$ rpki-client -vvf rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft File: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft (raw, json) Hash identifier: 9rcD6P1weiupRfIuvXUuOXNrbe5F3mA3+lRDFi26gyM= Subject key identifier: 39:8A:3E:C5:4C:E6:A6:4F:12:66:60:51:1D:1F:CD:08:F2:44:3D:D0 Authority key identifier: F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E Certificate issuer: /CN=A917E1FA/serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft Manifest number: 35 Signing time: Fri 05 Sep 2025 08:11:19 +0000 Manifest this update: Fri 05 Sep 2025 08:11:18 +0000 Manifest next update: Fri 12 Sep 2025 08:11:18 +0000 Files and hashes: 1: 8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl (hash: usxNH1ndpkUJSK7WFf694tkixHOle23bCkUAuN2plWA=) 2: FEC5694C482311F0B2B5E45DC4F9AE02.roa (hash: lNd0dhVh9oVMjkR+5hS3U5ljCVkdpvgCie/KVi3bQe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 08:11:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E1FA, serialNumber=F15C5C5BA521453707C81F5FEC0811BF21CFF40E Validity Not Before: Sep 5 08:11:18 2025 GMT Not After : Sep 12 08:11:18 2025 GMT Subject: CN=68ba9b26-1c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a2:15:ba:6e:fe:ca:3c:47:96:19:01:58:52: d6:1d:2e:cb:6e:e1:d2:a9:19:47:e6:c5:eb:31:08: e2:fe:87:0b:eb:cd:e6:22:74:53:f0:9a:c9:a1:6e: 47:fa:fa:65:19:57:53:eb:c9:f8:3e:74:ee:aa:f5: 0a:68:fd:36:28:1c:41:5e:f2:e0:b0:c4:cb:c7:7b: 3c:aa:ae:ac:d9:08:c9:de:5a:33:5c:01:55:f9:6f: ed:28:42:45:b4:37:a5:1f:72:0b:32:81:e7:40:6b: b2:a4:b1:2f:db:a6:b8:e4:6e:94:85:a7:b3:2c:af: 47:91:68:3c:87:8c:f4:b0:d3:b3:c3:3c:f8:5c:77: 56:9f:e8:61:b0:d2:45:1b:93:aa:4d:a5:e5:5f:10: 64:07:6f:62:ef:18:53:54:8b:4b:9b:a9:61:80:1a: 89:78:49:10:21:3c:92:56:2b:5e:b9:2f:8a:63:98: 6b:62:1d:90:55:42:39:62:0d:24:77:a6:09:1d:0a: 37:df:16:1e:94:bc:8d:5c:58:92:f4:b2:c6:33:f5: 98:a6:2e:e6:b8:9b:a1:b9:32:db:9e:a1:c2:4b:39: c6:d8:16:a5:e5:c8:8b:b6:8d:6d:f1:e2:62:81:52: f0:3c:3a:68:67:66:33:c7:4f:36:e4:ac:7a:44:7a: 1d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8A:3E:C5:4C:E6:A6:4F:12:66:60:51:1D:1F:CD:08:F2:44:3D:D0 X509v3 Authority Key Identifier: keyid:F1:5C:5C:5B:A5:21:45:37:07:C8:1F:5F:EC:08:11:BF:21:CF:F4:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8VxcW6UhRTcHyB9f7AgRvyHP9A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E1FA/9A873EB045A311F095EFFD48C4F9AE02/8VxcW6UhRTcHyB9f7AgRvyHP9A4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:4f:8e:81:c2:a0:d3:0c:1e:32:5a:ef:a8:0e:fb:0d:5c:d9: ba:e4:51:15:0b:63:e7:98:24:ce:e4:e3:f2:d6:f7:36:bf:da: 67:f2:21:5d:99:0b:60:87:f1:8c:8d:da:58:8d:23:91:e7:7f: e2:1e:90:ae:78:2a:09:48:ee:ce:b7:82:8f:dc:32:e5:b8:e5: f4:de:58:71:f4:59:8b:fd:30:35:15:d2:ab:9a:25:e4:4a:5e: 2e:17:dd:0f:17:7d:06:68:a7:81:e8:75:a2:60:24:0f:7b:c2: f0:73:ec:ee:39:89:44:79:43:b6:d4:33:83:af:10:3d:d5:3c: e9:de:11:f9:06:cf:9d:c7:57:ec:c3:6d:dc:db:a6:0f:f1:57: 18:1f:70:88:93:b7:0d:40:32:f1:ef:eb:98:67:72:2f:c9:ac: 36:13:ca:22:bb:7f:ae:e7:f4:88:c6:ab:5a:5e:4e:c3:a9:a1: 30:0e:32:67:80:97:af:af:7a:2a:1b:85:c4:39:26:2a:9a:8d: dd:66:29:14:2a:7c:15:8e:cd:9a:94:e6:92:5a:d4:fd:10:3a: fc:41:9b:36:bb:2d:ee:3d:61:05:59:1f:e4:07:fb:37:8d:1e: f5:d2:38:0a:dc:91:31:dd:67:d8:6c:85:bf:5b:82:1b:a1:95: b7:90:db:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RTFGQTExMC8GA1UEBRMoRjE1QzVDNUJBNTIxNDUzNzA3QzgxRjVGRUMwODExQkYy MUNGRjQwRTAeFw0yNTA5MDUwODExMThaFw0yNTA5MTIwODExMThaMBgxFjAUBgNV BAMTDTY4YmE5YjI2LTFjNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1ohW6bv7KPEeWGQFYUtYdLstu4dKpGUfmxesxCOL+hwvrzeYidFPwmsmhbkf6 +mUZV1Pryfg+dO6q9Qpo/TYoHEFe8uCwxMvHezyqrqzZCMneWjNcAVX5b+0oQkW0 N6UfcgsygedAa7KksS/bprjkbpSFp7Msr0eRaDyHjPSw07PDPPhcd1af6GGw0kUb k6pNpeVfEGQHb2LvGFNUi0ubqWGAGol4SRAhPJJWK165L4pjmGtiHZBVQjliDSR3 pgkdCjffFh6UvI1cWJL0ssYz9ZimLua4m6G5MtueocJLOcbYFqXlyIu2jW3x4mKB UvA8OmhnZjPHTzbkrHpEeh2VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUOYo+xUzm pk8SZmBRHR/NCPJEPdAwHwYDVR0jBBgwFoAU8VxcW6UhRTcHyB9f7AgRvyHP9A4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdFMUZBLzlBODczRUIwNDVB MzExRjA5NUVGRkQ0OEM0RjlBRTAyLzhWeGNXNlVoUlRjSHlCOWY3QWdSdnlIUDlB NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvOFZ4Y1c2VWhSVGNIeUI5ZjdBZ1J2eUhQOUE0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdF MUZBLzlBODczRUIwNDVBMzExRjA5NUVGRkQ0OEM0RjlBRTAyLzhWeGNXNlVoUlRj SHlCOWY3QWdSdnlIUDlBNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJBPjoHCoNMMHjJa76gO+w1c2brkURULY+eYJM7k4/LW9za/2mfyIV2Z C2CH8YyN2liNI5Hnf+IekK54KglI7s63go/cMuW45fTeWHH0WYv9MDUV0quaJeRK Xi4X3Q8XfQZop4HodaJgJA97wvBz7O45iUR5Q7bUM4OvED3VPOneEfkGz53HV+zD bdzbpg/xVxgfcIiTtw1AMvHv65hnci/JrDYTyiK7f67n9IjGq1peTsOpoTAOMmeA l6+veiobhcQ5Jiqajd1mKRQqfBWOzZqU5pJa1P0QOvxBmza7Le49YQVZH+QH+zeN HvXSOArckTHdZ9hshb9bghuhlbeQ2xQ= -----END CERTIFICATE-----Generated at Sat Sep 6 21:05:06 2025 by rpki-client