$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft File: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft (raw, json) Hash identifier: XmEZoEMTgf9Mu9rGEmYGfjMyxGkmMFbphHOeP2SlysY= Subject key identifier: 88:AC:A0:FF:DD:34:80:74:1F:A6:E0:07:35:50:15:85:93:76:BB:DB Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Certificate serial: 0188 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft Manifest number: 0184 Signing time: Sat 23 Aug 2025 03:43:25 +0000 Manifest this update: Sat 23 Aug 2025 03:43:24 +0000 Manifest next update: Sat 30 Aug 2025 03:43:24 +0000 Files and hashes: 1: 2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl (hash: swexCFJecQBWsY+x67mRoXhEHXgYIxlJdMcQxuxflVY=) 2: 98DB93A4301011EEA92BE919C4F9AE02.roa (hash: MrKs9S+pIK9ruhlRFpWtUpK3GffZ/Q4iUqs1HpDuQLY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:43:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BDA, serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Validity Not Before: Aug 23 03:43:24 2025 GMT Not After : Aug 30 03:43:24 2025 GMT Subject: CN=68a938dd-a936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d9:56:7f:98:59:32:cb:ad:ec:dd:da:39:69: ab:88:0e:74:74:dc:17:46:f6:fb:b3:49:af:fa:19: d2:58:19:90:15:5e:58:8d:88:5e:30:93:39:ec:9c: 44:31:8b:02:0b:ba:03:f6:ca:90:06:a8:e1:ef:af: 75:8a:5d:54:e3:bc:c5:c9:be:40:e2:b8:03:90:0c: 7c:26:38:53:25:f2:b9:24:4c:08:21:a8:28:c2:9c: bd:74:df:0e:9d:75:05:14:1b:2d:de:c0:a7:10:11: 84:cc:1d:b6:60:4e:4c:2f:63:3f:3d:cb:ed:74:c2: 7d:11:25:ad:93:81:30:6b:40:ef:27:45:07:71:ce: f2:8a:52:e9:1d:5a:c3:15:04:15:89:c7:e4:9e:63: b1:69:17:f4:fe:3e:d4:d7:be:fa:52:0c:60:08:c4: 24:f2:e5:48:0e:6b:28:96:18:df:90:69:67:37:4a: 9f:76:41:77:95:b1:b6:79:8a:71:39:06:d8:35:4f: 04:d3:61:1a:d2:ad:86:7a:fb:ad:4a:34:96:e0:f2: 41:58:2d:1c:0d:23:bb:6f:c9:dc:86:5e:a7:2c:f3: 37:95:07:42:65:9a:14:44:17:d4:20:35:15:d3:41: 30:33:04:62:15:15:30:7f:57:42:84:ca:37:97:84: 32:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AC:A0:FF:DD:34:80:74:1F:A6:E0:07:35:50:15:85:93:76:BB:DB X509v3 Authority Key Identifier: keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:5f:4d:47:a9:da:4b:de:84:37:68:ba:f0:9f:ee:f1:26:11: d0:75:43:ea:12:1f:c5:19:8a:44:0c:11:05:7d:ae:4b:d2:fa: cb:7a:cb:3a:49:ea:56:0a:39:99:76:d2:bd:b1:42:ab:d8:09: 54:8a:cc:00:f5:3b:24:19:e1:88:ad:f6:1b:68:df:fe:82:37: 11:1d:98:de:9d:69:01:35:0e:84:00:36:a5:54:f9:0e:61:14: b4:49:ca:67:60:5d:7b:a7:8e:71:b3:8d:a3:eb:d6:a7:77:4a: 3a:85:f0:2e:3b:26:eb:fc:a8:5e:40:9d:dc:cf:b4:b5:19:1d: 1e:74:56:86:03:33:e9:3e:53:85:da:a8:9f:d2:43:87:99:99: a6:96:3c:0c:4b:44:54:a6:cc:e3:70:81:e8:66:e2:70:6e:a6: 76:4f:1e:47:6b:f7:c0:f9:dc:dd:b2:39:84:96:34:59:04:1f: 20:fb:57:22:fb:4f:24:1b:50:68:46:3b:1e:3b:13:00:f2:e9: 4a:80:99:37:60:f7:6b:3b:0e:da:33:d0:3d:86:7f:eb:47:4c: 9c:56:8f:3e:c6:ae:56:5a:83:d6:09:70:6f:af:23:a3:b5:b8: 9d:3c:e3:99:3a:88:f5:b9:6b:76:8e:88:4c:a0:bf:4e:64:09: 9d:22:64:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCREExMTAvBgNVBAUTKEQ4QUYwN0Q0M0E5QjhCQkI4MUQ2MEU0QzE3N0VBODE4 RUM4QjczRTUwHhcNMjUwODIzMDM0MzI0WhcNMjUwODMwMDM0MzI0WjAYMRYwFAYD VQQDEw02OGE5MzhkZC1hOTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0tlWf5hZMsut7N3aOWmriA50dNwXRvb7s0mv+hnSWBmQFV5YjYheMJM57JxE MYsCC7oD9sqQBqjh7691il1U47zFyb5A4rgDkAx8JjhTJfK5JEwIIagowpy9dN8O nXUFFBst3sCnEBGEzB22YE5ML2M/PcvtdMJ9ESWtk4Ewa0DvJ0UHcc7yilLpHVrD FQQVicfknmOxaRf0/j7U1776UgxgCMQk8uVIDmsolhjfkGlnN0qfdkF3lbG2eYpx OQbYNU8E02Ea0q2GevutSjSW4PJBWC0cDSO7b8nchl6nLPM3lQdCZZoURBfUIDUV 00EwMwRiFRUwf1dChMo3l4QyOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIisoP/d NIB0H6bgBzVQFYWTdrvbMB8GA1UdIwQYMBaAFNivB9Q6m4u7gdYOTBd+qBjsi3Pl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJEQS9GNzNGMjBBNjMw MEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3dUIxZzVNRjM2b0dPeUxj LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLOEgxRHFiaTd1QjFnNU1GMzZvR095TGMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJEQS9GNzNGMjBBNjMwMEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3 dUIxZzVNRjM2b0dPeUxjLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHX01HqdpL3oQ3aLrwn+7xJhHQdUPqEh/FGYpEDBEFfa5L0vrLess6 SepWCjmZdtK9sUKr2AlUiswA9TskGeGIrfYbaN/+gjcRHZjenWkBNQ6EADalVPkO YRS0ScpnYF17p45xs42j69and0o6hfAuOybr/KheQJ3cz7S1GR0edFaGAzPpPlOF 2qif0kOHmZmmljwMS0RUpszjcIHoZuJwbqZ2Tx5Ha/fA+dzdsjmEljRZBB8g+1ci +08kG1BoRjseOxMA8ulKgJk3YPdrOw7aM9A9hn/rR0ycVo8+xq5WWoPWCXBvryOj tbidPOOZOoj1uWt2johMoL9OZAmdImQd -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:36 2025 by rpki-client