$ rpki-client -vvf rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft File: 8P2iSILGdaPGAdv6XAJjwjppKiI.mft (raw, json) Hash identifier: tBTLDSF4nDasbJPDh6CKwT5ZVecArwoX6zpMuWtFUWU= Subject key identifier: 61:C1:1E:BE:9B:B6:57:3F:15:F5:BE:19:EF:05:18:42:23:90:C0:D8 Authority key identifier: F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 Certificate issuer: /CN=A91F18DE/serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Certificate serial: 0A31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft Manifest number: 0A2B Signing time: Fri 22 Aug 2025 19:53:47 +0000 Manifest this update: Fri 22 Aug 2025 19:53:46 +0000 Manifest next update: Fri 29 Aug 2025 19:53:46 +0000 Files and hashes: 1: 8P2iSILGdaPGAdv6XAJjwjppKiI.crl (hash: ULoqb6AWalHgp+vz0IVgHQcYnipVX4/JCmF2DqA2ues=) 2: 8880996075DC11EA84E0A94CC4F9AE02.roa (hash: ssJ1fisDF6kXo2lAemHozKuEtDu93oVtWqiWY4t+lWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2609 (0xa31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F18DE, serialNumber=F0FDA24882C675A3C601DBFA5C0263C23A692A22 Validity Not Before: Aug 22 19:53:46 2025 GMT Not After : Aug 29 19:53:46 2025 GMT Subject: CN=68a8cacb-a261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:20:9c:7a:14:d6:7e:fd:4b:e4:41:32:88:b6: 59:49:e9:ae:a9:c0:32:34:4f:c2:d3:f5:22:02:53: 7c:24:4e:88:27:7b:44:92:6e:69:7e:f6:cf:0f:15: cf:2c:e4:7c:28:f7:ec:eb:9d:d8:9f:06:98:aa:df: 40:46:c9:71:6f:7e:82:36:42:84:d7:6e:40:b7:ed: 36:59:67:09:73:09:1f:7b:20:db:55:a5:da:62:e6: 0a:cf:cc:81:a3:5c:0b:bc:84:b7:09:4a:d2:23:cf: a8:46:12:57:7b:2e:fc:0f:c5:00:15:e4:9a:a9:1f: 1d:c7:22:38:0e:c3:9b:0d:1e:67:43:b7:65:a2:c1: 6b:91:c3:21:d5:55:89:af:66:39:32:85:c1:2d:77: 89:e8:93:cd:18:e5:7d:10:fd:4a:54:73:47:da:7a: 53:39:fa:f1:b7:f8:51:d6:a7:80:76:4a:63:db:37: ac:20:5a:43:a9:18:b7:93:58:0a:ab:7b:7a:e0:df: ed:f7:77:5a:f3:1e:6d:81:a6:be:c7:b2:1b:9d:44: 96:94:7a:6d:5e:b6:3e:dd:ee:a4:71:61:57:7d:3b: 47:1e:d2:8e:f0:39:de:8d:09:32:ad:78:9f:3e:40: 79:7a:55:0f:92:7a:6b:16:98:26:9d:62:d1:f5:63: 71:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C1:1E:BE:9B:B6:57:3F:15:F5:BE:19:EF:05:18:42:23:90:C0:D8 X509v3 Authority Key Identifier: keyid:F0:FD:A2:48:82:C6:75:A3:C6:01:DB:FA:5C:02:63:C2:3A:69:2A:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8P2iSILGdaPGAdv6XAJjwjppKiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F18DE/EEA13C9C75DA11EAB493F049C4F9AE02/8P2iSILGdaPGAdv6XAJjwjppKiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:30:e0:59:fc:d6:62:90:91:c5:45:0f:e0:59:fb:c3:52:19: ea:12:c5:f1:f9:a7:7e:cd:3f:e7:84:5e:64:b7:0e:f0:b7:a1: 48:e6:e4:fa:e5:4b:a1:85:f3:c5:96:4c:a4:74:68:41:c4:9a: 8d:51:9d:47:a0:c8:4e:a2:0e:75:a7:b2:f0:ff:23:69:25:1c: 59:52:dc:6f:08:3e:73:72:f5:83:5c:08:93:a2:eb:3b:8d:5f: 8c:1d:10:a0:9d:fb:3d:e3:9a:7f:f8:bd:3d:25:c9:cd:d4:59: f8:f2:83:43:93:ea:d7:50:ee:60:d8:48:24:5b:a0:68:ec:8d: a0:e7:6b:d9:9e:cf:56:71:a5:ef:70:b3:56:22:e6:5e:9e:8e: 57:b2:06:34:40:ec:a2:a0:da:42:57:cc:d7:a3:47:ce:87:0f: d9:43:f4:2b:16:21:45:75:1f:50:ac:00:2f:e6:aa:c2:c7:0b: 9e:95:3e:16:57:39:e4:a6:f8:8a:6f:d8:c2:ff:4a:7f:45:13: f2:b9:6b:c3:17:c0:0b:47:cb:0c:6d:06:77:f0:90:bc:96:8d: ba:3a:1a:44:6f:3c:86:fb:7f:a0:d0:49:87:23:70:16:8b:32: 02:ac:66:6b:35:83:1e:e5:98:b0:f7:90:fd:fc:e4:d1:64:f8: 5c:85:8e:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjE4REUxMTAvBgNVBAUTKEYwRkRBMjQ4ODJDNjc1QTNDNjAxREJGQTVDMDI2M0My M0E2OTJBMjIwHhcNMjUwODIyMTk1MzQ2WhcNMjUwODI5MTk1MzQ2WjAYMRYwFAYD VQQDEw02OGE4Y2FjYi1hMjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CCcehTWfv1L5EEyiLZZSemuqcAyNE/C0/UiAlN8JE6IJ3tEkm5pfvbPDxXP LOR8KPfs653YnwaYqt9ARslxb36CNkKE125At+02WWcJcwkfeyDbVaXaYuYKz8yB o1wLvIS3CUrSI8+oRhJXey78D8UAFeSaqR8dxyI4DsObDR5nQ7dlosFrkcMh1VWJ r2Y5MoXBLXeJ6JPNGOV9EP1KVHNH2npTOfrxt/hR1qeAdkpj2zesIFpDqRi3k1gK q3t64N/t93da8x5tgaa+x7IbnUSWlHptXrY+3e6kcWFXfTtHHtKO8DnejQkyrXif PkB5elUPknprFpgmnWLR9WNxNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGHBHr6b tlc/FfW+Ge8FGEIjkMDYMB8GA1UdIwQYMBaAFPD9okiCxnWjxgHb+lwCY8I6aSoi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMThERS9FRUExM0M5Qzc1 REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2RhUEdBZHY2WEFKandqcHBL aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhQMmlTSUxHZGFQR0FkdjZYQUpqd2pwcEtpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MThERS9FRUExM0M5Qzc1REExMUVBQjQ5M0YwNDlDNEY5QUUwMi84UDJpU0lMR2Rh UEdBZHY2WEFKandqcHBLaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+MOBZ/NZikJHFRQ/gWfvDUhnqEsXx+ad+zT/nhF5ktw7wt6FI5uT6 5UuhhfPFlkykdGhBxJqNUZ1HoMhOog51p7Lw/yNpJRxZUtxvCD5zcvWDXAiTous7 jV+MHRCgnfs945p/+L09JcnN1Fn48oNDk+rXUO5g2EgkW6Bo7I2g52vZns9WcaXv cLNWIuZeno5XsgY0QOyioNpCV8zXo0fOhw/ZQ/QrFiFFdR9QrAAv5qrCxwuelT4W VznkpviKb9jC/0p/RRPyuWvDF8ALR8sMbQZ38JC8lo26OhpEbzyG+3+g0EmHI3AW izICrGZrNYMe5Ziw95D9/OTRZPhchY6s -----END CERTIFICATE-----Generated at Sat Aug 23 13:44:04 2025 by rpki-client