24:4e:e8:26:09:e4:e1:fe:bb:91:40:af:1c: 96:eb:25:60:84:89:72:36:17:7c:f7:1b:77:50:ca:7c:90:38: f5:91:5b:0c:4e:de:b2:8a:ef:79:73:b8:c7:bd:6f:7e:3d:7a: 95:0a:f4:b6:e6:70:08:0a:5d:8a:b2:7d:3c:19:dc:31:83:0c: cc:21:15:33:83:25:6d:2b:76:5e:b2:5f:9f:88:f3:b5:85:b1: ac:2f:d0:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QTMxMTAvBgNVBAUTKDJGQzQzMEYxRTIxNUNCRDdFMDhGMjY0Mzg4MzcwMzUw MDJERTMxQTkwHhcNMjUwODIzMDEzNzI1WhcNMjUwODMwMDEzNzI1WjAYMRYwFAYD VQQDEw02OGE5MWI1NS05ZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqGJllAQ23DNEpIh5lezLP1H/YSB7JMsbknr7MANcUySadR/YHBcpcDW08qEV 615M1cLjmYao4h8MNYZvzRZxIK1tY3a+JpBdAEU0q16IVQZINopQYYcM3ZEbCuVH 9sQ3zT32lVcvO98TvozYtYttanBKz69JjflknmTYH89gV1LbC4R/QQyVW71V/zWW F8TdfmwjB/BvuKi7spHsNhQWmO1UnHmqdTxKjnO/XmhrgHVTAFuHfyX91H9KvlOC WNfGHMQ5Hjk6fdpbZJSpgOsRAUvwhqKHbkVWMKpCjWHnFRrDqT03GjuCzSjj3hml yXUQCLMcSbm/aEGWYeQDDRnV9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMHg7xc5 zrMEMHp0ZkFPNux/I7dbMB8GA1UdIwQYMBaAFC/EMPHiFcvX4I8mQ4g3A1AC3jGp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhBMy85NjY1MEYzOEZE MTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5ZmdqeVpEaURjRFVBTGVN YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UXc4ZUlWeTlmZ2p5WkRpRGNEVUFMZU1hay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhBMy85NjY1MEYzOEZEMTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5 ZmdqeVpEaURjRFVBTGVNYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuP9PDrflCCKGHNWA2/7iKSj1Sq2fJERbKTd0RZd093YBncDtEXZ92 8IeUK2PoyoJjQ2r//RMXQbZo9P/kpEwJzKaSjiwSvZ62vg7hQq5Nz+91iEifPAX+ bjdsH1m4RAUStStpbfzK9oOJN7r3GncMCbV0vcVT78F9Sf/gqrqY7jvCj3jy5v94 O2yJDs28QZCBCSPz37z1lze95ng7J/E83+uRxgB8sSRO6CYJ5OH+u5FArxyW6yVg hIlyNhd89xt3UMp8kDj1kVsMTt6yiu95c7jHvW9+PXqVCvS25nAICl2Ksn08Gdwx gwzMIRUzgyVtK3Zesl+fiPO1hbGsL9Av -----END CERTIFICATE-----Generated at Sun Aug 24 03:10:59 2025 by rpki-client