$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft File: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft (raw, json) Hash identifier: iGTJsJRolWvLs8vms5lZn7mh8+cTQLJMKgEtFkyha7A= Subject key identifier: 8D:68:09:86:F1:70:0A:E5:75:37:20:DC:02:2A:48:D4:C9:DC:7F:5B Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 Certificate issuer: /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Certificate serial: 0A8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft Manifest number: 0A83 Signing time: Mon 08 Sep 2025 19:38:05 +0000 Manifest this update: Mon 08 Sep 2025 19:38:04 +0000 Manifest next update: Mon 15 Sep 2025 19:38:04 +0000 Files and hashes: 1: 8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl (hash: 6bIn5WLu6YshLwBuCUQDibTVYY3mJa+2qVFtjVkJnIM=) 2: 19250B84675711EAA928E22DC4F9AE02.roa (hash: bm4J9Gs8kg53MtutKeTvvvRSq0MtCTJcSE5YLit7Dts=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 19:38:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2699 (0xa8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8 Validity Not Before: Sep 8 19:38:04 2025 GMT Not After : Sep 15 19:38:04 2025 GMT Subject: CN=68bf309d-c9c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:df:2d:2a:9d:03:6c:eb:f9:51:1b:4d:9c:c7: 10:56:c0:ed:24:5a:c1:cc:f9:1c:88:94:35:59:2a: 1c:65:71:44:e2:13:5d:3d:63:14:e3:67:37:e4:9a: 92:c3:d5:1f:41:64:3d:c5:10:d2:8d:e3:ed:5a:c0: a3:56:9e:88:c8:a0:6e:89:61:29:ab:99:da:f7:9e: fb:02:d5:09:35:ba:72:7a:0d:69:f6:2a:6f:a6:a5: 5d:95:5e:d7:9f:e1:7c:26:c8:6b:67:f3:db:c1:d0: a0:7a:37:c7:a6:74:d7:44:f1:85:4c:08:1f:4a:e8: 0c:2c:38:a9:f3:0f:2c:57:cf:ae:7d:97:c1:69:5d: fd:35:89:3b:75:19:10:d7:99:ce:13:bc:ec:c9:68: 8a:e3:01:73:12:0d:dc:d2:64:49:a6:2e:c8:94:2f: 36:ae:11:2c:74:0b:ce:00:2c:23:b9:e5:35:12:39: 6f:d0:0a:7e:de:71:96:1d:33:09:b0:2a:a7:ef:06: 97:ac:8a:50:be:8c:9b:76:0d:ce:70:6b:f7:9b:4e: 87:3b:39:2e:3f:93:b7:55:0e:5a:17:36:58:e6:37: 10:8e:d8:9c:62:da:f2:08:f2:5d:80:6f:70:d5:93: c2:9a:23:89:71:a0:ea:3b:6a:39:8c:9d:d3:66:38: 0c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:68:09:86:F1:70:0A:E5:75:37:20:DC:02:2A:48:D4:C9:DC:7F:5B X509v3 Authority Key Identifier: keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:1c:f2:35:c2:57:18:88:eb:2a:68:6c:0e:43:82:38:ec:9e: 0b:ae:32:ae:5d:c4:e0:1a:f6:20:cd:05:80:9f:31:0b:7d:a1: 35:24:4b:08:93:44:1a:b6:c4:10:e3:e6:d5:86:48:42:e1:b2: df:ff:2e:80:38:2e:09:4d:73:d4:73:a6:08:01:a4:c8:b9:18: ee:71:7d:ee:f4:93:a0:91:aa:65:2b:34:5a:aa:f9:82:e9:36: e9:e3:f8:5d:d7:62:7a:50:e6:1f:c3:70:9a:fb:e3:44:06:3d: 91:48:3a:e3:1e:d1:5b:ac:ca:c6:56:68:82:00:4f:15:6a:b7: e7:2f:5b:59:53:2a:77:4f:fb:ba:34:04:65:e5:1a:b8:17:d0: 99:3f:e8:36:0e:6f:ff:46:f3:c9:08:e2:75:8b:82:20:8e:d3: 21:67:8b:5c:65:eb:90:4a:05:ef:0e:6a:7e:95:a5:10:e6:1f: ba:fc:4e:60:59:bc:a4:4b:8f:2d:a9:00:17:0e:06:ff:ad:d7: f3:d5:e1:af:9a:f4:84:21:12:87:82:98:50:0d:e1:e0:ff:a0: 91:5a:89:04:4f:69:c9:58:cb:62:ba:28:72:ee:31:9a:44:bb: b2:e9:1a:e7:e9:ae:9f:68:b9:79:ed:65:ab:b4:86:ea:49:b9: bd:e0:76:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY4RDExMTAvBgNVBAUTKEYwNDY2NTkzQzJCNkNFQTlDQkYwMkUyNkFBRTZCRjc5 MEY1MjdFQTgwHhcNMjUwOTA4MTkzODA0WhcNMjUwOTE1MTkzODA0WjAYMRYwFAYD VQQDEw02OGJmMzA5ZC1jOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu98tKp0DbOv5URtNnMcQVsDtJFrBzPkciJQ1WSocZXFE4hNdPWMU42c35JqS w9UfQWQ9xRDSjePtWsCjVp6IyKBuiWEpq5na9577AtUJNbpyeg1p9ipvpqVdlV7X n+F8JshrZ/PbwdCgejfHpnTXRPGFTAgfSugMLDip8w8sV8+ufZfBaV39NYk7dRkQ 15nOE7zsyWiK4wFzEg3c0mRJpi7IlC82rhEsdAvOACwjueU1Ejlv0Ap+3nGWHTMJ sCqn7waXrIpQvoybdg3OcGv3m06HOzkuP5O3VQ5aFzZY5jcQjticYtryCPJdgG9w 1ZPCmiOJcaDqO2o5jJ3TZjgMgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1oCYbx cArldTcg3AIqSNTJ3H9bMB8GA1UdIwQYMBaAFPBGZZPCts6py/AuJqrmv3kPUn6o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjhEMS83QzRFMzRCQzY3 NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpxbkw4QzRtcXVhX2VROVNm cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhFWmxrOEsyenFuTDhDNG1xdWFfZVE5U2ZxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RjhEMS83QzRFMzRCQzY3NTUxMUVBQTA4NzMwMkJDNEY5QUUwMi84RVpsazhLMnpx bkw4QzRtcXVhX2VROVNmcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKHPI1wlcYiOsqaGwOQ4I47J4LrjKuXcTgGvYgzQWAnzELfaE1JEsI k0QatsQQ4+bVhkhC4bLf/y6AOC4JTXPUc6YIAaTIuRjucX3u9JOgkaplKzRaqvmC 6Tbp4/hd12J6UOYfw3Ca++NEBj2RSDrjHtFbrMrGVmiCAE8VarfnL1tZUyp3T/u6 NARl5Rq4F9CZP+g2Dm//RvPJCOJ1i4IgjtMhZ4tcZeuQSgXvDmp+laUQ5h+6/E5g WbykS48tqQAXDgb/rdfz1eGvmvSEIRKHgphQDeHg/6CRWokET2nJWMtiuihy7jGa RLuy6Rrn6a6faLl57WWrtIbqSbm94HYB -----END CERTIFICATE-----Generated at Tue Sep 9 13:13:36 2025 by rpki-client