$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft File: 8bt55W0rCYaSzH0fIm91bHlh4Zs.mft (raw, json) Hash identifier: ri/8dqWxkQliAm77tDhPrzpzpnOSX/v85jTE56pPG7I= Subject key identifier: 3A:7A:A8:4E:B8:00:7D:C5:DD:BA:A7:57:78:8D:09:FE:9F:70:6C:5A Authority key identifier: F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B Certificate issuer: /CN=A91A29A1/serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B Certificate serial: 0788 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft Manifest number: 0782 Signing time: Mon 28 Jul 2025 21:57:47 +0000 Manifest this update: Mon 28 Jul 2025 21:57:46 +0000 Manifest next update: Mon 04 Aug 2025 21:57:46 +0000 Files and hashes: 1: 8bt55W0rCYaSzH0fIm91bHlh4Zs.crl (hash: Z1PsvONzzPNgMKPRy8emieBUOKA59WrKzs2e8uycf+w=) 2: FD33BACA1E5211EBA055EE2BC4F9AE02.roa (hash: Dkqf9iSh4QQJs2mZkJEMgbT0BzwzhORuJVYaCkXmjeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 04 Aug 2025 21:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1928 (0x788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A29A1, serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B Validity Not Before: Jul 28 21:57:46 2025 GMT Not After : Aug 4 21:57:46 2025 GMT Subject: CN=6887f25a-2e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a2:29:4c:23:74:ea:0d:55:e3:17:3c:41:64: eb:e4:e7:f5:4a:87:10:1b:b7:e5:80:40:e6:1d:c9: d4:18:06:43:d7:01:df:f5:72:6e:70:14:b3:eb:69: d8:79:82:ee:6f:29:af:e5:70:d6:22:88:c4:28:a4: 42:bf:4e:06:c3:0f:0a:24:ad:05:a6:3f:59:5f:49: 05:9b:0b:ab:17:26:38:e5:1c:b7:97:4c:70:86:66: 3f:1c:dc:58:a1:41:0e:5d:9c:bc:4c:cb:f3:74:e2: f6:69:7b:ba:5a:c6:75:83:cc:97:c6:04:db:0c:73: 7a:0e:4d:99:88:f5:8f:2c:01:22:90:26:21:81:d0: 14:1e:0e:45:61:b5:d3:dd:7d:97:06:a8:f1:74:76: 0e:9c:b2:3d:a0:72:d8:ac:56:b7:70:b1:9b:d5:70: b7:d7:10:f1:f7:2d:58:fb:9d:0f:c9:69:c8:c7:1f: 20:1e:50:81:a8:80:24:58:28:9b:20:e7:36:6d:60: 13:52:ba:00:c4:17:cd:e3:e3:96:d7:df:48:2b:76: 21:7d:a6:9c:ba:91:77:7a:9b:74:7a:41:22:b7:ad: 68:46:d1:e1:67:d9:a4:ad:28:2e:c7:e1:d6:50:e4: cd:6c:90:51:e6:b8:ce:00:bd:c6:62:99:47:bf:5c: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:7A:A8:4E:B8:00:7D:C5:DD:BA:A7:57:78:8D:09:FE:9F:70:6C:5A X509v3 Authority Key Identifier: keyid:F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:aa:4d:3d:6e:dd:a7:0e:e0:1a:a0:2d:19:bb:29:89:a2:f2: 8f:0e:b4:63:ef:3c:32:54:19:80:21:8d:f0:51:72:d7:de:58: 37:f7:ed:e7:00:1e:5a:de:4a:90:15:a8:74:bb:47:56:a5:1f: 81:2a:26:4f:85:20:ee:6d:e1:2e:dc:99:bb:b7:e4:dc:51:97: 4d:fc:0d:5b:89:82:b2:9a:ce:d0:50:05:76:59:3f:e5:ca:b7: 65:6c:3e:67:51:a0:20:a4:8b:d5:00:21:dd:d5:ef:27:b2:7d: a8:85:56:00:5e:9f:03:6e:9c:97:93:8e:8f:9c:8a:d6:ec:27: 80:a3:90:0d:f2:5d:07:8b:f9:46:40:53:d8:7f:ab:ca:e5:be: 57:7c:31:91:c3:3b:82:11:2d:b6:9b:43:b6:9f:c8:ac:39:36: e1:62:15:89:8a:55:15:0f:ec:db:55:52:77:6d:19:34:aa:4f: f7:c9:71:c7:5a:9a:26:83:53:02:39:c6:ec:5f:4a:bc:f9:63: 9f:fa:c9:77:9f:66:50:d0:fd:8c:52:92:5d:1d:b6:39:20:20: 9c:0b:7b:d9:8e:fd:41:f3:ec:38:f7:0f:fc:ce:22:15:24:14: 50:f8:92:f3:49:97:bc:be:a4:0a:c5:48:b2:7c:c3:4c:d2:de: 96:98:db:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI5QTExMTAvBgNVBAUTKEYxQkI3OUU1NkQyQjA5ODY5MkNDN0QxRjIyNkY3NTZD Nzk2MUUxOUIwHhcNMjUwNzI4MjE1NzQ2WhcNMjUwODA0MjE1NzQ2WjAYMRYwFAYD VQQDEw02ODg3ZjI1YS0yZTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6IpTCN06g1V4xc8QWTr5Of1SocQG7flgEDmHcnUGAZD1wHf9XJucBSz62nY eYLubymv5XDWIojEKKRCv04Gww8KJK0Fpj9ZX0kFmwurFyY45Ry3l0xwhmY/HNxY oUEOXZy8TMvzdOL2aXu6WsZ1g8yXxgTbDHN6Dk2ZiPWPLAEikCYhgdAUHg5FYbXT 3X2XBqjxdHYOnLI9oHLYrFa3cLGb1XC31xDx9y1Y+50PyWnIxx8gHlCBqIAkWCib IOc2bWATUroAxBfN4+OW199IK3YhfaacupF3ept0ekEit61oRtHhZ9mkrSgux+HW UOTNbJBR5rjOAL3GYplHv1xqtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDp6qE64 AH3F3bqnV3iNCf6fcGxaMB8GA1UdIwQYMBaAFPG7eeVtKwmGksx9HyJvdWx5YeGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlBMS9GOEYwRUM5NjFF NTAxMUVCODIwNzg2MjZDNEY5QUUwMi84YnQ1NVcwckNZYVN6SDBmSW05MWJIbGg0 WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhidDU1VzByQ1lhU3pIMGZJbTkxYkhsaDRacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjlBMS9GOEYwRUM5NjFFNTAxMUVCODIwNzg2MjZDNEY5QUUwMi84YnQ1NVcwckNZ YVN6SDBmSW05MWJIbGg0WnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXqk09bt2nDuAaoC0ZuymJovKPDrRj7zwyVBmAIY3wUXLX3lg39+3n AB5a3kqQFah0u0dWpR+BKiZPhSDubeEu3Jm7t+TcUZdN/A1biYKyms7QUAV2WT/l yrdlbD5nUaAgpIvVACHd1e8nsn2ohVYAXp8DbpyXk46PnIrW7CeAo5AN8l0Hi/lG QFPYf6vK5b5XfDGRwzuCES22m0O2n8isOTbhYhWJilUVD+zbVVJ3bRk0qk/3yXHH Wpomg1MCOcbsX0q8+WOf+sl3n2ZQ0P2MUpJdHbY5ICCcC3vZjv1B8+w49w/8ziIV JBRQ+JLzSZe8vqQKxUiyfMNM0t6WmNuQ -----END CERTIFICATE-----Generated at Tue Jul 29 00:15:25 2025 by rpki-client