$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft File: 8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json) Hash identifier: ZP1FEdyXRaGvt06xTQpRMtNiiikMT7+67FMMedMW+OM= Subject key identifier: 0A:93:ED:C1:C3:87:6D:60:5A:E8:94:CB:D3:DE:4D:37:5C:14:AB:5D Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 0771 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft Manifest number: 0767 Signing time: Fri 22 Aug 2025 21:46:29 +0000 Manifest this update: Fri 22 Aug 2025 21:46:29 +0000 Manifest next update: Fri 29 Aug 2025 21:46:29 +0000 Files and hashes: 1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: 60aKqrBiiJ0lrz6LkNG4ofXZ9YKaiIJxw8vSsACz0Ew=) 2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: LAD7dRCik0KzxFNr8quzKbBZIsig686rpItw8aFMMeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1905 (0x771) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B, serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Validity Not Before: Aug 22 21:46:29 2025 GMT Not After : Aug 29 21:46:29 2025 GMT Subject: CN=68a8e535-da18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:17:e3:00:10:a5:41:47:37:3a:60:b5:f6: af:37:2b:fb:e2:b1:46:f4:a1:c8:47:10:d2:87:f7: 7a:bf:c0:4c:5a:bf:fa:c9:a4:40:0f:fc:f7:7d:7c: f3:d1:d5:07:93:7f:b0:fa:ed:6b:b5:d7:9a:ab:bf: a3:71:80:b4:8f:2e:62:4b:d7:8d:d1:a4:10:3d:55: 7a:6a:33:ef:6b:20:eb:62:ad:75:45:2f:38:7d:0a: 8d:f3:e1:f6:31:df:65:9a:aa:4d:8e:ed:e7:c2:f7: 46:ed:a3:8b:62:75:1a:f5:87:02:54:39:63:55:b7: 2e:c7:a2:ec:0a:b1:68:9d:79:5f:c4:d7:78:45:ee: 03:9f:37:9b:c2:41:10:5c:07:3a:5a:74:20:e5:7b: 7b:d9:a5:3b:da:e6:14:19:0a:d7:5c:72:a7:2e:04: 0a:45:5f:c7:4a:c5:f3:cb:4b:e3:b7:04:79:17:e0: fb:25:99:a0:ee:ea:d8:64:a6:70:bd:71:12:15:44: 1b:74:1b:32:af:4f:b2:d7:61:c8:91:bf:7d:d0:d2: ba:cc:b8:98:d2:a7:a4:ae:08:46:40:1d:50:d7:fb: 49:7c:9a:28:e2:96:27:14:21:83:ec:45:0a:ea:4c: e4:10:31:8b:05:cf:d9:3e:88:a2:e0:14:26:f7:d8: af:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:93:ED:C1:C3:87:6D:60:5A:E8:94:CB:D3:DE:4D:37:5C:14:AB:5D X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:61:c9:21:1a:02:15:a0:b5:d9:83:d0:78:12:be:d7:49:94: c3:86:a4:be:7a:47:12:48:9e:00:6c:6b:da:90:e6:60:4a:32: 16:cb:01:14:2c:bf:70:ff:55:e9:2b:cd:e6:20:ae:2f:3f:ae: 7a:ca:5e:2a:63:12:a9:ef:cf:12:46:a4:12:f5:ef:fd:b8:84: 2c:a6:cf:63:fd:d2:12:55:b0:cc:fd:93:24:fe:40:75:5a:c0: 7a:1e:5c:01:a9:8a:f3:be:09:0b:f4:6f:d5:23:44:51:9c:a3: 49:fc:da:78:6f:b9:cf:2b:f6:74:21:f9:ce:4d:3c:0a:8c:25: dc:44:18:90:32:d7:ad:ed:a8:55:4f:d5:38:f4:f7:8c:d9:42: b7:48:9f:ec:33:c8:96:dc:7a:e8:43:02:1a:0b:5a:2e:e3:c0: 28:3e:5b:14:81:77:d1:ee:3f:fb:74:b1:1c:a7:03:0e:83:81: c4:e5:48:d3:4d:f0:50:42:3f:c8:79:7e:e3:9f:ac:73:01:e5: 4d:9c:1e:7c:73:fc:a0:a7:d6:9e:3b:2f:08:6c:7f:65:40:2e: 8e:45:9f:4b:5f:80:74:96:cf:90:3c:36:e6:09:44:58:ca:ef: b2:27:55:3d:a5:2a:11:7d:57:6a:3f:3c:50:bf:61:10:76:f6: 0a:0a:0a:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjUwODIyMjE0NjI5WhcNMjUwODI5MjE0NjI5WjAYMRYwFAYD VQQDEw02OGE4ZTUzNS1kYTE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw5IX4wAQpUFHNzpgtfavNyv74rFG9KHIRxDSh/d6v8BMWr/6yaRAD/z3fXzz 0dUHk3+w+u1rtdeaq7+jcYC0jy5iS9eN0aQQPVV6ajPvayDrYq11RS84fQqN8+H2 Md9lmqpNju3nwvdG7aOLYnUa9YcCVDljVbcux6LsCrFonXlfxNd4Re4DnzebwkEQ XAc6WnQg5Xt72aU72uYUGQrXXHKnLgQKRV/HSsXzy0vjtwR5F+D7JZmg7urYZKZw vXESFUQbdBsyr0+y12HIkb990NK6zLiY0qekrghGQB1Q1/tJfJoo4pYnFCGD7EUK 6kzkEDGLBc/ZPoii4BQm99ivtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAqT7cHD h21gWuiUy9PeTTdcFKtdMB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEyQi8xQ0QwRTA1MDJGMzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThC LUl0OURXS2xPU0p6bTNpQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaYckhGgIVoLXZg9B4Er7XSZTDhqS+ekcSSJ4AbGvakOZgSjIWywEU LL9w/1XpK83mIK4vP656yl4qYxKp788SRqQS9e/9uIQsps9j/dISVbDM/ZMk/kB1 WsB6HlwBqYrzvgkL9G/VI0RRnKNJ/Np4b7nPK/Z0IfnOTTwKjCXcRBiQMtet7ahV T9U49PeM2UK3SJ/sM8iW3HroQwIaC1ou48AoPlsUgXfR7j/7dLEcpwMOg4HE5UjT TfBQQj/IeX7jn6xzAeVNnB58c/ygp9aeOy8IbH9lQC6ORZ9LX4B0ls+QPDbmCURY yu+yJ1U9pSoRfVdqPzxQv2EQdvYKCgrW -----END CERTIFICATE-----Generated at Sat Aug 23 23:53:08 2025 by rpki-client