$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft File: 8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json) Hash identifier: VZI6rdahz+3neWTPZoBeQIKaXiA+iQs0pndYFFFhw2s= Subject key identifier: C3:9F:6D:84:CD:16:AF:0B:8A:A1:EA:CA:44:B7:3E:6E:49:57:C9:2F Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 Certificate issuer: /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Certificate serial: 04BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft Manifest number: 04BB Signing time: Sat 23 Aug 2025 00:03:45 +0000 Manifest this update: Sat 23 Aug 2025 00:03:45 +0000 Manifest next update: Sat 30 Aug 2025 00:03:45 +0000 Files and hashes: 1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: lQx7/Jpazhdj3W6xbtr+l+Shi7rc1DzglVGIZQ/HPIo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1214 (0x4be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF70D, serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Validity Not Before: Aug 23 00:03:45 2025 GMT Not After : Aug 30 00:03:45 2025 GMT Subject: CN=68a90561-8a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:84:6b:6b:66:83:69:97:f8:ec:22:14:c5:13: e6:16:37:8a:dd:3e:d7:15:6d:54:dd:f1:92:76:5d: 34:f7:ff:c0:18:61:91:3a:eb:2f:0c:d8:36:10:6b: 37:0d:ce:ca:0c:09:94:d0:34:59:55:a5:4d:c9:9c: 7e:af:70:fb:c1:19:22:00:d2:43:11:76:c4:31:26: fd:13:8a:4a:15:97:1b:65:98:7d:7c:86:bd:17:3d: 8e:b1:6a:31:e4:cb:f0:8c:0d:e4:52:7b:55:e1:20: 24:14:a1:41:45:75:fc:2c:31:65:c9:41:f6:38:aa: bf:40:0c:01:6f:eb:41:40:47:ee:3d:b2:f7:fc:e0: 21:74:70:09:92:92:64:46:d4:87:09:a5:dd:a8:c4: b8:12:08:d6:7c:0d:89:63:72:f8:64:e2:1a:65:27: bc:12:ef:c6:6e:34:4a:21:60:f7:ef:f7:9f:5d:5d: cd:d8:92:63:99:d1:97:4a:8f:0e:50:52:58:e6:26: 2a:1b:31:cb:ee:a2:5d:29:c3:79:87:7a:fd:7b:8f: 02:e9:52:20:b5:98:a2:67:39:e1:5a:40:af:9b:bb: 94:d3:2c:60:df:ac:ce:f6:8a:88:15:16:7e:e1:0b: 59:e7:d2:31:db:55:05:68:a5:3d:5a:44:db:2b:36: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9F:6D:84:CD:16:AF:0B:8A:A1:EA:CA:44:B7:3E:6E:49:57:C9:2F X509v3 Authority Key Identifier: keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:22:73:ef:c1:5e:9b:a1:23:20:ce:8e:07:4b:5a:75:a0:63: 93:eb:b0:4a:0b:0c:6f:5f:60:5b:14:a8:4d:68:ef:62:61:bf: a1:2d:b1:98:20:6f:e0:bd:eb:59:c9:ca:2c:4c:88:a6:81:b7: 55:c2:d8:0f:c4:2e:cf:0d:56:b3:1e:46:af:16:8c:e3:36:b5: d2:75:47:98:ce:27:0f:2a:78:4b:2e:d8:12:be:e6:4d:7b:b2: 8f:2f:4b:d6:30:08:31:00:5d:ad:aa:21:05:95:a8:ae:c3:f7: 3d:33:da:39:f6:05:8e:1e:90:5a:2c:57:d8:06:5e:7e:cb:48: 87:fd:6c:f7:4a:10:66:60:0d:b9:e2:8f:15:a6:29:d6:55:ad: 3e:5f:e2:d4:2f:a0:33:87:40:ff:49:f6:75:02:c4:19:52:c9: 89:49:43:98:9f:15:87:56:cf:0e:ba:17:09:e9:26:83:e2:16: e8:4e:42:36:1f:7c:f6:7f:23:68:94:a8:0d:fb:05:1c:62:08: 89:88:e4:ea:fb:2a:ba:db:2a:f8:c1:0b:cf:3e:11:71:36:d7: 59:27:79:0d:89:71:2c:ee:b6:e8:31:d5:72:f9:00:36:34:4b: b1:df:61:9c:ae:d8:a8:46:bc:1b:8c:a1:6d:e6:9d:67:e0:c3: 14:0c:e8:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY3MEQxMTAvBgNVBAUTKEYyMDVCMjhCQUM3RUVCQURFOUFGOUI2RDA0RkI0OTIw Rjk2MTNGODkwHhcNMjUwODIzMDAwMzQ1WhcNMjUwODMwMDAwMzQ1WjAYMRYwFAYD VQQDEw02OGE5MDU2MS04YTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YRra2aDaZf47CIUxRPmFjeK3T7XFW1U3fGSdl009//AGGGROusvDNg2EGs3 Dc7KDAmU0DRZVaVNyZx+r3D7wRkiANJDEXbEMSb9E4pKFZcbZZh9fIa9Fz2OsWox 5MvwjA3kUntV4SAkFKFBRXX8LDFlyUH2OKq/QAwBb+tBQEfuPbL3/OAhdHAJkpJk RtSHCaXdqMS4EgjWfA2JY3L4ZOIaZSe8Eu/GbjRKIWD37/efXV3N2JJjmdGXSo8O UFJY5iYqGzHL7qJdKcN5h3r9e48C6VIgtZiiZznhWkCvm7uU0yxg36zO9oqIFRZ+ 4QtZ59Ix21UFaKU9WkTbKzbuBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOfbYTN Fq8LiqHqykS3Pm5JV8kvMB8GA1UdIwQYMBaAFPIFsousfuut6a+bbQT7SSD5YT+J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjcwRC9GNkE5RDdENjM3 QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2M3ByNXR0QlB0SklQbGhQ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnV3lpNngtNjYzcHI1dHRCUHRKSVBsaFA0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjcwRC9GNkE5RDdENjM3QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2 M3ByNXR0QlB0SklQbGhQNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALInPvwV6boSMgzo4HS1p1oGOT67BKCwxvX2BbFKhNaO9iYb+hLbGY IG/gvetZycosTIimgbdVwtgPxC7PDVazHkavFozjNrXSdUeYzicPKnhLLtgSvuZN e7KPL0vWMAgxAF2tqiEFlaiuw/c9M9o59gWOHpBaLFfYBl5+y0iH/Wz3ShBmYA25 4o8VpinWVa0+X+LUL6Azh0D/SfZ1AsQZUsmJSUOYnxWHVs8OuhcJ6SaD4hboTkI2 H3z2fyNolKgN+wUcYgiJiOTq+yq62yr4wQvPPhFxNtdZJ3kNiXEs7rboMdVy+QA2 NEux32GcrtioRrwbjKFt5p1n4MMUDOi3 -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:21 2025 by rpki-client