$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft File: 8GL1A-ySI_r2geak3NiYSRom5JQ.mft (raw, json) Hash identifier: tC//ycohfBLug5ZaVmGM202FaNp97sC8Y738lx4qGzg= Subject key identifier: EA:81:32:AA:B2:96:E5:ED:6F:48:D8:4E:71:0C:87:CC:A1:37:FD:48 Authority key identifier: F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 Certificate issuer: /CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft Manifest number: F2 Signing time: Sat 23 Aug 2025 05:24:28 +0000 Manifest this update: Sat 23 Aug 2025 05:24:27 +0000 Manifest next update: Sat 30 Aug 2025 05:24:27 +0000 Files and hashes: 1: 8GL1A-ySI_r2geak3NiYSRom5JQ.crl (hash: /KRfI6Y5bz/7CC0QuQ7LVX4eMn+zYvzuVPb4bgdFSjo=) 2: ABF1B4E60DD211EF8903F07AC4F9AE02.roa (hash: Wf5yWE5WQZfabwwzQeNVDetWRiMN8CeR7Ab2vxrNgeg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:24:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF793, serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Validity Not Before: Aug 23 05:24:27 2025 GMT Not After : Aug 30 05:24:27 2025 GMT Subject: CN=68a9508b-fb29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7e:e6:61:b3:a0:2a:c8:04:df:e1:4e:be:aa: 02:eb:cb:5d:da:e9:2c:e6:da:87:c2:a5:01:b2:8f: 0f:91:1b:1d:5d:d8:e1:07:c1:2c:eb:39:4d:97:4f: 7d:ab:06:3a:e5:c7:7e:41:c4:d8:a0:32:04:d3:6d: 78:ea:5b:9b:e9:f6:aa:52:ac:30:fe:04:c9:51:9f: d9:a1:5b:ef:b0:a4:55:36:5b:af:32:53:a6:5b:96: 61:f7:8a:8c:2f:fe:2d:fc:31:f2:86:ad:a8:c9:4a: 9c:f6:f1:89:eb:ce:5a:7e:e6:86:f6:83:2e:ed:8d: a5:4a:56:63:02:2e:ed:a7:12:fc:b5:da:71:51:2f: 7e:4b:d5:b2:c6:be:35:84:7b:fb:ba:ba:e1:2d:82: 87:3c:4c:6b:ce:86:1d:53:0b:d4:4b:5e:5a:0d:66: c7:40:5b:5a:b9:e4:6e:66:56:26:9b:70:33:ec:20: 70:09:b8:c2:de:83:4d:1a:bf:d4:11:a6:69:a2:1d: 56:4e:31:c3:97:5c:a6:2d:8d:a7:03:eb:89:b5:34: ee:52:83:be:f3:3e:f3:b9:16:01:b1:c7:57:00:85: 9e:dd:40:69:e5:6e:09:f3:c2:65:76:cd:62:72:02: b7:e7:7e:ec:0a:43:03:14:fd:16:d5:0f:d9:95:86: 34:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:81:32:AA:B2:96:E5:ED:6F:48:D8:4E:71:0C:87:CC:A1:37:FD:48 X509v3 Authority Key Identifier: keyid:F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:d4:68:31:90:db:6c:7d:32:53:3d:73:76:46:51:7f:ac:81: d1:06:cb:cf:14:d5:c7:90:d4:57:2e:2b:a8:8b:b1:51:ec:85: 30:ea:d0:17:32:f7:60:8c:1a:86:93:c8:7e:fe:a4:76:05:b3: a7:3b:a1:d1:d3:f8:71:b5:7b:ad:48:57:9f:5e:c7:22:a1:05: 31:cf:cd:6c:3b:63:93:07:e8:a9:bc:7e:69:ee:4b:b5:32:e6: 1a:5e:5f:c9:2c:41:37:76:a4:c6:53:59:76:16:15:d4:c0:fb: f3:3f:93:5d:9e:b7:96:18:d3:a1:32:86:6f:d2:6f:a5:a7:b8: 30:7d:24:89:40:a4:59:ac:a5:05:92:ee:aa:93:19:29:a3:54: c5:bf:18:6a:48:05:af:01:69:ec:b0:65:d1:78:df:93:16:fe: 00:d8:f0:4a:19:5d:78:f8:1c:b9:1d:f0:7e:31:b1:45:14:51: 2f:f9:60:db:ef:6c:5e:c5:5c:65:61:8f:39:99:34:dd:17:32: e7:2e:18:b3:00:2c:ea:f6:82:b5:31:c8:e5:68:f4:e4:3a:5a: ab:ae:2d:fa:38:32:8a:a9:e3:b6:29:3d:42:43:4a:67:00:02: 81:f8:5d:13:91:52:f4:eb:04:7e:8b:cb:62:da:05:0a:6f:b3: 13:2c:8d:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3OTMxMTAvBgNVBAUTKEYwNjJGNTAzRUM5MjIzRkFGNjgxRTZBNERDRDg5ODQ5 MUEyNkU0OTQwHhcNMjUwODIzMDUyNDI3WhcNMjUwODMwMDUyNDI3WjAYMRYwFAYD VQQDEw02OGE5NTA4Yi1mYjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvn7mYbOgKsgE3+FOvqoC68td2uks5tqHwqUBso8PkRsdXdjhB8Es6zlNl099 qwY65cd+QcTYoDIE02146lub6faqUqww/gTJUZ/ZoVvvsKRVNluvMlOmW5Zh94qM L/4t/DHyhq2oyUqc9vGJ685afuaG9oMu7Y2lSlZjAi7tpxL8tdpxUS9+S9Wyxr41 hHv7urrhLYKHPExrzoYdUwvUS15aDWbHQFtaueRuZlYmm3Az7CBwCbjC3oNNGr/U EaZpoh1WTjHDl1ymLY2nA+uJtTTuUoO+8z7zuRYBscdXAIWe3UBp5W4J88Jlds1i cgK3537sCkMDFP0W1Q/ZlYY08QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqBMqqy luXtb0jYTnEMh8yhN/1IMB8GA1UdIwQYMBaAFPBi9QPskiP69oHmpNzYmEkaJuSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc5My8wRjZCRDNFMDBE RDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lfcjJnZWFrM05pWVNSb201 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhHTDFBLXlTSV9yMmdlYWszTmlZU1JvbTVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Rjc5My8wRjZCRDNFMDBERDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lf cjJnZWFrM05pWVNSb201SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl1GgxkNtsfTJTPXN2RlF/rIHRBsvPFNXHkNRXLiuoi7FR7IUw6tAX MvdgjBqGk8h+/qR2BbOnO6HR0/hxtXutSFefXscioQUxz81sO2OTB+ipvH5p7ku1 MuYaXl/JLEE3dqTGU1l2FhXUwPvzP5NdnreWGNOhMoZv0m+lp7gwfSSJQKRZrKUF ku6qkxkpo1TFvxhqSAWvAWnssGXReN+TFv4A2PBKGV14+By5HfB+MbFFFFEv+WDb 72xexVxlYY85mTTdFzLnLhizACzq9oK1McjlaPTkOlqrri36ODKKqeO2KT1CQ0pn AAKB+F0TkVL06wR+i8ti2gUKb7MTLI2L -----END CERTIFICATE-----Generated at Sun Aug 24 21:50:06 2025 by rpki-client