$ rpki-client -vvf rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft File: 8Esk0kgu8B-It9DWKlOSJzm3iA0.mft (raw, json) Hash identifier: CZY727CkvxC/v9/JlaZRxO0gKieg5pZ9EqMMX6kmj5U= Subject key identifier: 9B:DA:DE:09:21:95:04:D9:52:47:93:EF:0E:6B:F8:FB:2D:6D:FB:63 Authority key identifier: F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D Certificate issuer: /CN=A91D112B/serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Certificate serial: 0760 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft Manifest number: 0756 Signing time: Sun 20 Jul 2025 21:48:15 +0000 Manifest this update: Sun 20 Jul 2025 21:48:15 +0000 Manifest next update: Sun 27 Jul 2025 21:48:15 +0000 Files and hashes: 1: 8Esk0kgu8B-It9DWKlOSJzm3iA0.crl (hash: hqmLb82hrMgMJyuuxMyLCHUKcz+EN0Hn5Rsgdop8BKo=) 2: D00FC228F46111ECA631AC55C4F9AE02.roa (hash: LAD7dRCik0KzxFNr8quzKbBZIsig686rpItw8aFMMeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 21:48:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1888 (0x760) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D112B, serialNumber=F04B24D2482EF01F88B7D0D62A53922739B7880D Validity Not Before: Jul 20 21:48:15 2025 GMT Not After : Jul 27 21:48:15 2025 GMT Subject: CN=687d641f-037e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:06:8f:6d:ea:61:0b:0e:51:bd:a0:02:ff:64: 3b:dd:08:a5:a6:52:9b:d5:c2:8d:b6:1e:0f:e6:1e: 5b:c8:70:61:56:e5:1a:ad:a8:f7:0a:a4:78:f9:a4: b5:a2:59:01:99:05:19:52:1d:ef:4e:10:5f:1f:86: 9c:01:7d:a5:60:59:83:81:7f:14:51:49:c5:58:c0: 5b:5b:58:5f:56:22:92:da:cb:33:85:e7:a2:fb:32: 75:a6:1d:37:ff:73:3c:a3:52:dc:ee:0b:54:98:e0: ec:15:89:36:f2:52:75:bb:12:f8:d6:0c:25:24:a4: 60:56:2a:68:bc:e5:79:7d:df:4f:6c:76:1c:b5:04: 5d:89:87:37:99:40:38:57:b1:c6:d7:b4:e9:2b:60: 72:99:52:33:4b:e6:fb:63:aa:59:d0:89:64:d4:2d: 46:1f:0f:e1:9c:0c:10:a8:91:14:2b:71:98:61:cd: 7e:8e:2f:43:54:a5:78:2d:80:c1:a2:da:a1:b3:74: 09:de:c8:89:53:66:f5:0c:48:0e:cc:91:b7:02:61: bf:9c:54:d9:7d:9e:7c:ca:7a:32:01:65:ba:d3:2c: aa:b3:f6:c9:38:0c:e1:56:18:f2:ff:5e:31:99:41: 6e:0e:68:b8:13:df:ce:4c:56:30:b9:80:7a:67:c4: bb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DA:DE:09:21:95:04:D9:52:47:93:EF:0E:6B:F8:FB:2D:6D:FB:63 X509v3 Authority Key Identifier: keyid:F0:4B:24:D2:48:2E:F0:1F:88:B7:D0:D6:2A:53:92:27:39:B7:88:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Esk0kgu8B-It9DWKlOSJzm3iA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D112B/1CD0E0502F3411EB97FE1786C4F9AE02/8Esk0kgu8B-It9DWKlOSJzm3iA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:d4:ac:d7:00:a2:73:ba:bc:00:f5:01:71:34:31:a6:ac:4e: 16:f7:de:61:1a:9c:53:e8:95:3c:93:f5:d3:78:66:90:dd:b1: 32:6a:90:c5:ca:90:66:00:7f:f4:20:94:8a:80:46:e0:69:b1: 98:76:29:95:b9:ec:95:c0:ca:e2:74:6c:38:87:6f:e7:26:d9: 42:73:ce:b4:20:f6:bd:cd:12:e2:23:46:2b:0f:fa:65:57:f8: ec:e0:cb:bf:1d:f5:07:ff:87:96:51:27:4e:f9:33:ae:3a:dc: 3d:9c:bf:91:8a:6f:44:31:17:80:01:33:92:d0:76:56:f6:d4: 5b:ca:f7:91:1b:7d:3f:81:9f:b2:31:9c:ef:65:7a:ab:8c:86: be:de:e7:a6:ca:7b:b7:ff:8d:97:bb:2f:8a:c9:7a:e2:a4:7c: 3d:e8:5f:1c:3a:10:db:44:b0:fd:e6:8e:33:eb:be:fd:f9:71: 3a:3b:a0:b9:bb:63:f0:c5:24:52:a4:9b:7a:12:81:8a:97:92: c3:6c:9d:c1:df:a9:bf:c0:fa:1b:3d:e4:50:12:fa:a1:a6:01: 96:b4:01:ac:b7:44:ec:02:65:24:b8:d9:4c:7f:87:01:14:df: 8e:02:82:68:9b:75:8c:3a:dd:89:a5:bc:79:56:9d:cd:d8:c8: 48:c3:52:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMkIxMTAvBgNVBAUTKEYwNEIyNEQyNDgyRUYwMUY4OEI3RDBENjJBNTM5MjI3 MzlCNzg4MEQwHhcNMjUwNzIwMjE0ODE1WhcNMjUwNzI3MjE0ODE1WjAYMRYwFAYD VQQDEw02ODdkNjQxZi0wMzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QaPbephCw5RvaAC/2Q73QilplKb1cKNth4P5h5byHBhVuUaraj3CqR4+aS1 olkBmQUZUh3vThBfH4acAX2lYFmDgX8UUUnFWMBbW1hfViKS2sszheei+zJ1ph03 /3M8o1Lc7gtUmODsFYk28lJ1uxL41gwlJKRgVipovOV5fd9PbHYctQRdiYc3mUA4 V7HG17TpK2BymVIzS+b7Y6pZ0Ilk1C1GHw/hnAwQqJEUK3GYYc1+ji9DVKV4LYDB otqhs3QJ3siJU2b1DEgOzJG3AmG/nFTZfZ58ynoyAWW60yyqs/bJOAzhVhjy/14x mUFuDmi4E9/OTFYwuYB6Z8S7JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJva3gkh lQTZUkeT7w5r+PstbftjMB8GA1UdIwQYMBaAFPBLJNJILvAfiLfQ1ipTkic5t4gN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEyQi8xQ0QwRTA1MDJG MzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThCLUl0OURXS2xPU0p6bTNp QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFc2swa2d1OEItSXQ5RFdLbE9TSnptM2lBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTEyQi8xQ0QwRTA1MDJGMzQxMUVCOTdGRTE3ODZDNEY5QUUwMi84RXNrMGtndThC LUl0OURXS2xPU0p6bTNpQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD1KzXAKJzurwA9QFxNDGmrE4W995hGpxT6JU8k/XTeGaQ3bEyapDF ypBmAH/0IJSKgEbgabGYdimVueyVwMridGw4h2/nJtlCc860IPa9zRLiI0YrD/pl V/js4Mu/HfUH/4eWUSdO+TOuOtw9nL+Rim9EMReAATOS0HZW9tRbyveRG30/gZ+y MZzvZXqrjIa+3uemynu3/42Xuy+KyXripHw96F8cOhDbRLD95o4z6779+XE6O6C5 u2PwxSRSpJt6EoGKl5LDbJ3B36m/wPobPeRQEvqhpgGWtAGst0TsAmUkuNlMf4cB FN+OAoJom3WMOt2Jpbx5Vp3N2MhIw1Kc -----END CERTIFICATE-----Generated at Mon Jul 21 12:33:15 2025 by rpki-client