$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft File: 8dIEca4xiTbXk7RttEgiB9lyRYs.mft (raw, json) Hash identifier: HRJZCB16uNDGNEYay4MgIzyWZW8TGAFyP588t8oMI0g= Subject key identifier: EB:20:18:07:F1:96:89:04:B4:D3:A1:0B:71:72:31:A4:9A:6B:43:15 Authority key identifier: F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B Certificate issuer: /CN=A91D8EAF/serialNumber=F1D20471AE318936D793B46DB4482207D972458B Certificate serial: 0C8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft Manifest number: 0C7B Signing time: Fri 22 Aug 2025 18:27:33 +0000 Manifest this update: Fri 22 Aug 2025 18:27:33 +0000 Manifest next update: Fri 29 Aug 2025 18:27:33 +0000 Files and hashes: 1: 8dIEca4xiTbXk7RttEgiB9lyRYs.crl (hash: DcutNeQXVlEE1A2BhTG/HA/DyzGADx/7wmrEFIjVKUY=) 2: F4C2F7F604FF11EABFF6E022C4F9AE02.roa (hash: hMRVZDPhI9uQhHlcLsQL6+B9hhuCOLqR+jjUlDn3sAQ=) 3: 168AD09A04EF11EA9060B76BC4F9AE02.roa (hash: s3U0q40HWyXJCTwtjWa8KKHr421/tnOx6JMPLRqROA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3214 (0xc8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8EAF, serialNumber=F1D20471AE318936D793B46DB4482207D972458B Validity Not Before: Aug 22 18:27:33 2025 GMT Not After : Aug 29 18:27:33 2025 GMT Subject: CN=68a8b695-f201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:37:08:0e:4d:ea:f2:5d:34:45:9f:6a:e7:67: 39:62:1c:d0:8a:ba:16:16:d5:61:18:e9:3e:89:50: 91:6e:c3:c9:b9:e6:60:80:ec:50:d5:ce:98:6f:45: 1a:b0:7d:da:eb:65:00:49:52:a8:5a:78:1e:96:85: c0:89:f6:cd:13:67:41:a0:75:ca:1a:f9:a9:28:30: c7:59:c9:c4:b8:1d:15:b9:ae:e9:c0:e1:7e:02:e9: 07:c7:0e:b8:92:6e:00:19:2f:ba:74:9e:25:69:1c: 2a:1a:c2:8c:cb:5f:c7:72:38:ef:9d:8e:be:d0:4c: 94:e8:d8:72:dc:3d:04:62:ef:ad:b2:7a:01:42:ca: 76:0f:3a:8c:13:2e:d3:b3:17:21:fd:a1:2a:2d:cc: 12:00:26:d4:d3:4f:15:13:4a:64:7d:0a:3f:98:bd: 71:80:d3:53:6d:da:b9:d0:c5:cb:8f:d8:50:56:74: 6f:b1:ef:f8:9c:17:87:c0:a5:84:d8:2f:a4:52:38: c1:c0:d4:79:67:fc:3d:01:4b:ed:26:09:d2:76:63: aa:e8:f2:87:a1:63:8f:9d:4a:e1:7a:5e:bc:86:35: dd:a1:cd:75:0b:34:46:ae:3b:8b:04:4f:fa:cf:0c: a0:ed:3c:cb:bc:ec:8c:d1:8b:cd:ec:fb:10:66:99: bf:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:20:18:07:F1:96:89:04:B4:D3:A1:0B:71:72:31:A4:9A:6B:43:15 X509v3 Authority Key Identifier: keyid:F1:D2:04:71:AE:31:89:36:D7:93:B4:6D:B4:48:22:07:D9:72:45:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8dIEca4xiTbXk7RttEgiB9lyRYs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8EAF/10B0E3D004EA11EABEDC8161C4F9AE02/8dIEca4xiTbXk7RttEgiB9lyRYs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:b8:0f:da:df:49:4b:8e:c2:08:77:6f:6f:f8:3a:da:f8:64: 4a:6b:67:63:c8:3c:23:48:7d:79:e8:0e:03:95:d7:ac:77:3e: 44:7c:5a:70:15:29:bf:68:dd:6f:90:ef:d7:03:b6:cf:46:7f: d0:3a:19:eb:ed:2a:11:75:cb:49:cc:39:b1:f7:da:50:59:40: 61:93:9b:a0:40:66:1d:28:11:dd:ee:f3:5d:0c:af:9e:ae:c7: b2:39:c1:b6:05:6c:67:bb:d4:26:d0:0d:c1:5b:a6:3f:e4:6d: f3:12:3c:72:c0:b0:96:b2:7a:1b:db:45:89:c0:e2:ba:5d:aa: 7a:b4:5b:11:e7:50:95:5e:96:83:d8:77:bb:31:e1:d1:c2:98: 67:d7:d0:c8:22:77:82:25:69:fe:80:eb:cb:06:be:9b:8c:94: ab:bd:de:c5:e8:28:27:63:c3:01:d4:92:bf:9c:60:d6:80:f9: 09:6d:82:75:ae:9d:16:77:4b:86:c0:ff:d3:8b:37:b2:de:88: 6d:19:3f:3f:55:69:3e:60:0a:51:38:eb:21:07:b4:98:09:59: ad:26:a3:cd:e0:31:fa:fb:7f:dc:f4:03:7d:2d:0c:ae:88:ef: 5b:ca:8f:7b:73:0a:65:42:6e:31:78:1c:b3:4e:a7:1f:43:cc: c2:98:f3:91 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhFQUYxMTAvBgNVBAUTKEYxRDIwNDcxQUUzMTg5MzZENzkzQjQ2REI0NDgyMjA3 RDk3MjQ1OEIwHhcNMjUwODIyMTgyNzMzWhcNMjUwODI5MTgyNzMzWjAYMRYwFAYD VQQDEw02OGE4YjY5NS1mMjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsDcIDk3q8l00RZ9q52c5YhzQiroWFtVhGOk+iVCRbsPJueZggOxQ1c6Yb0Ua sH3a62UASVKoWngeloXAifbNE2dBoHXKGvmpKDDHWcnEuB0Vua7pwOF+AukHxw64 km4AGS+6dJ4laRwqGsKMy1/HcjjvnY6+0EyU6Nhy3D0EYu+tsnoBQsp2DzqMEy7T sxch/aEqLcwSACbU008VE0pkfQo/mL1xgNNTbdq50MXLj9hQVnRvse/4nBeHwKWE 2C+kUjjBwNR5Z/w9AUvtJgnSdmOq6PKHoWOPnUrhel68hjXdoc11CzRGrjuLBE/6 zwyg7TzLvOyM0YvN7PsQZpm/XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOsgGAfx lokEtNOhC3FyMaSaa0MVMB8GA1UdIwQYMBaAFPHSBHGuMYk215O0bbRIIgfZckWL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEVBRi8xMEIwRTNEMDA0 RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlUYlhrN1J0dEVnaUI5bHlS WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhkSUVjYTR4aVRiWGs3UnR0RWdpQjlseVJZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEVBRi8xMEIwRTNEMDA0RUExMUVBQkVEQzgxNjFDNEY5QUUwMi84ZElFY2E0eGlU YlhrN1J0dEVnaUI5bHlSWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAuA/a30lLjsIId29v+Dra+GRKa2djyDwjSH156A4Dldesdz5EfFpw FSm/aN1vkO/XA7bPRn/QOhnr7SoRdctJzDmx99pQWUBhk5ugQGYdKBHd7vNdDK+e rseyOcG2BWxnu9Qm0A3BW6Y/5G3zEjxywLCWsnob20WJwOK6Xap6tFsR51CVXpaD 2He7MeHRwphn19DIIneCJWn+gOvLBr6bjJSrvd7F6CgnY8MB1JK/nGDWgPkJbYJ1 rp0Wd0uGwP/Tizey3ohtGT8/VWk+YApROOshB7SYCVmtJqPN4DH6+3/c9AN9LQyu iO9byo97cwplQm4xeByzTqcfQ8zCmPOR -----END CERTIFICATE-----Generated at Sat Aug 23 19:09:49 2025 by rpki-client