$ rpki-client -vvf rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft File: 8bA7xYd_4tpPRGoGM9prjh93x9s.mft (raw, json) Hash identifier: ofdxXOJYBrsjIXOvo8hPm8FOH1LD9pz6XxFLgUPmqzI= Subject key identifier: 1A:85:47:42:EA:EF:7E:FA:2B:21:C8:8E:28:A7:B6:B1:C2:BC:2E:2E Authority key identifier: F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB Certificate issuer: /CN=A918E881/serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Certificate serial: 05E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft Manifest number: 05DD Signing time: Mon 08 Sep 2025 23:04:45 +0000 Manifest this update: Mon 08 Sep 2025 23:04:44 +0000 Manifest next update: Mon 15 Sep 2025 23:04:44 +0000 Files and hashes: 1: 8bA7xYd_4tpPRGoGM9prjh93x9s.crl (hash: O7/kOhtMmSi6Ly/e44fBR/QKcnQYykXNjdNVPkJC8vs=) 2: F908A568CD1711EB84E11B24C4F9AE02.roa (hash: Yz0s0SgslhEB/Ux9X8zgj1HP5jX8LMQjR8aSmtueyxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:04:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1509 (0x5e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E881, serialNumber=F1B03BC5877FE2DA4F446A0633DA6B8E1F77C7DB Validity Not Before: Sep 8 23:04:44 2025 GMT Not After : Sep 15 23:04:44 2025 GMT Subject: CN=68bf610c-a12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f6:90:f6:36:c0:99:a6:3e:bb:9a:01:ca:dc: e8:98:d9:78:22:c8:4b:36:0e:8e:6b:02:60:27:1f: ea:c4:4b:8a:a4:f6:9e:52:96:90:27:96:9e:e6:b9: 32:a0:10:e9:ea:18:97:e7:92:88:be:67:73:e0:1d: 59:cc:d2:7e:5d:3b:fc:cf:be:89:d9:67:4b:c7:c4: f8:8d:a8:57:4e:21:56:87:2f:a4:99:86:cc:f9:b5: 12:f5:f7:06:b8:d7:70:64:37:f5:a4:b9:b5:45:08: 18:c1:59:fa:87:c4:72:e5:21:00:7a:86:e2:40:41: 60:f9:16:10:7a:1f:ac:1c:c7:f7:6c:03:68:1f:60: 12:04:26:81:9b:04:55:9b:de:8b:84:39:79:10:d7: ea:cd:04:d2:6b:33:b7:c8:2d:2e:5d:de:b3:cc:3e: 90:29:10:95:da:12:b4:86:dc:4d:e6:8b:7f:25:f4: a6:86:53:84:37:12:1c:45:cf:cc:ea:aa:ce:83:2c: da:e2:34:92:ea:fe:ed:0a:60:fe:c6:9f:23:e8:41: e1:25:08:c2:ee:e8:57:a8:99:67:09:ec:09:6e:15: 6c:ba:a3:a3:dc:b4:55:09:9a:5d:fb:b8:5c:45:be: 53:50:88:45:99:61:64:9b:db:e8:47:2a:98:9e:cc: 11:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:85:47:42:EA:EF:7E:FA:2B:21:C8:8E:28:A7:B6:B1:C2:BC:2E:2E X509v3 Authority Key Identifier: keyid:F1:B0:3B:C5:87:7F:E2:DA:4F:44:6A:06:33:DA:6B:8E:1F:77:C7:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bA7xYd_4tpPRGoGM9prjh93x9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E881/CDD60AEACD1511EBB3F78E23C4F9AE02/8bA7xYd_4tpPRGoGM9prjh93x9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:09:9a:5c:9d:1b:5a:35:ee:28:33:54:31:ab:88:46:91:35: 97:4d:8b:bf:e4:c1:f2:cf:4d:a8:c8:ae:1a:47:d8:63:0f:ef: 76:5c:18:40:22:61:b3:bf:28:b3:76:66:4c:d5:20:55:f3:44: dd:0c:45:35:e4:0f:3f:f3:76:51:2d:20:7a:73:03:95:c5:3a: 63:2e:cf:79:20:e7:17:6b:0a:da:26:00:f8:3e:32:a4:6a:c4: 8d:b5:11:8f:bc:33:3d:04:ea:68:24:05:02:6e:1d:bf:9a:8b: 75:75:33:d9:c0:17:3a:e1:8d:7c:ff:67:9e:cf:fc:c7:40:44: f2:ad:65:3a:a8:1a:70:13:6b:63:6a:08:c7:e0:24:07:86:26: 66:12:43:f9:ad:67:a5:3f:7a:ff:be:ae:43:cd:a8:77:33:1a: f3:e0:23:55:f7:dc:dd:11:36:a8:6a:ac:55:b2:ba:88:37:ee: 59:10:d8:39:b9:b0:59:ca:d8:96:c6:b5:ce:f7:1d:c6:f6:79: f8:30:4c:92:9d:5c:3e:ce:e8:fd:c3:7a:84:9f:08:ca:a2:f1: d9:11:d8:74:b7:13:a8:61:88:0a:3c:eb:92:99:d8:03:06:f9: 8e:d8:4c:46:90:bb:ba:fc:28:66:89:60:aa:34:24:37:0c:53: d6:b4:6c:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4ODExMTAvBgNVBAUTKEYxQjAzQkM1ODc3RkUyREE0RjQ0NkEwNjMzREE2QjhF MUY3N0M3REIwHhcNMjUwOTA4MjMwNDQ0WhcNMjUwOTE1MjMwNDQ0WjAYMRYwFAYD VQQDEw02OGJmNjEwYy1hMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvfaQ9jbAmaY+u5oBytzomNl4IshLNg6OawJgJx/qxEuKpPaeUpaQJ5ae5rky oBDp6hiX55KIvmdz4B1ZzNJ+XTv8z76J2WdLx8T4jahXTiFWhy+kmYbM+bUS9fcG uNdwZDf1pLm1RQgYwVn6h8Ry5SEAeobiQEFg+RYQeh+sHMf3bANoH2ASBCaBmwRV m96LhDl5ENfqzQTSazO3yC0uXd6zzD6QKRCV2hK0htxN5ot/JfSmhlOENxIcRc/M 6qrOgyza4jSS6v7tCmD+xp8j6EHhJQjC7uhXqJlnCewJbhVsuqOj3LRVCZpd+7hc Rb5TUIhFmWFkm9voRyqYnswRZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqFR0Lq 7376KyHIjiintrHCvC4uMB8GA1UdIwQYMBaAFPGwO8WHf+LaT0RqBjPaa44fd8fb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg4MS9DREQ2MEFFQUNE MTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0cFBSR29HTTlwcmpoOTN4 OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhiQTd4WWRfNHRwUFJHb0dNOXByamg5M3g5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RTg4MS9DREQ2MEFFQUNEMTUxMUVCQjNGNzhFMjNDNEY5QUUwMi84YkE3eFlkXzR0 cFBSR29HTTlwcmpoOTN4OXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQCZpcnRtaNe4oM1Qxq4hGkTWXTYu/5MHyz02oyK4aR9hjD+92XBhA ImGzvyizdmZM1SBV80TdDEU15A8/83ZRLSB6cwOVxTpjLs95IOcXawraJgD4PjKk asSNtRGPvDM9BOpoJAUCbh2/mot1dTPZwBc64Y18/2eez/zHQETyrWU6qBpwE2tj agjH4CQHhiZmEkP5rWelP3r/vq5Dzah3Mxrz4CNV99zdETaoaqxVsrqIN+5ZENg5 ubBZytiWxrXO9x3G9nn4MEySnVw+zuj9w3qEnwjKovHZEdh0txOoYYgKPOuSmdgD BvmO2ExGkLu6/ChmiWCqNCQ3DFPWtGwl -----END CERTIFICATE-----Generated at Tue Sep 9 09:02:46 2025 by rpki-client