$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft File: 8R9XbWsM2yqpLc-dTncyc2DVV2c.mft (raw, json) Hash identifier: wf3cnIf7GKN2U/kRs4+WyotU6LPCbi3VqPAeWS9Q1Zs= Subject key identifier: C6:9A:1B:15:4C:8D:AD:E2:7F:97:5C:9B:B0:EB:7E:F6:44:F3:92:22 Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 Certificate issuer: /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft Manifest number: D2 Signing time: Thu 21 Aug 2025 05:49:27 +0000 Manifest this update: Thu 21 Aug 2025 05:49:26 +0000 Manifest next update: Thu 28 Aug 2025 05:49:26 +0000 Files and hashes: 1: 8R9XbWsM2yqpLc-dTncyc2DVV2c.crl (hash: MDInhpvfEz7GuoH4f9RQKYxMru1gEWts1d+cbPu+J7U=) 2: 52D8EF7A426911EF97319666C4F9AE02.roa (hash: K7xoMbrahTaRmzWPIHZWon2Vo6zWB816U+odiAFW2nc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 05:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EF4D, serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767 Validity Not Before: Aug 21 05:49:26 2025 GMT Not After : Aug 28 05:49:26 2025 GMT Subject: CN=68a6b367-0f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8d:e5:25:d4:6b:f7:3d:e4:b5:da:29:2d:5c: ac:e9:2c:f9:ea:84:f7:52:52:7f:60:86:c8:32:9e: bd:e0:7f:17:b4:0b:e0:2a:55:4f:12:c0:bc:f7:b0: 5e:cc:82:8b:65:c1:ab:fb:21:74:75:c4:95:a7:1c: 7e:b6:ea:76:34:86:2b:37:88:db:15:d6:4c:ad:ec: 30:81:b6:51:86:52:70:cd:0c:9c:f0:42:07:aa:39: 75:fb:8c:8d:77:72:bd:b1:a4:82:54:3a:4b:50:7f: 45:6a:e9:ca:84:3b:51:5d:05:27:0b:00:13:f5:5c: 1c:1f:23:ad:5d:fd:54:5a:0f:35:7a:13:b0:a3:b5: cb:4e:b9:e7:eb:21:f1:dc:3c:43:97:63:6f:6f:97: 03:e6:a5:a8:41:cf:50:0c:32:f0:26:a6:4b:d1:0f: d9:6e:ab:ca:9e:b3:5c:7b:d6:77:48:fa:00:63:43: 6c:ac:01:60:56:1e:50:e8:c6:01:1f:02:aa:52:79: ce:86:dd:3f:23:c6:45:e5:aa:fe:4c:4c:b2:db:fe: 95:7a:f9:86:3a:81:fc:19:31:2f:18:8f:b8:d5:17: 47:1c:af:a2:03:c7:15:a0:b1:29:c5:46:96:33:92: 6b:2b:cf:f4:a7:ec:e3:97:ef:c5:41:4d:3c:17:de: 3c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9A:1B:15:4C:8D:AD:E2:7F:97:5C:9B:B0:EB:7E:F6:44:F3:92:22 X509v3 Authority Key Identifier: keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:52:09:8f:7c:a9:ee:f0:17:c4:fd:91:5e:b1:52:19:ee:a9: 0b:88:22:7f:97:dc:37:b3:a9:d2:3b:b8:8a:6f:3b:fd:7f:47: 7b:91:3c:d0:6a:f2:4f:a0:f8:d3:7d:d2:b2:98:49:cf:15:3c: fc:87:9d:1f:13:b5:e0:41:79:40:db:ca:75:09:c0:06:48:66: 30:fd:8b:f5:f8:e1:e0:ad:3c:40:b8:e7:63:47:32:60:98:d9: 11:8b:2c:7a:45:25:0e:87:32:8a:b1:64:ca:b7:0e:78:a7:09: 5c:4c:55:8e:09:32:cd:7a:63:f1:4c:8d:71:6b:c1:58:a6:10: 00:aa:7a:38:5a:e5:74:52:c2:a7:c1:d1:57:6f:10:f1:71:f6: 6c:9e:71:91:b3:e1:f5:49:b2:07:20:b9:f2:80:d6:c6:d9:6a: 7c:09:cd:8f:40:de:d4:9d:94:20:51:7d:e7:0f:6b:d5:35:8a: fa:bf:d8:d7:05:23:09:95:d9:2e:e8:45:28:3f:8a:91:7f:17: 6a:6b:0a:76:5d:3b:ef:21:e1:84:8b:d0:2b:3f:d3:56:33:39: 55:19:58:b2:72:1a:0e:fe:7b:c1:71:77:ae:db:96:30:92:88: 7e:31:56:03:46:a1:4a:1f:1c:e2:3e:a1:eb:f8:22:d5:b0:0e: 31:90:fc:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVGNEQxMTAvBgNVBAUTKEYxMUY1NzZENkIwQ0RCMkFBOTJEQ0Y5RDRFNzczMjcz NjBENTU3NjcwHhcNMjUwODIxMDU0OTI2WhcNMjUwODI4MDU0OTI2WjAYMRYwFAYD VQQDEw02OGE2YjM2Ny0wZjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmY3lJdRr9z3ktdopLVys6Sz56oT3UlJ/YIbIMp694H8XtAvgKlVPEsC897Be zIKLZcGr+yF0dcSVpxx+tup2NIYrN4jbFdZMrewwgbZRhlJwzQyc8EIHqjl1+4yN d3K9saSCVDpLUH9FaunKhDtRXQUnCwAT9VwcHyOtXf1UWg81ehOwo7XLTrnn6yHx 3DxDl2Nvb5cD5qWoQc9QDDLwJqZL0Q/ZbqvKnrNce9Z3SPoAY0NsrAFgVh5Q6MYB HwKqUnnOht0/I8ZF5ar+TEyy2/6VevmGOoH8GTEvGI+41RdHHK+iA8cVoLEpxUaW M5JrK8/0p+zjl+/FQU08F948HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaaGxVM ja3if5dcm7DrfvZE85IiMB8GA1UdIwQYMBaAFPEfV21rDNsqqS3PnU53MnNg1Vdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUY0RC9GRjY3OEM3MjNG RDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5cXBMYy1kVG5jeWMyRFZW MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhSOVhiV3NNMnlxcExjLWRUbmN5YzJEVlYyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RUY0RC9GRjY3OEM3MjNGRDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5 cXBMYy1kVG5jeWMyRFZWMmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4UgmPfKnu8BfE/ZFesVIZ7qkLiCJ/l9w3s6nSO7iKbzv9f0d7kTzQ avJPoPjTfdKymEnPFTz8h50fE7XgQXlA28p1CcAGSGYw/Yv1+OHgrTxAuOdjRzJg mNkRiyx6RSUOhzKKsWTKtw54pwlcTFWOCTLNemPxTI1xa8FYphAAqno4WuV0UsKn wdFXbxDxcfZsnnGRs+H1SbIHILnygNbG2Wp8Cc2PQN7UnZQgUX3nD2vVNYr6v9jX BSMJldku6EUoP4qRfxdqawp2XTvvIeGEi9ArP9NWMzlVGViychoO/nvBcXeu25Yw koh+MVYDRqFKHxziPqHr+CLVsA4xkPzW -----END CERTIFICATE-----Generated at Fri Aug 22 16:25:12 2025 by rpki-client