$ rpki-client -vvf rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft File: 8Ihby_xPi54CzI2RkpttUoNSrig.mft (raw, json) Hash identifier: RoAPjPk0kZ7eFWiJT1Xw38GJWV7rjumtzf6aDzbaCkU= Subject key identifier: 83:3A:E0:3B:32:83:6A:9E:86:FA:B8:0A:B1:84:59:71:66:38:63:D7 Authority key identifier: F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 Certificate issuer: /CN=A91F894B/serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Certificate serial: 249B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft Manifest number: 247B Signing time: Fri 22 Aug 2025 15:50:25 +0000 Manifest this update: Fri 22 Aug 2025 15:50:25 +0000 Manifest next update: Fri 29 Aug 2025 15:50:25 +0000 Files and hashes: 1: 8Ihby_xPi54CzI2RkpttUoNSrig.crl (hash: WZ1ZUWdOyO/lMC1Wiq9ED7CTbBBxT70I0SO8/O63dDY=) 2: 524FF242CBEA11EE88969C0CC4F9AE02.roa (hash: +ttwdPCfkA5o4U1d3HtcdyMxofKcodTHs7x31tg/unw=) 3: 3FC484EE710211F0BD347869C4F9AE02.roa (hash: GhF9PvzI5x/9vujTT/xlTVo+qNPcjDRdk9u4YkdwFYk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9371 (0x249b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F894B, serialNumber=F0885BCBFC4F8B9E02CC8D91929B6D528352AE28 Validity Not Before: Aug 22 15:50:25 2025 GMT Not After : Aug 29 15:50:25 2025 GMT Subject: CN=68a891c1-5656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:dd:08:6e:9d:f8:68:10:03:a8:3b:0d:8d:30: 40:2d:63:27:99:97:19:f7:80:9b:e8:5b:8f:25:39: 7f:16:7a:8e:a1:38:14:81:3e:9c:9f:ec:8f:6f:15: 7d:8a:44:b8:e1:42:30:de:cf:81:11:ab:f2:87:a2: f2:40:48:00:07:82:94:35:b0:18:45:86:80:39:c2: d9:f6:c5:10:49:ed:c3:e7:6f:5c:0b:62:13:bf:d5: fb:22:84:09:3a:8c:aa:38:b2:5a:fe:66:b4:08:22: db:ee:8d:47:75:3e:c2:3a:44:9d:83:a1:4b:ff:85: cb:a9:a3:1d:5a:67:ad:68:94:bb:ce:01:c9:a7:db: a5:67:19:7f:01:2a:c3:b0:90:06:98:b9:e8:1e:32: 98:c4:67:3c:8d:c7:45:e8:77:0d:dc:f8:9c:df:f8: 11:a9:b1:1f:b3:db:5d:73:84:bc:16:c3:74:e6:7c: 45:67:eb:dd:38:e5:28:fc:71:91:3e:16:c8:68:11: 5a:9b:fc:87:8b:ac:a7:96:7f:38:21:95:86:7c:82: a6:ac:e2:49:60:28:f2:9c:29:4b:20:dd:59:aa:48: 2a:a6:b3:6b:25:d9:2c:bb:77:3b:a8:5f:2e:4c:ae: 8c:1b:d8:e3:d6:ce:52:c6:58:38:1b:d8:65:3c:eb: b8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3A:E0:3B:32:83:6A:9E:86:FA:B8:0A:B1:84:59:71:66:38:63:D7 X509v3 Authority Key Identifier: keyid:F0:88:5B:CB:FC:4F:8B:9E:02:CC:8D:91:92:9B:6D:52:83:52:AE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Ihby_xPi54CzI2RkpttUoNSrig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F894B/5DE921FC549B11E583AAC16EC4F9AE02/8Ihby_xPi54CzI2RkpttUoNSrig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:5e:ac:e9:43:18:f2:b1:ec:1a:cf:b7:65:8c:d4:b3:d6:92: 07:8f:eb:2e:8c:38:45:4f:ad:a1:e4:63:40:8c:b6:10:ce:50: 5b:0b:a4:71:0f:1a:b2:5b:67:63:a4:cc:ad:eb:c5:e6:9b:c6: f1:ae:02:64:e3:2f:cb:ce:85:ee:5f:d6:6f:d9:47:07:20:a6: fe:3f:da:f4:56:d1:43:82:44:59:ba:d2:bf:e7:7f:5e:f4:bc: 1a:1a:20:f8:cd:e2:b4:49:dd:5c:0d:43:83:7d:63:5f:fb:f8: 29:6e:96:3e:8e:c0:d3:1e:10:c4:af:a6:8d:f8:85:8c:3c:df: 0b:1d:d8:30:a1:c4:72:9b:64:69:27:cd:64:43:d6:f4:24:c9: 58:8d:99:c6:2e:96:cf:00:87:a1:8f:e1:67:0b:8f:b2:a0:9d: 27:75:ae:b2:ec:a5:9a:87:ea:ec:93:aa:fa:d5:8f:13:d3:45: 03:7b:4a:b9:9c:9a:8c:19:1f:d0:6e:7b:f1:ce:6b:01:7f:79: df:de:e8:b6:5c:fd:ef:cf:52:42:c7:bb:4c:c4:e3:c5:fe:8a: 9c:c9:c2:e9:c7:31:f1:4f:0d:bd:59:6e:0c:23:48:0d:dc:df: 56:cf:5b:53:31:9a:2a:07:a6:28:ee:bb:f0:9f:a3:c6:c0:f5: 0e:85:1c:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5NEIxMTAvBgNVBAUTKEYwODg1QkNCRkM0RjhCOUUwMkNDOEQ5MTkyOUI2RDUy ODM1MkFFMjgwHhcNMjUwODIyMTU1MDI1WhcNMjUwODI5MTU1MDI1WjAYMRYwFAYD VQQDEw02OGE4OTFjMS01NjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq90Ibp34aBADqDsNjTBALWMnmZcZ94Cb6FuPJTl/FnqOoTgUgT6cn+yPbxV9 ikS44UIw3s+BEavyh6LyQEgAB4KUNbAYRYaAOcLZ9sUQSe3D529cC2ITv9X7IoQJ OoyqOLJa/ma0CCLb7o1HdT7COkSdg6FL/4XLqaMdWmetaJS7zgHJp9ulZxl/ASrD sJAGmLnoHjKYxGc8jcdF6HcN3Pic3/gRqbEfs9tdc4S8FsN05nxFZ+vdOOUo/HGR PhbIaBFam/yHi6ynln84IZWGfIKmrOJJYCjynClLIN1ZqkgqprNrJdksu3c7qF8u TK6MG9jj1s5Sxlg4G9hlPOu4yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIM64Dsy g2qehvq4CrGEWXFmOGPXMB8GA1UdIwQYMBaAFPCIW8v8T4ueAsyNkZKbbVKDUq4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODk0Qi81REU5MjFGQzU0 OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1NEN6STJSa3B0dFVvTlNy aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhJaGJ5X3hQaTU0Q3pJMlJrcHR0VW9OU3JpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODk0Qi81REU5MjFGQzU0OUIxMUU1ODNBQUMxNkVDNEY5QUUwMi84SWhieV94UGk1 NEN6STJSa3B0dFVvTlNyaWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJXqzpQxjysewaz7dljNSz1pIHj+sujDhFT62h5GNAjLYQzlBbC6Rx DxqyW2djpMyt68Xmm8bxrgJk4y/LzoXuX9Zv2UcHIKb+P9r0VtFDgkRZutK/539e 9LwaGiD4zeK0Sd1cDUODfWNf+/gpbpY+jsDTHhDEr6aN+IWMPN8LHdgwocRym2Rp J81kQ9b0JMlYjZnGLpbPAIehj+FnC4+yoJ0nda6y7KWah+rsk6r61Y8T00UDe0q5 nJqMGR/QbnvxzmsBf3nf3ui2XP3vz1JCx7tMxOPF/oqcycLpxzHxTw29WW4MI0gN 3N9Wz1tTMZoqB6Yo7rvwn6PGwPUOhRyy -----END CERTIFICATE-----Generated at Sat Aug 23 21:32:12 2025 by rpki-client