$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft File: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft (raw, json) Hash identifier: 9L3J1JZSCd5bsk9W8Y3LYz1LAqt+87Vz8fWtD/IINio= Subject key identifier: E8:0A:D3:B2:C9:C4:BE:49:8C:09:EF:F1:C8:7E:40:C7:9F:5F:63:43 Authority key identifier: F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 Certificate issuer: /CN=A91DC8F3/serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Certificate serial: 074D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft Manifest number: 0745 Signing time: Sat 26 Jul 2025 21:56:23 +0000 Manifest this update: Sat 26 Jul 2025 21:56:22 +0000 Manifest next update: Sat 02 Aug 2025 21:56:22 +0000 Files and hashes: 1: 8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl (hash: J1sSVKZmbR4NdoxNhyIY05S3hx4fPfcc2fLFEjSom5k=) 2: ADE3F5B635D611EB8466D634C4F9AE02.roa (hash: 8U9EPbtMKIJ3PvMvZUbdIHhWDysnxRWcaHtBd734a+U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 02 Aug 2025 21:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1869 (0x74d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8F3, serialNumber=F159AC04B5B8937905E69D1BF25F4D53B3545C97 Validity Not Before: Jul 26 21:56:22 2025 GMT Not After : Aug 2 21:56:22 2025 GMT Subject: CN=68854f06-ae4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:33:09:94:89:df:5f:9a:f7:81:24:68:bd:a7: 10:56:fc:07:60:c0:eb:f3:a4:da:40:4f:17:54:a5: 73:66:2a:ba:b2:b6:23:41:6c:7e:b5:48:64:26:40: 4e:74:40:c0:c9:3d:c5:0e:9a:4a:37:c2:30:c1:1f: 6b:02:fc:66:80:31:64:bb:28:fe:17:6a:3e:43:48: b2:33:b7:e0:76:07:cd:31:07:d2:e7:d7:4c:fe:ef: 9a:71:3a:36:4b:56:68:c7:49:42:30:4d:97:c4:8c: 61:35:a7:75:9b:60:2b:df:6e:2e:ce:ec:18:fc:e9: a6:d6:ec:8d:79:fa:7b:54:7f:b3:56:ec:3b:0b:e0: ae:6c:43:a8:92:82:0f:da:92:5d:ea:83:dd:71:c0: 6d:42:00:b4:f4:76:24:5a:39:77:ea:dc:de:d4:d4: c9:5c:ad:b5:44:4e:8e:58:7f:97:36:c9:64:50:49: 2d:f8:90:3d:36:0f:0d:1e:bb:c5:7a:45:3d:94:c4: 86:9a:be:37:14:01:e3:9e:a5:e6:6b:59:3a:46:08: 82:1a:c5:63:9f:ad:6c:04:1e:1f:cc:d0:bf:7b:86: e7:20:29:47:3e:ea:e8:1c:5f:23:8f:1e:32:6c:2b: 29:78:0f:df:da:59:95:04:70:5b:c8:8c:ad:83:a6: aa:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0A:D3:B2:C9:C4:BE:49:8C:09:EF:F1:C8:7E:40:C7:9F:5F:63:43 X509v3 Authority Key Identifier: keyid:F1:59:AC:04:B5:B8:93:79:05:E6:9D:1B:F2:5F:4D:53:B3:54:5C:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8VmsBLW4k3kF5p0b8l9NU7NUXJc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8F3/E9D30C8035D411EBBE277F33C4F9AE02/8VmsBLW4k3kF5p0b8l9NU7NUXJc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:0a:cc:c6:5e:1e:a0:e9:e1:3d:77:0a:13:6f:30:30:13:6e: 6f:ea:50:c8:d3:ba:df:50:8d:d6:3c:0b:9a:f0:07:32:08:4c: 51:8d:f9:34:c3:e6:d9:4d:1d:78:37:89:01:de:82:7c:9a:a1: df:59:53:12:59:94:5d:57:82:fe:14:cd:a2:8e:5d:f2:62:a1: 4c:2c:a0:10:e7:e5:31:20:13:e6:7b:70:dd:b8:16:f1:7d:02: 87:a3:a9:bb:7c:56:16:45:0a:b7:6a:d2:85:c6:5b:d4:ed:14: 5d:22:15:7f:f2:6e:35:7e:63:bf:e8:ac:79:69:1a:b8:13:ec: da:bc:2d:8d:b1:43:d1:af:e0:62:cf:7d:d7:2e:03:77:04:e9: b4:79:48:b2:9c:41:06:3b:32:1e:31:71:a4:e5:ce:6d:b1:86: 60:5f:33:e5:a9:f6:cd:5e:f9:7b:59:9e:46:4f:e9:ed:80:fa: f6:f9:fa:44:f5:66:50:93:87:60:42:f1:16:34:5f:80:e1:89: 95:ec:98:93:e0:2d:47:3c:6f:c8:87:2e:c2:26:8b:83:15:40: 8e:70:50:a5:39:75:c1:b0:49:64:df:64:66:1b:3c:ad:29:a7: f7:a8:f9:b1:9b:03:89:b7:af:69:0d:38:ce:3d:af:ad:ee:76: 8d:dd:f6:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB00wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4RjMxMTAvBgNVBAUTKEYxNTlBQzA0QjVCODkzNzkwNUU2OUQxQkYyNUY0RDUz QjM1NDVDOTcwHhcNMjUwNzI2MjE1NjIyWhcNMjUwODAyMjE1NjIyWjAYMRYwFAYD VQQDEw02ODg1NGYwNi1hZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0zMJlInfX5r3gSRovacQVvwHYMDr86TaQE8XVKVzZiq6srYjQWx+tUhkJkBO dEDAyT3FDppKN8IwwR9rAvxmgDFkuyj+F2o+Q0iyM7fgdgfNMQfS59dM/u+acTo2 S1Zox0lCME2XxIxhNad1m2Ar324uzuwY/Omm1uyNefp7VH+zVuw7C+CubEOokoIP 2pJd6oPdccBtQgC09HYkWjl36tze1NTJXK21RE6OWH+XNslkUEkt+JA9Ng8NHrvF ekU9lMSGmr43FAHjnqXma1k6RgiCGsVjn61sBB4fzNC/e4bnIClHPuroHF8jjx4y bCspeA/f2lmVBHBbyIytg6aqzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgK07LJ xL5JjAnv8ch+QMefX2NDMB8GA1UdIwQYMBaAFPFZrAS1uJN5BeadG/JfTVOzVFyX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhGMy9FOUQzMEM4MDM1 RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsza0Y1cDBiOGw5TlU3TlVY SmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhWbXNCTFc0azNrRjVwMGI4bDlOVTdOVVhKYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhGMy9FOUQzMEM4MDM1RDQxMUVCQkUyNzdGMzNDNEY5QUUwMi84Vm1zQkxXNGsz a0Y1cDBiOGw5TlU3TlVYSmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJCszGXh6g6eE9dwoTbzAwE25v6lDI07rfUI3WPAua8AcyCExRjfk0 w+bZTR14N4kB3oJ8mqHfWVMSWZRdV4L+FM2ijl3yYqFMLKAQ5+UxIBPme3DduBbx fQKHo6m7fFYWRQq3atKFxlvU7RRdIhV/8m41fmO/6Kx5aRq4E+zavC2NsUPRr+Bi z33XLgN3BOm0eUiynEEGOzIeMXGk5c5tsYZgXzPlqfbNXvl7WZ5GT+ntgPr2+fpE 9WZQk4dgQvEWNF+A4YmV7JiT4C1HPG/Ihy7CJouDFUCOcFClOXXBsElk32RmGzyt Kaf3qPmxmwOJt69pDTjOPa+t7naN3faH -----END CERTIFICATE-----Generated at Sun Jul 27 12:21:53 2025 by rpki-client