$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft File: b8ItMPMZzWXbXj9v_F0UHNAWaII.mft (raw, json) Hash identifier: qNYLZXyrIRyDMv6CGOjQz2ma0og9aTOrdRL1aiNbi0w= Subject key identifier: 95:23:A3:6B:9F:CD:27:44:7E:5F:7C:F6:3E:36:89:2F:32:65:DE:8F Authority key identifier: 6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82 Certificate issuer: /CN=A91A0916/serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft Manifest number: 2F Signing time: Tue 19 Aug 2025 08:10:50 +0000 Manifest this update: Tue 19 Aug 2025 08:10:49 +0000 Manifest next update: Tue 26 Aug 2025 08:10:49 +0000 Files and hashes: 1: b8ItMPMZzWXbXj9v_F0UHNAWaII.crl (hash: Mg5t/t2P2U3YJaK5J1pLLz3xGgPDbx/mUzVZHzJU9bs=) 2: F5D3BEF837FA11F083B5FC7DC4F9AE02.roa (hash: uo101jV5D+ClspePQe5MSA2kQIWF4csGlLsFWkLTXVc=) 3: F68ED40E37FA11F083B5FC7DC4F9AE02.roa (hash: 8dvGtU4/STS35lWSdlUQSQ3IYG+2zjb7Ya5wIRb/kvY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0916, serialNumber=6FC22D30F319CD65DB5E3F6FFC5D141CD0166882 Validity Not Before: Aug 19 08:10:49 2025 GMT Not After : Aug 26 08:10:49 2025 GMT Subject: CN=68a4318a-b4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8d:b1:7f:d8:2b:3b:24:7f:3c:8f:70:0d:f8: fa:23:9d:b5:de:51:d7:20:74:ce:b5:97:cb:ef:47: 7e:32:6b:59:5e:85:39:3a:82:94:e1:f3:cd:fd:9c: fe:e8:c5:df:9b:6e:67:67:e8:21:71:19:43:d7:1b: 47:3f:55:2a:43:b9:c5:ae:dc:44:55:b8:ac:55:86: 50:4d:f7:27:a7:d4:28:43:1a:50:9c:76:eb:a7:0b: ea:ef:e7:88:fe:18:65:60:79:2a:3c:91:47:4a:90: 34:48:44:43:89:0f:40:06:0d:3c:72:dd:1d:8e:a2: 39:fc:0c:a8:4b:13:7d:ae:a7:d9:46:06:2c:8a:2a: 93:52:29:1f:c5:12:46:8d:78:69:60:85:78:70:c7: 05:7d:70:e9:de:e1:ae:1f:6a:24:e8:7f:ac:36:74: 20:49:3c:ef:13:a6:c2:74:65:83:e6:63:95:0b:e9: 58:2b:fa:9d:c9:ea:e4:ff:bf:9e:d5:c5:c1:0b:28: 13:7f:cc:91:cf:06:34:b4:e9:5b:d8:2a:44:1a:79: d0:69:0c:1e:97:e7:63:b8:90:a9:bb:22:b1:a1:36: e4:b0:e8:56:4b:21:a8:3a:db:1f:70:41:4b:9e:48: 2d:e3:f4:54:2e:83:ed:e1:f7:9e:69:88:d7:28:30: a7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:23:A3:6B:9F:CD:27:44:7E:5F:7C:F6:3E:36:89:2F:32:65:DE:8F X509v3 Authority Key Identifier: keyid:6F:C2:2D:30:F3:19:CD:65:DB:5E:3F:6F:FC:5D:14:1C:D0:16:68:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8ItMPMZzWXbXj9v_F0UHNAWaII.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0916/040B87BA364A11F0804ADE5EC4F9AE02/b8ItMPMZzWXbXj9v_F0UHNAWaII.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:96:d1:c3:c2:f4:e2:97:25:23:59:a4:73:c7:fd:cb:ed:f2: 10:40:f6:69:ed:33:50:57:fa:94:2b:4c:e1:1d:c2:a1:f9:37: 9c:1f:b5:9f:99:bf:b9:30:3a:aa:34:a0:83:8f:30:f9:62:c5: 59:8e:07:60:50:45:70:20:c5:24:c4:0c:a5:11:19:dc:fe:f0: 20:1d:c8:e5:24:87:4a:c0:a4:bd:ec:3c:3f:df:6d:a0:8d:7c: 7e:01:fb:73:79:c7:e4:b2:2b:09:1b:6b:cc:0e:0e:4a:3d:37: 3f:8b:65:91:d0:c2:45:1c:12:4c:08:bb:9a:e2:d9:29:5a:77: 5c:fd:a8:ee:73:d0:c6:ab:9b:a0:8b:0e:e9:8c:a2:d8:c6:51: 75:47:91:9c:86:04:fe:91:01:b0:3f:32:b5:be:00:2a:27:3a: 20:b3:47:53:9f:a1:7b:3c:07:93:30:80:06:6a:92:6c:76:79: 75:d2:cc:2c:fc:f6:00:67:d3:b6:24:a3:a3:44:d2:ad:77:97: 2a:81:fa:4b:b8:2c:bf:01:2d:be:34:dd:02:12:88:cc:01:19: 3c:45:e5:da:31:0e:aa:4d:d8:32:8b:fe:15:64:55:8d:5d:16: c1:e9:ac:ae:86:de:c6:b4:97:71:b7:f0:b0:ca:32:3f:95:d8: 4f:a0:20:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MDkxNjExMC8GA1UEBRMoNkZDMjJEMzBGMzE5Q0Q2NURCNUUzRjZGRkM1RDE0MUNE MDE2Njg4MjAeFw0yNTA4MTkwODEwNDlaFw0yNTA4MjYwODEwNDlaMBgxFjAUBgNV BAMTDTY4YTQzMThhLWI0ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDejbF/2Cs7JH88j3AN+PojnbXeUdcgdM61l8vvR34ya1lehTk6gpTh8839nP7o xd+bbmdn6CFxGUPXG0c/VSpDucWu3ERVuKxVhlBN9yen1ChDGlCcduunC+rv54j+ GGVgeSo8kUdKkDRIREOJD0AGDTxy3R2Oojn8DKhLE32up9lGBiyKKpNSKR/FEkaN eGlghXhwxwV9cOne4a4faiTof6w2dCBJPO8TpsJ0ZYPmY5UL6Vgr+p3J6uT/v57V xcELKBN/zJHPBjS06VvYKkQaedBpDB6X52O4kKm7IrGhNuSw6FZLIag62x9wQUue SC3j9FQug+3h955piNcoMKenAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlSOja5/N J0R+X3z2PjaJLzJl3o8wHwYDVR0jBBgwFoAUb8ItMPMZzWXbXj9v/F0UHNAWaIIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEwOTE2LzA0MEI4N0JBMzY0 QTExRjA4MDRBREU1RUM0RjlBRTAyL2I4SXRNUE1aeldYYlhqOXZfRjBVSE5BV2FJ SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjhJdE1QTVp6V1hiWGo5dl9GMFVITkFXYUlJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEw OTE2LzA0MEI4N0JBMzY0QTExRjA4MDRBREU1RUM0RjlBRTAyL2I4SXRNUE1aeldY YlhqOXZfRjBVSE5BV2FJSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEqW0cPC9OKXJSNZpHPH/cvt8hBA9mntM1BX+pQrTOEdwqH5N5wftZ+Z v7kwOqo0oIOPMPlixVmOB2BQRXAgxSTEDKURGdz+8CAdyOUkh0rApL3sPD/fbaCN fH4B+3N5x+SyKwkba8wODko9Nz+LZZHQwkUcEkwIu5ri2Slad1z9qO5z0Marm6CL DumMotjGUXVHkZyGBP6RAbA/MrW+AConOiCzR1OfoXs8B5MwgAZqkmx2eXXSzCz8 9gBn07Yko6NE0q13lyqB+ku4LL8BLb403QISiMwBGTxF5doxDqpN2DKL/hVkVY1d FsHprK6G3sa0l3G38LDKMj+V2E+gIEs= -----END CERTIFICATE-----Generated at Wed Aug 20 13:15:36 2025 by rpki-client