$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft File: 8U1sPT3myxB096LpBdn4VFEEWmU.mft (raw, json) Hash identifier: mXAmI06iK2G0v6QU9F/3bCYeoaCZXfkql/Rwd3TWCi8= Subject key identifier: 2E:60:29:C5:83:4B:12:C8:CE:C6:C6:05:44:F1:CB:5B:05:2F:5F:A5 Authority key identifier: F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 Certificate issuer: /CN=A91F2089/serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Certificate serial: 0491 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft Manifest number: 048D Signing time: Sat 23 Aug 2025 00:13:55 +0000 Manifest this update: Sat 23 Aug 2025 00:13:54 +0000 Manifest next update: Sat 30 Aug 2025 00:13:54 +0000 Files and hashes: 1: 8U1sPT3myxB096LpBdn4VFEEWmU.crl (hash: 4TxJl4SthC/EABPrXsNyAJd/WTwQ/6aui9+ji//0YOg=) 2: 3C4374804CEC11ECAE6AB280C4F9AE02.roa (hash: F010fbR+bi9xTUBl3AUBVvzkCJVPeJDxWa/Ivtr1ZK4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1169 (0x491) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2089, serialNumber=F14D6C3D3DE6CB1074F7A2E905D9F85451045A65 Validity Not Before: Aug 23 00:13:54 2025 GMT Not After : Aug 30 00:13:54 2025 GMT Subject: CN=68a907c2-8806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fc:eb:be:03:1e:d4:f8:5d:7f:37:6a:5f:4c: 98:ac:50:5b:2e:99:be:60:e1:0b:33:54:5e:c9:0c: d4:af:ac:01:ec:ce:8c:cd:3e:61:e2:ba:83:96:32: 86:2b:d7:c1:59:e0:90:95:4e:30:16:98:7b:1f:81: 3e:ec:19:cb:ab:33:36:d9:19:ff:34:bd:2a:19:05: 82:35:10:23:0e:2b:3a:c2:22:5f:34:d2:cf:83:7c: ff:32:ff:39:6b:fe:1c:15:39:e6:71:51:79:e8:8a: 79:b1:e1:60:0e:f0:16:8c:f4:c0:5c:a4:b0:8d:9f: a1:c1:b0:0f:f8:37:3e:45:d8:ac:0e:3c:ef:7d:0c: b9:de:e1:f5:6f:b7:66:0d:46:4a:64:bf:cd:00:70: d1:53:55:b5:3b:f9:cc:cd:f3:8f:fd:68:40:41:33: b2:c7:78:f7:be:7a:8c:b4:9f:e6:c3:27:6f:8a:37: f7:62:fa:02:5b:49:a3:b0:7c:bc:e7:1a:c2:2e:f6: e8:7a:ef:59:02:61:bf:cc:cd:e2:98:6a:12:4b:00: 58:8b:b0:15:3d:6a:cf:e5:3a:2c:dd:00:de:d4:e1: ef:15:56:b7:cf:62:db:70:50:3e:ff:cf:cc:c5:3e: a6:27:8a:e0:ac:d4:b6:89:25:1d:f0:66:f7:72:a0: ba:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:60:29:C5:83:4B:12:C8:CE:C6:C6:05:44:F1:CB:5B:05:2F:5F:A5 X509v3 Authority Key Identifier: keyid:F1:4D:6C:3D:3D:E6:CB:10:74:F7:A2:E9:05:D9:F8:54:51:04:5A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8U1sPT3myxB096LpBdn4VFEEWmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2089/E1C4A41E4CE811ECBD05FA7CC4F9AE02/8U1sPT3myxB096LpBdn4VFEEWmU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:d2:02:ae:88:c2:f0:52:fe:29:09:c0:26:a4:c7:ba:ec:39: 8e:03:e6:a1:2c:2a:85:15:93:a4:3a:15:be:3e:f0:7b:d2:92: 0f:73:be:7c:9e:42:d8:e0:80:e7:97:33:5b:32:a4:d1:63:95: d3:6c:81:2c:03:02:d2:17:25:6e:02:38:f5:1f:45:41:18:b9: bf:62:f6:c8:53:1b:c6:e4:56:9e:90:e9:25:61:02:4c:ac:ff: 68:c7:ce:a5:db:b3:ac:de:38:62:24:e1:52:ce:f4:14:d8:69: 86:3c:52:83:2d:bf:cd:50:af:a5:af:e2:15:6a:89:71:0e:27: 7b:9c:b3:93:df:68:13:1e:db:b3:55:3b:40:17:2e:aa:f6:b4: df:79:d1:dc:7c:bf:aa:85:42:37:22:a5:25:06:d3:2b:83:68: c2:6f:03:c4:9c:52:72:62:9d:16:c1:32:f0:c1:25:10:27:3f: 8a:df:21:3b:73:ac:b8:f5:9e:87:c2:bd:19:f3:9f:66:90:98: 6c:8f:9b:9d:ab:06:3d:a5:66:0a:43:fd:73:83:1d:25:1b:11: 61:9b:73:b3:e1:3e:6f:f7:68:a2:af:8e:cc:1a:83:3a:b4:46: 29:3d:5c:39:b4:14:99:e3:d6:bb:26:fe:99:c3:bc:24:b4:aa: 98:7c:a9:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIwODkxMTAvBgNVBAUTKEYxNEQ2QzNEM0RFNkNCMTA3NEY3QTJFOTA1RDlGODU0 NTEwNDVBNjUwHhcNMjUwODIzMDAxMzU0WhcNMjUwODMwMDAxMzU0WjAYMRYwFAYD VQQDEw02OGE5MDdjMi04ODA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsPzrvgMe1PhdfzdqX0yYrFBbLpm+YOELM1ReyQzUr6wB7M6MzT5h4rqDljKG K9fBWeCQlU4wFph7H4E+7BnLqzM22Rn/NL0qGQWCNRAjDis6wiJfNNLPg3z/Mv85 a/4cFTnmcVF56Ip5seFgDvAWjPTAXKSwjZ+hwbAP+Dc+RdisDjzvfQy53uH1b7dm DUZKZL/NAHDRU1W1O/nMzfOP/WhAQTOyx3j3vnqMtJ/mwydvijf3YvoCW0mjsHy8 5xrCLvboeu9ZAmG/zM3imGoSSwBYi7AVPWrP5Tos3QDe1OHvFVa3z2LbcFA+/8/M xT6mJ4rgrNS2iSUd8Gb3cqC6mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5gKcWD SxLIzsbGBUTxy1sFL1+lMB8GA1UdIwQYMBaAFPFNbD095ssQdPei6QXZ+FRRBFpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjA4OS9FMUM0QTQxRTRD RTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4QjA5NkxwQmRuNFZGRUVX bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhVMXNQVDNteXhCMDk2THBCZG40VkZFRVdtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjA4OS9FMUM0QTQxRTRDRTgxMUVDQkQwNUZBN0NDNEY5QUUwMi84VTFzUFQzbXl4 QjA5NkxwQmRuNFZGRUVXbVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO0gKuiMLwUv4pCcAmpMe67DmOA+ahLCqFFZOkOhW+PvB70pIPc758 nkLY4IDnlzNbMqTRY5XTbIEsAwLSFyVuAjj1H0VBGLm/YvbIUxvG5FaekOklYQJM rP9ox86l27Os3jhiJOFSzvQU2GmGPFKDLb/NUK+lr+IVaolxDid7nLOT32gTHtuz VTtAFy6q9rTfedHcfL+qhUI3IqUlBtMrg2jCbwPEnFJyYp0WwTLwwSUQJz+K3yE7 c6y49Z6Hwr0Z859mkJhsj5udqwY9pWYKQ/1zgx0lGxFhm3Oz4T5v92iir47MGoM6 tEYpPVw5tBSZ49a7Jv6Zw7wktKqYfKlK -----END CERTIFICATE-----Generated at Sat Aug 23 19:40:11 2025 by rpki-client