$ rpki-client -vvf rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft File: 8bZbeXYWOXNS7L1KLHdPz37G1HA.mft (raw, json) Hash identifier: curIl6JuvlkCX8YhOK9BO4xclomkklrCtelRQkkMXdk= Subject key identifier: E9:E7:BF:D6:FD:2F:55:E4:DE:35:8C:99:F0:D7:8D:B7:44:FE:AC:EB Authority key identifier: F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70 Certificate issuer: /CN=A91D14EF/serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470 Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft Manifest number: 0680 Signing time: Fri 22 Aug 2025 22:32:06 +0000 Manifest this update: Fri 22 Aug 2025 22:32:06 +0000 Manifest next update: Fri 29 Aug 2025 22:32:06 +0000 Files and hashes: 1: 8bZbeXYWOXNS7L1KLHdPz37G1HA.crl (hash: 87qRvfu5se/fdJd/uyvJ/cIaQFUuwT25jVfm3pxNgBQ=) 2: 226402B0860D11EB8F541B68C4F9AE02.roa (hash: oKHV5TBmq4GqrFfr2VIYxjHb/BXfTV1fp7LSb6WOO9s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D14EF, serialNumber=F1B65B797616397352ECBD4A2C774FCF7EC6D470 Validity Not Before: Aug 22 22:32:06 2025 GMT Not After : Aug 29 22:32:06 2025 GMT Subject: CN=68a8efe6-3bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c3:b7:4e:3b:b0:b7:40:2c:24:c4:84:a5:74: 8d:94:43:d8:88:25:c6:b0:be:34:4f:ef:d7:32:9f: 59:01:64:14:3c:c0:87:01:e4:f6:3e:26:0d:0f:5e: eb:3d:ad:02:aa:dd:ac:ed:df:91:15:14:19:42:82: 8c:d5:0b:27:da:f5:82:65:f6:9b:25:6c:de:2a:17: 53:48:0d:41:4c:22:ef:af:a9:6a:eb:c9:45:1c:85: e7:f4:c4:d2:19:20:f0:ae:f5:36:30:e9:f8:82:fd: 74:3b:12:03:8c:b7:e8:88:06:55:8e:46:b9:ee:89: af:4e:7a:12:34:fe:49:1a:10:8b:5a:0b:3e:23:62: ea:70:f1:5c:e6:8c:b0:bc:e6:fd:cc:fd:02:e4:8f: 9c:bb:4f:01:bc:af:44:b2:d8:47:a7:a5:20:23:e2: 84:b0:2f:0d:e7:7e:28:0d:f4:0d:cc:b5:ae:e6:80: 76:6c:3c:d7:d7:ea:76:02:28:da:e5:3a:06:91:ca: 87:c7:c5:b7:61:3c:a3:8e:be:fd:1f:3e:37:d2:7a: e4:08:99:26:f8:ff:54:8f:ee:f1:d4:2c:ab:1c:75: 9b:f9:73:e4:f8:14:46:c7:40:9e:62:ec:af:f7:af: 85:32:08:e2:7f:12:34:d5:1d:b5:7b:f7:5f:5e:6f: e0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E7:BF:D6:FD:2F:55:E4:DE:35:8C:99:F0:D7:8D:B7:44:FE:AC:EB X509v3 Authority Key Identifier: keyid:F1:B6:5B:79:76:16:39:73:52:EC:BD:4A:2C:77:4F:CF:7E:C6:D4:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bZbeXYWOXNS7L1KLHdPz37G1HA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D14EF/26401006860B11EB91C12D63C4F9AE02/8bZbeXYWOXNS7L1KLHdPz37G1HA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:8d:1f:78:99:87:f1:80:6f:c4:21:86:df:96:e2:13:ad:8d: b2:47:ac:8c:61:e5:57:84:89:e2:31:93:89:d5:06:1f:ef:e5: a4:83:7c:e8:fd:d0:f6:35:b7:61:22:7b:0d:cd:e5:54:7d:67: f8:22:99:f1:5b:63:12:e2:30:fa:62:f3:d1:e7:71:0f:b8:0e: 21:9d:6a:4e:15:f0:62:a3:ec:5b:29:6a:42:94:4c:b9:62:a0: eb:9a:26:f3:fd:b6:4c:71:37:7d:6e:dc:5d:e0:f7:f2:34:38: 80:b8:41:84:82:c7:bc:ad:b0:ed:fa:1a:71:c2:66:e8:11:ed: b7:b6:68:35:bc:04:d8:b8:ef:3c:4c:5f:70:0d:b9:f0:8d:10: ef:f7:df:7b:51:cd:4d:c0:12:3f:36:0c:8e:8e:0e:c2:c8:91: e9:66:8f:f0:c6:c0:42:51:4d:99:65:1d:36:41:33:1a:38:28: 6a:cc:84:b8:90:64:53:6e:0e:dd:85:36:89:05:b0:72:5c:88: 7f:29:52:f8:a8:94:45:49:97:c9:ef:f7:be:3d:8a:c8:74:d9: a9:c7:c8:bc:8e:70:e5:7e:e7:b4:5e:1e:f6:d0:13:9a:3d:51: fc:c1:09:d1:8f:f7:8c:fc:e6:3c:5f:87:46:51:50:3d:ce:63: df:50:27:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE0RUYxMTAvBgNVBAUTKEYxQjY1Qjc5NzYxNjM5NzM1MkVDQkQ0QTJDNzc0RkNG N0VDNkQ0NzAwHhcNMjUwODIyMjIzMjA2WhcNMjUwODI5MjIzMjA2WjAYMRYwFAYD VQQDEw02OGE4ZWZlNi0zYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cO3Tjuwt0AsJMSEpXSNlEPYiCXGsL40T+/XMp9ZAWQUPMCHAeT2PiYND17r Pa0Cqt2s7d+RFRQZQoKM1Qsn2vWCZfabJWzeKhdTSA1BTCLvr6lq68lFHIXn9MTS GSDwrvU2MOn4gv10OxIDjLfoiAZVjka57omvTnoSNP5JGhCLWgs+I2LqcPFc5oyw vOb9zP0C5I+cu08BvK9EsthHp6UgI+KEsC8N534oDfQNzLWu5oB2bDzX1+p2Aija 5ToGkcqHx8W3YTyjjr79Hz430nrkCJkm+P9Uj+7x1CyrHHWb+XPk+BRGx0CeYuyv 96+FMgjifxI01R21e/dfXm/g0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOnnv9b9 L1Xk3jWMmfDXjbdE/qzrMB8GA1UdIwQYMBaAFPG2W3l2FjlzUuy9Six3T89+xtRw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTRFRi8yNjQwMTAwNjg2 MEIxMUVCOTFDMTJENjNDNEY5QUUwMi84YlpiZVhZV09YTlM3TDFLTEhkUHozN0cx SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiWmJlWFlXT1hOUzdMMUtMSGRQejM3RzFIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTRFRi8yNjQwMTAwNjg2MEIxMUVCOTFDMTJENjNDNEY5QUUwMi84YlpiZVhZV09Y TlM3TDFLTEhkUHozN0cxSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTjR94mYfxgG/EIYbfluITrY2yR6yMYeVXhIniMZOJ1QYf7+Wkg3zo /dD2NbdhInsNzeVUfWf4IpnxW2MS4jD6YvPR53EPuA4hnWpOFfBio+xbKWpClEy5 YqDrmibz/bZMcTd9btxd4PfyNDiAuEGEgse8rbDt+hpxwmboEe23tmg1vATYuO88 TF9wDbnwjRDv9997Uc1NwBI/NgyOjg7CyJHpZo/wxsBCUU2ZZR02QTMaOChqzIS4 kGRTbg7dhTaJBbByXIh/KVL4qJRFSZfJ7/e+PYrIdNmpx8i8jnDlfue0Xh720BOa PVH8wQnRj/eM/OY8X4dGUVA9zmPfUCeU -----END CERTIFICATE-----Generated at Sat Aug 23 16:36:55 2025 by rpki-client