$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft File: u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json) Hash identifier: KB8w7Wwh9rDBaszfiHPHvQDpcp4s0EuFzgpB3YAynzM= Subject key identifier: AC:69:16:CD:68:C2:6B:D6:4A:74:14:E5:58:0A:F6:7B:41:7B:ED:F4 Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE Certificate issuer: /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Certificate serial: 0692 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft Manifest number: 067A Signing time: Fri 22 Aug 2025 22:17:44 +0000 Manifest this update: Fri 22 Aug 2025 22:17:44 +0000 Manifest next update: Fri 29 Aug 2025 22:17:44 +0000 Files and hashes: 1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: nx7rhAwySKPuQxhGAWIGazrlxLmz9mKNEu1lJt0du1g=) 2: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: MXG2UaX3e+u+Jgkl2hW9VaZ5bWI3Hg2FUtWl1xPKFxI=) 3: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: A5KK9SQwb+EDWJ4jMnTUQq3SJ0SvbTU26Y/s1pM+n+I=) 4: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: myGu3py2MJoX+9pcsdAEfeXFlVuZbTSedA0MlFyQwmI=) 5: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: IRx8YlQZD3iZNO8ZkV5fm0YkjEB3fazq27IMfHjcxDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:17:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1682 (0x692) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Validity Not Before: Aug 22 22:17:44 2025 GMT Not After : Aug 29 22:17:44 2025 GMT Subject: CN=68a8ec88-3b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:65:81:27:a8:1a:13:9f:42:6e:15:23:3b:d9: 3e:6f:65:8b:e7:a7:ca:b3:f5:9b:78:a8:b1:01:0b: e8:ad:b0:90:91:1b:9e:0a:18:35:cc:27:0c:e1:9f: 02:8a:13:d0:50:2d:90:ba:3c:cd:dd:7f:1f:55:b8: cd:6c:91:e5:32:c4:57:24:e3:e0:51:f4:b0:26:f8: b0:d4:a7:a3:d1:cb:bf:f0:0a:d8:6d:50:3a:29:f8: 71:3c:29:e6:bc:98:0b:15:93:6c:97:27:45:19:51: 7d:18:50:3a:d1:f2:16:d2:a8:89:a7:cb:58:42:15: ea:e0:cc:dd:db:d7:5a:af:f8:1d:64:9d:b2:e8:5a: f7:85:ff:b8:6c:3f:b3:03:59:57:8a:6d:68:78:91: 89:42:52:16:a8:df:e2:dd:34:b8:5e:8e:41:dd:f0: 1e:2a:4b:52:2b:98:9f:3a:73:48:a5:3c:e9:52:6d: 0e:ca:10:8e:41:fe:d9:2a:1e:c7:f7:1e:c4:0e:e3: 5d:ff:bb:ea:9d:5d:6b:eb:bd:3a:b7:cf:46:0a:5e: ac:b5:b9:2c:b3:52:e0:cc:3a:65:73:b3:43:43:15: aa:c3:86:2e:2a:46:aa:e6:e7:ae:68:52:20:d7:1f: bb:dd:e4:76:b9:40:68:43:e2:50:b2:8f:75:39:a8: fe:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:69:16:CD:68:C2:6B:D6:4A:74:14:E5:58:0A:F6:7B:41:7B:ED:F4 X509v3 Authority Key Identifier: keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:70:ac:94:60:80:bd:78:c5:38:f8:da:9c:18:61:24:5f:1e: ba:e2:c6:ca:16:4b:bc:34:6a:ab:37:a6:92:02:a7:4b:73:63: 90:84:f2:4b:35:e4:00:d6:89:8f:61:68:98:b0:58:5b:43:a4: 59:89:7b:73:26:6b:48:cc:b4:d8:c4:67:ec:88:ab:01:dc:28: 0e:4f:e6:78:e8:b8:92:3f:9f:f7:a8:c9:7d:1e:93:44:a6:f6: cd:1e:bf:c9:03:6a:91:32:78:47:b7:d8:b1:d3:77:e6:bf:d4: 57:26:de:49:90:c6:1f:36:4f:64:0f:c2:85:7c:de:ba:dc:83: 4c:b7:1d:f9:0a:76:34:46:96:73:f6:06:d9:10:d6:b1:63:68: 9a:12:3f:89:7e:f7:52:6b:c1:c8:7e:de:c4:c2:47:fb:a7:8f: 8d:c7:8e:7c:fc:18:e7:9d:e7:47:a2:fb:65:41:75:47:43:27: 00:ec:6f:ad:77:94:3f:15:5f:4a:ba:7d:d5:b6:ec:d9:00:ac: 60:d3:13:81:4d:f5:f5:71:34:6d:68:8b:ff:de:2b:e8:fe:7f: 0e:e7:ed:a8:b0:c3:21:5e:28:d1:8e:47:d5:af:10:bc:25:f4: c0:c7:e7:ad:45:3f:ef:4a:78:f3:43:40:eb:8e:45:bd:d2:73: 42:6e:17:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEJCQzEwMzU2MUFGRDdBOTMwMzZEMUM3MkRENEMwQTdD MkE0RTI5Q0UwHhcNMjUwODIyMjIxNzQ0WhcNMjUwODI5MjIxNzQ0WjAYMRYwFAYD VQQDEw02OGE4ZWM4OC0zYjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6GWBJ6gaE59CbhUjO9k+b2WL56fKs/WbeKixAQvorbCQkRueChg1zCcM4Z8C ihPQUC2QujzN3X8fVbjNbJHlMsRXJOPgUfSwJviw1Kej0cu/8ArYbVA6KfhxPCnm vJgLFZNslydFGVF9GFA60fIW0qiJp8tYQhXq4Mzd29dar/gdZJ2y6Fr3hf+4bD+z A1lXim1oeJGJQlIWqN/i3TS4Xo5B3fAeKktSK5ifOnNIpTzpUm0OyhCOQf7ZKh7H 9x7EDuNd/7vqnV1r6706t89GCl6stbkss1LgzDplc7NDQxWqw4YuKkaq5ueuaFIg 1x+73eR2uUBoQ+JQso91Oaj+rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKxpFs1o wmvWSnQU5VgK9ntBe+30MB8GA1UdIwQYMBaAFLvBA1Ya/XqTA20cct1MCnwqTinO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC83OEExRDA4RThE NkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVwTURiUnh5M1V3S2ZDcE9L YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U4RURWaHI5ZXBNRGJSeHkzVXdLZkNwT0tjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC83OEExRDA4RThENkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVw TURiUnh5M1V3S2ZDcE9LYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEcKyUYIC9eMU4+NqcGGEkXx664sbKFku8NGqrN6aSAqdLc2OQhPJL NeQA1omPYWiYsFhbQ6RZiXtzJmtIzLTYxGfsiKsB3CgOT+Z46LiSP5/3qMl9HpNE pvbNHr/JA2qRMnhHt9ix03fmv9RXJt5JkMYfNk9kD8KFfN663INMtx35CnY0RpZz 9gbZENaxY2iaEj+JfvdSa8HIft7Ewkf7p4+Nx458/BjnnedHovtlQXVHQycA7G+t d5Q/FV9Kun3VtuzZAKxg0xOBTfX1cTRtaIv/3ivo/n8O5+2osMMhXijRjkfVrxC8 JfTAx+etRT/vSnjzQ0DrjkW90nNCbhf3 -----END CERTIFICATE-----Generated at Sat Aug 23 19:36:56 2025 by rpki-client