$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: xn7la4CnzB9Af8sEuj+4hBao/BJTanB9Cti8cJjWD/Q= Subject key identifier: E4:70:53:BE:4B:8A:30:C0:83:EC:F1:6F:39:B4:2A:22:2D:AF:E7:9C Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 0205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 01F7 Signing time: Sat 19 Jul 2025 02:42:09 +0000 Manifest this update: Sat 19 Jul 2025 02:42:08 +0000 Manifest next update: Sat 26 Jul 2025 02:42:08 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: eCho3gqFkbKQMoiu4pwE2oSIQXi04EN57rFQdlGEmYY=) 2: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: u6i0aL0lGd+DkS8Cd1HM9x+4U1BJruGUogvC+Sy1wtw=) 3: 7BDFD4929CF211ED8BD2B02FC4F9AE02.roa (hash: IIRWaPut9Ga2CFDh4DoBpgMGLj7TDwhjoYp6oTvz8Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 517 (0x205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Jul 19 02:42:08 2025 GMT Not After : Jul 26 02:42:08 2025 GMT Subject: CN=687b0600-a2a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6d:3a:cc:e7:80:31:f6:e6:27:e9:5d:87:f8: 48:57:84:fc:6b:52:7d:f5:91:53:35:fa:a7:4e:2e: ed:15:24:9f:9b:8e:b3:4b:10:51:6f:53:68:27:11: 5f:15:d4:21:5b:23:0f:ad:4f:0d:db:0d:93:3e:66: 02:21:19:79:47:16:01:df:f7:cd:f4:fa:5b:67:56: 9e:12:4f:1b:71:93:43:b7:5a:3b:72:97:2f:6b:4a: a0:1f:5a:e0:a1:d2:93:7e:cc:06:58:71:1e:54:2e: 6c:cd:98:3c:dd:a9:b2:1d:fb:f6:64:35:42:e3:35: 7f:37:4e:98:79:f0:81:f8:32:4b:06:6c:09:02:8f: 00:0c:05:93:09:7c:2d:00:ab:32:a6:bc:30:02:ac: cd:a8:b0:c9:58:c3:56:a5:5f:f0:7c:ac:73:c5:7b: be:25:93:71:74:6f:9a:95:d1:47:3a:6a:fd:b5:84: c4:63:10:c3:e5:83:a3:c8:bd:ef:c7:2e:61:63:c6: e7:e4:4c:29:36:b6:4e:9f:4d:93:a7:22:ab:16:b8: d0:88:84:3c:39:e7:67:9a:59:28:6c:69:f5:14:5a: 4b:78:88:f9:f7:b9:3d:cb:03:ce:97:05:0f:dd:4f: 89:83:45:ac:ad:1a:df:91:74:05:1b:09:98:4f:28: a4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:70:53:BE:4B:8A:30:C0:83:EC:F1:6F:39:B4:2A:22:2D:AF:E7:9C X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c9:60:7d:05:cc:ce:ba:a8:e9:4f:e0:4c:4c:78:86:fd:6d:63: 7e:ac:20:a2:11:c8:31:c4:7b:a8:ee:7c:0a:ab:91:d6:0c:0a: 6a:84:75:9c:a0:87:c2:69:20:01:3c:fb:79:70:bc:c6:e5:7c: a5:93:4e:df:8a:6d:e3:f8:00:55:76:e3:a9:b6:7d:c6:f4:47: 72:bc:0f:25:2e:d9:f1:53:41:0a:c4:c1:42:81:a9:6c:d2:72: 8f:e2:5c:73:34:2c:ba:8e:b0:c0:50:75:91:f7:6a:ed:2a:a7: 1f:91:34:5a:62:bd:e1:64:95:71:80:72:e8:55:82:fd:5f:86: fc:df:f7:f7:14:91:24:cc:cc:28:8e:cc:10:69:92:c7:00:63: a9:f7:2b:ab:82:c9:b3:78:95:52:22:42:03:7d:af:8e:a0:b3: bb:bd:3a:1d:97:b1:8d:f9:90:58:01:b1:b2:3b:b5:d9:32:91: de:ef:f8:da:b7:02:32:50:57:ea:81:39:22:ac:af:cd:4b:15: f2:b3:4d:ec:15:bc:b4:ef:63:7c:35:64:fc:e0:c7:c0:25:5d: 60:00:84:c5:2e:29:69:a2:8f:32:a6:bc:41:17:d8:0b:29:5e: 41:62:54:c6:17:d0:17:7a:13:34:b0:8e:08:4a:8e:02:ac:ea: c5:7f:96:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjUwNzE5MDI0MjA4WhcNMjUwNzI2MDI0MjA4WjAYMRYwFAYD VQQDEw02ODdiMDYwMC1hMmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6G06zOeAMfbmJ+ldh/hIV4T8a1J99ZFTNfqnTi7tFSSfm46zSxBRb1NoJxFf FdQhWyMPrU8N2w2TPmYCIRl5RxYB3/fN9PpbZ1aeEk8bcZNDt1o7cpcva0qgH1rg odKTfswGWHEeVC5szZg83amyHfv2ZDVC4zV/N06YefCB+DJLBmwJAo8ADAWTCXwt AKsyprwwAqzNqLDJWMNWpV/wfKxzxXu+JZNxdG+aldFHOmr9tYTEYxDD5YOjyL3v xy5hY8bn5EwpNrZOn02TpyKrFrjQiIQ8OednmlkobGn1FFpLeIj597k9ywPOlwUP 3U+Jg0WsrRrfkXQFGwmYTyik/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORwU75L ijDAg+zxbzm0KiItr+ecMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDJYH0FzM66qOlP4ExMeIb9bWN+rCCiEcgxxHuo7nwKq5HWDApqhHWc oIfCaSABPPt5cLzG5Xylk07fim3j+ABVduOptn3G9EdyvA8lLtnxU0EKxMFCgals 0nKP4lxzNCy6jrDAUHWR92rtKqcfkTRaYr3hZJVxgHLoVYL9X4b83/f3FJEkzMwo jswQaZLHAGOp9yurgsmzeJVSIkIDfa+OoLO7vTodl7GN+ZBYAbGyO7XZMpHe7/ja twIyUFfqgTkirK/NSxXys03sFby072N8NWT84MfAJV1gAITFLilpoo8yprxBF9gL KV5BYlTGF9AXehM0sI4ISo4CrOrFf5Ys -----END CERTIFICATE-----Generated at Sun Jul 20 13:10:13 2025 by rpki-client