$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft File: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft (raw, json) Hash identifier: 8uNNgmwBuYWLhHkeJ2cF/byjosAvOYq3PvrJSrQqwTQ= Subject key identifier: 46:01:93:9D:C4:BF:CA:9C:97:3F:AA:1D:28:48:DE:88:92:0C:E2:DC Authority key identifier: D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 Certificate issuer: /CN=A91D1234/serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Certificate serial: 0343 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft Manifest number: 033F Signing time: Sat 23 Aug 2025 01:18:21 +0000 Manifest this update: Sat 23 Aug 2025 01:18:21 +0000 Manifest next update: Sat 30 Aug 2025 01:18:21 +0000 Files and hashes: 1: 08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl (hash: 5AKTln8B560C5rLRjqyKGPV5fZgeSd5LXMeXJ8bAGV8=) 2: 84A0C6B4D02811ECB2472344C4F9AE02.roa (hash: 2T9vsc4C1WKjq9QaM+1XQHhjEU7ftzmE6rg4euSNxbQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 835 (0x343) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1234, serialNumber=D3C622E790F1DEF16928BBE554181727CF8C88F8 Validity Not Before: Aug 23 01:18:21 2025 GMT Not After : Aug 30 01:18:21 2025 GMT Subject: CN=68a916dd-66cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3d:6a:0c:5c:0d:20:10:b4:52:07:29:f0:82: de:d9:f4:b0:30:99:e9:9a:7f:1d:24:01:ea:81:34: cb:68:c7:e7:e0:86:20:b2:94:0a:2c:bb:06:d9:cf: ab:dc:c1:b4:1e:7e:80:c1:a8:ea:cd:f2:96:17:9a: dc:e9:4e:c9:b9:04:10:a8:d7:5b:dc:92:7a:48:de: de:dd:83:b3:d1:6d:16:13:4e:0a:3e:31:7b:25:15: 6f:6a:f9:5a:f3:35:95:d7:89:eb:98:1b:5d:43:3f: 1f:61:b6:9a:fb:c3:71:6d:9c:1a:0f:4f:76:a0:26: 99:09:14:41:7e:60:37:74:a1:d4:ec:0e:e9:06:73: 37:11:71:85:05:eb:8e:03:0b:ed:1c:56:4f:43:cc: 08:f5:d4:ba:03:c4:ce:66:bd:bc:2d:b8:4d:e3:ba: cc:79:ce:b7:6c:86:68:92:7b:b8:08:1e:85:b6:5a: 1f:9b:4a:d0:ae:a9:28:83:3a:6a:52:80:e7:ba:c3: af:f7:04:a7:23:6d:82:b0:75:84:ca:2c:2c:9d:62: 79:36:a8:15:28:1a:57:1b:c2:85:dd:fa:43:46:1e: 83:e0:ec:40:69:23:8f:d9:18:64:a2:21:8c:f8:5b: ca:5b:9f:3a:44:66:c6:82:c5:fc:c0:ba:2b:95:27: 1d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:01:93:9D:C4:BF:CA:9C:97:3F:AA:1D:28:48:DE:88:92:0C:E2:DC X509v3 Authority Key Identifier: keyid:D3:C6:22:E7:90:F1:DE:F1:69:28:BB:E5:54:18:17:27:CF:8C:88:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1234/B0FF30FED02511ECA012553FC4F9AE02/08Yi55Dx3vFpKLvlVBgXJ8-MiPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:72:34:80:56:2f:67:8a:83:b0:9b:e1:f8:1e:dd:e2:a0:0b: 35:bc:a1:f1:19:35:b3:f8:b6:71:53:6c:72:b0:40:74:bc:cf: e6:de:6e:54:77:da:c0:80:64:08:dd:f1:81:b1:9d:94:ce:5f: ee:6c:ab:65:60:a4:a2:91:be:ce:ff:85:70:c1:67:8d:4b:9a: 5f:d4:30:bc:95:47:b6:37:53:38:52:00:99:d1:94:18:f5:9b: b9:5e:94:81:95:31:d8:88:80:4b:a2:76:13:0e:78:3c:ea:ca: 61:18:8d:cb:3f:91:cf:16:aa:fe:05:3f:9a:c2:44:6f:96:cd: d4:e5:4a:cc:c3:b3:12:eb:ac:1e:c7:94:ab:8c:60:dc:a4:62: 55:70:af:4c:7d:69:1b:e7:68:6e:f9:f3:ea:4d:81:b7:71:a7: 37:c7:75:2b:78:f4:73:9b:8e:05:01:16:ab:39:ff:7d:bc:e8: 34:37:c7:23:1b:1b:c0:ce:b9:f0:f0:e4:e4:94:19:bc:37:03: 25:b3:f5:3d:0c:fc:ef:6f:77:07:cd:2f:94:fa:e0:f6:07:e2: c3:17:0a:7d:4f:a1:2c:cd:d2:8e:e9:99:cf:92:9a:6f:59:1c: d2:b2:1c:e6:dc:ef:d4:c1:77:57:46:54:90:15:8c:6c:fd:27: a1:05:d4:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMzQxMTAvBgNVBAUTKEQzQzYyMkU3OTBGMURFRjE2OTI4QkJFNTU0MTgxNzI3 Q0Y4Qzg4RjgwHhcNMjUwODIzMDExODIxWhcNMjUwODMwMDExODIxWjAYMRYwFAYD VQQDEw02OGE5MTZkZC02NmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyj1qDFwNIBC0Ugcp8ILe2fSwMJnpmn8dJAHqgTTLaMfn4IYgspQKLLsG2c+r 3MG0Hn6AwajqzfKWF5rc6U7JuQQQqNdb3JJ6SN7e3YOz0W0WE04KPjF7JRVvavla 8zWV14nrmBtdQz8fYbaa+8NxbZwaD092oCaZCRRBfmA3dKHU7A7pBnM3EXGFBeuO AwvtHFZPQ8wI9dS6A8TOZr28LbhN47rMec63bIZoknu4CB6Ftlofm0rQrqkogzpq UoDnusOv9wSnI22CsHWEyiwsnWJ5NqgVKBpXG8KF3fpDRh6D4OxAaSOP2RhkoiGM +FvKW586RGbGgsX8wLorlScdPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYBk53E v8qclz+qHShI3oiSDOLcMB8GA1UdIwQYMBaAFNPGIueQ8d7xaSi75VQYFyfPjIj4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIzNC9CMEZGMzBGRUQw MjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2RnBLTHZsVkJnWEo4LU1p UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA4WWk1NUR4M3ZGcEtMdmxWQmdYSjgtTWlQZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIzNC9CMEZGMzBGRUQwMjUxMUVDQTAxMjU1M0ZDNEY5QUUwMi8wOFlpNTVEeDN2 RnBLTHZsVkJnWEo4LU1pUGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBVcjSAVi9nioOwm+H4Ht3ioAs1vKHxGTWz+LZxU2xysEB0vM/m3m5U d9rAgGQI3fGBsZ2Uzl/ubKtlYKSikb7O/4VwwWeNS5pf1DC8lUe2N1M4UgCZ0ZQY 9Zu5XpSBlTHYiIBLonYTDng86sphGI3LP5HPFqr+BT+awkRvls3U5UrMw7MS66we x5SrjGDcpGJVcK9MfWkb52hu+fPqTYG3cac3x3UrePRzm44FARarOf99vOg0N8cj GxvAzrnw8OTklBm8NwMls/U9DPzvb3cHzS+U+uD2B+LDFwp9T6EszdKO6ZnPkppv WRzSshzm3O/UwXdXRlSQFYxs/SehBdR6 -----END CERTIFICATE-----Generated at Sat Aug 23 18:14:12 2025 by rpki-client