$ rpki-client -vvf rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft File: 8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft (raw, json) Hash identifier: lIMTJ9XHCiw2dLDegBxHF+HzoCP9xrDApI1nu0hrqww= Subject key identifier: 85:94:6B:63:4F:06:74:1F:D1:EE:83:5A:7E:E5:55:41:ED:57:8C:39 Authority key identifier: F3:36:7D:74:44:83:99:C1:8E:F6:7C:7C:98:61:07:B8:14:B1:2D:64 Certificate issuer: /CN=A911F536/serialNumber=F3367D74448399C18EF67C7C986107B814B12D64 Certificate serial: 77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft Manifest number: 77 Signing time: Thu 21 Aug 2025 06:58:40 +0000 Manifest this update: Thu 21 Aug 2025 06:58:40 +0000 Manifest next update: Thu 28 Aug 2025 06:58:40 +0000 Files and hashes: 1: 8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl (hash: HscSwZflDmz5R1ALqDnejLHdKgnlFjFq3v4CR90iRYM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F536, serialNumber=F3367D74448399C18EF67C7C986107B814B12D64 Validity Not Before: Aug 21 06:58:40 2025 GMT Not After : Aug 28 06:58:40 2025 GMT Subject: CN=68a6c3a0-547e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1e:0b:ff:da:21:d2:86:11:76:f9:8f:9d:65: 6a:50:fa:9d:be:5f:72:b7:65:2b:a4:d7:47:46:ea: 4d:08:a5:80:be:1a:37:88:b0:c0:51:0f:86:20:fc: 03:9c:1b:01:0f:77:f0:e0:88:d5:2c:65:76:c4:79: 1b:da:ac:c6:94:94:1d:f0:34:6d:21:70:97:24:39: d1:60:d6:6c:89:ac:1c:73:4d:42:3e:fa:7f:f8:54: d9:68:a6:e9:54:f8:80:0e:5f:de:d8:ad:cf:1c:f1: 79:70:9b:d4:4b:50:ee:29:c8:c1:dc:97:a8:26:b6: 87:3b:dc:ef:a8:43:94:bd:93:bc:02:88:27:c5:99: 24:5d:84:d0:ee:ab:89:a2:fe:c0:d7:bd:7c:c4:84: e8:66:c7:15:05:1f:36:41:63:00:16:1a:70:e4:f6: cb:b4:4a:a8:d4:97:1e:11:06:2b:ef:4c:10:97:92: 70:51:34:f9:9d:e4:ad:ff:c2:47:d6:b2:58:3f:1e: bf:e1:02:02:48:7f:1f:d6:a8:b0:ae:74:91:54:94: 9e:87:f5:a4:3f:c6:57:db:98:eb:a6:f5:c9:1b:d4: d8:ce:28:21:b3:64:52:0a:73:3c:2f:48:c5:0b:af: 8a:f5:76:b3:09:17:cc:fe:9a:74:c3:6e:6c:a9:d6: a7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:94:6B:63:4F:06:74:1F:D1:EE:83:5A:7E:E5:55:41:ED:57:8C:39 X509v3 Authority Key Identifier: keyid:F3:36:7D:74:44:83:99:C1:8E:F6:7C:7C:98:61:07:B8:14:B1:2D:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F536/A305F4E4C99A11EFB4CEEF1EC4F9AE02/8zZ9dESDmcGO9nx8mGEHuBSxLWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:c4:f4:3e:68:7b:e4:56:0c:39:8e:5f:31:ab:1f:9f:a7:d0: 9a:6d:14:d1:de:ca:f1:3c:81:ba:ea:71:b0:8c:c3:bf:14:b9: 7c:be:1e:df:d8:e9:47:39:ec:14:3b:0a:61:16:92:e4:00:2f: ac:13:47:67:93:b5:3d:82:f1:e1:10:6a:82:e0:71:a5:23:c9: 2f:50:c1:ca:48:9e:ec:25:54:5a:03:e9:9f:1d:bc:7c:1f:a9: df:c5:67:42:97:14:24:ed:58:a6:45:ba:c1:90:e5:f8:94:ed: bc:40:b5:6e:af:06:2a:9a:93:4b:d1:d3:86:d5:b3:7f:3d:db: 0f:02:94:e9:4a:27:39:b4:88:80:59:6e:09:73:82:89:26:11: ba:c8:19:5d:2a:1a:6f:9a:31:a0:74:fe:03:2f:9c:63:47:cc: 8f:52:ce:76:bd:5a:53:bb:7f:37:c5:22:77:a1:dc:c2:10:9c: bf:c5:e1:8b:73:63:44:e3:84:10:fd:c4:1d:a3:e1:ff:eb:e6: 1f:f6:be:54:fe:e7:4b:07:4f:e5:91:15:93:eb:2f:ac:ec:44: 11:ec:cd:72:aa:f0:93:17:b5:26:30:7f:37:5a:da:ad:e6:04: 7e:d4:5d:dd:d6:b4:0f:f8:20:53:8a:df:04:bd:ca:0e:09:5e: eb:9c:45:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjUzNjExMC8GA1UEBRMoRjMzNjdENzQ0NDgzOTlDMThFRjY3QzdDOTg2MTA3Qjgx NEIxMkQ2NDAeFw0yNTA4MjEwNjU4NDBaFw0yNTA4MjgwNjU4NDBaMBgxFjAUBgNV BAMTDTY4YTZjM2EwLTU0N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoHgv/2iHShhF2+Y+dZWpQ+p2+X3K3ZSuk10dG6k0IpYC+GjeIsMBRD4Yg/AOc GwEPd/DgiNUsZXbEeRvarMaUlB3wNG0hcJckOdFg1myJrBxzTUI++n/4VNlopulU +IAOX97Yrc8c8Xlwm9RLUO4pyMHcl6gmtoc73O+oQ5S9k7wCiCfFmSRdhNDuq4mi /sDXvXzEhOhmxxUFHzZBYwAWGnDk9su0SqjUlx4RBivvTBCXknBRNPmd5K3/wkfW slg/Hr/hAgJIfx/WqLCudJFUlJ6H9aQ/xlfbmOum9ckb1NjOKCGzZFIKczwvSMUL r4r1drMJF8z+mnTDbmyp1qfLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUhZRrY08G dB/R7oNafuVVQe1XjDkwHwYDVR0jBBgwFoAU8zZ9dESDmcGO9nx8mGEHuBSxLWQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTM2L0EzMDVGNEU0Qzk5 QTExRUZCNENFRUYxRUM0RjlBRTAyLzh6WjlkRVNEbWNHTzlueDhtR0VIdUJTeExX US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHpaOWRFU0RtY0dPOW54OG1HRUh1QlN4TFdRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFG NTM2L0EzMDVGNEU0Qzk5QTExRUZCNENFRUYxRUM0RjlBRTAyLzh6WjlkRVNEbWNH TzlueDhtR0VIdUJTeExXUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAXE9D5oe+RWDDmOXzGrH5+n0JptFNHeyvE8gbrqcbCMw78UuXy+Ht/Y 6Uc57BQ7CmEWkuQAL6wTR2eTtT2C8eEQaoLgcaUjyS9QwcpInuwlVFoD6Z8dvHwf qd/FZ0KXFCTtWKZFusGQ5fiU7bxAtW6vBiqak0vR04bVs3892w8ClOlKJzm0iIBZ bglzgokmEbrIGV0qGm+aMaB0/gMvnGNHzI9Szna9WlO7fzfFIneh3MIQnL/F4Ytz Y0TjhBD9xB2j4f/r5h/2vlT+50sHT+WRFZPrL6zsRBHszXKq8JMXtSYwfzda2q3m BH7UXd3WtA/4IFOK3wS9yg4JXuucRUM= -----END CERTIFICATE-----Generated at Fri Aug 22 16:18:18 2025 by rpki-client