$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft File: L8s8JVZclAQXvuKq-IOM5DPiuDo.mft (raw, json) Hash identifier: XAbMmV0KBsLzijOgpqBr9lEk2cE36TvVMjXFpwI/qLQ= Subject key identifier: F5:83:92:82:50:3A:2B:31:81:B9:B3:A6:1B:8B:8B:AF:F8:95:72:8F Authority key identifier: 2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A Certificate issuer: /CN=A91F0769/serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft Manifest number: 5B Signing time: Sat 23 Aug 2025 07:25:42 +0000 Manifest this update: Sat 23 Aug 2025 07:25:42 +0000 Manifest next update: Sat 30 Aug 2025 07:25:42 +0000 Files and hashes: 1: L8s8JVZclAQXvuKq-IOM5DPiuDo.crl (hash: CMRn/d0vcIULTc+XDLE8sBO8pf1dNQDjeu3Dw32jTuQ=) 2: 1489D376FB2611EFBA3F0167C4F9AE02.roa (hash: ofJxzzQ5xqk5amD9ejTH2ddgQjz2ri3POxRM1Mr2fQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0769, serialNumber=2FCB3C25565C940417BEE2AAF8838CE433E2B83A Validity Not Before: Aug 23 07:25:42 2025 GMT Not After : Aug 30 07:25:42 2025 GMT Subject: CN=68a96cf6-cf1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dd:11:db:4d:01:6d:f8:57:a6:33:cb:36:75: 09:02:37:dc:06:45:92:7e:4c:d8:73:dd:09:c6:8d: 21:57:42:fb:b7:1c:6b:ff:d9:c5:a5:fd:8f:e7:69: 81:df:f2:7f:2d:ee:45:6e:e5:5a:80:65:73:d8:94: a9:b4:b0:a4:18:be:0f:8a:35:b9:0b:93:29:0d:05: df:0d:97:88:66:10:58:85:91:9f:ff:68:54:dc:6c: 1c:5b:f9:f2:23:45:53:7a:ec:88:50:af:5e:1d:9a: f6:0c:a6:26:cf:c2:c5:1c:ad:5f:72:c6:57:40:4b: 90:73:e1:90:02:eb:c4:d8:11:66:15:3e:7e:49:43: 10:b6:6b:35:d5:21:1d:cb:c4:1a:71:05:11:ba:52: 04:85:0b:94:d8:6e:64:47:5f:1f:c6:bd:ac:bb:af: f1:2a:a4:51:ff:93:4f:23:65:90:12:15:0c:d0:91: 21:db:56:9e:0b:04:54:a1:2d:d6:9a:3e:fe:53:e9: 23:5b:f2:6d:aa:99:45:51:ce:47:1b:9b:82:c7:f5: 7c:c2:3a:96:1b:db:1d:4c:95:48:8b:aa:8f:97:50: fa:42:62:63:6c:35:0c:97:a3:3e:3a:e3:cb:de:18: c3:9b:af:20:11:94:aa:c0:cb:30:cd:79:ca:03:2b: 1d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:83:92:82:50:3A:2B:31:81:B9:B3:A6:1B:8B:8B:AF:F8:95:72:8F X509v3 Authority Key Identifier: keyid:2F:CB:3C:25:56:5C:94:04:17:BE:E2:AA:F8:83:8C:E4:33:E2:B8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8s8JVZclAQXvuKq-IOM5DPiuDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0769/545688CAFB2411EFB76B9F4BC4F9AE02/L8s8JVZclAQXvuKq-IOM5DPiuDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:40:7d:c0:a4:95:78:c5:3d:0e:bc:96:b1:e9:2d:47:89:35: 8d:0b:85:71:ae:44:f0:40:32:9a:7c:c5:74:b6:9a:60:d9:02: 46:cf:c2:ff:c1:51:75:97:d9:1d:68:75:18:aa:b4:6b:93:50: b2:43:c7:f5:2c:c9:00:b5:e4:32:99:45:21:58:3d:bd:d6:df: 19:dc:d5:46:36:d2:86:db:f3:ab:cf:52:88:74:50:e1:56:b0: 95:d6:34:f1:74:94:93:0c:04:e8:d0:71:16:fa:40:89:81:03: 29:04:1f:7d:64:e8:0d:66:00:0b:95:c5:10:2f:c1:0d:80:62: 4d:ec:7c:2a:0e:2f:3f:ba:3d:32:85:70:fe:f5:f9:a1:9f:4e: 1d:e5:7e:21:98:05:ea:b0:59:70:f5:76:ac:fe:17:e3:25:4d: e5:da:d0:f3:e7:63:b6:03:47:9f:12:6c:97:65:cd:23:38:aa: 9b:54:0b:84:eb:28:2d:46:79:c2:f3:fc:c8:ae:1e:b6:aa:95: 32:49:ac:88:b9:43:05:93:ac:02:6b:4c:f1:59:a6:5c:15:17: 46:cd:db:a5:58:64:55:8b:c1:48:9c:ae:32:31:95:fc:57:2c: 8a:55:cb:2a:9f:25:7b:5b:99:0a:58:b8:90:d9:c1:d0:95:63: 8d:1c:e2:f5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDc2OTExMC8GA1UEBRMoMkZDQjNDMjU1NjVDOTQwNDE3QkVFMkFBRjg4MzhDRTQz M0UyQjgzQTAeFw0yNTA4MjMwNzI1NDJaFw0yNTA4MzAwNzI1NDJaMBgxFjAUBgNV BAMTDTY4YTk2Y2Y2LWNmMWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC53RHbTQFt+FemM8s2dQkCN9wGRZJ+TNhz3QnGjSFXQvu3HGv/2cWl/Y/naYHf 8n8t7kVu5VqAZXPYlKm0sKQYvg+KNbkLkykNBd8Nl4hmEFiFkZ//aFTcbBxb+fIj RVN67IhQr14dmvYMpibPwsUcrV9yxldAS5Bz4ZAC68TYEWYVPn5JQxC2azXVIR3L xBpxBRG6UgSFC5TYbmRHXx/Gvay7r/EqpFH/k08jZZASFQzQkSHbVp4LBFShLdaa Pv5T6SNb8m2qmUVRzkcbm4LH9XzCOpYb2x1MlUiLqo+XUPpCYmNsNQyXoz4648ve GMObryARlKrAyzDNecoDKx0rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9YOSglA6 KzGBubOmG4uLr/iVco8wHwYDVR0jBBgwFoAUL8s8JVZclAQXvuKq+IOM5DPiuDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwNzY5LzU0NTY4OENBRkIy NDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFRWHZ1S3EtSU9NNURQaXVE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTDhzOEpWWmNsQVFYdnVLcS1JT001RFBpdURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw NzY5LzU0NTY4OENBRkIyNDExRUZCNzZCOUY0QkM0RjlBRTAyL0w4czhKVlpjbEFR WHZ1S3EtSU9NNURQaXVEby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL5AfcCklXjFPQ68lrHpLUeJNY0LhXGuRPBAMpp8xXS2mmDZAkbPwv/B UXWX2R1odRiqtGuTULJDx/UsyQC15DKZRSFYPb3W3xnc1UY20obb86vPUoh0UOFW sJXWNPF0lJMMBOjQcRb6QImBAykEH31k6A1mAAuVxRAvwQ2AYk3sfCoOLz+6PTKF cP71+aGfTh3lfiGYBeqwWXD1dqz+F+MlTeXa0PPnY7YDR58SbJdlzSM4qptUC4Tr KC1GecLz/MiuHraqlTJJrIi5QwWTrAJrTPFZplwVF0bN26VYZFWLwUicrjIxlfxX LIpVyyqfJXtbmQpYuJDZwdCVY40c4vU= -----END CERTIFICATE-----Generated at Sat Aug 23 13:50:43 2025 by rpki-client