$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft File: 8Cl9DkUxodYqla9dLyLvJAja0pw.mft (raw, json) Hash identifier: aaxhLxBDI8f2DtdA/GIixu2WSAEgv89ZE6F5R19q0yY= Subject key identifier: 2A:A2:CE:3B:7C:F8:46:E9:C6:FB:67:BC:CD:33:42:A2:9F:63:FC:F9 Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Certificate serial: 07C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft Manifest number: 07AF Signing time: Fri 18 Jul 2025 21:32:34 +0000 Manifest this update: Fri 18 Jul 2025 21:32:33 +0000 Manifest next update: Fri 25 Jul 2025 21:32:33 +0000 Files and hashes: 1: 8Cl9DkUxodYqla9dLyLvJAja0pw.crl (hash: U/RsexBoDdbZP25iskogE0hDFnq5Aw7yiq3jCPbhl1Y=) 2: DF3CAFC44D9E11F0B1307858C4F9AE02.roa (hash: nNMfwVwGreVHShqHhiSA1wDrVojq2wBr5IqezlVe7oA=) 3: 23AF26C40C2B11EBAD607865C4F9AE02.roa (hash: lqzj6YduHCJKV8dYpz5WAfuKsZiHyQ1FWQ0JXN7wCvU=) 4: 5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa (hash: npjQiEYYdVjWG8dKeFVFQ6M5ppQB2z0yEbCwP4ngirc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1985 (0x7c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Validity Not Before: Jul 18 21:32:33 2025 GMT Not After : Jul 25 21:32:33 2025 GMT Subject: CN=687abd72-f831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d4:e5:70:bd:ff:94:fc:12:aa:ed:91:67:f9: eb:5f:39:eb:86:98:35:61:d6:b4:51:54:39:38:dc: 9c:e3:fb:10:bf:a4:a1:70:6d:fa:74:11:ec:69:22: 8c:4a:d6:ca:1c:1d:cb:f1:ab:d9:d3:6c:40:3f:81: 09:3c:a8:26:07:d2:e9:3f:ad:81:4d:c6:35:c9:0c: 08:65:dd:c3:b8:91:61:7c:9f:48:3d:33:a3:e8:4e: 52:7b:54:7e:f3:48:97:7c:a1:70:61:9f:cf:51:ac: 65:4b:a3:b2:e3:a5:0e:58:48:77:17:75:49:b2:c0: 21:d2:e3:84:75:33:15:ca:14:df:3d:cf:b7:4d:4a: 54:ad:e7:d9:69:7c:a2:37:42:a7:b5:dd:db:26:6c: 93:94:e1:05:98:de:cd:bd:ba:c9:69:d6:af:62:33: 2a:d1:13:5b:ab:23:6d:15:be:fa:d6:73:29:a6:48: f2:66:ac:25:63:4f:18:f5:99:11:06:22:88:0d:53: c9:a6:de:88:c5:b2:2c:3b:64:39:bf:f9:1d:89:fd: 50:4a:6f:cf:29:51:30:16:3f:67:a4:f9:04:07:71: a2:d5:d6:b7:1a:9e:6f:44:6e:01:9f:62:f8:05:37: 48:09:29:f0:08:9b:d2:95:0c:a3:8a:18:35:2e:69: 15:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A2:CE:3B:7C:F8:46:E9:C6:FB:67:BC:CD:33:42:A2:9F:63:FC:F9 X509v3 Authority Key Identifier: keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:79:6d:f9:98:64:74:ee:52:23:11:4e:0c:34:c8:db:61:55: 33:3c:8c:f0:e5:a2:39:91:6d:4b:ab:d1:e7:3e:79:ee:ad:af: 7a:03:e4:81:b3:9c:8b:b3:ae:d2:ee:fa:f9:4a:ca:e5:80:e3: fe:51:d1:4d:59:6b:2f:c1:58:fe:73:1f:f3:66:02:4d:f4:6b: 5e:d9:10:8f:f0:b1:8c:ee:30:20:8c:22:e6:7b:45:cc:89:ef: b1:1b:58:40:8a:b1:d4:94:55:b6:46:30:04:cc:48:7a:6b:14: 81:f4:95:23:0b:ee:9c:e8:44:f4:6c:34:ad:3d:17:19:ba:51: ee:9f:e7:2f:73:bd:f8:23:e9:f2:79:34:3b:b8:86:b6:e9:79: fa:de:2e:47:60:af:22:e1:f0:37:e6:f4:71:25:64:58:9f:8d: 4f:f4:1b:a5:fb:3c:39:df:18:6c:80:d5:2d:ee:1f:8e:f0:62: b6:b9:88:33:ce:ae:79:cf:7e:45:c0:e8:be:4c:3c:75:13:fd: 4d:dd:dd:c6:d3:9b:90:53:21:c5:78:f8:9d:db:9a:56:3b:b8: ce:b9:b2:b3:7f:23:8e:fa:b6:78:5f:c0:bc:ab:47:0b:e5:ef: 95:25:89:b5:6b:25:c8:31:cc:21:56:f5:98:db:ba:59:31:32: 9b:99:8a:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0 MDhEQUQyOUMwHhcNMjUwNzE4MjEzMjMzWhcNMjUwNzI1MjEzMjMzWjAYMRYwFAYD VQQDEw02ODdhYmQ3Mi1mODMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqdTlcL3/lPwSqu2RZ/nrXznrhpg1Yda0UVQ5ONyc4/sQv6ShcG36dBHsaSKM StbKHB3L8avZ02xAP4EJPKgmB9LpP62BTcY1yQwIZd3DuJFhfJ9IPTOj6E5Se1R+ 80iXfKFwYZ/PUaxlS6Oy46UOWEh3F3VJssAh0uOEdTMVyhTfPc+3TUpUrefZaXyi N0Kntd3bJmyTlOEFmN7NvbrJadavYjMq0RNbqyNtFb761nMppkjyZqwlY08Y9ZkR BiKIDVPJpt6IxbIsO2Q5v/kdif1QSm/PKVEwFj9npPkEB3Gi1da3Gp5vRG4Bn2L4 BTdICSnwCJvSlQyjihg1LmkVAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqizjt8 +EbpxvtnvM0zQqKfY/z5MB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjMxMi9BQTkyQjk3ODBDMjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9k WXFsYTlkTHlMdkpBamEwcHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIeW35mGR07lIjEU4MNMjbYVUzPIzw5aI5kW1Lq9HnPnnura96A+SB s5yLs67S7vr5SsrlgOP+UdFNWWsvwVj+cx/zZgJN9Gte2RCP8LGM7jAgjCLme0XM ie+xG1hAirHUlFW2RjAEzEh6axSB9JUjC+6c6ET0bDStPRcZulHun+cvc734I+ny eTQ7uIa26Xn63i5HYK8i4fA35vRxJWRYn41P9Bul+zw53xhsgNUt7h+O8GK2uYgz zq55z35FwOi+TDx1E/1N3d3G05uQUyHFePid25pWO7jOubKzfyOO+rZ4X8C8q0cL 5e+VJYm1ayXIMcwhVvWY27pZMTKbmYrC -----END CERTIFICATE-----Generated at Sun Jul 20 06:38:12 2025 by rpki-client