$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft File: g-S8t2O4ztA2UZDnKA8KajSzW1E.mft (raw, json) Hash identifier: nNr8irh6c4xCUnypQRQT50meHF2JlDYHVTmquIpGKb0= Subject key identifier: AF:72:62:A6:C3:F7:29:E3:87:53:10:1A:EF:94:A4:42:BA:4F:07:FC Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 Certificate issuer: /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Certificate serial: 010D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft Manifest number: 0109 Signing time: Sat 23 Aug 2025 05:11:21 +0000 Manifest this update: Sat 23 Aug 2025 05:11:20 +0000 Manifest next update: Sat 30 Aug 2025 05:11:20 +0000 Files and hashes: 1: g-S8t2O4ztA2UZDnKA8KajSzW1E.crl (hash: WFms3PhIywfNG6fDK/kywyk4CbqbBHpVdY/BXK9/LM0=) 2: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (hash: Vp6oIV4Kwe3FgHjDClftctReHYiAIs5p4BPX7qetipE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 269 (0x10d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4A3A, serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Validity Not Before: Aug 23 05:11:20 2025 GMT Not After : Aug 30 05:11:20 2025 GMT Subject: CN=68a94d78-1b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:81:be:9c:79:64:85:d8:15:e3:c1:24:f6:a1: 93:30:8a:2b:1a:fc:29:1b:b3:50:75:2a:49:4b:79: 12:b3:4c:e1:28:4d:6e:3b:75:59:c5:53:8f:11:9c: 93:4d:dd:88:fd:2d:4f:d5:e8:a5:f8:cb:82:a2:b7: 6d:f6:84:45:b5:82:1f:c3:a4:a9:5d:a5:97:a8:4d: bb:35:06:1c:1c:ab:97:87:23:bf:94:a7:41:b7:64: 42:fa:a7:67:32:d2:fd:eb:27:f1:72:28:18:ae:7e: d7:8b:6c:9e:82:55:e8:e3:4d:39:99:0d:e0:e5:95: 75:b1:cf:33:41:43:ff:b2:87:2a:eb:e9:3f:55:de: b4:5a:81:ee:aa:34:a2:cd:9e:5f:ab:19:11:cc:18: d6:8d:39:23:28:db:69:f1:f5:9f:e8:18:8d:01:4a: 78:3f:34:c6:a4:24:46:03:f2:7f:4d:28:2a:f9:b6: 01:e0:e3:48:18:c7:fb:ce:f8:39:c5:a5:78:f2:d6: a8:f7:bf:8b:8f:92:cd:88:4c:92:b2:16:87:12:af: 6d:74:55:8c:82:9a:76:25:36:68:95:69:4e:83:5e: 5d:47:8a:c7:de:63:43:12:ee:a9:cc:5f:b6:bc:55: 47:ab:2d:bf:31:7e:c3:41:d8:7f:c6:f0:8a:e9:b2: c8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:72:62:A6:C3:F7:29:E3:87:53:10:1A:EF:94:A4:42:BA:4F:07:FC X509v3 Authority Key Identifier: keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3d:50:e1:01:76:3f:4d:e4:99:a4:46:84:c9:df:4f:5a:77: 40:e7:3f:23:d2:f6:dd:8e:47:63:e6:53:d2:0c:b5:66:70:cd: 98:3e:ae:10:c3:14:53:d2:37:47:7b:bf:f8:de:2b:b6:94:a3: 47:6e:df:16:b6:66:8c:0b:72:3a:f4:7c:b1:8c:62:51:fe:0e: 35:4f:a7:81:04:f4:d8:a8:90:55:a8:e8:28:cb:fc:27:d4:54: ee:10:b2:aa:08:f0:df:ad:4b:90:dc:52:70:4b:d9:77:6e:2c: f2:6e:17:25:28:f7:ff:c8:2b:02:89:84:00:0e:c2:87:2a:70: ea:33:ee:9c:eb:1b:3d:36:c5:af:0d:4e:52:6c:2e:71:53:d0: ef:45:bb:f8:0b:1e:5e:e3:a0:c7:08:91:90:71:37:b3:90:d6: 8b:f1:f0:57:bf:6d:b7:36:fc:b2:7f:5a:e0:cb:2b:ab:10:b4: 19:c2:2c:d9:2d:e5:63:1e:3e:6c:e2:4e:10:eb:3c:59:87:c0: c2:68:b5:7e:18:1d:0f:3f:2e:44:b1:de:92:8b:a4:9b:cf:32: 3a:e7:20:ff:0b:ca:db:72:b2:ac:8e:e5:80:08:d5:c5:eb:6d: 3e:a0:a9:2d:71:98:4f:2c:92:1f:fc:09:af:84:f6:bb:7d:a3: 2d:64:32:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBM0ExMTAvBgNVBAUTKDgzRTRCQ0I3NjNCOENFRDAzNjUxOTBFNzI4MEYwQTZB MzRCMzVCNTEwHhcNMjUwODIzMDUxMTIwWhcNMjUwODMwMDUxMTIwWjAYMRYwFAYD VQQDEw02OGE5NGQ3OC0xYjYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoG+nHlkhdgV48Ek9qGTMIorGvwpG7NQdSpJS3kSs0zhKE1uO3VZxVOPEZyT Td2I/S1P1eil+MuCordt9oRFtYIfw6SpXaWXqE27NQYcHKuXhyO/lKdBt2RC+qdn MtL96yfxcigYrn7Xi2yeglXo4005mQ3g5ZV1sc8zQUP/socq6+k/Vd60WoHuqjSi zZ5fqxkRzBjWjTkjKNtp8fWf6BiNAUp4PzTGpCRGA/J/TSgq+bYB4ONIGMf7zvg5 xaV48tao97+Lj5LNiEySshaHEq9tdFWMgpp2JTZolWlOg15dR4rH3mNDEu6pzF+2 vFVHqy2/MX7DQdh/xvCK6bLIzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9yYqbD 9ynjh1MQGu+UpEK6Twf8MB8GA1UdIwQYMBaAFIPkvLdjuM7QNlGQ5ygPCmo0s1tR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEEzQS8xODE0RjM2NkVD QjUxMUVFQTQ2NTAzMzdDNEY5QUUwMi9nLVM4dDJPNHp0QTJVWkRuS0E4S2FqU3pX MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ctUzh0Mk80enRBMlVaRG5LQThLYWpTelcxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEEzQS8xODE0RjM2NkVDQjUxMUVFQTQ2NTAzMzdDNEY5QUUwMi9nLVM4dDJPNHp0 QTJVWkRuS0E4S2FqU3pXMUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaPVDhAXY/TeSZpEaEyd9PWndA5z8j0vbdjkdj5lPSDLVmcM2YPq4Q wxRT0jdHe7/43iu2lKNHbt8WtmaMC3I69HyxjGJR/g41T6eBBPTYqJBVqOgoy/wn 1FTuELKqCPDfrUuQ3FJwS9l3bizybhclKPf/yCsCiYQADsKHKnDqM+6c6xs9NsWv DU5SbC5xU9DvRbv4Cx5e46DHCJGQcTezkNaL8fBXv223Nvyyf1rgyyurELQZwizZ LeVjHj5s4k4Q6zxZh8DCaLV+GB0PPy5Esd6Si6SbzzI65yD/C8rbcrKsjuWACNXF 620+oKktcZhPLJIf/AmvhPa7faMtZDLq -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:24 2025 by rpki-client