$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft File: 8goyYNssxWGzO2TeFLAR8poeJBQ.mft (raw, json) Hash identifier: TD8jjJbAn/oOKTg9CCzY/xKgRUMG3gvF5GqV0FgR0m8= Subject key identifier: 11:9D:88:CE:17:A0:4E:0E:DB:B5:2F:A9:23:4E:58:06:69:1B:CA:82 Authority key identifier: F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 Certificate issuer: /CN=A91BD9B7/serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Certificate serial: 056F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft Manifest number: 0569 Signing time: Wed 10 Sep 2025 23:34:00 +0000 Manifest this update: Wed 10 Sep 2025 23:33:59 +0000 Manifest next update: Wed 17 Sep 2025 23:33:59 +0000 Files and hashes: 1: 8goyYNssxWGzO2TeFLAR8poeJBQ.crl (hash: /eIuQYaDFUAml0iXWG5y4r85uKlgnaMM43VnaqZfmKI=) 2: 713C4814F9DC11EBA9C81A44C4F9AE02.roa (hash: 9gxRC5js1FiufwEU1KdLZ+ZBBpP4QjbLjPfn8nzB2wQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 23:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1391 (0x56f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BD9B7, serialNumber=F20A3260DB2CC561B33B64DE14B011F29A1E2414 Validity Not Before: Sep 10 23:33:59 2025 GMT Not After : Sep 17 23:33:59 2025 GMT Subject: CN=68c20ae7-c33c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:08:f0:77:e5:cd:32:06:f8:7f:39:f5:71:38: d5:f7:5b:93:ab:7f:54:48:50:34:4f:54:d3:51:a1: c7:19:59:69:2d:34:6e:32:37:01:12:ba:50:76:b7: 0a:5e:de:10:27:ac:69:5e:1c:f4:9b:c8:df:38:4c: 2b:29:f1:b5:64:d1:93:39:8a:32:96:46:a6:b3:88: 89:9a:d3:76:51:2f:21:f0:26:fd:e2:97:1a:99:30: 93:d3:f6:3b:01:2d:b2:3d:8a:08:2a:98:80:2d:5f: 1c:d0:4d:d3:68:17:f6:87:23:63:ab:e5:5e:e6:87: 01:9a:13:de:7e:e6:f2:05:9e:cb:81:fa:3f:ed:cd: a8:52:fd:99:b1:ed:6a:a0:2b:4a:d0:6f:05:c2:d9: fa:5b:72:b4:50:3f:48:2f:37:b9:29:62:7b:19:ee: 23:d0:fa:1c:86:b5:29:87:7a:be:81:b4:b3:40:fc: d4:8a:8e:35:80:8a:fc:ae:2f:c5:dc:60:5c:e6:3c: 15:62:2d:ca:61:08:0e:2d:c4:a8:da:a0:a9:26:b5: 98:98:26:f5:96:ac:c6:04:e2:85:e2:24:64:eb:0b: 89:68:94:f7:8d:90:a4:de:34:a9:70:cf:e9:6d:d1: 24:4f:a3:2a:c2:0f:4a:e0:cc:8c:ad:8a:80:6f:a0: 73:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9D:88:CE:17:A0:4E:0E:DB:B5:2F:A9:23:4E:58:06:69:1B:CA:82 X509v3 Authority Key Identifier: keyid:F2:0A:32:60:DB:2C:C5:61:B3:3B:64:DE:14:B0:11:F2:9A:1E:24:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8goyYNssxWGzO2TeFLAR8poeJBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD9B7/14980498F9D911EB8D2B0E3EC4F9AE02/8goyYNssxWGzO2TeFLAR8poeJBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:54:1a:c5:f0:d5:6c:79:85:d8:50:e7:b5:af:90:b5:e0:20: 19:16:b2:69:74:da:ac:10:d5:6c:d5:1d:71:b5:31:96:c2:d9: 5b:23:72:fa:34:26:60:ae:c8:67:5a:3a:01:60:82:e9:1e:df: 35:be:ca:16:27:97:44:6c:d1:51:37:84:50:c4:f2:ed:4a:38: 7d:04:65:eb:c7:71:e0:36:6b:69:40:a3:34:ad:0e:3b:52:cd: 1c:ec:14:ee:a1:fd:3f:de:97:c9:bb:65:a2:08:10:09:3a:d1: 51:1f:f0:99:e4:7b:85:eb:ec:40:97:62:2d:c4:ee:9b:7b:41: 60:6b:1b:f1:60:8e:9a:c3:00:77:bf:94:01:9e:9a:5b:23:62: 29:85:c5:a9:15:fd:c4:7d:f5:97:99:ff:66:4c:1a:c5:4e:70: 4a:4b:60:2a:e3:ce:52:ef:f4:f0:81:74:15:d3:4d:1b:7f:40: 16:ae:ee:d8:9d:8a:c8:ac:a3:a3:ba:78:a8:e0:2f:3a:5d:65: e0:bb:aa:f2:57:0a:20:c4:f5:96:92:91:be:fa:99:03:8b:20: 0b:60:95:08:98:7c:52:8a:8a:76:c8:d9:a5:ef:c8:d9:93:bc: 99:17:92:7c:a2:61:95:cc:5b:c7:1a:3a:8e:dc:f9:51:6d:9d: 8c:52:93:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkQ5QjcxMTAvBgNVBAUTKEYyMEEzMjYwREIyQ0M1NjFCMzNCNjRERTE0QjAxMUYy OUExRTI0MTQwHhcNMjUwOTEwMjMzMzU5WhcNMjUwOTE3MjMzMzU5WjAYMRYwFAYD VQQDEw02OGMyMGFlNy1jMzNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQjwd+XNMgb4fzn1cTjV91uTq39USFA0T1TTUaHHGVlpLTRuMjcBErpQdrcK Xt4QJ6xpXhz0m8jfOEwrKfG1ZNGTOYoylkams4iJmtN2US8h8Cb94pcamTCT0/Y7 AS2yPYoIKpiALV8c0E3TaBf2hyNjq+Ve5ocBmhPefubyBZ7Lgfo/7c2oUv2Zse1q oCtK0G8Fwtn6W3K0UD9ILze5KWJ7Ge4j0PochrUph3q+gbSzQPzUio41gIr8ri/F 3GBc5jwVYi3KYQgOLcSo2qCpJrWYmCb1lqzGBOKF4iRk6wuJaJT3jZCk3jSpcM/p bdEkT6Mqwg9K4MyMrYqAb6BzzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGdiM4X oE4O27UvqSNOWAZpG8qCMB8GA1UdIwQYMBaAFPIKMmDbLMVhsztk3hSwEfKaHiQU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDlCNy8xNDk4MDQ5OEY5 RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hXR3pPMlRlRkxBUjhwb2VK QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnb3lZTnNzeFdHek8yVGVGTEFSOHBvZUpCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RDlCNy8xNDk4MDQ5OEY5RDkxMUVCOEQyQjBFM0VDNEY5QUUwMi84Z295WU5zc3hX R3pPMlRlRkxBUjhwb2VKQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDVBrF8NVseYXYUOe1r5C14CAZFrJpdNqsENVs1R1xtTGWwtlbI3L6 NCZgrshnWjoBYILpHt81vsoWJ5dEbNFRN4RQxPLtSjh9BGXrx3HgNmtpQKM0rQ47 Us0c7BTuof0/3pfJu2WiCBAJOtFRH/CZ5HuF6+xAl2ItxO6be0FgaxvxYI6awwB3 v5QBnppbI2IphcWpFf3EffWXmf9mTBrFTnBKS2Aq485S7/TwgXQV000bf0AWru7Y nYrIrKOjunio4C86XWXgu6ryVwogxPWWkpG++pkDiyALYJUImHxSiop2yNml78jZ k7yZF5J8omGVzFvHGjqO3PlRbZ2MUpOE -----END CERTIFICATE-----Generated at Fri Sep 12 07:24:26 2025 by rpki-client