$ rpki-client -vvf rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft File: 8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft (raw, json) Hash identifier: /R3tcoWqwvkCrrLiFizcXGd3ZjdLeLhQGzODtcKXNZY= Subject key identifier: 01:A8:F8:8A:A5:DE:82:96:1B:88:8B:89:28:2A:06:7B:BD:9A:A8:73 Authority key identifier: F3:FC:3E:8F:E3:FC:D8:6C:AF:0F:71:AF:6F:B4:23:1E:C5:71:BA:F6 Certificate issuer: /CN=A916E554/serialNumber=F3FC3E8FE3FCD86CAF0F71AF6FB4231EC571BAF6 Certificate serial: 0EAA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft Manifest number: 0E9C Signing time: Fri 22 Aug 2025 17:48:27 +0000 Manifest this update: Fri 22 Aug 2025 17:48:26 +0000 Manifest next update: Fri 29 Aug 2025 17:48:26 +0000 Files and hashes: 1: 8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl (hash: sV82/w+DX/dA0SXQ16juRQnHsYuiLtj9ugaj73UKINU=) 2: E8F7CA24E38211EB8BAE655EC4F9AE02.roa (hash: P6oNgC/+Qy7DzRN3h5YDwNEI2L0F/sePFzpHnyHAcfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3754 (0xeaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E554, serialNumber=F3FC3E8FE3FCD86CAF0F71AF6FB4231EC571BAF6 Validity Not Before: Aug 22 17:48:26 2025 GMT Not After : Aug 29 17:48:26 2025 GMT Subject: CN=68a8ad6a-fbc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fd:3b:bb:e9:f7:24:ec:0c:e1:ef:18:50:b0: aa:50:be:b3:64:b8:c8:fa:3b:8d:1b:00:ca:e7:ac: 1c:c5:86:e5:43:72:ce:12:3b:ad:93:1d:55:15:bf: cd:07:b7:bd:bc:17:94:86:41:f1:32:5d:9c:da:2d: 07:5f:1e:94:72:b0:9f:e8:35:f6:54:7c:7c:6b:64: be:c6:5c:42:ca:81:89:fc:06:56:f0:5f:c1:f8:30: b3:89:8b:48:e4:76:9d:5f:59:5a:ea:19:7b:fb:98: 1a:a3:70:b4:32:1e:b8:b6:82:84:a4:d3:00:30:31: 88:cc:0f:15:2b:59:61:be:62:c9:f5:11:74:4a:50: d9:a3:af:f2:8c:91:cc:c9:c4:cc:62:42:4c:c7:9e: 95:2e:27:60:d4:a5:23:62:c0:80:7e:9b:da:99:1a: 1a:af:cb:e1:6a:e2:54:7e:26:81:e5:98:f5:7e:fc: be:df:cb:28:db:ec:cc:4c:97:28:9e:44:59:7f:b0: 3f:9d:14:78:63:4b:e0:b2:a6:62:0f:94:3a:6f:11: b4:8f:98:66:52:9b:48:08:dd:9a:25:91:b6:17:35: eb:d0:ca:da:40:74:58:9c:84:ee:e0:7a:e4:f8:37: 5d:67:64:ab:9d:81:b3:46:28:02:bd:25:8e:02:9e: be:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:A8:F8:8A:A5:DE:82:96:1B:88:8B:89:28:2A:06:7B:BD:9A:A8:73 X509v3 Authority Key Identifier: keyid:F3:FC:3E:8F:E3:FC:D8:6C:AF:0F:71:AF:6F:B4:23:1E:C5:71:BA:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_w-j-P82GyvD3Gvb7QjHsVxuvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E554/7E053E9098CF11E986179A86C4F9AE02/8_w-j-P82GyvD3Gvb7QjHsVxuvY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1c:85:44:7d:f0:2b:ce:f1:9f:2f:c2:5e:11:9c:15:33:c8:2a: cd:08:a0:cb:0a:4b:ec:d9:89:8f:c3:96:20:f7:22:58:5a:e2: 68:6e:c7:6f:d8:cb:5e:1a:37:ad:de:19:06:3b:10:37:fd:81: 2e:27:85:13:70:e7:1e:c2:ee:b0:12:c9:f6:2f:ff:cf:d0:43: 83:12:4b:c5:aa:8a:36:2c:d7:56:f7:92:c2:55:fc:e1:e5:d9: 5e:07:99:f1:81:d9:56:a7:e8:91:ad:3c:40:73:45:2b:9c:c0: 72:7c:4a:06:69:e9:d9:42:e9:ca:69:f7:d3:5c:4e:d2:a7:83: 10:76:68:dc:b8:d0:bd:50:51:6b:2e:86:75:5e:18:86:5f:7f: e8:42:4d:0e:6d:15:96:88:bf:65:ff:14:01:9e:8d:5f:7b:1b: 29:b9:21:ab:0a:79:9c:cc:b0:a6:9d:45:3b:4d:7e:16:1d:44: 3a:01:9f:bb:db:00:5a:8c:fb:44:45:99:54:32:3d:cc:b4:34: 1c:54:02:d1:52:f3:0a:d1:ed:67:78:3b:41:7f:af:16:18:2c: 6d:d1:a7:e4:a9:85:55:e1:b8:9b:68:0a:34:3f:91:f0:14:a7: 95:68:ac:87:96:12:2a:0b:9b:0b:7a:a1:59:49:b1:0e:27:15: 34:0f:19:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkU1NTQxMTAvBgNVBAUTKEYzRkMzRThGRTNGQ0Q4NkNBRjBGNzFBRjZGQjQyMzFF QzU3MUJBRjYwHhcNMjUwODIyMTc0ODI2WhcNMjUwODI5MTc0ODI2WjAYMRYwFAYD VQQDEw02OGE4YWQ2YS1mYmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzv07u+n3JOwM4e8YULCqUL6zZLjI+juNGwDK56wcxYblQ3LOEjutkx1VFb/N B7e9vBeUhkHxMl2c2i0HXx6UcrCf6DX2VHx8a2S+xlxCyoGJ/AZW8F/B+DCziYtI 5HadX1la6hl7+5gao3C0Mh64toKEpNMAMDGIzA8VK1lhvmLJ9RF0SlDZo6/yjJHM ycTMYkJMx56VLidg1KUjYsCAfpvamRoar8vhauJUfiaB5Zj1fvy+38so2+zMTJco nkRZf7A/nRR4Y0vgsqZiD5Q6bxG0j5hmUptICN2aJZG2FzXr0MraQHRYnITu4Hrk +DddZ2SrnYGzRigCvSWOAp6+/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGo+Iql 3oKWG4iLiSgqBnu9mqhzMB8GA1UdIwQYMBaAFPP8Po/j/Nhsrw9xr2+0Ix7Fcbr2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTU1NC83RTA1M0U5MDk4 Q0YxMUU5ODYxNzlBODZDNEY5QUUwMi84X3ctai1QODJHeXZEM0d2YjdRakhzVnh1 dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhfdy1qLVA4Mkd5dkQzR3ZiN1FqSHNWeHV2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTU1NC83RTA1M0U5MDk4Q0YxMUU5ODYxNzlBODZDNEY5QUUwMi84X3ctai1QODJH eXZEM0d2YjdRakhzVnh1dlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAchUR98CvO8Z8vwl4RnBUzyCrNCKDLCkvs2YmPw5Yg9yJYWuJobsdv 2MteGjet3hkGOxA3/YEuJ4UTcOcewu6wEsn2L//P0EODEkvFqoo2LNdW95LCVfzh 5dleB5nxgdlWp+iRrTxAc0UrnMByfEoGaenZQunKaffTXE7Sp4MQdmjcuNC9UFFr LoZ1XhiGX3/oQk0ObRWWiL9l/xQBno1fexspuSGrCnmczLCmnUU7TX4WHUQ6AZ+7 2wBajPtERZlUMj3MtDQcVALRUvMK0e1neDtBf68WGCxt0afkqYVV4bibaAo0P5Hw FKeVaKyHlhIqC5sLeqFZSbEOJxU0Dxn4 -----END CERTIFICATE-----Generated at Sat Aug 23 01:57:31 2025 by rpki-client