$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft File: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft (raw, json) Hash identifier: H9xF0cKOopiq0Ofy7ox+geb/dI23Z+Sop7lFX86pz/E= Subject key identifier: 65:B7:4C:38:3F:0E:10:A1:9D:82:32:4D:07:05:36:B9:C3:CE:B8:E9 Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 Certificate issuer: /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Certificate serial: 99 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft Manifest number: 94 Signing time: Sat 23 Aug 2025 06:44:21 +0000 Manifest this update: Sat 23 Aug 2025 06:44:20 +0000 Manifest next update: Sat 30 Aug 2025 06:44:20 +0000 Files and hashes: 1: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl (hash: eVTyK83s/tkYTPiAqIxc8SqM5Du5uH7UI/ohhBapzqE=) 2: D660AB1CD87D11EF9992CD41C4F9AE02.roa (hash: WnrI0aIYZih3vM/sW5dubGcnSTElOMwHaTB7siLqQR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:44:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=F15D11790B0E75357406611DC57058F69DC578A0 Validity Not Before: Aug 23 06:44:20 2025 GMT Not After : Aug 30 06:44:20 2025 GMT Subject: CN=68a96344-d7c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:11:92:3e:6f:05:89:c1:1e:54:ae:ff:6b:3f: 88:e1:5b:0e:57:b3:b2:fb:7d:a4:dd:7b:d9:90:f7: 59:99:56:df:f4:f7:dc:4d:8a:85:de:96:6e:64:bf: 86:ff:bf:0a:22:24:ea:ec:f5:57:45:ce:95:86:af: 03:ce:07:93:4a:d4:f5:5a:8d:5d:2b:10:35:77:1f: 64:8f:ab:1a:11:6c:1b:ae:5b:75:e2:c0:74:47:7b: 8e:5b:79:36:9a:a9:dc:46:f2:df:9b:92:86:4f:fb: d5:92:0e:de:3c:9d:bc:57:7b:3a:75:08:30:a7:b9: 80:4a:0e:58:ad:7a:32:b7:e3:ea:f1:a4:3e:c2:df: d1:b5:70:86:9c:1f:a8:35:df:bc:a3:6d:23:f8:9f: ad:89:bd:e7:04:d0:87:c5:16:8d:b8:46:c2:54:f9: ef:75:0e:ee:a3:b4:8b:db:4b:4d:05:1b:b1:d8:8d: dc:ab:d8:d6:b2:4b:69:87:27:41:01:4f:f2:c6:f6: cb:1c:f5:e8:ec:24:a6:cc:e3:a1:49:55:21:40:79: 98:df:88:a4:b3:78:b9:45:7e:99:e9:1e:f2:c7:df: 2a:71:c0:5e:a8:2c:48:67:e6:d3:3e:d7:0d:e7:ed: 64:5c:6a:6f:e9:1b:0b:d1:80:c8:e6:66:fa:8c:3a: b3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B7:4C:38:3F:0E:10:A1:9D:82:32:4D:07:05:36:B9:C3:CE:B8:E9 X509v3 Authority Key Identifier: keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:a3:cb:b5:05:be:52:87:49:f6:37:d5:e5:c2:70:17:56:9e: ba:e9:3d:d1:46:bf:c6:02:d9:dc:7d:b4:11:e5:2c:6f:b4:55: d3:92:60:5b:0e:b0:dc:e4:1c:d9:ae:a6:c5:25:04:72:8e:c8: 78:6c:81:13:72:c9:64:ca:e9:d6:76:06:f7:bb:41:b4:c5:fd: 2d:d7:61:b6:82:18:a4:2f:78:57:a3:ee:52:21:ea:b6:dc:e6: 2c:7a:ae:88:bc:4a:3c:8d:23:d5:c4:52:7d:d9:9f:ab:9f:33: 36:4b:8e:5f:d4:68:80:39:75:99:80:06:a4:34:70:ff:14:dc: 47:4b:3d:ee:86:3a:5c:a7:34:3d:c0:69:7a:a8:eb:9a:fc:e6: 43:35:68:bd:e1:10:9c:dd:c8:ce:6d:7a:d2:e9:38:20:e1:e3: d2:53:cf:a7:cd:9e:9d:82:a7:8d:c9:38:3f:68:f8:e9:89:c2: de:cd:fe:dd:7f:b1:c3:5c:42:9a:f6:e7:f2:06:ac:bf:32:c5: 48:c1:b2:f6:67:94:39:6f:ee:96:3f:b6:70:f6:11:7a:2a:df: bd:c6:b4:d6:6f:69:7e:44:7d:44:dc:33:22:bb:44:99:18:3e: ec:51:62:41:d0:7b:49:81:16:7d:11:45:e9:db:ed:1d:60:00: 4d:db:8b:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDA5QkMxMTAvBgNVBAUTKEYxNUQxMTc5MEIwRTc1MzU3NDA2NjExREM1NzA1OEY2 OURDNTc4QTAwHhcNMjUwODIzMDY0NDIwWhcNMjUwODMwMDY0NDIwWjAYMRYwFAYD VQQDEw02OGE5NjM0NC1kN2MyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxGSPm8FicEeVK7/az+I4VsOV7Oy+32k3XvZkPdZmVbf9PfcTYqF3pZuZL+G /78KIiTq7PVXRc6Vhq8DzgeTStT1Wo1dKxA1dx9kj6saEWwbrlt14sB0R3uOW3k2 mqncRvLfm5KGT/vVkg7ePJ28V3s6dQgwp7mASg5YrXoyt+Pq8aQ+wt/RtXCGnB+o Nd+8o20j+J+tib3nBNCHxRaNuEbCVPnvdQ7uo7SL20tNBRux2I3cq9jWsktphydB AU/yxvbLHPXo7CSmzOOhSVUhQHmY34iks3i5RX6Z6R7yx98qccBeqCxIZ+bTPtcN 5+1kXGpv6RsL0YDI5mb6jDqz4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGW3TDg/ DhChnYIyTQcFNrnDzrjpMB8GA1UdIwQYMBaAFPFdEXkLDnU1dAZhHcVwWPadxXig MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlCQy9DQjg4MkU3RUE3 MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi84VjBSZVFzT2RUVjBCbUVkeFhCWTlwM0Zl S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhWMFJlUXNPZFRWMEJtRWR4WEJZOXAzRmVLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlCQy9DQjg4MkU3RUE3MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi84VjBSZVFzT2RU VjBCbUVkeFhCWTlwM0ZlS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFo8u1Bb5Sh0n2N9XlwnAXVp666T3RRr/GAtncfbQR5SxvtFXTkmBb DrDc5BzZrqbFJQRyjsh4bIETcslkyunWdgb3u0G0xf0t12G2ghikL3hXo+5SIeq2 3OYseq6IvEo8jSPVxFJ92Z+rnzM2S45f1GiAOXWZgAakNHD/FNxHSz3uhjpcpzQ9 wGl6qOua/OZDNWi94RCc3cjObXrS6Tgg4ePSU8+nzZ6dgqeNyTg/aPjpicLezf7d f7HDXEKa9ufyBqy/MsVIwbL2Z5Q5b+6WP7Zw9hF6Kt+9xrTWb2l+RH1E3DMiu0SZ GD7sUWJB0HtJgRZ9EUXp2+0dYABN24t2 -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:53 2025 by rpki-client