$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft File: B82dMe1hhir1A-UglCjHyyfqiB8.mft (raw, json) Hash identifier: 5Sz5sFnYIQP73iA79mtxXUqgXLpS9iOP2GnR/6ocfts= Subject key identifier: 30:08:BA:D6:9B:42:F8:7B:EB:47:7E:A5:B6:70:F4:76:9D:7B:72:2A Authority key identifier: 07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F Certificate issuer: /CN=A91FD609/serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F Certificate serial: 081A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft Manifest number: 0810 Signing time: Fri 22 Aug 2025 21:01:08 +0000 Manifest this update: Fri 22 Aug 2025 21:01:07 +0000 Manifest next update: Fri 29 Aug 2025 21:01:07 +0000 Files and hashes: 1: B82dMe1hhir1A-UglCjHyyfqiB8.crl (hash: LmoE1Dy5LcRn1g1NmYTHs09ya9rB0Lx4EjiX8Jsz0qw=) 2: 765DBCFEEC1A11EAA8520072C4F9AE02.roa (hash: LwXV2swiHkwzhmRJHgtxVwl/mp8FDjhnbQvKS2GLsds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2074 (0x81a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD609, serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F Validity Not Before: Aug 22 21:01:07 2025 GMT Not After : Aug 29 21:01:07 2025 GMT Subject: CN=68a8da93-0c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:60:89:dc:88:b7:2e:a3:60:2a:2f:15:35:82: 19:09:2a:72:51:58:33:96:1f:02:2d:4e:f5:3f:7a: 41:c0:6c:d2:f7:db:8a:1f:74:9f:75:4a:8e:b4:68: 80:e8:3d:40:74:c3:86:48:1d:f7:58:33:67:60:dd: 86:0d:9d:7d:50:05:8d:e5:31:e8:aa:ad:aa:83:31: a1:60:c8:e0:c5:10:55:98:54:4d:df:87:23:a4:d2: 5e:ee:46:82:a4:84:c6:a1:98:31:a0:84:45:d1:7a: e5:db:27:97:d5:1f:7e:26:62:1f:f5:10:55:a3:7d: 60:01:0e:d9:d3:16:fc:b3:91:15:0f:87:a1:5f:76: 15:d6:24:e3:53:21:5d:34:16:b4:03:3a:3f:21:8d: 3d:21:d5:33:78:64:b3:38:db:cb:4c:90:1e:f9:2e: c3:15:a4:29:2d:2d:5c:c6:38:5f:52:cf:40:eb:e5: c8:72:f4:7b:46:05:a8:0e:94:fa:56:30:22:a2:3b: 5a:d8:5c:f3:03:0b:b8:51:e0:3b:4a:81:f6:2b:ba: 2e:e0:7b:d9:91:ac:68:b6:8a:98:f5:21:15:8e:b0: 46:61:2c:fa:ca:55:f6:8b:2c:0c:17:c0:9e:a9:bd: 0b:b2:f1:b1:ad:35:99:79:e9:88:d0:87:90:de:32: 0b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:08:BA:D6:9B:42:F8:7B:EB:47:7E:A5:B6:70:F4:76:9D:7B:72:2A X509v3 Authority Key Identifier: keyid:07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:6a:7a:13:df:1d:6e:9d:12:ad:41:f4:48:55:d1:74:1d:fd: a8:e2:50:a9:ab:d8:3e:eb:9e:e1:3e:0b:21:0c:e1:66:38:b6: 99:a4:e3:5b:3b:16:ff:bf:6c:b9:0f:95:39:27:61:02:5c:35: d7:74:70:d3:36:3f:8b:20:7c:17:5d:89:d4:81:62:6e:d3:eb: 08:45:9f:08:bb:41:16:0a:0c:76:a4:bb:50:ea:7f:c0:1d:37: 02:a7:53:a2:75:45:1c:a0:7e:4e:e9:6d:4d:c1:63:93:30:0b: 8c:89:56:ea:9e:46:f7:c7:6c:a7:6c:3e:a9:58:2a:ca:67:1d: 09:f9:44:5c:84:0e:66:1e:ca:a5:c4:f8:74:ed:6e:79:31:1a: 21:3c:a5:02:bc:d4:4c:dd:64:49:53:de:38:b9:f8:42:16:f1: 87:8a:b1:87:34:35:78:1b:0e:e6:5e:b8:bc:f4:c2:03:bb:e5: 2c:19:a2:8f:9b:c3:53:41:b5:a9:30:6a:28:a6:5c:cf:04:eb: 39:37:6f:c4:e2:b7:b5:ec:60:ae:4f:62:6b:3b:e9:e6:25:80: c8:3f:45:12:1d:5d:7b:fa:ed:b3:2d:87:c9:39:56:3f:3e:99: 0b:5e:37:c3:9a:c6:f8:6d:c3:99:3e:7d:6e:98:c5:35:05:5c: c2:49:01:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2MDkxMTAvBgNVBAUTKDA3Q0Q5RDMxRUQ2MTg2MkFGNTAzRTUyMDk0MjhDN0NC MjdFQTg4MUYwHhcNMjUwODIyMjEwMTA3WhcNMjUwODI5MjEwMTA3WjAYMRYwFAYD VQQDEw02OGE4ZGE5My0wYzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+mCJ3Ii3LqNgKi8VNYIZCSpyUVgzlh8CLU71P3pBwGzS99uKH3SfdUqOtGiA 6D1AdMOGSB33WDNnYN2GDZ19UAWN5THoqq2qgzGhYMjgxRBVmFRN34cjpNJe7kaC pITGoZgxoIRF0Xrl2yeX1R9+JmIf9RBVo31gAQ7Z0xb8s5EVD4ehX3YV1iTjUyFd NBa0Azo/IY09IdUzeGSzONvLTJAe+S7DFaQpLS1cxjhfUs9A6+XIcvR7RgWoDpT6 VjAiojta2FzzAwu4UeA7SoH2K7ou4HvZkaxotoqY9SEVjrBGYSz6ylX2iywMF8Ce qb0LsvGxrTWZeemI0IeQ3jILcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAIutab Qvh760d+pbZw9Hade3IqMB8GA1UdIwQYMBaAFAfNnTHtYYYq9QPlIJQox8sn6ogf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDYwOS8wQzYwOUI5Q0VD MTkxMUVBOTI1REZDNkZDNEY5QUUwMi9CODJkTWUxaGhpcjFBLVVnbENqSHl5ZnFp QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I4MmRNZTFoaGlyMUEtVWdsQ2pIeXlmcWlCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDYwOS8wQzYwOUI5Q0VDMTkxMUVBOTI1REZDNkZDNEY5QUUwMi9CODJkTWUxaGhp cjFBLVVnbENqSHl5ZnFpQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkanoT3x1unRKtQfRIVdF0Hf2o4lCpq9g+657hPgshDOFmOLaZpONb Oxb/v2y5D5U5J2ECXDXXdHDTNj+LIHwXXYnUgWJu0+sIRZ8Iu0EWCgx2pLtQ6n/A HTcCp1OidUUcoH5O6W1NwWOTMAuMiVbqnkb3x2ynbD6pWCrKZx0J+URchA5mHsql xPh07W55MRohPKUCvNRM3WRJU944ufhCFvGHirGHNDV4Gw7mXri89MIDu+UsGaKP m8NTQbWpMGooplzPBOs5N2/E4re17GCuT2JrO+nmJYDIP0USHV17+u2zLYfJOVY/ PpkLXjfDmsb4bcOZPn1umMU1BVzCSQHJ -----END CERTIFICATE-----Generated at Sat Aug 23 18:22:59 2025 by rpki-client