$ rpki-client -vvf rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft File: 8clCYy-m_HcQgWCI8MuMEzUlHN0.mft (raw, json) Hash identifier: TyB5ANA8gsmFkiz6JpIwgvmy6e9SLHRPb3gECx5pkH0= Subject key identifier: 91:C5:BC:93:03:13:6F:CF:6E:44:99:CB:96:77:A0:85:50:C8:76:52 Authority key identifier: F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD Certificate issuer: /CN=A911911C/serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft Manifest number: BE Signing time: Sat 06 Sep 2025 14:23:16 +0000 Manifest this update: Sat 06 Sep 2025 14:23:15 +0000 Manifest next update: Sat 13 Sep 2025 14:23:15 +0000 Files and hashes: 1: 8clCYy-m_HcQgWCI8MuMEzUlHN0.crl (hash: 6eC0T4Q2b5PJSYKnIxB/tD5rvMzEMeCQcPyJCYIBP0Q=) 2: 880F25226E5311EFB4671957C4F9AE02.roa (hash: J/A0Tcht/6BAxrksZsepsZObquBupiicduR/i0K3+O4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911911C, serialNumber=F1C942632FA6FC7710816088F0CB8C1335251CDD Validity Not Before: Sep 6 14:23:15 2025 GMT Not After : Sep 13 14:23:15 2025 GMT Subject: CN=68bc43d3-c26f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b6:c2:42:f5:ed:ef:b6:5b:25:64:24:79:0d: 5f:6c:30:10:43:fe:fb:fb:20:67:1e:7e:fa:37:f5: 1e:ea:53:cc:dc:59:31:ec:ea:a9:5e:c0:44:37:28: 3f:b1:42:1f:32:39:6e:d5:72:8f:5f:31:d3:1a:cc: 1c:3d:59:84:d5:6c:79:ad:f1:ff:02:4d:51:24:b8: 42:a9:91:87:c7:f6:38:43:77:9c:b2:d9:e1:bc:2f: fc:a3:f9:1b:7f:78:15:cd:f8:29:9d:a6:31:b0:de: 86:a6:0e:86:0e:5a:6b:ee:73:82:b6:3b:5f:4a:c0: 44:7f:26:08:a6:ba:8d:b0:d8:86:e0:d4:19:3a:68: 66:56:26:62:be:42:e0:9d:7f:b3:53:bf:0f:2e:4f: 4d:d9:88:41:26:0d:a7:20:f0:f3:48:98:88:9d:a5: 07:b2:81:ab:18:71:0e:8f:e9:1e:2f:ab:74:d9:b5: 10:e9:54:8a:2e:ad:57:7c:40:2c:e8:98:ed:05:8b: 76:c4:90:ae:27:79:03:da:45:2a:d7:c6:1f:74:27: e9:bb:d2:7a:8c:42:96:ba:b2:fe:76:a3:44:c0:c8: 3c:4a:00:1a:cc:86:08:66:ec:03:fe:37:69:92:ac: 85:78:e9:65:0b:89:4b:30:17:f2:6e:80:49:47:64: e6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C5:BC:93:03:13:6F:CF:6E:44:99:CB:96:77:A0:85:50:C8:76:52 X509v3 Authority Key Identifier: keyid:F1:C9:42:63:2F:A6:FC:77:10:81:60:88:F0:CB:8C:13:35:25:1C:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8clCYy-m_HcQgWCI8MuMEzUlHN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911911C/807DBCBC6E4211EFB907797DC4F9AE02/8clCYy-m_HcQgWCI8MuMEzUlHN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:22:01:57:91:c1:54:f2:5d:1a:db:7c:fa:bf:6b:b3:c4:01: b2:e9:6d:be:55:0d:39:c3:2e:69:cf:99:7e:3b:fd:f4:34:ef: a8:e9:db:c2:29:d7:e6:e9:19:da:ec:51:fa:56:a9:5e:ac:af: 56:e9:dd:20:e9:73:ac:44:ec:cc:5b:0f:81:93:c2:0a:f9:1c: 7d:53:0d:64:91:c8:97:13:a1:dd:f3:61:11:a2:cd:2b:31:09: 3a:ec:47:be:e0:9e:b4:2d:07:29:4c:2c:4e:b6:e4:a3:4e:13: cd:08:e7:ec:71:5b:54:bd:a7:5d:73:70:ba:8a:ff:26:31:8c: 77:86:c0:05:55:ad:43:55:64:71:2d:a7:7c:e0:cb:3b:92:57: 02:3d:69:ab:4e:f4:5e:da:fe:47:5d:48:c6:a3:37:b8:da:cf: cb:85:5f:25:89:38:95:07:0b:7a:3f:be:6a:9f:0e:28:49:e9: 04:5f:30:6e:9d:c9:3f:38:04:08:b8:a4:ff:46:02:ac:96:ec: 6e:56:e5:d2:9c:e6:e7:76:f2:a7:cd:d3:46:03:65:ce:26:ab: b5:5a:f9:6a:ec:12:87:aa:30:98:9c:7f:49:df:61:8d:6b:36: 9e:c6:4e:52:cd:df:8c:41:78:c9:9d:c1:45:b4:68:c9:02:0a: e5:70:00:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkxMUMxMTAvBgNVBAUTKEYxQzk0MjYzMkZBNkZDNzcxMDgxNjA4OEYwQ0I4QzEz MzUyNTFDREQwHhcNMjUwOTA2MTQyMzE1WhcNMjUwOTEzMTQyMzE1WjAYMRYwFAYD VQQDEw02OGJjNDNkMy1jMjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbbCQvXt77ZbJWQkeQ1fbDAQQ/77+yBnHn76N/Ue6lPM3Fkx7OqpXsBENyg/ sUIfMjlu1XKPXzHTGswcPVmE1Wx5rfH/Ak1RJLhCqZGHx/Y4Q3ecstnhvC/8o/kb f3gVzfgpnaYxsN6Gpg6GDlpr7nOCtjtfSsBEfyYIprqNsNiG4NQZOmhmViZivkLg nX+zU78PLk9N2YhBJg2nIPDzSJiInaUHsoGrGHEOj+keL6t02bUQ6VSKLq1XfEAs 6JjtBYt2xJCuJ3kD2kUq18YfdCfpu9J6jEKWurL+dqNEwMg8SgAazIYIZuwD/jdp kqyFeOllC4lLMBfyboBJR2TmnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJHFvJMD E2/PbkSZy5Z3oIVQyHZSMB8GA1UdIwQYMBaAFPHJQmMvpvx3EIFgiPDLjBM1JRzd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTExQy84MDdEQkNCQzZF NDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9IY1FnV0NJOE11TUV6VWxI TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhjbENZeS1tX0hjUWdXQ0k4TXVNRXpVbEhOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTExQy84MDdEQkNCQzZFNDIxMUVGQjkwNzc5N0RDNEY5QUUwMi84Y2xDWXktbV9I Y1FnV0NJOE11TUV6VWxITjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeIgFXkcFU8l0a23z6v2uzxAGy6W2+VQ05wy5pz5l+O/30NO+o6dvC Kdfm6Rna7FH6VqlerK9W6d0g6XOsROzMWw+Bk8IK+Rx9Uw1kkciXE6Hd82ERos0r MQk67Ee+4J60LQcpTCxOtuSjThPNCOfscVtUvaddc3C6iv8mMYx3hsAFVa1DVWRx Lad84Ms7klcCPWmrTvRe2v5HXUjGoze42s/LhV8liTiVBwt6P75qnw4oSekEXzBu nck/OAQIuKT/RgKsluxuVuXSnObndvKnzdNGA2XOJqu1Wvlq7BKHqjCYnH9J32GN azaexk5Szd+MQXjJncFFtGjJAgrlcADY -----END CERTIFICATE-----Generated at Sat Sep 6 21:13:21 2025 by rpki-client