$ rpki-client -vvf rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft File: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft (raw, json) Hash identifier: xED+0Tmh9UY89IfujHGJUQHEHb1wWravRhx8l08o0ak= Subject key identifier: EC:25:54:0D:3D:F2:7C:1B:E6:E4:B5:B8:A1:5D:08:FC:51:99:4B:19 Authority key identifier: F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C Certificate issuer: /CN=A917B12B/serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Certificate serial: 279D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft Manifest number: 2775 Signing time: Sun 24 Aug 2025 15:36:58 +0000 Manifest this update: Sun 24 Aug 2025 15:36:58 +0000 Manifest next update: Sun 31 Aug 2025 15:36:58 +0000 Files and hashes: 1: 8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl (hash: vz2Br7LTdvyivI95pevk5m+1F++2CoOOmOa4tctRNxE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:36:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10141 (0x279d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B12B, serialNumber=F26923453F0170309FD58BF3B0B5DCE43FF9B41C Validity Not Before: Aug 24 15:36:58 2025 GMT Not After : Aug 31 15:36:58 2025 GMT Subject: CN=68ab319a-d511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:84:93:0d:a3:67:df:60:1b:b0:bc:42:09:3d: 57:94:37:63:1b:cf:13:bd:f3:4f:2b:89:3e:4b:fb: cd:08:2c:e0:87:ac:e8:05:4f:96:ae:98:42:25:f4: 37:38:22:6b:e1:45:47:9c:76:c7:95:8e:24:ae:d7: df:74:11:8e:f2:63:9c:1f:2e:c7:b3:76:94:f6:34: 4f:9f:35:be:3c:a5:a7:67:28:d7:70:7d:03:2a:9b: fc:b4:43:aa:56:dd:a9:4e:f6:cd:06:f0:44:56:db: 1d:b4:ad:b3:b7:9f:1e:1b:92:92:fc:39:5c:b0:28: 42:30:cd:51:53:48:d7:60:57:82:00:1a:05:33:45: 2f:09:d7:3e:d3:04:9b:24:ae:ab:08:ad:1c:e9:9c: ab:77:bf:fc:9c:43:65:38:b1:e6:b1:8e:54:78:eb: a9:d3:c0:37:fb:6e:67:3d:48:51:c2:70:f8:9a:e3: c9:f6:e1:ae:96:79:18:b5:c3:37:d8:3e:02:f9:75: e0:4e:7c:37:a8:c6:5f:d4:c7:2b:f0:72:79:98:61: e1:f8:e8:cf:1f:94:b2:8b:d0:99:5d:1f:a5:38:96: e3:d5:ae:1f:6b:47:24:d8:f3:4e:8f:ab:4b:05:62: 67:d8:24:61:76:7f:b7:ac:72:38:7c:ab:6e:f2:cc: 44:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:25:54:0D:3D:F2:7C:1B:E6:E4:B5:B8:A1:5D:08:FC:51:99:4B:19 X509v3 Authority Key Identifier: keyid:F2:69:23:45:3F:01:70:30:9F:D5:8B:F3:B0:B5:DC:E4:3F:F9:B4:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mkjRT8BcDCf1YvzsLXc5D_5tBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B12B/A509EC1EBD9D11E49996554CC4F9AE02/8mkjRT8BcDCf1YvzsLXc5D_5tBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:e6:d1:10:1d:b5:e7:f9:f2:93:70:7c:78:51:da:7c:a6:37: 91:0e:22:52:d7:e6:62:ba:24:d9:62:4e:96:7e:3c:8f:73:4f: 7b:e5:8f:bb:8a:cd:2b:14:0d:b6:ea:aa:31:65:01:66:47:6d: e4:31:c4:ec:9b:93:6a:b2:59:f1:ab:de:e5:9f:87:a6:5b:58: 7f:5c:06:79:5f:b3:dd:0c:1b:cf:68:cd:85:a1:5e:47:6a:d2: ae:4d:fb:a4:9a:5c:d1:74:30:bf:b7:a1:22:69:22:ef:55:f4: f7:ad:45:87:29:d2:70:55:03:49:89:0b:60:9c:05:44:59:dc: d6:fc:e8:a4:5f:ec:57:ae:f4:70:9f:6d:cc:c4:7e:10:84:ab: a1:95:d6:ac:4c:f3:b1:30:ef:0c:94:90:31:9f:bf:1b:88:47: 8c:34:77:9d:78:fe:d2:89:27:b5:89:8b:cc:bd:52:75:15:d7: 71:7e:ce:94:bb:19:94:90:96:4f:ba:5b:79:dc:d4:8e:3b:40: 4a:36:ce:d8:5c:2f:4f:fb:ba:1c:b8:f6:43:29:54:08:38:0b: 8c:d5:20:98:ad:4f:10:dd:0e:51:cb:2a:a3:d2:9e:69:1e:1c: ed:30:9e:cb:0f:02:d5:9d:1b:43:9a:06:ce:7b:37:80:cd:44: b3:53:08:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJ50wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0IxMkIxMTAvBgNVBAUTKEYyNjkyMzQ1M0YwMTcwMzA5RkQ1OEJGM0IwQjVEQ0U0 M0ZGOUI0MUMwHhcNMjUwODI0MTUzNjU4WhcNMjUwODMxMTUzNjU4WjAYMRYwFAYD VQQDEw02OGFiMzE5YS1kNTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs4STDaNn32AbsLxCCT1XlDdjG88TvfNPK4k+S/vNCCzgh6zoBU+WrphCJfQ3 OCJr4UVHnHbHlY4krtffdBGO8mOcHy7Hs3aU9jRPnzW+PKWnZyjXcH0DKpv8tEOq Vt2pTvbNBvBEVtsdtK2zt58eG5KS/DlcsChCMM1RU0jXYFeCABoFM0UvCdc+0wSb JK6rCK0c6Zyrd7/8nENlOLHmsY5UeOup08A3+25nPUhRwnD4muPJ9uGulnkYtcM3 2D4C+XXgTnw3qMZf1Mcr8HJ5mGHh+OjPH5Syi9CZXR+lOJbj1a4fa0ck2PNOj6tL BWJn2CRhdn+3rHI4fKtu8sxEDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOwlVA09 8nwb5uS1uKFdCPxRmUsZMB8GA1UdIwQYMBaAFPJpI0U/AXAwn9WL87C13OQ/+bQc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjEyQi9BNTA5RUMxRUJE OUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNEQ2YxWXZ6c0xYYzVEXzV0 QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhta2pSVDhCY0RDZjFZdnpzTFhjNURfNXRCdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjEyQi9BNTA5RUMxRUJEOUQxMUU0OTk5NjU1NENDNEY5QUUwMi84bWtqUlQ4QmNE Q2YxWXZ6c0xYYzVEXzV0QncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCy5tEQHbXn+fKTcHx4Udp8pjeRDiJS1+ZiuiTZYk6WfjyPc0975Y+7 is0rFA226qoxZQFmR23kMcTsm5Nqslnxq97ln4emW1h/XAZ5X7PdDBvPaM2FoV5H atKuTfukmlzRdDC/t6EiaSLvVfT3rUWHKdJwVQNJiQtgnAVEWdzW/OikX+xXrvRw n23MxH4QhKuhldasTPOxMO8MlJAxn78biEeMNHedeP7SiSe1iYvMvVJ1Fddxfs6U uxmUkJZPult53NSOO0BKNs7YXC9P+7ocuPZDKVQIOAuM1SCYrU8Q3Q5Ryyqj0p5p HhztMJ7LDwLVnRtDmgbOezeAzUSzUwjq -----END CERTIFICATE-----Generated at Sun Aug 24 21:50:10 2025 by rpki-client