$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft File: 8u2bFw-uMIgyQDmZULa8lTgOdBw.mft (raw, json) Hash identifier: L7AN01WQqKTjV11NMDPR/TS7Ybj53FtzheOc+wNga/o= Subject key identifier: D1:E2:37:0C:29:DC:0F:40:49:91:06:BC:6D:89:22:27:8D:42:AB:25 Authority key identifier: F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C Certificate issuer: /CN=A91A4749/serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C Certificate serial: 0A0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft Manifest number: 0A08 Signing time: Fri 18 Jul 2025 20:03:46 +0000 Manifest this update: Fri 18 Jul 2025 20:03:46 +0000 Manifest next update: Fri 25 Jul 2025 20:03:46 +0000 Files and hashes: 1: 8u2bFw-uMIgyQDmZULa8lTgOdBw.crl (hash: k59Fy1DJaBcUpi6moKLnDbfxm0o+pgdAXtyXcUgZ/Ms=) 2: B42EBFF6796511EAB0595B6EC4F9AE02.roa (hash: V8Z8HmUncpPjZ/REq7LDcZRNs3S7Epom6Z4Lg9G8sOI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.crl rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:03:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2575 (0xa0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4749, serialNumber=F2ED9B170FAE30883240399950B6BC95380E741C Validity Not Before: Jul 18 20:03:46 2025 GMT Not After : Jul 25 20:03:46 2025 GMT Subject: CN=687aa8a2-eb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:bb:0c:10:ed:7e:d7:21:d7:99:d3:26:34:35: 68:bb:23:4e:8e:c9:00:a2:5e:d3:6f:d3:8d:c7:aa: d9:db:db:52:41:8f:33:d6:56:51:ca:90:1c:9a:c2: 8c:83:fc:58:2f:b6:27:8a:09:68:7a:6c:50:29:a1: dd:2a:69:49:60:65:0c:0a:39:78:fb:79:d6:d9:e5: 94:50:d0:09:5e:f4:11:b2:fe:cc:02:b2:20:32:15: 78:d3:f8:43:b9:0a:9f:ff:ee:d4:f9:27:5d:98:2a: 46:07:52:2d:3a:18:d2:c8:58:e4:9e:cc:41:ad:38: dd:07:94:db:21:50:81:ea:6e:f6:c1:c1:90:d6:6b: 32:bd:28:49:93:99:b1:17:8e:3c:a3:97:2a:a0:c2: 5f:93:eb:99:9d:6f:09:8e:58:91:ad:7b:ca:ce:59: c1:b5:b4:52:20:47:ca:d1:b4:44:df:a0:12:ef:9b: 1a:2b:17:7d:82:17:01:54:dc:ba:ee:eb:47:90:81: 15:f8:df:33:14:12:35:f5:b2:88:70:7b:3c:f8:4f: 65:3f:90:25:2a:60:6c:0c:45:7f:97:d7:1a:96:0d: 68:31:f9:c2:d7:1d:41:53:8e:53:ca:4f:a1:d7:f5: b9:24:a8:fc:3a:ec:2c:a4:2d:01:5d:29:ba:f4:17: 3b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E2:37:0C:29:DC:0F:40:49:91:06:BC:6D:89:22:27:8D:42:AB:25 X509v3 Authority Key Identifier: keyid:F2:ED:9B:17:0F:AE:30:88:32:40:39:99:50:B6:BC:95:38:0E:74:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8u2bFw-uMIgyQDmZULa8lTgOdBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4749/A652650A796411EAB1381B6DC4F9AE02/8u2bFw-uMIgyQDmZULa8lTgOdBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:e0:33:33:91:f2:a5:05:72:39:e4:af:14:5b:90:c1:13:3f: c9:92:d4:30:62:30:a0:6c:74:ca:11:88:9e:ec:ca:52:10:63: 15:8f:18:eb:fb:1e:65:8f:4c:c1:59:0a:03:d1:72:0c:db:b6: c9:24:37:7f:1a:ab:f7:e8:fc:e7:72:a1:61:59:84:67:f0:88: 15:84:b7:5b:76:45:f5:3b:5a:4f:d9:d3:66:88:f4:60:d7:56: e2:7e:28:38:fb:8b:a8:e8:a0:f3:82:cb:4a:03:94:ab:22:f7: 15:22:4d:b0:06:78:f7:4d:02:d5:3e:13:38:6d:d2:8b:98:fc: 71:ff:2d:ac:14:0a:2b:05:80:c6:73:2f:dd:03:4a:8c:fc:ea: 5b:08:ab:3c:f8:80:64:9f:4e:ed:2c:5c:41:e5:f5:8e:b7:82: d2:e3:9b:f2:a2:70:5e:63:e0:ef:95:4b:71:1f:5b:d7:63:a7: 13:99:16:d8:3a:0b:7e:ce:05:a7:1e:e2:fc:bd:5b:7a:16:88: 34:2b:47:24:b6:fa:26:69:b5:84:b6:eb:14:2c:73:07:3e:94: ff:eb:50:4c:2d:58:ae:55:7d:19:61:b5:a8:f3:4d:67:4f:a8: d8:12:4d:96:d8:7b:0b:d4:63:a2:dc:42:bf:f5:a4:41:75:42: c8:bb:eb:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ3NDkxMTAvBgNVBAUTKEYyRUQ5QjE3MEZBRTMwODgzMjQwMzk5OTUwQjZCQzk1 MzgwRTc0MUMwHhcNMjUwNzE4MjAwMzQ2WhcNMjUwNzI1MjAwMzQ2WjAYMRYwFAYD VQQDEw02ODdhYThhMi1lYjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA27sMEO1+1yHXmdMmNDVouyNOjskAol7Tb9ONx6rZ29tSQY8z1lZRypAcmsKM g/xYL7YnigloemxQKaHdKmlJYGUMCjl4+3nW2eWUUNAJXvQRsv7MArIgMhV40/hD uQqf/+7U+SddmCpGB1ItOhjSyFjknsxBrTjdB5TbIVCB6m72wcGQ1msyvShJk5mx F448o5cqoMJfk+uZnW8JjliRrXvKzlnBtbRSIEfK0bRE36AS75saKxd9ghcBVNy6 7utHkIEV+N8zFBI19bKIcHs8+E9lP5AlKmBsDEV/l9calg1oMfnC1x1BU45Tyk+h 1/W5JKj8OuwspC0BXSm69Bc7bwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHiNwwp 3A9ASZEGvG2JIieNQqslMB8GA1UdIwQYMBaAFPLtmxcPrjCIMkA5mVC2vJU4DnQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDc0OS9BNjUyNjUwQTc5 NjQxMUVBQjEzODFCNkRDNEY5QUUwMi84dTJiRnctdU1JZ3lRRG1aVUxhOGxUZ09k QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1MmJGdy11TUlneVFEbVpVTGE4bFRnT2RCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NDc0OS9BNjUyNjUwQTc5NjQxMUVBQjEzODFCNkRDNEY5QUUwMi84dTJiRnctdU1J Z3lRRG1aVUxhOGxUZ09kQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA54DMzkfKlBXI55K8UW5DBEz/JktQwYjCgbHTKEYie7MpSEGMVjxjr +x5lj0zBWQoD0XIM27bJJDd/Gqv36PzncqFhWYRn8IgVhLdbdkX1O1pP2dNmiPRg 11bifig4+4uo6KDzgstKA5SrIvcVIk2wBnj3TQLVPhM4bdKLmPxx/y2sFAorBYDG cy/dA0qM/OpbCKs8+IBkn07tLFxB5fWOt4LS45vyonBeY+DvlUtxH1vXY6cTmRbY Ogt+zgWnHuL8vVt6Fog0K0cktvomabWEtusULHMHPpT/61BMLViuVX0ZYbWo801n T6jYEk2W2HsL1GOi3EK/9aRBdULIu+tP -----END CERTIFICATE-----Generated at Sun Jul 20 07:52:08 2025 by rpki-client