$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json) Hash identifier: PTrA6W93RWIFXAXUBzUH0CQpUSePNeuuq+pgzr0q8ak= Subject key identifier: E3:65:21:7E:14:0E:2E:32:13:83:41:BB:4F:E5:B5:F5:50:AC:33:B8 Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Certificate serial: 016B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft Manifest number: 0164 Signing time: Fri 01 Aug 2025 05:16:51 +0000 Manifest this update: Fri 01 Aug 2025 05:16:50 +0000 Manifest next update: Fri 08 Aug 2025 05:16:50 +0000 Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: fsUFM9vlAlP7pRVmai3/MSmBeBgyz8uaKZZO5fgjay4=) 2: CE74C490AA4911EF80B4D381C4F9AE02.roa (hash: 9trSPATG6e6kZcNLx6FEo2PvgXLIh+akuZgMM6SjcBw=) 3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: XwxYtSorve+SAC3u+XigKdLjB1a8nt+xDntpvYaL7J8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 05:16:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 363 (0x16b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D Validity Not Before: Aug 1 05:16:50 2025 GMT Not After : Aug 8 05:16:50 2025 GMT Subject: CN=688c4dc3-8f8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f0:8d:c5:67:2f:69:a4:c1:5a:de:f0:6a:a3: 34:d2:e3:f2:83:7f:75:21:25:28:c5:27:8e:89:79: e7:bd:59:9f:10:7f:ac:5b:99:2a:80:3f:fd:f1:7b: 57:b7:61:a2:6e:2d:80:10:12:e7:70:c3:e1:94:92: 79:3e:eb:20:a6:a2:c0:14:ea:a3:a9:3d:bb:b8:2e: 47:8f:e3:bf:ec:ad:69:f6:f4:46:a0:68:80:0f:41: 05:f2:8b:14:83:5b:82:76:13:0d:2c:9c:f5:39:2b: d1:31:74:51:0d:d9:96:54:b2:64:d0:aa:05:bd:b2: 18:0d:bc:22:95:73:7d:2b:a8:ee:1a:1a:eb:28:50: 12:86:d3:19:59:9d:33:18:bc:9d:de:a4:88:fe:8a: 5a:b1:66:1d:0a:c7:ff:7e:3e:e2:7a:1b:c8:62:bb: f3:dc:df:dd:30:c8:51:e6:c6:a6:d0:1f:0e:93:89: 19:1c:5d:07:36:98:6d:e0:a3:30:2d:07:22:4a:8b: e4:88:67:c5:4e:0e:3c:5b:48:8a:fa:f6:82:cc:f7: c0:ad:cc:ea:34:55:37:d9:3e:27:3a:f5:1f:17:a4: e6:a8:4b:21:22:3c:57:05:89:25:2f:c3:ae:a1:ac: 25:59:7f:62:48:2b:2a:d9:83:31:f8:2e:8a:e1:9d: 65:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:65:21:7E:14:0E:2E:32:13:83:41:BB:4F:E5:B5:F5:50:AC:33:B8 X509v3 Authority Key Identifier: keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:25:4c:78:97:cc:1f:80:86:d1:a1:14:9b:28:0d:dc:a5:2c: a5:9a:cb:73:ff:91:d7:83:3f:27:75:e7:fb:86:49:25:6d:42: 27:a7:5e:51:62:79:47:c4:f8:b0:29:76:f9:66:f5:0c:c9:9b: b5:41:51:50:90:fc:8e:9b:b4:40:31:eb:64:23:88:62:e4:8e: d3:84:45:5b:28:df:60:f7:ab:c0:62:3d:02:91:8e:cb:47:f8: 28:b0:ef:76:f7:0f:44:74:d3:74:13:72:bf:38:92:8a:93:df: 1c:f4:92:22:9d:2f:5e:1f:f0:ae:8c:fe:3a:fe:cb:fe:c2:a8: 37:2c:30:24:aa:5d:8a:d6:51:c9:9a:24:d9:00:2e:6e:b2:9c: 96:91:5c:61:3f:1b:45:6f:3d:ce:0b:06:f0:10:7d:ae:66:50: 7b:01:a8:14:aa:44:2d:44:7b:19:c3:76:eb:6c:cf:19:f8:05: 73:1d:e8:df:35:9e:11:9e:ef:d7:6c:0c:44:46:1b:5a:16:3d: 71:b2:41:12:63:e8:22:36:55:10:18:47:b7:2e:ed:a7:4e:a6: de:ca:e8:24:fe:d9:83:28:12:cf:80:9d:64:2e:42:29:2c:b4: 41:74:4d:6c:22:2e:58:69:94:f7:d4:a2:9e:db:0f:e0:51:40: 4a:cd:49:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZGMjUxMTAvBgNVBAUTKEYxMUYyNDlCODIxREZDQzJCMUI5N0FGNEU3MDUyNkRE OTMzQTEyN0QwHhcNMjUwODAxMDUxNjUwWhcNMjUwODA4MDUxNjUwWjAYMRYwFAYD VQQDEw02ODhjNGRjMy04ZjhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzPCNxWcvaaTBWt7waqM00uPyg391ISUoxSeOiXnnvVmfEH+sW5kqgD/98XtX t2Gibi2AEBLncMPhlJJ5PusgpqLAFOqjqT27uC5Hj+O/7K1p9vRGoGiAD0EF8osU g1uCdhMNLJz1OSvRMXRRDdmWVLJk0KoFvbIYDbwilXN9K6juGhrrKFAShtMZWZ0z GLyd3qSI/opasWYdCsf/fj7iehvIYrvz3N/dMMhR5sam0B8Ok4kZHF0HNpht4KMw LQciSovkiGfFTg48W0iK+vaCzPfArczqNFU32T4nOvUfF6TmqEshIjxXBYklL8Ou oawlWX9iSCsq2YMx+C6K4Z1lVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONlIX4U Di4yE4NBu0/ltfVQrDO4MB8GA1UdIwQYMBaAFPEfJJuCHfzCsbl69OcFJt2TOhJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkYyNS82MDY0QkFCMjUy RjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9NS3h1WHIwNXdVbTNaTTZF bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOGttNElkX01LeHVYcjA1d1VtM1pNNkVuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkYyNS82MDY0QkFCMjUyRjQxMUVFODk4QjlCNDNDNEY5QUUwMi84UjhrbTRJZF9N S3h1WHIwNXdVbTNaTTZFbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaJUx4l8wfgIbRoRSbKA3cpSylmstz/5HXgz8ndef7hkklbUInp15R YnlHxPiwKXb5ZvUMyZu1QVFQkPyOm7RAMetkI4hi5I7ThEVbKN9g96vAYj0CkY7L R/gosO929w9EdNN0E3K/OJKKk98c9JIinS9eH/CujP46/sv+wqg3LDAkql2K1lHJ miTZAC5uspyWkVxhPxtFbz3OCwbwEH2uZlB7AagUqkQtRHsZw3brbM8Z+AVzHejf NZ4Rnu/XbAxERhtaFj1xskESY+giNlUQGEe3Lu2nTqbeyugk/tmDKBLPgJ1kLkIp LLRBdE1sIi5YaZT31KKe2w/gUUBKzUmZ -----END CERTIFICATE-----Generated at Fri Aug 1 18:19:23 2025 by rpki-client