$ rpki-client -vvf rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft File: 8ZLUrYbOEPyWgn_JNIDz-9716mE.mft (raw, json) Hash identifier: ZMpb4EV/r2ixMLi+NuHCJzJycCvN82vApw4yKPjXNzE= Subject key identifier: 0E:1F:99:95:5F:BD:46:4C:29:79:BC:6C:06:9B:34:F0:9B:D9:E2:41 Authority key identifier: F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 Certificate issuer: /CN=A91E78E8/serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Certificate serial: 04C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft Manifest number: 04BE Signing time: Sat 23 Aug 2025 00:06:51 +0000 Manifest this update: Sat 23 Aug 2025 00:06:50 +0000 Manifest next update: Sat 30 Aug 2025 00:06:50 +0000 Files and hashes: 1: 8ZLUrYbOEPyWgn_JNIDz-9716mE.crl (hash: LSmdMP/VS91NPRE46aX0iyCGbF4YFZJ5EIHMcN1JlF8=) 2: 32E40EFC6D6D11ED879E8878C4F9AE02.roa (hash: N7zAF6qotCb0ywjS2VK9+Nbg9CvfxH2mHM6x46+8gNY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1221 (0x4c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E78E8, serialNumber=F192D4AD86CE10FC96827FC93480F3FBDEF5EA61 Validity Not Before: Aug 23 00:06:50 2025 GMT Not After : Aug 30 00:06:50 2025 GMT Subject: CN=68a9061a-5f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:86:0f:24:fe:19:d9:0f:f4:ef:92:20:e0:37: 94:36:93:17:c2:82:c1:a2:9b:e9:65:68:bf:51:5a: d0:5c:67:f4:77:8b:4c:fc:07:37:92:0f:89:57:c5: d8:70:17:56:0c:91:86:bd:06:3f:56:16:2a:b3:3f: 9a:38:13:7f:fa:77:6b:23:13:8d:a3:43:b6:d3:16: cc:84:61:7a:ac:f0:e0:d4:3d:3d:76:73:c3:1f:98: 78:cc:d6:71:3c:58:49:37:d8:0d:9e:e7:10:c6:25: ff:62:54:7b:87:d8:19:ba:0d:b0:85:ee:51:1e:2a: f8:c4:6f:c7:67:54:5f:64:21:e4:85:dd:50:77:92: d2:78:0f:27:c7:c3:80:47:f6:59:1b:74:03:6b:3e: 27:28:4f:8d:6f:4c:11:3c:d6:48:5e:f5:b1:31:28: 48:cc:45:a4:30:d4:71:ec:92:a4:2e:ab:a8:a7:84: b9:6b:b2:89:d7:21:49:1c:44:23:c7:73:44:8a:9f: eb:80:11:f9:9c:8a:5f:9d:c6:85:95:df:1f:b3:41: 5b:59:13:c5:79:40:ec:6a:fb:65:24:4e:8b:e5:c6: cc:4f:7e:5b:0b:4d:65:b5:26:4f:55:a8:92:5f:00: f7:d4:aa:38:9e:bf:28:f1:5c:69:c8:7b:a5:d3:70: 27:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1F:99:95:5F:BD:46:4C:29:79:BC:6C:06:9B:34:F0:9B:D9:E2:41 X509v3 Authority Key Identifier: keyid:F1:92:D4:AD:86:CE:10:FC:96:82:7F:C9:34:80:F3:FB:DE:F5:EA:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ZLUrYbOEPyWgn_JNIDz-9716mE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E78E8/B89EB6903E1C11ECB8B0A24AC4F9AE02/8ZLUrYbOEPyWgn_JNIDz-9716mE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:42:31:f5:23:97:d3:4f:f8:af:fe:83:14:df:dc:38:2e:ac: 40:57:68:2d:4d:b7:5b:86:d5:d8:d9:7c:ab:83:af:b4:03:c3: 61:21:ba:1c:99:3d:51:cc:a0:66:3b:d8:9c:cc:00:a5:68:0e: 0b:19:5a:0d:ec:b5:f4:f6:6d:d7:9e:bf:74:da:0e:b2:1f:82: ae:f2:cf:a2:ba:10:2e:d5:90:f3:e0:4c:c1:d4:f0:9b:cd:65: e5:4b:c5:b7:87:fd:6f:c5:39:08:4d:03:25:c4:f5:7f:62:6e: cb:a4:e6:10:8d:2e:d1:2f:3a:77:17:d7:c1:9d:80:8d:5e:b5: 97:9c:2a:da:4d:6d:3e:57:13:67:15:17:a2:7c:0f:01:e6:84: af:a5:2c:8b:1e:aa:e1:f3:be:a4:70:34:01:87:53:08:a9:77: f9:1a:28:47:d0:a9:c6:1e:d7:90:a5:e4:3b:ad:27:98:59:d5: ca:71:c4:bf:7c:52:12:45:47:11:41:89:f0:d9:5d:19:a6:0c: 8a:47:a4:b4:d1:ef:46:dd:47:d9:47:a5:ab:75:7b:f9:d5:a6: b3:52:e9:b8:04:24:f9:93:83:72:0c:af:5f:b7:90:e1:33:b5: a4:cf:5a:8e:03:48:0b:f9:65:da:46:92:96:9a:14:65:7a:84: 4b:ca:30:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4RTgxMTAvBgNVBAUTKEYxOTJENEFEODZDRTEwRkM5NjgyN0ZDOTM0ODBGM0ZC REVGNUVBNjEwHhcNMjUwODIzMDAwNjUwWhcNMjUwODMwMDAwNjUwWjAYMRYwFAYD VQQDEw02OGE5MDYxYS01ZjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3oYPJP4Z2Q/075Ig4DeUNpMXwoLBopvpZWi/UVrQXGf0d4tM/Ac3kg+JV8XY cBdWDJGGvQY/VhYqsz+aOBN/+ndrIxONo0O20xbMhGF6rPDg1D09dnPDH5h4zNZx PFhJN9gNnucQxiX/YlR7h9gZug2whe5RHir4xG/HZ1RfZCHkhd1Qd5LSeA8nx8OA R/ZZG3QDaz4nKE+Nb0wRPNZIXvWxMShIzEWkMNRx7JKkLquop4S5a7KJ1yFJHEQj x3NEip/rgBH5nIpfncaFld8fs0FbWRPFeUDsavtlJE6L5cbMT35bC01ltSZPVaiS XwD31Ko4nr8o8VxpyHul03AnDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA4fmZVf vUZMKXm8bAabNPCb2eJBMB8GA1UdIwQYMBaAFPGS1K2GzhD8loJ/yTSA8/ve9eph MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzhFOC9CODlFQjY5MDNF MUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQeVdnbl9KTklEei05NzE2 bUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaTFVyWWJPRVB5V2duX0pOSUR6LTk3MTZtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzhFOC9CODlFQjY5MDNFMUMxMUVDQjhCMEEyNEFDNEY5QUUwMi84WkxVclliT0VQ eVdnbl9KTklEei05NzE2bUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHQjH1I5fTT/iv/oMU39w4LqxAV2gtTbdbhtXY2Xyrg6+0A8NhIboc mT1RzKBmO9iczAClaA4LGVoN7LX09m3Xnr902g6yH4Ku8s+iuhAu1ZDz4EzB1PCb zWXlS8W3h/1vxTkITQMlxPV/Ym7LpOYQjS7RLzp3F9fBnYCNXrWXnCraTW0+VxNn FReifA8B5oSvpSyLHqrh876kcDQBh1MIqXf5GihH0KnGHteQpeQ7rSeYWdXKccS/ fFISRUcRQYnw2V0ZpgyKR6S00e9G3UfZR6WrdXv51aazUum4BCT5k4NyDK9ft5Dh M7Wkz1qOA0gL+WXaRpKWmhRleoRLyjBb -----END CERTIFICATE-----Generated at Sat Aug 23 20:34:41 2025 by rpki-client