$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft File: 8XiofFRzBDe6WfqpzhhP-HkP5PE.mft (raw, json) Hash identifier: GA0Eqh9DHyJhiSfTYwDBEUWS3sxQxFVVe0Fw6tMBOpo= Subject key identifier: 16:DC:51:9C:B7:FD:E9:C9:02:DB:6D:F8:C0:C9:39:82:F8:18:EC:B6 Authority key identifier: F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1 Certificate issuer: /CN=A91D6792/serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1 Certificate serial: 0501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft Manifest number: 04FC Signing time: Fri 22 Aug 2025 23:52:47 +0000 Manifest this update: Fri 22 Aug 2025 23:52:46 +0000 Manifest next update: Fri 29 Aug 2025 23:52:46 +0000 Files and hashes: 1: 8XiofFRzBDe6WfqpzhhP-HkP5PE.crl (hash: XrPPsUGvj0H657aKkwQoSNDf3nynRvyWKb7u6mmyhhc=) 2: CB89040A73EA11EC8A823312C4F9AE02.roa (hash: 6pWGQwdhpFKj5uyRVvtM8M7iiAHBMFerXsGqI0l0KTo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:52:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1281 (0x501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6792, serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1 Validity Not Before: Aug 22 23:52:46 2025 GMT Not After : Aug 29 23:52:46 2025 GMT Subject: CN=68a902ce-91e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ba:71:bb:09:0c:61:4c:47:a6:30:6d:16:ac: b1:5e:26:96:a2:df:bb:52:65:28:51:f7:7d:5b:a8: 82:90:0f:e5:f7:3e:61:b4:bf:9d:3a:e1:86:46:c9: 4f:7c:92:2d:2d:a6:a2:e5:3e:b2:9d:b7:31:63:fd: f8:0a:63:cf:8c:05:cc:91:30:61:78:0c:5c:be:bd: 73:4a:f1:49:c8:46:09:be:bb:ed:b9:f0:53:3d:2b: 07:4f:b1:97:16:13:23:07:e4:62:45:a3:7c:d7:eb: 1d:09:10:95:67:b3:58:83:3b:1f:85:c2:8b:1c:a5: c0:50:84:cf:0a:ec:e6:f3:12:72:f0:7e:cd:16:37: 4d:ab:d0:5c:0b:aa:78:1e:fe:16:a0:e5:48:8f:49: 04:1c:d4:61:e1:13:65:e5:1c:5b:3a:4e:89:14:81: c2:73:82:01:ca:a3:c4:78:8e:c5:66:42:e6:be:3a: f4:e8:dd:73:1c:89:14:ea:d5:f8:1b:0e:36:fa:c2: fb:17:e7:ec:35:2e:67:c7:6b:40:2f:70:07:ac:91: 5f:8c:33:27:48:5b:3c:53:71:3d:07:f2:1e:53:92: 01:b9:4b:c6:a9:c7:cd:a7:8b:03:12:8d:f7:96:9d: fd:a6:5b:50:e9:14:0f:eb:67:57:b0:cc:01:1b:bc: fb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DC:51:9C:B7:FD:E9:C9:02:DB:6D:F8:C0:C9:39:82:F8:18:EC:B6 X509v3 Authority Key Identifier: keyid:F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:83:81:58:fc:64:1d:83:c0:27:29:b7:4f:76:63:8d:61:05: 44:6a:b9:69:af:15:33:91:b1:89:8b:c8:b5:a3:75:ab:0a:0b: 39:9a:c2:e3:2a:92:f3:f2:cd:4c:46:e1:67:8f:79:2b:19:40: 69:09:3a:54:29:ee:91:6b:1c:be:b2:e3:42:23:75:e5:57:cd: 89:4f:f6:ad:d1:e2:7a:23:50:18:9a:f2:f8:0d:35:f4:48:30: 4e:08:94:36:13:75:ab:b0:99:68:db:d3:b4:47:7d:f2:d2:06: 14:c5:ac:28:4a:79:32:46:e5:f7:dc:cf:da:6c:de:46:b3:78: 56:97:d8:d8:4c:89:66:0e:fa:88:7f:e4:fb:5f:b8:5d:b6:90: cc:2d:12:c1:8f:9f:e8:95:7b:a7:5c:5e:e9:ae:73:42:77:e6: 70:d1:11:55:6c:76:ad:e9:17:20:07:71:ca:75:3a:4d:db:64: 3b:12:01:c3:eb:ad:4d:74:44:97:ff:9a:eb:33:59:f6:18:b9: 9b:fb:65:c0:4d:f5:9c:1b:70:98:fe:39:83:b2:d2:08:c8:cb: cb:d2:73:11:d9:c5:b0:34:69:2b:ff:ee:99:93:96:5a:9c:d2: 60:af:9b:92:ef:9d:d3:48:08:7e:03:b7:26:a8:d3:08:76:86: 57:e4:9b:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY3OTIxMTAvBgNVBAUTKEYxNzhBODdDNTQ3MzA0MzdCQTU5RkFBOUNFMTg0RkY4 NzkwRkU0RjEwHhcNMjUwODIyMjM1MjQ2WhcNMjUwODI5MjM1MjQ2WjAYMRYwFAYD VQQDEw02OGE5MDJjZS05MWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLpxuwkMYUxHpjBtFqyxXiaWot+7UmUoUfd9W6iCkA/l9z5htL+dOuGGRslP fJItLaai5T6ynbcxY/34CmPPjAXMkTBheAxcvr1zSvFJyEYJvrvtufBTPSsHT7GX FhMjB+RiRaN81+sdCRCVZ7NYgzsfhcKLHKXAUITPCuzm8xJy8H7NFjdNq9BcC6p4 Hv4WoOVIj0kEHNRh4RNl5RxbOk6JFIHCc4IByqPEeI7FZkLmvjr06N1zHIkU6tX4 Gw42+sL7F+fsNS5nx2tAL3AHrJFfjDMnSFs8U3E9B/IeU5IBuUvGqcfNp4sDEo33 lp39pltQ6RQP62dXsMwBG7z7NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBbcUZy3 /enJAttt+MDJOYL4GOy2MB8GA1UdIwQYMBaAFPF4qHxUcwQ3uln6qc4YT/h5D+Tx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjc5Mi9EQkYxQzc3MjIx RUQxMUVDQkU5QzlBMUNDNEY5QUUwMi84WGlvZkZSekJEZTZXZnFwemhoUC1Ia1A1 UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhYaW9mRlJ6QkRlNldmcXB6aGhQLUhrUDVQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Njc5Mi9EQkYxQzc3MjIxRUQxMUVDQkU5QzlBMUNDNEY5QUUwMi84WGlvZkZSekJE ZTZXZnFwemhoUC1Ia1A1UEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsg4FY/GQdg8AnKbdPdmONYQVEarlprxUzkbGJi8i1o3WrCgs5msLj KpLz8s1MRuFnj3krGUBpCTpUKe6Raxy+suNCI3XlV82JT/at0eJ6I1AYmvL4DTX0 SDBOCJQ2E3WrsJlo29O0R33y0gYUxawoSnkyRuX33M/abN5Gs3hWl9jYTIlmDvqI f+T7X7hdtpDMLRLBj5/olXunXF7prnNCd+Zw0RFVbHat6RcgB3HKdTpN22Q7EgHD 661NdESX/5rrM1n2GLmb+2XATfWcG3CY/jmDstIIyMvL0nMR2cWwNGkr/+6Zk5Za nNJgr5uS753TSAh+A7cmqNMIdoZX5Jug -----END CERTIFICATE-----Generated at Sat Aug 23 16:24:11 2025 by rpki-client