$ rpki-client -vvf rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft File: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft (raw, json) Hash identifier: CJ2erA8tQpwzTxoX8CBI+lK0AzkjD9H1yoLdinu7yyU= Subject key identifier: 99:CA:36:4A:34:99:72:CD:94:5E:E1:0B:D8:E7:AD:F8:53:94:6D:04 Authority key identifier: F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 Certificate issuer: /CN=A91D087E/serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Certificate serial: 0C81 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft Manifest number: 0C78 Signing time: Fri 22 Aug 2025 18:28:00 +0000 Manifest this update: Fri 22 Aug 2025 18:28:00 +0000 Manifest next update: Fri 29 Aug 2025 18:28:00 +0000 Files and hashes: 1: 8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl (hash: 1eYnr+58RIbGyW9nZacYRv4HsZf8YGLZpVvLBD1iO/Q=) 2: 8A7C342604FE11EAB778E81CC4F9AE02.roa (hash: W5qhrk3NsiS79KgqelHi0v6nSmVUxngvNJSR/yTxWhg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3201 (0xc81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D087E, serialNumber=F07FB13EF91E2211B0FEBC855ADDAF301B0671A4 Validity Not Before: Aug 22 18:28:00 2025 GMT Not After : Aug 29 18:28:00 2025 GMT Subject: CN=68a8b6b0-c134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1f:46:f0:d4:00:47:4c:2f:87:f3:f8:cb:82: 86:97:1a:5b:7c:9d:18:24:a0:29:ce:14:83:a4:52: 04:cf:81:d9:96:86:15:d6:44:34:99:49:0c:1f:d7: 1b:05:f5:e8:ef:d1:46:79:2b:4b:b4:5a:1a:1a:b3: 3c:cd:06:f2:7b:87:85:7f:1d:e8:81:30:ff:a9:a2: f3:d6:80:f6:2a:e3:6b:9f:c5:39:d3:5c:b2:2d:11: 21:a7:36:b0:1d:a4:e1:0e:5d:db:48:b4:0b:1d:6b: 52:67:66:3c:2f:c8:8d:6b:ab:ce:cf:fd:f5:a8:ec: ca:e2:e1:c8:9f:74:14:95:41:b2:d1:4b:4b:ad:0a: 7d:ad:de:d7:f9:0b:8b:8e:61:58:9e:ed:39:90:15: 37:c7:85:72:f4:1b:a1:f9:13:3b:3e:34:f0:c2:7c: c3:14:37:2c:c3:3c:2b:bb:de:a1:77:33:a8:ce:6a: 65:7a:a2:bb:e3:f3:f3:bb:97:c1:c2:92:27:8f:21: 42:4c:90:22:63:69:d4:2d:a0:10:57:40:7c:f1:6f: 03:75:71:86:31:99:6e:68:2b:a8:04:3e:96:f0:e3: 6e:16:47:ce:21:07:d3:73:b7:b5:56:44:d0:d7:c9: de:3c:1d:93:63:5c:4d:2d:0d:c5:33:d1:6a:a7:25: 69:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CA:36:4A:34:99:72:CD:94:5E:E1:0B:D8:E7:AD:F8:53:94:6D:04 X509v3 Authority Key Identifier: keyid:F0:7F:B1:3E:F9:1E:22:11:B0:FE:BC:85:5A:DD:AF:30:1B:06:71:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D087E/B019F1CA04FC11EA8CAED415C4F9AE02/8H-xPvkeIhGw_ryFWt2vMBsGcaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:af:b0:9b:7b:bc:fd:80:bd:6f:f1:86:ef:73:88:3b:f0:b0: 4e:c5:3c:1f:bf:c6:59:83:8d:a7:1b:60:f3:8c:fa:52:c1:17: 59:52:e1:1a:37:ab:4f:b4:91:ab:57:65:4a:82:f4:41:ab:b2: 88:14:c6:68:9c:3e:31:5c:6d:8e:29:a4:19:09:0c:ff:f9:f1: 2b:f7:4b:5f:15:f9:19:18:22:92:3b:15:77:c9:00:25:5f:12: 9a:fe:43:ea:b1:80:70:ae:18:11:64:30:b0:d4:48:1b:f2:93: c0:a3:10:0f:63:6e:8e:4d:bd:84:6f:59:80:e8:4a:da:88:f8: 72:ac:41:dd:c8:0d:3e:79:59:74:8c:40:e5:9f:ad:33:a5:40: 4c:c3:e1:d7:ff:c4:45:05:9d:4e:6a:5a:58:64:63:5e:fa:f5: 44:dc:8f:9e:a6:0a:c0:33:dc:17:59:c7:03:20:56:78:2b:70: e0:50:df:4f:a4:73:c4:e5:d5:d7:39:01:6f:63:cd:72:e5:7c: 11:c9:84:8e:d9:68:75:b6:8a:58:6b:a0:88:f6:bf:c7:e2:a0: 7f:63:3a:f3:ea:55:7f:c3:66:cf:35:f0:c9:bc:e2:e4:53:dc: 9b:ea:65:79:d4:8f:c4:80:0e:10:32:c1:15:1d:2e:d8:3d:f1: fb:2c:62:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA4N0UxMTAvBgNVBAUTKEYwN0ZCMTNFRjkxRTIyMTFCMEZFQkM4NTVBRERBRjMw MUIwNjcxQTQwHhcNMjUwODIyMTgyODAwWhcNMjUwODI5MTgyODAwWjAYMRYwFAYD VQQDEw02OGE4YjZiMC1jMTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsh9G8NQAR0wvh/P4y4KGlxpbfJ0YJKApzhSDpFIEz4HZloYV1kQ0mUkMH9cb BfXo79FGeStLtFoaGrM8zQbye4eFfx3ogTD/qaLz1oD2KuNrn8U501yyLREhpzaw HaThDl3bSLQLHWtSZ2Y8L8iNa6vOz/31qOzK4uHIn3QUlUGy0UtLrQp9rd7X+QuL jmFYnu05kBU3x4Vy9Buh+RM7PjTwwnzDFDcswzwru96hdzOozmpleqK74/Pzu5fB wpInjyFCTJAiY2nULaAQV0B88W8DdXGGMZluaCuoBD6W8ONuFkfOIQfTc7e1VkTQ 18nePB2TY1xNLQ3FM9FqpyVpIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnKNko0 mXLNlF7hC9jnrfhTlG0EMB8GA1UdIwQYMBaAFPB/sT75HiIRsP68hVrdrzAbBnGk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDg3RS9CMDE5RjFDQTA0 RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUloR3dfcnlGV3Qydk1Cc0dj YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhILXhQdmtlSWhHd19yeUZXdDJ2TUJzR2NhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDg3RS9CMDE5RjFDQTA0RkMxMUVBOENBRUQ0MTVDNEY5QUUwMi84SC14UHZrZUlo R3dfcnlGV3Qydk1Cc0djYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsr7Cbe7z9gL1v8Ybvc4g78LBOxTwfv8ZZg42nG2DzjPpSwRdZUuEa N6tPtJGrV2VKgvRBq7KIFMZonD4xXG2OKaQZCQz/+fEr90tfFfkZGCKSOxV3yQAl XxKa/kPqsYBwrhgRZDCw1Egb8pPAoxAPY26OTb2Eb1mA6EraiPhyrEHdyA0+eVl0 jEDln60zpUBMw+HX/8RFBZ1OalpYZGNe+vVE3I+epgrAM9wXWccDIFZ4K3DgUN9P pHPE5dXXOQFvY81y5XwRyYSO2Wh1topYa6CI9r/H4qB/Yzrz6lV/w2bPNfDJvOLk U9yb6mV51I/EgA4QMsEVHS7YPfH7LGLE -----END CERTIFICATE-----Generated at Sat Aug 23 19:04:25 2025 by rpki-client