$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft File: -c8El8-2fhYnKRCY8R8XhuuJ_1A.mft (raw, json) Hash identifier: 3dOWPh/emQx5y3JDcDQE87fXBXUkVUoTCsa+dY2KTXE= Subject key identifier: 75:D4:1C:33:4C:6C:CE:A1:83:FF:AF:FD:56:43:49:56:87:3B:0F:AB Authority key identifier: F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 Certificate issuer: /CN=A91B5073/serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Certificate serial: 10BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft Manifest number: 197E Signing time: Sun 24 Aug 2025 17:18:01 +0000 Manifest this update: Sun 24 Aug 2025 17:18:00 +0000 Manifest next update: Sun 31 Aug 2025 17:18:00 +0000 Files and hashes: 1: -c8El8-2fhYnKRCY8R8XhuuJ_1A.crl (hash: XJZphMBNJnxRxDEttdHHxZCvt/hnNsWNqFwnxjwAiic=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4284 (0x10bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5073, serialNumber=F9CF0497CFB67E1627291098F11F1786EB89FF50 Validity Not Before: Aug 24 17:18:00 2025 GMT Not After : Aug 31 17:18:00 2025 GMT Subject: CN=68ab4949-1e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:3f:f7:64:c4:d9:95:96:8e:d4:ee:1b:57: d8:45:30:3b:df:d6:50:2f:7f:ab:c7:c1:a1:bd:c0: c5:f6:ad:35:ca:c3:c3:5c:e0:fa:4a:0a:70:0d:0d: 98:2f:08:53:19:4a:7d:7e:39:e3:46:7b:b2:e2:3a: b3:ba:51:d1:62:ab:a5:90:51:90:65:0f:a1:49:28: 19:3f:59:31:72:5c:c7:38:44:70:ba:a4:79:39:7f: 39:c1:4d:39:8e:f3:db:40:84:b9:74:5c:d4:1a:53: 38:0c:18:32:36:08:91:b1:43:07:83:e8:e1:9f:1d: 83:29:df:7a:74:3f:9c:58:33:69:48:3a:20:1c:ee: d9:14:96:1c:1e:f0:ac:b4:07:b8:78:a0:60:cc:d2: 53:a0:97:80:98:93:0f:5f:1b:ec:b0:97:47:10:46: ee:65:64:65:62:8c:8a:2e:a5:f8:89:3e:81:d9:6f: 6f:02:06:d0:5d:de:b7:a6:56:a4:e8:44:6a:2b:af: 19:83:4b:f4:ad:c8:ff:a2:e0:75:bc:61:09:cf:46: 8e:61:b6:37:e4:f4:71:aa:21:61:f6:7a:a4:4e:e9: 42:e7:ef:81:e2:c3:ac:38:42:4a:33:22:e5:93:78: 8e:4f:8c:c0:48:07:4d:1f:bb:ff:ab:dc:15:c2:c2: a7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D4:1C:33:4C:6C:CE:A1:83:FF:AF:FD:56:43:49:56:87:3B:0F:AB X509v3 Authority Key Identifier: keyid:F9:CF:04:97:CF:B6:7E:16:27:29:10:98:F1:1F:17:86:EB:89:FF:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-c8El8-2fhYnKRCY8R8XhuuJ_1A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/-c8El8-2fhYnKRCY8R8XhuuJ_1A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:3e:84:c3:7d:03:0f:39:68:87:7c:04:4b:c4:05:4d:4e:b0: 67:1c:0d:8a:3e:d5:d0:52:c5:c4:3c:6c:2f:b1:35:f2:84:a4: 40:d6:f6:2f:25:e6:2f:0d:a5:22:5a:38:9e:ca:d8:e7:1d:c6: 38:16:42:e3:bc:b5:b3:56:66:e9:dd:d0:bd:22:6f:f1:88:c2: 0b:d6:9e:ae:ee:c0:af:9c:c6:4f:fc:4e:b8:e3:6f:9f:27:6d: cc:b9:81:5a:ce:16:db:df:63:38:fb:89:33:5f:ca:53:74:df: ac:bf:e5:32:78:58:49:08:66:37:81:7f:b6:32:88:cd:c2:66: 52:37:87:b1:0e:88:fd:ab:5c:76:e6:5a:ae:07:d9:f1:cb:da: af:27:02:5b:0d:e7:77:52:da:8f:cf:d7:2c:18:8e:4a:52:55: cf:c8:a2:38:a3:d7:84:e8:3c:f6:57:12:0a:a2:f8:f4:61:e1: 11:6c:3c:76:11:0e:17:f7:28:88:4d:25:b1:eb:08:cc:63:92: ab:d5:b9:7a:72:09:ab:d5:f8:73:38:24:32:d9:b5:4e:6a:36: cb:75:26:03:cc:fb:ce:32:f8:f6:a1:73:55:f9:51:99:28:14: a9:16:2a:68:de:4e:8c:cf:56:6a:83:ef:c0:04:74:9e:6d:a9: 3c:c3:75:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUwNzMxMTAvBgNVBAUTKEY5Q0YwNDk3Q0ZCNjdFMTYyNzI5MTA5OEYxMUYxNzg2 RUI4OUZGNTAwHhcNMjUwODI0MTcxODAwWhcNMjUwODMxMTcxODAwWjAYMRYwFAYD VQQDEw02OGFiNDk0OS0xZTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtno/92TE2ZWWjtTuG1fYRTA739ZQL3+rx8GhvcDF9q01ysPDXOD6SgpwDQ2Y LwhTGUp9fjnjRnuy4jqzulHRYqulkFGQZQ+hSSgZP1kxclzHOERwuqR5OX85wU05 jvPbQIS5dFzUGlM4DBgyNgiRsUMHg+jhnx2DKd96dD+cWDNpSDogHO7ZFJYcHvCs tAe4eKBgzNJToJeAmJMPXxvssJdHEEbuZWRlYoyKLqX4iT6B2W9vAgbQXd63plak 6ERqK68Zg0v0rcj/ouB1vGEJz0aOYbY35PRxqiFh9nqkTulC5++B4sOsOEJKMyLl k3iOT4zASAdNH7v/q9wVwsKnRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHXUHDNM bM6hg/+v/VZDSVaHOw+rMB8GA1UdIwQYMBaAFPnPBJfPtn4WJykQmPEfF4brif9Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTA3My80M0YxNjI2NDMz OTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZoWW5LUkNZOFI4WGh1dUpf MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1jOEVsOC0yZmhZbktSQ1k4UjhYaHV1Sl8xQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTA3My80M0YxNjI2NDMzOTUxMUU5QkZCMUMyMUFDNEY5QUUwMi8tYzhFbDgtMmZo WW5LUkNZOFI4WGh1dUpfMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTPoTDfQMPOWiHfARLxAVNTrBnHA2KPtXQUsXEPGwvsTXyhKRA1vYv JeYvDaUiWjieytjnHcY4FkLjvLWzVmbp3dC9Im/xiMIL1p6u7sCvnMZP/E6442+f J23MuYFazhbb32M4+4kzX8pTdN+sv+UyeFhJCGY3gX+2MojNwmZSN4exDoj9q1x2 5lquB9nxy9qvJwJbDed3UtqPz9csGI5KUlXPyKI4o9eE6Dz2VxIKovj0YeERbDx2 EQ4X9yiITSWx6wjMY5Kr1bl6cgmr1fhzOCQy2bVOajbLdSYDzPvOMvj2oXNV+VGZ KBSpFipo3k6Mz1Zqg+/ABHSebak8w3UL -----END CERTIFICATE-----Generated at Sun Aug 24 21:54:07 2025 by rpki-client