$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft File: s8iROAA2kV3l6qhM8TOrOzWz6dM.mft (raw, json) Hash identifier: bPNqBk2c1pX1K0liJoxGX+tEkdhlu2Z+hie+dTVfEPI= Subject key identifier: 02:7A:D7:55:7B:7F:97:80:88:A7:AE:FE:65:F1:AE:55:00:7C:FF:BC Authority key identifier: B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 Certificate issuer: /CN=A91D891D/serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Certificate serial: 0799 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft Manifest number: 0CAF Signing time: Fri 22 Aug 2025 21:35:11 +0000 Manifest this update: Fri 22 Aug 2025 21:35:10 +0000 Manifest next update: Fri 29 Aug 2025 21:35:10 +0000 Files and hashes: 1: s8iROAA2kV3l6qhM8TOrOzWz6dM.crl (hash: T82ACfIinoC+0dKIlSqSihVRddMiyjIrbtfqkk22S1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:35:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1945 (0x799) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D891D, serialNumber=B3C891380036915DE5EAA84CF133AB3B35B3E9D3 Validity Not Before: Aug 22 21:35:10 2025 GMT Not After : Aug 29 21:35:10 2025 GMT Subject: CN=68a8e28e-31e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0d:e1:62:62:15:8d:99:7d:ab:43:4d:9b:5b: c7:b6:37:2e:b3:47:3e:0a:4a:8c:33:ac:38:3b:ab: e4:2b:e3:9c:3f:f4:62:d6:6f:45:08:c1:6c:be:33: a5:5f:d6:58:05:67:f1:2b:2b:13:55:d1:fd:bf:9a: c3:f9:65:8e:d6:80:a2:6c:a7:61:3b:14:71:f6:4f: dc:f9:2c:c8:0b:1c:52:44:31:10:62:60:6c:17:44: 18:88:2e:6b:f8:7c:80:aa:53:fd:1a:ec:92:61:09: 4a:32:44:b4:1c:73:c2:88:db:c2:f9:f7:3a:8d:4c: c6:97:92:0a:95:47:ff:9b:0a:7b:f4:06:48:0e:66: 82:51:3c:82:a0:0a:c1:e8:f9:fe:3a:96:07:31:d7: 3d:a6:26:7f:b7:28:08:4a:5e:63:ba:44:87:ee:86: c0:ef:48:bb:28:29:0a:8e:e2:f2:83:55:6e:55:21: 9d:f1:ef:21:d2:a6:bc:a0:77:de:dc:f1:44:71:0d: 56:88:65:3d:90:56:a1:93:28:ca:ab:0f:24:ff:39: b0:a1:b9:ea:7a:01:22:e5:df:30:89:02:8a:8c:a5: a6:81:94:70:6e:68:59:8b:8b:e2:50:9c:80:59:82: 4b:99:cd:21:a8:24:c9:f9:fe:8c:b8:be:4c:10:51: fc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7A:D7:55:7B:7F:97:80:88:A7:AE:FE:65:F1:AE:55:00:7C:FF:BC X509v3 Authority Key Identifier: keyid:B3:C8:91:38:00:36:91:5D:E5:EA:A8:4C:F1:33:AB:3B:35:B3:E9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8iROAA2kV3l6qhM8TOrOzWz6dM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/s8iROAA2kV3l6qhM8TOrOzWz6dM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:af:66:8e:87:4e:a5:cc:76:34:a0:bb:ae:8d:17:f8:0d:d9: 59:5b:6b:d6:dd:8d:fa:29:aa:ce:0f:75:c3:0b:3d:e6:a0:57: 56:67:e6:cc:1b:ab:69:56:9f:9a:2a:19:cf:c5:84:a4:12:71: 84:33:97:0e:df:04:31:fe:28:d0:a2:89:6e:29:47:20:6e:6d: a2:e2:f1:f1:53:e1:b3:12:f3:f3:20:2c:ee:8a:a5:9e:ca:6b: 12:71:58:ab:56:13:29:bc:78:96:f1:38:40:d9:71:65:e5:2f: d2:77:28:74:7d:ca:14:db:4c:66:94:ad:52:64:50:bd:aa:b4: 4b:46:3b:a8:8b:3b:f8:7a:7f:f7:5e:b5:f8:cf:0a:ec:3c:6e: 47:1d:3b:4d:94:51:3a:cc:e0:d2:0c:05:ed:66:c8:b0:dd:66: dc:1d:1a:d4:a8:8e:76:14:d1:38:e9:57:a6:e7:9c:80:d6:bd: bb:d9:e5:b9:74:09:75:a1:6b:be:9d:5e:04:af:59:fc:ce:09: 0b:e4:ff:d1:46:a1:00:00:67:8d:b4:d0:3c:23:01:d0:80:d4: 2d:5f:2c:dc:2f:da:0f:cc:63:bd:ad:79:b5:d9:68:3f:aa:19: 94:61:7f:ba:0d:a1:ff:eb:63:29:e9:4b:67:b5:66:a6:22:f1: 52:1c:05:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MUQxMTAvBgNVBAUTKEIzQzg5MTM4MDAzNjkxNURFNUVBQTg0Q0YxMzNBQjNC MzVCM0U5RDMwHhcNMjUwODIyMjEzNTEwWhcNMjUwODI5MjEzNTEwWjAYMRYwFAYD VQQDEw02OGE4ZTI4ZS0zMWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzg3hYmIVjZl9q0NNm1vHtjcus0c+CkqMM6w4O6vkK+OcP/Ri1m9FCMFsvjOl X9ZYBWfxKysTVdH9v5rD+WWO1oCibKdhOxRx9k/c+SzICxxSRDEQYmBsF0QYiC5r +HyAqlP9GuySYQlKMkS0HHPCiNvC+fc6jUzGl5IKlUf/mwp79AZIDmaCUTyCoArB 6Pn+OpYHMdc9piZ/tygISl5jukSH7obA70i7KCkKjuLyg1VuVSGd8e8h0qa8oHfe 3PFEcQ1WiGU9kFahkyjKqw8k/zmwobnqegEi5d8wiQKKjKWmgZRwbmhZi4viUJyA WYJLmc0hqCTJ+f6MuL5MEFH84wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAJ611V7 f5eAiKeu/mXxrlUAfP+8MB8GA1UdIwQYMBaAFLPIkTgANpFd5eqoTPEzqzs1s+nT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkxRC8zODFBOEYyQTFD QzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtWM2w2cWhNOFRPck96V3o2 ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3M4aVJPQUEya1YzbDZxaE04VE9yT3pXejZkTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkxRC8zODFBOEYyQTFDQzIxMUVCODJCNTcxNzhDNEY5QUUwMi9zOGlST0FBMmtW M2w2cWhNOFRPck96V3o2ZE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8r2aOh06lzHY0oLuujRf4DdlZW2vW3Y36KarOD3XDCz3moFdWZ+bM G6tpVp+aKhnPxYSkEnGEM5cO3wQx/ijQooluKUcgbm2i4vHxU+GzEvPzICzuiqWe ymsScVirVhMpvHiW8ThA2XFl5S/Sdyh0fcoU20xmlK1SZFC9qrRLRjuoizv4en/3 XrX4zwrsPG5HHTtNlFE6zODSDAXtZsiw3WbcHRrUqI52FNE46Vem55yA1r272eW5 dAl1oWu+nV4Er1n8zgkL5P/RRqEAAGeNtNA8IwHQgNQtXyzcL9oPzGO9rXm12Wg/ qhmUYX+6DaH/62Mp6UtntWamIvFSHAWz -----END CERTIFICATE-----Generated at Sat Aug 23 16:13:19 2025 by rpki-client