$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft File: K8iorLUs8M9_MTaUMA9ThmhiN60.mft (raw, json) Hash identifier: TPK4lkO2BYP96zrjEj5NI2WH+EZyXagWrItMI1CkIKI= Subject key identifier: 7D:AB:01:22:FD:9E:47:9D:00:9F:5C:9F:57:3D:77:3E:D8:6A:A7:F2 Authority key identifier: 2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD Certificate issuer: /CN=A91B0549/serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Certificate serial: 0B8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft Manifest number: 0B87 Signing time: Thu 31 Jul 2025 19:39:09 +0000 Manifest this update: Thu 31 Jul 2025 19:39:08 +0000 Manifest next update: Thu 07 Aug 2025 19:39:08 +0000 Files and hashes: 1: K8iorLUs8M9_MTaUMA9ThmhiN60.crl (hash: jHp1HeSejEZZo6S2hhK4Ikg0gKE5DutQFHvJKxXOdUs=) 2: 7A629E90303211EA9DAB6581C4F9AE02.roa (hash: 5tQROkuKBdGr5CDnMUVPHlhLeJ1/YaIHTHWkyStRniQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 19:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2959 (0xb8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0549, serialNumber=2BC8A8ACB52CF0CF7F313694300F5386686237AD Validity Not Before: Jul 31 19:39:08 2025 GMT Not After : Aug 7 19:39:08 2025 GMT Subject: CN=688bc65c-f29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:93:4f:1e:5b:8e:4a:25:73:ca:ac:fe:61:4d: e6:ae:8d:dd:80:a6:d0:d2:30:e5:02:5c:bf:b7:ee: d7:c3:20:1e:e2:fd:13:e4:73:41:01:77:2b:12:09: 50:c1:13:4f:61:3e:88:2b:65:1d:aa:cf:f5:13:a1: a5:2a:75:c9:34:cf:1d:e9:96:1c:27:78:01:5e:1b: d8:3e:91:39:4c:1a:c5:a3:c1:b2:4b:93:68:07:ff: df:ad:75:ce:64:be:2d:2c:e9:5c:19:4c:4e:00:fd: a8:86:55:8d:6e:57:33:59:89:59:eb:fa:37:0f:bc: f4:63:21:7b:a2:4f:3a:de:31:04:7a:db:0d:f2:02: 59:a6:eb:48:18:80:1c:1b:ca:d6:6d:45:12:88:8e: cb:c5:dd:b5:44:23:b0:ff:45:89:21:b9:ca:9c:b5: a0:f6:f6:3c:55:9a:51:d4:68:e0:f4:66:72:46:37: 92:bd:22:9d:64:01:6c:12:ce:f0:6e:12:f7:09:73: fe:4b:11:a4:ed:2e:bf:7d:83:7e:f3:b6:7d:50:65: 80:06:78:75:1a:e8:19:ae:18:30:54:0e:2e:d2:98: 20:72:a0:ce:a7:3c:67:49:0a:cc:d7:34:a5:80:a8: 97:d9:7e:2f:7d:11:22:2e:29:97:ed:f9:96:2b:dd: ab:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AB:01:22:FD:9E:47:9D:00:9F:5C:9F:57:3D:77:3E:D8:6A:A7:F2 X509v3 Authority Key Identifier: keyid:2B:C8:A8:AC:B5:2C:F0:CF:7F:31:36:94:30:0F:53:86:68:62:37:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K8iorLUs8M9_MTaUMA9ThmhiN60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0549/1C6F4ADC303111EA886D517CC4F9AE02/K8iorLUs8M9_MTaUMA9ThmhiN60.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:51:62:fa:68:0e:f1:d8:f9:16:50:b4:26:dd:c4:82:4a:60: 22:62:85:e9:ca:47:1b:ee:68:cd:ad:e8:6b:62:79:89:fc:df: 62:d8:ee:3d:57:4d:99:03:62:e9:af:ef:34:4d:c9:cd:92:98: 84:31:1f:27:f5:57:a6:47:3e:24:db:bf:75:cf:05:89:46:ae: 72:8c:aa:fe:66:40:07:1e:12:ba:1a:89:51:1a:c7:74:8d:27: 2b:09:57:fb:b3:39:20:11:fc:17:7e:59:bc:a3:89:eb:b0:66: 01:1c:b9:c5:d2:d1:e9:66:19:12:01:c3:d5:d4:e9:63:4c:fa: 65:b0:7f:10:6f:ba:f6:49:d1:fe:f1:61:85:42:40:85:95:9c: 53:e1:3e:44:4c:69:a3:94:1e:6e:cb:45:1b:40:1b:48:55:1c: bb:3c:29:f4:58:99:a9:92:dc:bb:23:50:24:5e:81:70:0e:22: 3b:3a:75:6d:3a:9c:71:23:1b:4b:5c:b3:3b:40:32:72:e0:b0: ef:85:fe:a5:3f:90:45:10:5c:c2:20:8c:47:36:c6:2f:5a:73: 47:4b:69:59:4a:04:e2:81:d5:c3:92:60:5b:23:50:13:af:90: 44:18:72:d0:fc:f2:1a:96:28:4b:0c:9f:12:28:c3:e8:42:ea: 7a:43:7b:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjA1NDkxMTAvBgNVBAUTKDJCQzhBOEFDQjUyQ0YwQ0Y3RjMxMzY5NDMwMEY1Mzg2 Njg2MjM3QUQwHhcNMjUwNzMxMTkzOTA4WhcNMjUwODA3MTkzOTA4WjAYMRYwFAYD VQQDEw02ODhiYzY1Yy1mMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtJNPHluOSiVzyqz+YU3mro3dgKbQ0jDlAly/t+7XwyAe4v0T5HNBAXcrEglQ wRNPYT6IK2Udqs/1E6GlKnXJNM8d6ZYcJ3gBXhvYPpE5TBrFo8GyS5NoB//frXXO ZL4tLOlcGUxOAP2ohlWNblczWYlZ6/o3D7z0YyF7ok863jEEetsN8gJZputIGIAc G8rWbUUSiI7Lxd21RCOw/0WJIbnKnLWg9vY8VZpR1Gjg9GZyRjeSvSKdZAFsEs7w bhL3CXP+SxGk7S6/fYN+87Z9UGWABnh1GugZrhgwVA4u0pggcqDOpzxnSQrM1zSl gKiX2X4vfREiLimX7fmWK92rHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH2rASL9 nkedAJ9cn1c9dz7YaqfyMB8GA1UdIwQYMBaAFCvIqKy1LPDPfzE2lDAPU4ZoYjet MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDU0OS8xQzZGNEFEQzMw MzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhNOV9NVGFVTUE5VGhtaGlO NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s4aW9yTFVzOE05X01UYVVNQTlUaG1oaU42MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDU0OS8xQzZGNEFEQzMwMzExMUVBODg2RDUxN0NDNEY5QUUwMi9LOGlvckxVczhN OV9NVGFVTUE5VGhtaGlONjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlUWL6aA7x2PkWULQm3cSCSmAiYoXpykcb7mjNrehrYnmJ/N9i2O49 V02ZA2Lpr+80TcnNkpiEMR8n9VemRz4k2791zwWJRq5yjKr+ZkAHHhK6GolRGsd0 jScrCVf7szkgEfwXflm8o4nrsGYBHLnF0tHpZhkSAcPV1OljTPplsH8Qb7r2SdH+ 8WGFQkCFlZxT4T5ETGmjlB5uy0UbQBtIVRy7PCn0WJmpkty7I1AkXoFwDiI7OnVt OpxxIxtLXLM7QDJy4LDvhf6lP5BFEFzCIIxHNsYvWnNHS2lZSgTigdXDkmBbI1AT r5BEGHLQ/PIalihLDJ8SKMPoQup6Q3uD -----END CERTIFICATE-----Generated at Sat Aug 2 05:53:45 2025 by rpki-client