$ rpki-client -vvf rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft File: s8jMSc2pmXofeyj1RvyRIdqhkzw.mft (raw, json) Hash identifier: KyVR3fC09927g+DHmaw6Ph8Ex0/NKnUzQ/OQjhgiECs= Subject key identifier: 2B:50:27:62:22:FE:D7:62:46:42:71:63:44:90:D1:A7:F7:E9:47:5B Authority key identifier: B3:C8:CC:49:CD:A9:99:7A:1F:7B:28:F5:46:FC:91:21:DA:A1:93:3C Certificate issuer: /CN=A913E83E/serialNumber=B3C8CC49CDA9997A1F7B28F546FC9121DAA1933C Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft Manifest number: 1C Signing time: Thu 21 Aug 2025 08:06:36 +0000 Manifest this update: Thu 21 Aug 2025 08:06:35 +0000 Manifest next update: Thu 28 Aug 2025 08:06:35 +0000 Files and hashes: 1: s8jMSc2pmXofeyj1RvyRIdqhkzw.crl (hash: KxaaQhUWbzzqnsaZZZbgANAY0G24VxJ9P73RKdCNEGM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.crl rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 08:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E83E, serialNumber=B3C8CC49CDA9997A1F7B28F546FC9121DAA1933C Validity Not Before: Aug 21 08:06:35 2025 GMT Not After : Aug 28 08:06:35 2025 GMT Subject: CN=68a6d38c-cc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fc:a1:db:99:55:5e:52:13:97:73:39:b7:86: db:85:4a:ef:16:30:7c:52:2e:a1:54:2e:07:fe:cf: c4:d7:a8:8e:ac:e9:97:46:60:83:fd:8f:c5:57:35: 01:c4:dd:06:2b:20:4b:fc:d3:7e:ef:76:f3:7d:1c: 78:56:d7:8a:0a:3a:da:12:25:11:32:bf:c7:27:4e: 57:86:d7:97:22:ea:c1:b9:9c:b4:59:6c:19:98:5f: 41:34:9b:39:df:bf:43:30:10:3e:cf:03:10:a4:c5: e1:b9:37:3b:53:a6:1e:02:7a:45:0f:b9:e9:4d:6a: 4c:c0:27:b6:05:85:e8:89:bf:d3:3a:43:a5:cd:0d: eb:fa:67:02:d6:26:71:e8:52:f6:ab:7f:73:8e:8e: 33:05:b6:fb:2a:12:a6:ff:50:ed:60:70:ac:bd:80: b7:3e:80:67:68:72:51:bb:a1:ec:bf:ee:a3:18:6f: bc:0c:dc:bc:b0:69:03:02:f0:bf:3a:0e:de:b8:b6: 79:3d:77:3f:10:81:f4:db:01:2b:fc:1f:31:29:ed: 32:ab:88:18:cd:9b:11:51:30:39:4f:6c:98:81:c8: 91:c3:32:8d:2f:d4:0d:e6:33:55:73:15:09:51:1b: 90:c2:2b:6e:f5:5d:f2:6c:a2:ba:32:67:55:37:4a: 26:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:50:27:62:22:FE:D7:62:46:42:71:63:44:90:D1:A7:F7:E9:47:5B X509v3 Authority Key Identifier: keyid:B3:C8:CC:49:CD:A9:99:7A:1F:7B:28:F5:46:FC:91:21:DA:A1:93:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8jMSc2pmXofeyj1RvyRIdqhkzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E83E/F3910C90563111F0A1AAE24DC4F9AE02/s8jMSc2pmXofeyj1RvyRIdqhkzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:82:d5:f1:d5:06:b3:8b:36:df:52:c5:98:49:74:c6:d5:a0: 49:70:7e:84:60:d8:ab:2b:f7:bf:68:0f:d1:13:7e:dd:10:99: 8e:1d:27:74:61:ee:64:77:08:0d:13:c5:e1:ab:2c:c3:e9:42: f0:74:a0:e9:48:78:71:2c:13:b3:da:9f:8f:13:6c:8f:3c:0b: ef:ea:49:60:c5:c9:f8:24:33:58:5e:8b:e3:fb:60:aa:27:31: 57:f9:f2:06:a4:08:6a:99:3e:a9:61:62:8c:03:81:e0:e0:ae: 28:61:4b:cc:2e:16:d1:5f:ae:64:2a:7c:82:cb:a9:e6:79:1f: e1:75:74:66:ed:5f:04:27:72:4d:ba:ef:60:ff:85:9b:29:9b: a5:c2:50:15:ba:e8:4c:7f:c9:49:81:f4:d1:be:f1:48:ac:17: 7e:f7:1f:3d:dd:b8:19:d4:51:64:58:ed:34:e0:da:96:a6:e2: 8e:1e:89:15:f1:aa:9b:1a:9d:42:98:9b:a9:01:59:09:d2:5a: 2f:8b:95:5e:10:9f:56:8a:c9:55:48:d1:03:d1:16:9d:3c:7d: c5:6b:ea:66:14:61:41:96:a5:46:f3:64:65:8d:87:b3:31:5a: c4:11:ec:1e:bd:4c:3f:25:12:94:7e:e2:cc:2b:86:f7:fb:a9: 48:0a:f4:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTgzRTExMC8GA1UEBRMoQjNDOENDNDlDREE5OTk3QTFGN0IyOEY1NDZGQzkxMjFE QUExOTMzQzAeFw0yNTA4MjEwODA2MzVaFw0yNTA4MjgwODA2MzVaMBgxFjAUBgNV BAMTDTY4YTZkMzhjLWNjNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS/KHbmVVeUhOXczm3htuFSu8WMHxSLqFULgf+z8TXqI6s6ZdGYIP9j8VXNQHE 3QYrIEv8037vdvN9HHhW14oKOtoSJREyv8cnTleG15ci6sG5nLRZbBmYX0E0mznf v0MwED7PAxCkxeG5NztTph4CekUPuelNakzAJ7YFheiJv9M6Q6XNDev6ZwLWJnHo Uvarf3OOjjMFtvsqEqb/UO1gcKy9gLc+gGdoclG7oey/7qMYb7wM3LywaQMC8L86 Dt64tnk9dz8QgfTbASv8HzEp7TKriBjNmxFRMDlPbJiByJHDMo0v1A3mM1VzFQlR G5DCK271XfJsoroyZ1U3SiY9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUK1AnYiL+ 12JGQnFjRJDRp/fpR1swHwYDVR0jBBgwFoAUs8jMSc2pmXofeyj1RvyRIdqhkzww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFODNFL0YzOTEwQzkwNTYz MTExRjBBMUFBRTI0REM0RjlBRTAyL3M4ak1TYzJwbVhvZmV5ajFSdnlSSWRxaGt6 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvczhqTVNjMnBtWG9mZXlqMVJ2eVJJZHFoa3p3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF ODNFL0YzOTEwQzkwNTYzMTExRjBBMUFBRTI0REM0RjlBRTAyL3M4ak1TYzJwbVhv ZmV5ajFSdnlSSWRxaGt6dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKuC1fHVBrOLNt9SxZhJdMbVoElwfoRg2Ksr979oD9ETft0QmY4dJ3Rh 7mR3CA0TxeGrLMPpQvB0oOlIeHEsE7Pan48TbI88C+/qSWDFyfgkM1hei+P7YKon MVf58gakCGqZPqlhYowDgeDgrihhS8wuFtFfrmQqfILLqeZ5H+F1dGbtXwQnck26 72D/hZspm6XCUBW66Ex/yUmB9NG+8UisF373Hz3duBnUUWRY7TTg2pam4o4eiRXx qpsanUKYm6kBWQnSWi+LlV4Qn1aKyVVI0QPRFp08fcVr6mYUYUGWpUbzZGWNh7Mx WsQR7B69TD8lEpR+4swrhvf7qUgK9EE= -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:01 2025 by rpki-client