$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft File: c8BwFxdufsG_l34xFvWB9RFNA2A.mft (raw, json) Hash identifier: ChhbejIk5Wo1NfxUWPBTZYWifEMTcQqtAOTV6BNWZfQ= Subject key identifier: EB:84:CE:05:4C:D3:94:DF:30:BB:E6:87:4F:F6:CF:72:C9:56:75:23 Authority key identifier: 73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 Certificate issuer: /CN=A91B9101/serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Certificate serial: 01AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft Manifest number: 01AC Signing time: Sat 23 Aug 2025 03:15:25 +0000 Manifest this update: Sat 23 Aug 2025 03:15:25 +0000 Manifest next update: Sat 30 Aug 2025 03:15:25 +0000 Files and hashes: 1: c8BwFxdufsG_l34xFvWB9RFNA2A.crl (hash: 0F9D3BIPjhQdwTCVpwOuuF0rmbxbjKTPCZO+7m8hf5E=) 2: 0A195CD4EDCE11ED994B437AC4F9AE02.roa (hash: tnhVbAfny5ry4j6HJiWID5oWjAmaD653liAgf81aO1k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:15:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 431 (0x1af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9101, serialNumber=73C07017176E7EC1BF977E3116F581F5114D0360 Validity Not Before: Aug 23 03:15:25 2025 GMT Not After : Aug 30 03:15:25 2025 GMT Subject: CN=68a9324d-676c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f1:2f:f8:5c:ca:ac:11:4f:f8:0d:67:ff:15: 06:6b:ff:fb:eb:85:5a:ff:7b:a1:c4:62:ca:9c:8c: 67:76:05:aa:56:ae:8e:21:d6:11:0e:60:7f:fa:1e: 27:cb:37:03:dc:7c:79:15:de:8d:81:80:77:36:1d: 86:ca:2a:6a:0e:2e:fe:48:7e:a3:ee:1c:96:32:ce: 89:94:e9:f0:60:51:c7:66:ae:1e:8a:34:4c:18:73: 98:90:dc:0d:bc:b7:4c:8d:05:03:38:f4:63:1a:a8: c2:88:51:70:5c:ae:13:12:8f:7d:65:41:5f:72:ab: b2:cf:10:a9:7f:78:68:20:e6:39:cf:3b:7c:66:9b: ea:21:a2:c4:a1:5b:94:81:79:1f:53:e1:b2:4b:fc: 42:b8:d7:b1:49:aa:f9:4b:7b:56:de:75:09:d6:a0: 27:b2:b4:59:31:48:36:60:8f:b6:34:52:a4:cc:9a: 50:33:cf:87:5b:2d:09:a0:1e:9a:73:ee:8a:b0:52: 10:4a:57:8d:17:7b:73:b2:e8:f1:9b:1a:9d:fe:f0: da:86:50:03:e5:34:e9:53:42:9c:e6:53:eb:69:84: 99:08:0b:3d:8c:a9:f8:68:d5:96:4f:66:8f:0b:45: fa:41:11:af:52:4e:48:99:54:bc:a3:bb:f4:7e:1a: 8d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:84:CE:05:4C:D3:94:DF:30:BB:E6:87:4F:F6:CF:72:C9:56:75:23 X509v3 Authority Key Identifier: keyid:73:C0:70:17:17:6E:7E:C1:BF:97:7E:31:16:F5:81:F5:11:4D:03:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c8BwFxdufsG_l34xFvWB9RFNA2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9101/77288822EDC911EDA7301F7FC4F9AE02/c8BwFxdufsG_l34xFvWB9RFNA2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d3:20:07:73:32:8b:12:02:7e:01:1d:bd:3e:71:8e:db:94:cb: fd:93:2a:98:3d:6b:67:c7:5c:c5:4e:75:a6:95:4f:7a:ac:a6: 05:82:c0:ab:38:1e:e9:98:d9:cb:68:7b:11:7e:7e:fc:53:39: 2f:7a:f9:53:b8:af:1f:c5:1d:5e:b4:2a:c0:dc:99:b6:3e:f4: 79:ac:25:7b:8f:17:f7:b7:4f:0a:fe:a2:3f:a7:f8:5f:32:b7: 65:6b:43:ee:6e:65:1b:d8:16:e2:bc:23:df:1a:d6:a9:3f:3f: bd:3b:22:7f:16:da:20:ff:58:d8:5a:76:1a:2a:ed:04:49:56: 62:1e:28:0d:02:9f:58:8c:af:91:d7:11:ed:9a:ea:df:7d:ac: 71:ba:b0:3e:01:83:57:5e:db:ed:b3:4a:da:f1:d2:de:fc:04: c7:e0:22:5b:70:44:1b:6e:6a:b2:0e:05:13:d2:4f:ec:99:8d: b1:3b:c2:0b:d3:d0:9c:f4:80:cb:b3:f4:a7:7f:5c:db:e9:04: 11:41:3a:66:e7:85:44:f7:a3:bc:be:03:6e:08:a8:80:73:a3: fe:28:a2:31:44:78:7a:52:95:c1:46:22:4c:a9:6e:16:78:a7: aa:68:fb:f8:c5:0a:4c:ba:cd:af:2d:b4:f2:3f:80:62:d4:6e: f0:cc:bf:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkxMDExMTAvBgNVBAUTKDczQzA3MDE3MTc2RTdFQzFCRjk3N0UzMTE2RjU4MUY1 MTE0RDAzNjAwHhcNMjUwODIzMDMxNTI1WhcNMjUwODMwMDMxNTI1WjAYMRYwFAYD VQQDEw02OGE5MzI0ZC02NzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3vEv+FzKrBFP+A1n/xUGa//764Va/3uhxGLKnIxndgWqVq6OIdYRDmB/+h4n yzcD3Hx5Fd6NgYB3Nh2GyipqDi7+SH6j7hyWMs6JlOnwYFHHZq4eijRMGHOYkNwN vLdMjQUDOPRjGqjCiFFwXK4TEo99ZUFfcquyzxCpf3hoIOY5zzt8ZpvqIaLEoVuU gXkfU+GyS/xCuNexSar5S3tW3nUJ1qAnsrRZMUg2YI+2NFKkzJpQM8+HWy0JoB6a c+6KsFIQSleNF3tzsujxmxqd/vDahlAD5TTpU0Kc5lPraYSZCAs9jKn4aNWWT2aP C0X6QRGvUk5ImVS8o7v0fhqNmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuEzgVM 05TfMLvmh0/2z3LJVnUjMB8GA1UdIwQYMBaAFHPAcBcXbn7Bv5d+MRb1gfURTQNg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTEwMS83NzI4ODgyMkVE QzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZzR19sMzR4RnZXQjlSRk5B MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4QndGeGR1ZnNHX2wzNHhGdldCOVJGTkEyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTEwMS83NzI4ODgyMkVEQzkxMUVEQTczMDFGN0ZDNEY5QUUwMi9jOEJ3RnhkdWZz R19sMzR4RnZXQjlSRk5BMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDTIAdzMosSAn4BHb0+cY7blMv9kyqYPWtnx1zFTnWmlU96rKYFgsCr OB7pmNnLaHsRfn78UzkvevlTuK8fxR1etCrA3Jm2PvR5rCV7jxf3t08K/qI/p/hf Mrdla0PubmUb2BbivCPfGtapPz+9OyJ/Ftog/1jYWnYaKu0ESVZiHigNAp9YjK+R 1xHtmurffaxxurA+AYNXXtvts0ra8dLe/ATH4CJbcEQbbmqyDgUT0k/smY2xO8IL 09Cc9IDLs/Snf1zb6QQRQTpm54VE96O8vgNuCKiAc6P+KKIxRHh6UpXBRiJMqW4W eKeqaPv4xQpMus2vLbTyP4Bi1G7wzL+G -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:36 2025 by rpki-client