$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft File: 8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json) Hash identifier: RuV+ps5Ghl8VzLpwEl7jHpJN0xyv35k6DVEjCXeJLTU= Subject key identifier: A5:F5:1B:59:C8:22:76:C6:F4:D0:BC:BE:47:9F:F6:98:C7:85:60:3C Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 Certificate issuer: /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft Manifest number: 018A Signing time: Sat 23 Aug 2025 03:38:34 +0000 Manifest this update: Sat 23 Aug 2025 03:38:33 +0000 Manifest next update: Sat 30 Aug 2025 03:38:33 +0000 Files and hashes: 1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: +CSJo351o1hFAlQ2r7nJa1VMikRdswx1SbTzcmJ3BTY=) 2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: JUSU1VmCrt2YGTrN+Q0jV8oiBs7Aumf+6ve9iuHLrvQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483 Validity Not Before: Aug 23 03:38:33 2025 GMT Not After : Aug 30 03:38:33 2025 GMT Subject: CN=68a937b9-a30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:49:da:f9:07:5f:d4:d2:37:03:36:38:fd:f8: 56:15:c0:cf:74:86:63:ce:55:f5:4f:11:dd:cb:f3: 65:da:7f:d3:e7:9c:cb:2b:24:6f:a4:38:98:15:e3: 91:fb:69:34:f4:6f:02:45:22:db:1d:f3:92:32:75: 76:0b:c6:2c:ed:69:ef:b0:c9:74:84:e6:02:7d:8f: b9:8f:f6:df:33:9d:13:70:df:fe:34:d4:a9:cf:78: 25:50:4e:08:33:aa:0d:6d:33:e1:66:29:98:62:10: 8c:89:5d:61:6d:37:34:11:19:de:f3:da:ab:54:5c: e7:7d:db:4a:88:df:cf:9d:d1:11:3e:cb:87:d9:0f: 7a:45:b2:e6:46:51:43:53:75:1e:28:5d:eb:8a:f8: 41:de:12:33:20:b1:12:4e:63:a4:84:98:11:74:67: e1:fe:32:d3:e0:65:f4:e7:8e:5b:eb:6f:8f:fc:17: f8:44:a1:b2:1f:59:82:35:27:f4:9d:b5:1b:f9:9f: 10:0e:8e:68:d2:79:97:df:d3:3a:4e:f6:ab:bb:6c: 14:51:6f:f9:31:2c:69:e8:b1:98:09:a9:1b:75:d9: d0:6a:63:d2:d3:c2:0c:74:01:cc:c3:4d:0f:b5:e2: 58:f7:cc:e9:a0:a0:54:12:44:5a:8b:37:f9:ea:90: a7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F5:1B:59:C8:22:76:C6:F4:D0:BC:BE:47:9F:F6:98:C7:85:60:3C X509v3 Authority Key Identifier: keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:9a:c2:30:2c:ca:33:58:c8:03:59:cb:70:91:01:fb:2e:d5: 01:19:60:c9:93:a2:5e:99:88:13:7c:78:75:e2:98:02:2d:06: cd:af:1f:21:25:60:46:e8:a0:89:2c:af:e0:f1:d3:1d:1d:0b: 87:e0:36:24:57:ec:d0:55:10:8e:31:59:7f:12:0a:8e:d0:36: b2:4d:3e:10:92:11:a2:7b:ca:c9:26:d1:92:f8:30:44:2f:13: 1f:d1:4c:66:48:a6:12:7d:bd:ac:a2:0f:e3:2b:0f:1a:31:f1: ef:68:7f:96:94:e2:92:44:1f:7a:73:1c:84:16:a8:a7:89:88: 00:7b:20:91:38:68:fc:66:4f:22:01:5f:5f:f0:3d:29:64:4c: 39:c0:af:3b:57:f4:2d:61:31:ab:66:71:68:86:9e:94:ef:83: d2:e6:63:d8:20:37:7e:19:56:4e:74:b3:b3:96:6c:bd:97:37: 4b:e8:06:c6:6b:8f:57:9e:ee:e6:01:77:a7:23:a7:f2:b2:d2: e7:4b:1d:12:90:5e:9d:09:42:d9:ba:96:62:c0:dd:3b:8a:b4: c6:28:65:ac:1b:8e:de:a3:f4:61:70:2a:0c:ee:f1:c0:ee:e0: 2b:9c:51:60:9b:d9:51:36:98:a5:e7:30:d7:d6:96:c2:8f:5c: e7:b8:12:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ4RjMxMTAvBgNVBAUTKEYwQzNBQUU5MTdFODhFNjgxNDFBOTZCMjI2RTA0NjAw OUE4MTk0ODMwHhcNMjUwODIzMDMzODMzWhcNMjUwODMwMDMzODMzWjAYMRYwFAYD VQQDEw02OGE5MzdiOS1hMzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAokna+Qdf1NI3AzY4/fhWFcDPdIZjzlX1TxHdy/Nl2n/T55zLKyRvpDiYFeOR +2k09G8CRSLbHfOSMnV2C8Ys7WnvsMl0hOYCfY+5j/bfM50TcN/+NNSpz3glUE4I M6oNbTPhZimYYhCMiV1hbTc0ERne89qrVFznfdtKiN/PndERPsuH2Q96RbLmRlFD U3UeKF3rivhB3hIzILESTmOkhJgRdGfh/jLT4GX0545b62+P/Bf4RKGyH1mCNSf0 nbUb+Z8QDo5o0nmX39M6Tvaru2wUUW/5MSxp6LGYCakbddnQamPS08IMdAHMw00P teJY98zpoKBUEkRaizf56pCn3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKX1G1nI InbG9NC8vkef9pjHhWA8MB8GA1UdIwQYMBaAFPDDqukX6I5oFBqWsibgRgCagZSD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDhGMy9CNzIzNUUyQTI1 MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2ptZ1VHcGF5SnVCR0FKcUJs SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhNT3E2UmZvam1nVUdwYXlKdUJHQUpxQmxJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDhGMy9CNzIzNUUyQTI1MTQxMUVFQThERUNDMUVDNEY5QUUwMi84TU9xNlJmb2pt Z1VHcGF5SnVCR0FKcUJsSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBImsIwLMozWMgDWctwkQH7LtUBGWDJk6JemYgTfHh14pgCLQbNrx8h JWBG6KCJLK/g8dMdHQuH4DYkV+zQVRCOMVl/EgqO0DayTT4QkhGie8rJJtGS+DBE LxMf0UxmSKYSfb2sog/jKw8aMfHvaH+WlOKSRB96cxyEFqiniYgAeyCROGj8Zk8i AV9f8D0pZEw5wK87V/QtYTGrZnFohp6U74PS5mPYIDd+GVZOdLOzlmy9lzdL6AbG a49Xnu7mAXenI6fystLnSx0SkF6dCULZupZiwN07irTGKGWsG47eo/RhcCoM7vHA 7uArnFFgm9lRNpil5zDX1pbCj1znuBJs -----END CERTIFICATE-----Generated at Sat Aug 23 18:24:06 2025 by rpki-client