$ rpki-client -vvf rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft File: P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft (raw, json) Hash identifier: +0f7zi30FaKCl7BXjat0xTD+kzZbz00stKqJ80NTQTc= Subject key identifier: D9:62:9B:C9:CE:DE:51:24:A4:1E:A4:13:F8:41:FC:5A:4B:05:22:C3 Authority key identifier: 3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 Certificate issuer: /CN=A914C59A/serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Certificate serial: 060A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft Manifest number: 0605 Signing time: Fri 22 Aug 2025 23:01:22 +0000 Manifest this update: Fri 22 Aug 2025 23:01:21 +0000 Manifest next update: Fri 29 Aug 2025 23:01:21 +0000 Files and hashes: 1: P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl (hash: zhuwENK03DhwgYAmWvI4GNGBXz4Lvc+xUJ5BolLhZpk=) 2: 69559D4CB7AD11EBAA08131AC4F9AE02.roa (hash: l216klg+EdFhZXizpzBgdSx3W8LT8OTJYqEFSmlWpW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1546 (0x60a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C59A, serialNumber=3FCA191F1568AA7A9DD160FD60989989336C82B8 Validity Not Before: Aug 22 23:01:21 2025 GMT Not After : Aug 29 23:01:21 2025 GMT Subject: CN=68a8f6c2-dfea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:c1:7c:0c:24:a0:bc:2f:5c:73:1a:af:04: 51:91:2d:f5:6e:6f:e4:39:f1:78:57:6d:82:85:4e: 9d:7f:a9:6a:34:7e:d6:a7:1a:a4:dd:72:70:2d:23: 8d:b1:26:86:d0:cd:d8:44:44:d6:42:41:9b:35:2f: 47:89:2d:a3:6a:6e:35:71:d5:be:c6:7b:31:5a:d8: 13:47:b0:72:40:2d:88:42:c9:d0:5d:5a:21:78:f1: fd:c7:36:1f:d8:43:dd:85:82:27:49:57:79:89:db: 51:51:36:31:78:9f:4d:d0:07:22:ea:3e:6b:9b:8e: b8:91:17:88:ca:28:b9:da:69:78:8d:b7:a9:2d:a9: 1e:71:7a:fa:3a:87:d5:d1:07:e2:ff:a5:27:c1:88: fc:80:38:7c:00:2c:75:84:e5:50:29:3e:8d:70:ea: fd:ea:7d:74:23:0f:8e:c1:30:3f:b1:4a:1f:1e:2c: 9a:0e:e6:ee:b7:f2:b9:a8:0c:2e:14:7a:c5:df:bd: 58:6f:d2:e6:38:7a:95:fb:11:80:0b:e4:57:5d:05: 47:28:de:d3:53:da:5a:f6:83:d8:0d:69:a8:de:94: 57:f6:5c:6c:8b:d1:7b:8f:e4:c8:83:6f:c2:04:44: ce:d3:a1:22:4c:63:cd:c2:2a:6b:8e:f9:02:cd:b2: 74:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:62:9B:C9:CE:DE:51:24:A4:1E:A4:13:F8:41:FC:5A:4B:05:22:C3 X509v3 Authority Key Identifier: keyid:3F:CA:19:1F:15:68:AA:7A:9D:D1:60:FD:60:98:99:89:33:6C:82:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P8oZHxVoqnqd0WD9YJiZiTNsgrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C59A/BD254EF2B7AA11EBBB922315C4F9AE02/P8oZHxVoqnqd0WD9YJiZiTNsgrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c9:e9:e1:59:ee:7f:77:87:54:9a:0b:f7:4b:80:ca:73:cd: e6:8a:2e:a5:e1:9e:e8:b9:d3:a5:4d:3e:4f:8c:a7:74:6d:cc: 46:99:7e:29:e1:de:28:15:74:0b:79:ad:ef:aa:8c:a5:3b:28: d3:76:c0:ca:62:d2:0e:60:c5:86:6e:ae:54:0a:b5:00:a8:c6: 2b:31:63:c8:19:d8:27:d8:40:30:68:75:3f:51:41:49:c2:4b: ed:bb:bc:fa:da:13:be:d0:2a:18:a4:52:29:00:11:3c:83:a2: 2b:f4:2c:10:97:90:01:4f:47:78:a2:07:ce:9f:08:ed:32:9e: e1:f1:cb:5b:2b:c0:ad:26:38:5d:77:32:60:9c:0d:a2:c0:e0: 7d:74:3c:26:32:d8:46:e1:f4:16:e9:1a:f5:7d:e3:1d:9c:bf: 79:7f:d0:6d:22:2b:26:0e:9b:f6:ff:94:cb:eb:88:c1:cd:18: 50:a1:5a:0b:87:31:a3:2a:f8:d4:d8:53:07:d3:c8:01:45:c0: c1:67:1f:da:1a:ce:83:48:59:e3:d6:42:cc:7c:5e:05:69:8a: dc:5c:59:73:c3:62:be:9f:2c:93:96:99:44:11:50:b3:fc:fc: ea:56:52:ad:b9:97:3f:2c:da:2a:0d:87:2e:20:bf:58:f0:e1: fe:67:37:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEM1OUExMTAvBgNVBAUTKDNGQ0ExOTFGMTU2OEFBN0E5REQxNjBGRDYwOTg5OTg5 MzM2QzgyQjgwHhcNMjUwODIyMjMwMTIxWhcNMjUwODI5MjMwMTIxWjAYMRYwFAYD VQQDEw02OGE4ZjZjMi1kZmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvFfBfAwkoLwvXHMarwRRkS31bm/kOfF4V22ChU6df6lqNH7Wpxqk3XJwLSON sSaG0M3YRETWQkGbNS9HiS2jam41cdW+xnsxWtgTR7ByQC2IQsnQXVohePH9xzYf 2EPdhYInSVd5idtRUTYxeJ9N0Aci6j5rm464kReIyii52ml4jbepLakecXr6OofV 0Qfi/6UnwYj8gDh8ACx1hOVQKT6NcOr96n10Iw+OwTA/sUofHiyaDubut/K5qAwu FHrF371Yb9LmOHqV+xGAC+RXXQVHKN7TU9pa9oPYDWmo3pRX9lxsi9F7j+TIg2/C BETO06EiTGPNwiprjvkCzbJ0nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNlim8nO 3lEkpB6kE/hB/FpLBSLDMB8GA1UdIwQYMBaAFD/KGR8VaKp6ndFg/WCYmYkzbIK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzU5QS9CRDI1NEVGMkI3 QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3FucWQwV0Q5WUppWmlUTnNn cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1A4b1pIeFZvcW5xZDBXRDlZSmlaaVROc2dyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzU5QS9CRDI1NEVGMkI3QUExMUVCQkI5MjIzMTVDNEY5QUUwMi9QOG9aSHhWb3Fu cWQwV0Q5WUppWmlUTnNncmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeyenhWe5/d4dUmgv3S4DKc83mii6l4Z7oudOlTT5PjKd0bcxGmX4p 4d4oFXQLea3vqoylOyjTdsDKYtIOYMWGbq5UCrUAqMYrMWPIGdgn2EAwaHU/UUFJ wkvtu7z62hO+0CoYpFIpABE8g6Ir9CwQl5ABT0d4ogfOnwjtMp7h8ctbK8CtJjhd dzJgnA2iwOB9dDwmMthG4fQW6Rr1feMdnL95f9BtIismDpv2/5TL64jBzRhQoVoL hzGjKvjU2FMH08gBRcDBZx/aGs6DSFnj1kLMfF4FaYrcXFlzw2K+nyyTlplEEVCz /PzqVlKtuZc/LNoqDYcuIL9Y8OH+ZzfH -----END CERTIFICATE-----Generated at Sun Aug 24 22:02:49 2025 by rpki-client