$ rpki-client -vvf rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft File: f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft (raw, json) Hash identifier: XgSrzMjhsUmFPAOSt7qykRTXDcMVAegalxh7NH/Vyxs= Subject key identifier: A2:85:24:B5:9D:A3:ED:5A:D4:57:56:36:9C:E9:76:31:BB:A1:34:A8 Authority key identifier: 7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 Certificate issuer: /CN=A917F259/serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Certificate serial: 0E3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft Manifest number: 0E2C Signing time: Mon 08 Sep 2025 17:50:36 +0000 Manifest this update: Mon 08 Sep 2025 17:50:36 +0000 Manifest next update: Mon 15 Sep 2025 17:50:36 +0000 Files and hashes: 1: f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl (hash: J1gfm88nadSrXQSBN4i6PVa5eKRehgQJASRukiKbZ6Q=) 2: E47D0082AEB311E9922EDD41C4F9AE02.roa (hash: aiQgD71KIHf3EulghLpV7U2on7ornTtSdk1QL8F6cWM=) 3: E50762EAAEB311E9922EDD41C4F9AE02.roa (hash: ueAPuc77rri4PQKwtmMLByRiVZjsosToomd9waxslTI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 17:50:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3642 (0xe3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917F259, serialNumber=7FC5941AC872C0A3A0DB1D2F59CFD98D21986F54 Validity Not Before: Sep 8 17:50:36 2025 GMT Not After : Sep 15 17:50:36 2025 GMT Subject: CN=68bf176c-17f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0c:3a:c3:85:ca:9b:a9:38:82:da:49:ca:1e: d8:2a:99:78:70:d7:b3:21:88:b2:ca:72:b2:ee:b8: 46:30:e9:b8:6b:29:fd:fc:5c:4c:4c:e2:15:d8:04: 4e:43:09:6b:d5:dc:b6:87:5d:89:82:15:74:3c:cd: 82:18:76:5d:ed:4d:60:20:7f:e2:6e:9c:82:e4:7e: f8:c9:5b:f4:88:18:b2:24:f0:7a:ef:f8:c8:0c:df: 7c:dc:e9:73:c0:9d:04:21:af:1f:29:ec:5c:f3:d8: fe:91:b4:e3:e3:f8:ac:4d:b2:4d:fe:7e:e1:57:b8: f4:40:69:1c:04:bf:51:37:6e:03:1d:17:5a:ba:6e: d4:d4:40:c9:6d:63:cf:20:49:01:94:27:d1:6f:29: 68:05:4c:1e:47:68:e7:ca:b4:c5:f8:92:ee:aa:19: 26:7d:3d:c8:ef:f6:13:cb:d4:32:8f:5b:1b:ae:b5: 24:42:dd:5a:38:23:82:44:1f:27:39:63:6c:e5:b3: 46:ed:71:d5:c9:ed:28:28:0e:8c:15:c7:18:90:7c: c8:74:2d:2b:f2:23:de:94:a8:52:bb:ca:39:d5:d0: ed:bb:8c:86:4f:d8:c7:74:6d:bb:59:4c:2d:a4:ea: ae:24:bb:a7:66:6a:91:01:28:bf:bd:23:f7:f7:10: 79:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:85:24:B5:9D:A3:ED:5A:D4:57:56:36:9C:E9:76:31:BB:A1:34:A8 X509v3 Authority Key Identifier: keyid:7F:C5:94:1A:C8:72:C0:A3:A0:DB:1D:2F:59:CF:D9:8D:21:98:6F:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f8WUGshywKOg2x0vWc_ZjSGYb1Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F259/A501DEC4AEB211E994932140C4F9AE02/f8WUGshywKOg2x0vWc_ZjSGYb1Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:48:40:62:40:45:1e:91:71:62:cc:c4:0a:bd:26:14:dc:b3: 66:8c:f9:82:32:3c:e5:ed:42:bf:a8:b0:14:ed:b8:2b:90:98: 87:12:5b:8b:9e:63:4c:bb:d5:6d:3f:02:a5:36:01:0c:70:4b: f3:ca:a3:95:a0:db:4f:07:43:4e:1c:14:f6:a4:af:d3:55:67: 5d:5e:17:c5:f6:ff:f8:6b:64:af:df:e1:e6:e6:b7:8b:75:4b: 3f:2a:d1:f8:41:7f:4a:c5:f6:7a:9d:89:93:f0:90:ae:9c:35: a6:79:6f:58:76:2a:30:7f:5b:76:8b:1f:9d:5a:54:c5:1c:a2: b3:6b:af:bd:3f:b7:b0:b1:ed:88:84:2d:ca:4e:0c:cd:a7:9c: be:bb:94:0c:26:74:d0:7f:fa:b9:ea:c7:49:84:18:0d:d1:c4: d9:17:39:96:c7:e0:03:00:48:b0:ac:1b:b0:f7:6f:bc:ba:92: 33:16:b9:d6:d3:04:e2:11:88:ee:e2:9e:90:d9:d5:4a:1c:c2: b8:79:24:26:7a:ee:06:76:5c:87:d6:63:b5:6a:86:9e:aa:37: 00:30:89:7f:63:64:dd:a4:27:32:1e:ee:e0:7d:f1:00:fd:04: e9:51:d2:f4:ef:41:4a:18:6f:07:e2:61:ae:4b:46:c5:cb:32: 11:d4:27:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDjowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0YyNTkxMTAvBgNVBAUTKDdGQzU5NDFBQzg3MkMwQTNBMERCMUQyRjU5Q0ZEOThE MjE5ODZGNTQwHhcNMjUwOTA4MTc1MDM2WhcNMjUwOTE1MTc1MDM2WjAYMRYwFAYD VQQDEw02OGJmMTc2Yy0xN2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxAw6w4XKm6k4gtpJyh7YKpl4cNezIYiyynKy7rhGMOm4ayn9/FxMTOIV2ARO Qwlr1dy2h12JghV0PM2CGHZd7U1gIH/ibpyC5H74yVv0iBiyJPB67/jIDN983Olz wJ0EIa8fKexc89j+kbTj4/isTbJN/n7hV7j0QGkcBL9RN24DHRdaum7U1EDJbWPP IEkBlCfRbyloBUweR2jnyrTF+JLuqhkmfT3I7/YTy9Qyj1sbrrUkQt1aOCOCRB8n OWNs5bNG7XHVye0oKA6MFccYkHzIdC0r8iPelKhSu8o51dDtu4yGT9jHdG27WUwt pOquJLunZmqRASi/vSP39xB58wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKKFJLWd o+1a1FdWNpzpdjG7oTSoMB8GA1UdIwQYMBaAFH/FlBrIcsCjoNsdL1nP2Y0hmG9U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjI1OS9BNTAxREVDNEFF QjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdLT2cyeDB2V2NfWmpTR1li MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Y4V1VHc2h5d0tPZzJ4MHZXY19aalNHWWIxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RjI1OS9BNTAxREVDNEFFQjIxMUU5OTQ5MzIxNDBDNEY5QUUwMi9mOFdVR3NoeXdL T2cyeDB2V2NfWmpTR1liMVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXSEBiQEUekXFizMQKvSYU3LNmjPmCMjzl7UK/qLAU7bgrkJiHEluL nmNMu9VtPwKlNgEMcEvzyqOVoNtPB0NOHBT2pK/TVWddXhfF9v/4a2Sv3+Hm5reL dUs/KtH4QX9KxfZ6nYmT8JCunDWmeW9Ydiowf1t2ix+dWlTFHKKza6+9P7ewse2I hC3KTgzNp5y+u5QMJnTQf/q56sdJhBgN0cTZFzmWx+ADAEiwrBuw92+8upIzFrnW 0wTiEYju4p6Q2dVKHMK4eSQmeu4GdlyH1mO1aoaeqjcAMIl/Y2TdpCcyHu7gffEA /QTpUdL070FKGG8H4mGuS0bFyzIR1CcD -----END CERTIFICATE-----Generated at Tue Sep 9 13:21:28 2025 by rpki-client