$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft File: a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json) Hash identifier: pgG2MBid7F+R1DIzuKicvReSinfe7t72miOs8q0rTRk= Subject key identifier: 7E:AC:78:2D:0B:CD:71:4C:15:3F:CC:3E:1B:8C:A1:E3:C2:A2:A0:51 Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70 Certificate issuer: /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70 Certificate serial: 070E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft Manifest number: 0708 Signing time: Fri 22 Aug 2025 22:01:37 +0000 Manifest this update: Fri 22 Aug 2025 22:01:37 +0000 Manifest next update: Fri 29 Aug 2025 22:01:37 +0000 Files and hashes: 1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: RgnUj7WKfSVjM27h9tM2Yxe2d1poClGUUbgGZCis6to=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1806 (0x70e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70 Validity Not Before: Aug 22 22:01:37 2025 GMT Not After : Aug 29 22:01:37 2025 GMT Subject: CN=68a8e8c1-d422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:37:e9:09:6c:8d:bd:55:df:55:49:b8:8f:fe: 64:9d:0d:c6:1b:77:47:00:ed:54:88:b7:ce:1f:4e: 65:e6:c3:4e:ca:52:27:ed:56:40:de:dd:f3:18:ea: 47:38:6f:2c:97:0f:0e:68:c4:d0:8c:9f:2b:10:19: 53:23:18:9e:cd:b7:7e:0b:4a:53:de:02:8a:be:88: 77:66:a9:eb:7b:b1:1e:81:ac:f0:80:58:0f:02:29: 99:57:98:e6:ad:26:42:a4:da:95:fc:7e:40:f2:31: 72:14:44:b7:05:2d:75:93:5b:fb:0f:62:e2:f0:15: 0a:4e:0b:38:ac:64:eb:a4:e2:bf:f0:40:e6:41:3a: 74:0e:c7:97:7d:85:a9:36:61:b5:22:fb:a8:24:09: a6:0d:68:b9:0d:52:b4:e4:16:93:02:a2:a5:bc:e2: 2d:55:3b:3e:92:e9:60:cd:2b:f5:d7:1d:ac:95:25: 0f:da:b5:71:43:28:f7:f4:02:52:3c:f5:7e:4e:0a: 19:a8:be:b5:69:e6:80:dc:c7:35:db:e1:a2:5a:7c: c5:c3:a1:8d:1d:17:e9:ca:72:30:f9:2e:0b:de:c9: fe:da:63:6f:80:37:93:cc:be:0d:6a:61:e9:c0:65: 10:21:12:e5:26:fc:71:6e:e2:e2:7e:80:ec:ef:83: 85:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AC:78:2D:0B:CD:71:4C:15:3F:CC:3E:1B:8C:A1:E3:C2:A2:A0:51 X509v3 Authority Key Identifier: keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:d5:0b:bb:6d:9c:4c:8f:ec:ab:d0:f8:f8:ff:82:dd:dd:ad: 34:f6:4f:59:aa:c5:cd:3d:67:0b:ea:12:34:e0:41:5b:3c:b4: 16:19:ad:8d:60:3c:e0:91:8f:86:40:fc:25:70:5c:c5:e9:2e: 06:e1:f0:85:83:1a:84:ff:c6:a1:aa:4d:0a:ec:46:9b:13:4b: f8:2d:9d:78:41:f3:50:b0:e0:27:d6:c1:de:ca:18:f8:83:0f: 72:aa:de:4e:d2:cf:d9:e9:a6:1f:85:83:ee:ab:67:7f:25:fe: 99:04:96:a4:45:c5:5e:4f:83:64:97:b1:7e:d7:a6:13:7e:91: 72:45:c5:82:ef:c6:75:2a:92:0d:65:2a:5b:f3:fa:c3:f2:a0: 0f:57:c2:32:c4:01:14:19:01:9b:40:c6:4e:35:fc:f8:47:39: 2f:ea:a1:68:7e:e4:9b:a1:d7:c1:51:76:af:e1:66:40:e8:4c: 22:af:59:f5:27:b4:2b:5d:19:4d:07:9f:fe:9a:46:c6:52:04: 64:d3:a9:cb:b1:2b:55:bb:53:e7:5a:d0:8b:23:05:c1:f0:7e: 81:37:86:39:7f:7a:51:ab:1e:af:51:3c:fc:6a:9a:f4:df:fd: 00:ea:79:e4:6d:e6:f6:36:c3:7a:52:80:d9:f6:c1:7e:76:91: c2:2d:0c:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGOTMxMTAvBgNVBAUTKDZCQzI2M0I1MUE1NkI1MTc0MDc3NzQ1OTc5NjIyN0VE MDBERjRENzAwHhcNMjUwODIyMjIwMTM3WhcNMjUwODI5MjIwMTM3WjAYMRYwFAYD VQQDEw02OGE4ZThjMS1kNDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3zfpCWyNvVXfVUm4j/5knQ3GG3dHAO1UiLfOH05l5sNOylIn7VZA3t3zGOpH OG8slw8OaMTQjJ8rEBlTIxiezbd+C0pT3gKKvoh3Zqnre7EegazwgFgPAimZV5jm rSZCpNqV/H5A8jFyFES3BS11k1v7D2Li8BUKTgs4rGTrpOK/8EDmQTp0DseXfYWp NmG1IvuoJAmmDWi5DVK05BaTAqKlvOItVTs+kulgzSv11x2slSUP2rVxQyj39AJS PPV+TgoZqL61aeaA3Mc12+GiWnzFw6GNHRfpynIw+S4L3sn+2mNvgDeTzL4NamHp wGUQIRLlJvxxbuLifoDs74OFqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH6seC0L zXFMFT/MPhuMoePCoqBRMB8GA1UdIwQYMBaAFGvCY7UaVrUXQHd0WXliJ+0A301w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkY5My82OTk5Rjc4RTUy NDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RSZEFkM1JaZVdJbjdRRGZU WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E4Smp0UnBXdFJkQWQzUlplV0luN1FEZlRYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkY5My82OTk5Rjc4RTUyNDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RS ZEFkM1JaZVdJbjdRRGZUWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu1Qu7bZxMj+yr0Pj4/4Ld3a009k9ZqsXNPWcL6hI04EFbPLQWGa2N YDzgkY+GQPwlcFzF6S4G4fCFgxqE/8ahqk0K7EabE0v4LZ14QfNQsOAn1sHeyhj4 gw9yqt5O0s/Z6aYfhYPuq2d/Jf6ZBJakRcVeT4Nkl7F+16YTfpFyRcWC78Z1KpIN ZSpb8/rD8qAPV8IyxAEUGQGbQMZONfz4Rzkv6qFofuSbodfBUXav4WZA6Ewir1n1 J7QrXRlNB5/+mkbGUgRk06nLsStVu1PnWtCLIwXB8H6BN4Y5f3pRqx6vUTz8apr0 3/0A6nnkbeb2NsN6UoDZ9sF+dpHCLQxx -----END CERTIFICATE-----Generated at Sat Aug 23 19:25:49 2025 by rpki-client