$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft File: q8dSj86PeUX0YPdSdIJB2tVnilo.mft (raw, json) Hash identifier: jE0TaiVMWYlrSzMyMi/GnxZb9jUgFdre6xepV+QRVRg= Subject key identifier: B5:23:47:07:D6:66:5E:FA:29:0E:4D:27:5F:83:2D:25:B3:AF:6D:7E Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A Certificate issuer: /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Certificate serial: 07D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft Manifest number: 07CF Signing time: Fri 22 Aug 2025 21:16:08 +0000 Manifest this update: Fri 22 Aug 2025 21:16:07 +0000 Manifest next update: Fri 29 Aug 2025 21:16:07 +0000 Files and hashes: 1: q8dSj86PeUX0YPdSdIJB2tVnilo.crl (hash: HrIEUIAnu5wNK8+D+MLFzB3mkXyQq/Xtec6gzFt3qmA=) 2: AC1CD860039511EBBE8C7F47C4F9AE02.roa (hash: cujX/yOvlRxdf5P8eSmQLnHVmBWJtY4Bh7R/a7D9SZs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2005 (0x7d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F367D, serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Validity Not Before: Aug 22 21:16:07 2025 GMT Not After : Aug 29 21:16:07 2025 GMT Subject: CN=68a8de18-cc86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:68:a0:7e:44:73:de:7c:77:b2:92:c2:04:1d: 92:0d:da:d9:b9:06:05:12:aa:52:8f:83:9c:84:da: b2:a3:52:97:39:ce:0d:78:6e:36:02:ed:55:ba:ce: 34:bc:43:e7:1f:d6:46:51:c2:3b:86:d3:3a:79:c1: 4b:3a:06:da:d7:6d:ff:f4:80:be:34:14:a2:43:a7: 0d:d6:8f:2b:b9:af:40:85:79:e8:ef:43:74:6c:12: 6b:08:0b:91:63:99:37:9a:e2:77:be:c8:09:b4:64: 10:98:ff:df:eb:55:58:b0:89:36:c0:5d:42:a0:3d: 5d:09:e1:d8:91:1d:1e:e1:0a:23:16:22:bc:31:61: 65:23:24:9b:81:52:fa:f5:fd:3d:87:60:b9:48:75: 09:c8:f3:4a:c4:60:54:de:42:ed:dd:6e:88:69:3a: 60:f4:5c:e5:7f:b1:11:4f:89:bf:b9:cd:3e:f8:65: cc:8e:d3:be:60:51:0e:56:2d:10:be:85:44:9c:ea: 38:d2:99:83:f2:6e:ab:99:21:9b:a6:a3:f7:43:b7: 45:39:93:96:4d:0e:7b:4f:26:06:2f:53:3d:7f:26: 76:72:0b:a4:c3:84:64:34:3d:4f:8d:33:44:78:f5: 61:10:f9:72:4f:a3:13:40:ad:c1:8f:f9:ca:18:6d: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:23:47:07:D6:66:5E:FA:29:0E:4D:27:5F:83:2D:25:B3:AF:6D:7E X509v3 Authority Key Identifier: keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:94:d1:9b:c2:fa:34:29:9e:cd:e9:cb:1e:db:05:a4:40:d8: 8f:2d:5b:63:52:39:5a:33:00:d4:2f:6e:f0:b0:78:26:75:87: c9:90:b9:91:a2:f1:6c:81:57:59:55:aa:9a:0a:ec:48:ff:e2: a8:3e:32:eb:57:eb:c2:26:c5:31:49:78:65:41:86:14:e4:3c: df:b3:09:21:25:e5:eb:a7:79:00:bb:42:ce:f6:3f:dc:ac:68: 99:24:90:4f:a5:d6:49:c4:d8:b6:90:66:e2:ad:6e:98:c3:8a: 60:da:29:82:89:13:ee:00:e2:45:40:13:ed:d7:4a:5a:08:85: aa:9e:93:14:af:af:30:e7:e7:a2:0e:d7:ee:e6:bd:ec:22:f1: 65:87:57:c9:49:f2:9c:9d:83:22:b0:1d:49:c8:1c:7a:05:2b: b5:6b:d8:e8:ff:65:e6:eb:4c:d8:12:11:90:c7:67:ea:20:ef: 6d:dd:7a:59:d8:62:4a:ee:f4:fb:ec:ff:56:6d:d2:d8:0d:29: 8f:78:34:a6:6c:db:17:80:c8:41:ee:81:9e:50:5c:6d:21:e6: d0:dd:d7:67:eb:8f:60:39:81:c2:8a:15:2c:ea:29:7b:d9:ed: ae:3a:c3:69:3c:fa:f4:78:db:1e:4f:6a:65:cc:9a:26:ee:43: 55:70:ef:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM2N0QxMTAvBgNVBAUTKEFCQzc1MjhGQ0U4Rjc5NDVGNDYwRjc1Mjc0ODI0MURB RDU2NzhBNUEwHhcNMjUwODIyMjExNjA3WhcNMjUwODI5MjExNjA3WjAYMRYwFAYD VQQDEw02OGE4ZGUxOC1jYzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1migfkRz3nx3spLCBB2SDdrZuQYFEqpSj4OchNqyo1KXOc4NeG42Au1Vus40 vEPnH9ZGUcI7htM6ecFLOgba123/9IC+NBSiQ6cN1o8rua9AhXno70N0bBJrCAuR Y5k3muJ3vsgJtGQQmP/f61VYsIk2wF1CoD1dCeHYkR0e4QojFiK8MWFlIySbgVL6 9f09h2C5SHUJyPNKxGBU3kLt3W6IaTpg9Fzlf7ERT4m/uc0++GXMjtO+YFEOVi0Q voVEnOo40pmD8m6rmSGbpqP3Q7dFOZOWTQ57TyYGL1M9fyZ2cgukw4RkND1PjTNE ePVhEPlyT6MTQK3Bj/nKGG0ITQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLUjRwfW Zl76KQ5NJ1+DLSWzr21+MB8GA1UdIwQYMBaAFKvHUo/Oj3lF9GD3UnSCQdrVZ4pa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzY3RC85OURBN0FCRTAz OTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVVWDBZUGRTZElKQjJ0Vm5p bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E4ZFNqODZQZVVYMFlQZFNkSUpCMnRWbmlsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzY3RC85OURBN0FCRTAzOTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVV WDBZUGRTZElKQjJ0Vm5pbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnlNGbwvo0KZ7N6cse2wWkQNiPLVtjUjlaMwDUL27wsHgmdYfJkLmR ovFsgVdZVaqaCuxI/+KoPjLrV+vCJsUxSXhlQYYU5DzfswkhJeXrp3kAu0LO9j/c rGiZJJBPpdZJxNi2kGbirW6Yw4pg2imCiRPuAOJFQBPt10paCIWqnpMUr68w5+ei Dtfu5r3sIvFlh1fJSfKcnYMisB1JyBx6BSu1a9jo/2Xm60zYEhGQx2fqIO9t3XpZ 2GJK7vT77P9WbdLYDSmPeDSmbNsXgMhB7oGeUFxtIebQ3ddn649gOYHCihUs6il7 2e2uOsNpPPr0eNseT2plzJom7kNVcO8a -----END CERTIFICATE-----Generated at Sun Aug 24 02:39:14 2025 by rpki-client