$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft File: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft (raw, json) Hash identifier: gxtfBpdwam52AjX1HpKeUFZiDT9GKvINERMchDqQISI= Subject key identifier: F3:E4:93:24:B8:F6:0A:D3:A4:25:78:3F:B2:EA:15:6C:ED:83:A9:46 Authority key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A Certificate issuer: /CN=A91709F5/serialNumber=F12895792117E90703A0020F4F359831DB2F937A Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft Manifest number: 57 Signing time: Sat 19 Jul 2025 07:25:50 +0000 Manifest this update: Sat 19 Jul 2025 07:25:50 +0000 Manifest next update: Sat 26 Jul 2025 07:25:50 +0000 Files and hashes: 1: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl (hash: Gq97dnD/E7AQbrQ5JZuuiyn2eAiov0l0iu2V8v7vUuY=) 2: A42925E8DFDA11EFB5E94125C4F9AE02.roa (hash: mx4Ct5Tnd5YkFq5qkT60Yq1dgh6KZfYC5nrKRxnyy28=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A Validity Not Before: Jul 19 07:25:50 2025 GMT Not After : Jul 26 07:25:50 2025 GMT Subject: CN=687b487e-afad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:14:b5:93:c4:55:e0:c0:c2:93:01:63:9d:3b: de:84:9f:b2:32:40:55:ec:e1:c3:fb:19:12:3b:28: c3:9b:3b:55:8d:e7:a9:0e:02:6c:a6:2d:72:ef:ce: a9:fe:27:de:77:e6:74:db:67:b5:d5:4d:78:a9:26: c3:20:90:e0:07:61:09:f1:db:98:99:69:72:62:b7: 65:43:ab:30:7d:b6:64:30:1d:92:51:13:ae:44:ff: ba:27:86:fe:df:23:99:61:49:ff:2e:c1:40:c7:e1: 9a:07:da:53:86:15:64:87:75:23:f2:4f:ce:63:29: 4c:72:d4:d5:f6:f2:62:94:78:a8:73:22:b6:e7:56: 8d:2b:17:e1:06:da:b7:c2:1c:dd:58:e5:26:23:b1: 23:b7:08:54:c9:d4:cd:2b:be:22:f4:39:fc:3d:d0: 57:46:46:6c:e1:9b:2f:d7:b1:9c:a0:36:bb:bb:44: 2d:02:c3:d8:5d:a2:86:b5:36:dc:45:74:02:d3:0f: 96:85:82:b3:c6:93:4e:4c:32:35:4c:e0:1b:c0:a6: 0b:41:26:a3:57:e2:ce:b8:e5:30:93:6e:08:f7:32: 05:7a:87:e8:9f:e9:e9:96:cb:32:4c:72:a4:f3:47: 65:4b:72:62:15:58:bd:f0:4e:41:34:6f:3d:01:d2: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E4:93:24:B8:F6:0A:D3:A4:25:78:3F:B2:EA:15:6C:ED:83:A9:46 X509v3 Authority Key Identifier: keyid:F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:07:d9:fc:3b:f7:49:c8:54:39:5f:12:52:4f:35:69:c7:8b: 37:72:32:36:5d:1a:bc:aa:4c:f7:5e:af:61:9f:1c:72:f3:c3: ba:4e:18:a2:62:ae:3e:c4:dd:2b:ec:e6:ea:63:22:ca:92:10: 7c:bf:61:0d:b1:0f:2d:d9:27:02:ee:8c:93:ff:ee:03:41:8b: 0f:20:58:aa:bc:47:69:e8:e1:43:a9:fd:67:67:83:e9:b6:a9: e8:13:a1:e6:f5:bf:69:44:e0:e6:ca:72:c5:e7:12:7e:2b:3e: 6f:7d:b4:36:51:f5:63:0e:f5:0a:c8:cd:da:63:49:66:49:05: 09:21:ce:13:6f:d9:42:0e:52:fa:bb:94:28:b4:48:11:4d:34: 1d:ca:9e:f3:dc:93:87:d8:6b:3c:7a:31:95:2e:3b:c4:9e:a6: 92:9c:c0:10:8a:ff:6d:c7:69:1c:91:03:73:41:aa:7a:e7:b4: 96:83:09:93:05:a2:ca:bc:28:29:fd:5c:73:08:23:8d:a0:96: fd:65:f3:d6:e4:5b:30:09:ad:88:e7:56:a7:a4:39:6d:20:f3: 2d:9a:42:b9:0f:8e:37:75:8f:69:6d:64:db:be:aa:a3:c6:4a: 60:4c:43:c0:e6:05:91:b0:4c:6e:a1:59:8b:a2:e8:50:a7:82: 28:a7:4a:98 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MDlGNTExMC8GA1UEBRMoRjEyODk1NzkyMTE3RTkwNzAzQTAwMjBGNEYzNTk4MzFE QjJGOTM3QTAeFw0yNTA3MTkwNzI1NTBaFw0yNTA3MjYwNzI1NTBaMBgxFjAUBgNV BAMTDTY4N2I0ODdlLWFmYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDtFLWTxFXgwMKTAWOdO96En7IyQFXs4cP7GRI7KMObO1WN56kOAmymLXLvzqn+ J9535nTbZ7XVTXipJsMgkOAHYQnx25iZaXJit2VDqzB9tmQwHZJRE65E/7onhv7f I5lhSf8uwUDH4ZoH2lOGFWSHdSPyT85jKUxy1NX28mKUeKhzIrbnVo0rF+EG2rfC HN1Y5SYjsSO3CFTJ1M0rviL0Ofw90FdGRmzhmy/XsZygNru7RC0Cw9hdooa1NtxF dALTD5aFgrPGk05MMjVM4BvApgtBJqNX4s645TCTbgj3MgV6h+if6emWyzJMcqTz R2VLcmIVWL3wTkE0bz0B0p8DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8+STJLj2 CtOkJXg/suoVbO2DqUYwHwYDVR0jBBgwFoAU8SiVeSEX6QcDoAIPTzWYMdsvk3ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcwOUY1LzMyODNFN0Q0REZE QTExRUY4QjQ3ODYyNEM0RjlBRTAyLzhTaVZlU0VYNlFjRG9BSVBUeldZTWRzdmsz by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFNpVmVTRVg2UWNEb0FJUFR6V1lNZHN2azNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcw OUY1LzMyODNFN0Q0REZEQTExRUY4QjQ3ODYyNEM0RjlBRTAyLzhTaVZlU0VYNlFj RG9BSVBUeldZTWRzdmszby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHoH2fw790nIVDlfElJPNWnHizdyMjZdGryqTPder2GfHHLzw7pOGKJi rj7E3Svs5upjIsqSEHy/YQ2xDy3ZJwLujJP/7gNBiw8gWKq8R2no4UOp/Wdng+m2 qegToeb1v2lE4ObKcsXnEn4rPm99tDZR9WMO9QrIzdpjSWZJBQkhzhNv2UIOUvq7 lCi0SBFNNB3KnvPck4fYazx6MZUuO8SeppKcwBCK/23HaRyRA3NBqnrntJaDCZMF osq8KCn9XHMII42glv1l89bkWzAJrYjnVqekOW0g8y2aQrkPjjd1j2ltZNu+qqPG SmBMQ8DmBZGwTG6hWYui6FCngiinSpg= -----END CERTIFICATE-----Generated at Sun Jul 20 11:33:00 2025 by rpki-client