$ rpki-client -vvf rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft File: 8yjXnK7LFF8i39-M3sLQVpxpdnw.mft (raw, json) Hash identifier: v8iRzl3xeUg4QR4wZSFBM/k1vRX+lLc6yVGJD21Wpec= Subject key identifier: E3:AB:1A:54:52:BE:BF:DC:D7:FB:2C:C7:41:33:B9:B5:9E:6B:A6:DB Authority key identifier: F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C Certificate issuer: /CN=A91415AA/serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Certificate serial: 0AA5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft Manifest number: 13EF Signing time: Thu 18 Sep 2025 19:45:28 +0000 Manifest this update: Thu 18 Sep 2025 19:45:27 +0000 Manifest next update: Thu 25 Sep 2025 19:45:27 +0000 Files and hashes: 1: 8yjXnK7LFF8i39-M3sLQVpxpdnw.crl (hash: oLz+6fx2BbYQtx4fDU0nrPmi5QW8SaJiPseiY00bACE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 19:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2725 (0xaa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415AA, serialNumber=F328D79CAECB145F22DFDF8CDEC2D0569C69767C Validity Not Before: Sep 18 19:45:27 2025 GMT Not After : Sep 25 19:45:27 2025 GMT Subject: CN=68cc6157-54b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:14:e6:d2:f8:e4:6a:8a:25:61:11:4d:e9:b9: 9c:28:5d:ad:4d:d5:c9:0a:33:4c:a7:b1:73:0a:4c: f5:9e:86:4b:18:14:24:7c:af:62:f8:68:98:67:70: eb:8f:4a:d0:d1:0d:2f:72:ed:b9:33:5e:3c:22:e4: 68:bd:c5:15:23:1f:6e:ba:91:9a:c5:f0:b7:72:aa: 13:06:a2:39:d9:95:56:79:ed:f7:5c:80:18:fc:2f: 22:f8:0b:a8:95:4a:b1:7b:e8:49:84:71:22:6e:d1: 08:32:3e:b3:4d:56:42:6e:c2:10:90:71:68:68:2e: 50:df:68:1a:61:2a:72:86:5c:ad:c6:61:79:81:10: ea:5d:55:3b:79:fd:2f:8b:cd:8f:55:11:30:d1:71: 36:22:fa:a8:97:ed:58:1a:da:c6:e6:1a:d9:b8:f5: 44:be:c9:fa:38:29:5d:a4:57:28:48:59:65:13:00: 87:80:0f:51:71:69:f3:e0:0f:35:4c:5a:7c:48:b8: 29:4b:62:3a:4e:5b:09:40:88:fc:d3:66:30:4c:db: 5a:4d:55:c3:93:57:5a:fa:61:14:a8:c5:6c:76:0c: 4f:36:11:49:c2:6d:e0:03:51:3d:92:c1:18:ae:92: 21:e6:c5:3a:79:75:5e:09:db:3a:5a:98:44:07:cd: 76:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AB:1A:54:52:BE:BF:DC:D7:FB:2C:C7:41:33:B9:B5:9E:6B:A6:DB X509v3 Authority Key Identifier: keyid:F3:28:D7:9C:AE:CB:14:5F:22:DF:DF:8C:DE:C2:D0:56:9C:69:76:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8yjXnK7LFF8i39-M3sLQVpxpdnw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415AA/3EFA241462E011EAA6D59A2CC4F9AE02/8yjXnK7LFF8i39-M3sLQVpxpdnw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:96:6d:71:d1:f9:4d:bf:c2:77:5a:41:a6:2a:37:a4:76:98: 12:73:d8:3f:36:57:ec:49:29:2d:5b:fa:89:51:18:5d:23:a1: bb:35:69:a7:7b:b1:07:e9:da:71:e0:20:fb:df:64:17:02:eb: 23:d6:f1:a0:76:f0:d3:17:6f:8b:e6:31:13:24:46:c6:d7:3b: e1:ee:07:e2:11:95:6f:2f:83:b6:77:45:4b:d1:fd:ca:38:ec: 83:57:5e:ba:35:0b:8b:a2:17:f5:59:f8:7c:a0:21:80:a3:bb: 29:88:03:40:95:7a:19:f4:8b:99:8d:ea:aa:c4:61:be:ab:18: dc:df:e0:a5:e6:f6:23:47:42:9a:e9:06:68:36:4b:51:37:a0: d3:eb:ee:a4:bf:e3:ac:99:51:6e:76:c6:88:37:12:0f:d6:aa: b5:09:fc:18:14:5f:f6:39:4c:3f:3f:46:82:11:3d:1a:07:d5: 11:1c:7b:89:28:6a:91:dc:3d:b8:24:fa:c4:89:61:09:a0:35: 6d:c6:ac:e3:dd:18:3a:a8:71:94:ac:dc:6b:bb:30:47:d7:1c: a9:57:ae:17:9d:e8:d6:03:27:de:f2:7d:07:91:7c:4f:84:da: 27:c5:40:d1:f2:a0:37:d5:27:d2:10:39:0d:f2:0a:4f:e4:24: 35:c4:78:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCqUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1QUExMTAvBgNVBAUTKEYzMjhENzlDQUVDQjE0NUYyMkRGREY4Q0RFQzJEMDU2 OUM2OTc2N0MwHhcNMjUwOTE4MTk0NTI3WhcNMjUwOTI1MTk0NTI3WjAYMRYwFAYD VQQDEw02OGNjNjE1Ny01NGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuhTm0vjkaoolYRFN6bmcKF2tTdXJCjNMp7FzCkz1noZLGBQkfK9i+GiYZ3Dr j0rQ0Q0vcu25M148IuRovcUVIx9uupGaxfC3cqoTBqI52ZVWee33XIAY/C8i+Auo lUqxe+hJhHEibtEIMj6zTVZCbsIQkHFoaC5Q32gaYSpyhlytxmF5gRDqXVU7ef0v i82PVREw0XE2Ivqol+1YGtrG5hrZuPVEvsn6OCldpFcoSFllEwCHgA9RcWnz4A81 TFp8SLgpS2I6TlsJQIj802YwTNtaTVXDk1da+mEUqMVsdgxPNhFJwm3gA1E9ksEY rpIh5sU6eXVeCds6WphEB812HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOrGlRS vr/c1/ssx0EzubWea6bbMB8GA1UdIwQYMBaAFPMo15yuyxRfIt/fjN7C0FacaXZ8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVBQS8zRUZBMjQxNDYy RTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZGOGkzOS1NM3NMUVZweHBk bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh5alhuSzdMRkY4aTM5LU0zc0xRVnB4cGRudy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTVBQS8zRUZBMjQxNDYyRTAxMUVBQTZENTlBMkNDNEY5QUUwMi84eWpYbks3TEZG OGkzOS1NM3NMUVZweHBkbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCClm1x0flNv8J3WkGmKjekdpgSc9g/NlfsSSktW/qJURhdI6G7NWmn e7EH6dpx4CD732QXAusj1vGgdvDTF2+L5jETJEbG1zvh7gfiEZVvL4O2d0VL0f3K OOyDV166NQuLohf1Wfh8oCGAo7spiANAlXoZ9IuZjeqqxGG+qxjc3+Cl5vYjR0Ka 6QZoNktRN6DT6+6kv+OsmVFudsaINxIP1qq1CfwYFF/2OUw/P0aCET0aB9URHHuJ KGqR3D24JPrEiWEJoDVtxqzj3Rg6qHGUrNxruzBH1xypV64XnejWAyfe8n0HkXxP hNonxUDR8qA31SfSEDkN8gpP5CQ1xHic -----END CERTIFICATE-----Generated at Fri Sep 19 00:46:58 2025 by rpki-client