$ rpki-client -vvf rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft File: 8Z8wAv-DH67Iwawl0cCgbjroATQ.mft (raw, json) Hash identifier: LvFmzGfstKMfDw8K2FACWD00Xe9VNmGUPvAmVbvYavM= Subject key identifier: EB:3D:64:75:B9:CC:56:B5:03:08:E9:BA:F9:CE:73:C9:5F:A1:B7:46 Authority key identifier: F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 Certificate issuer: /CN=A91C454C/serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Certificate serial: 0220 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft Manifest number: 0212 Signing time: Tue 09 Sep 2025 02:17:00 +0000 Manifest this update: Tue 09 Sep 2025 02:16:59 +0000 Manifest next update: Tue 16 Sep 2025 02:16:59 +0000 Files and hashes: 1: 8Z8wAv-DH67Iwawl0cCgbjroATQ.crl (hash: QbHGNjL+9BIrnIuOT8ibhhDB9nqU6Oi3DzxpeiVgiqc=) 2: 7CDCAF509CF211ED8BD2B02FC4F9AE02.roa (hash: u6i0aL0lGd+DkS8Cd1HM9x+4U1BJruGUogvC+Sy1wtw=) 3: 7BDFD4929CF211ED8BD2B02FC4F9AE02.roa (hash: IIRWaPut9Ga2CFDh4DoBpgMGLj7TDwhjoYp6oTvz8Zs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 02:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 544 (0x220) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C454C, serialNumber=F19F3002FF831FAEC8C1AC25D1C0A06E3AE80134 Validity Not Before: Sep 9 02:16:59 2025 GMT Not After : Sep 16 02:16:59 2025 GMT Subject: CN=68bf8e1b-1a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5e:3f:01:02:c8:f5:7c:fb:d5:e2:ae:7a:d7: f6:5b:ea:2c:34:39:19:45:ab:3a:c9:46:3c:d0:3f: 83:53:7d:8a:2b:b5:2e:0a:53:af:96:26:95:41:d8: 88:6e:f2:9f:19:8f:ab:7d:f0:e2:16:b2:f0:58:29: aa:09:de:d1:73:b4:e7:04:85:21:e1:c9:c1:b4:90: 36:ae:07:f6:b6:7c:ca:2c:f3:9e:5e:51:f4:e4:3d: 4e:12:38:f5:5b:63:62:66:33:a8:10:55:b5:05:65: 37:f6:9d:fc:15:db:67:ff:cb:37:26:7a:10:4d:08: 2d:54:29:2c:55:50:85:00:62:21:2a:cb:47:be:04: 8c:4e:6d:1c:ea:11:4e:2e:32:a2:44:a6:37:cb:22: e5:5e:92:b1:03:e0:c6:8a:23:bc:82:d6:8d:51:b8: 82:a2:f5:b6:85:03:16:9e:bc:db:b4:72:6b:a3:96: 9e:7f:1a:b1:ca:d9:60:b5:51:48:96:ab:ca:4a:1c: 4f:39:92:74:7d:76:f8:da:95:d6:10:0b:51:26:22: 24:bc:16:29:b8:fc:3e:d7:25:26:97:00:5b:30:f2: 95:3c:e4:f4:92:7d:b1:28:42:bb:3b:94:d6:07:45: 42:f4:b8:d3:83:81:bb:4b:75:6b:b3:64:f6:46:8c: e8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:3D:64:75:B9:CC:56:B5:03:08:E9:BA:F9:CE:73:C9:5F:A1:B7:46 X509v3 Authority Key Identifier: keyid:F1:9F:30:02:FF:83:1F:AE:C8:C1:AC:25:D1:C0:A0:6E:3A:E8:01:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Z8wAv-DH67Iwawl0cCgbjroATQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C454C/81FC96506C1211ED89FC920AC4F9AE02/8Z8wAv-DH67Iwawl0cCgbjroATQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:db:2b:26:5d:4b:9f:3d:36:a4:7d:be:28:ad:16:b4:f0:84: 8d:ce:74:29:4f:27:75:5c:17:27:ba:b2:70:d4:25:1b:f7:a4: 55:40:90:99:ce:88:68:c5:05:32:b2:ce:bc:c1:29:bf:e3:55: e4:88:9c:08:7f:eb:dd:3e:61:ae:7f:88:d3:58:4f:d5:8f:96: f7:8a:4b:50:7c:03:a7:f2:52:aa:68:ce:c4:27:e0:e7:c9:96: ca:ac:60:6a:fe:b2:c3:3f:2b:32:12:c9:c2:62:6c:59:69:6e: 76:87:f6:93:e6:b0:e7:da:a4:d3:41:1d:a7:62:01:0f:fd:4e: 87:55:17:f5:70:5e:b4:c6:9f:48:88:d4:01:0a:54:f6:96:07: 88:f9:74:24:19:3d:7b:39:e6:89:ee:3e:ed:df:98:8a:54:84: c6:79:be:15:9e:a4:d5:4a:6f:ae:83:30:e1:6e:72:63:7e:f2: e8:cb:40:57:f4:f1:4d:bd:0a:2f:a0:f6:87:1e:61:6a:ee:c4: e7:77:55:60:08:47:66:fa:9f:52:2c:e9:90:72:48:6e:9a:b3: d7:cd:f1:62:f2:eb:86:38:2c:9e:07:36:06:6a:54:6b:34:1d: c2:b9:a8:b2:50:dc:5b:90:4f:ad:ca:5c:ef:ee:9a:36:48:c4: e2:47:30:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NEMxMTAvBgNVBAUTKEYxOUYzMDAyRkY4MzFGQUVDOEMxQUMyNUQxQzBBMDZF M0FFODAxMzQwHhcNMjUwOTA5MDIxNjU5WhcNMjUwOTE2MDIxNjU5WjAYMRYwFAYD VQQDEw02OGJmOGUxYi0xYTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArl4/AQLI9Xz71eKuetf2W+osNDkZRas6yUY80D+DU32KK7UuClOvliaVQdiI bvKfGY+rffDiFrLwWCmqCd7Rc7TnBIUh4cnBtJA2rgf2tnzKLPOeXlH05D1OEjj1 W2NiZjOoEFW1BWU39p38Fdtn/8s3JnoQTQgtVCksVVCFAGIhKstHvgSMTm0c6hFO LjKiRKY3yyLlXpKxA+DGiiO8gtaNUbiCovW2hQMWnrzbtHJro5aefxqxytlgtVFI lqvKShxPOZJ0fXb42pXWEAtRJiIkvBYpuPw+1yUmlwBbMPKVPOT0kn2xKEK7O5TW B0VC9LjTg4G7S3Vrs2T2RozohQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOs9ZHW5 zFa1AwjpuvnOc8lfobdGMB8GA1UdIwQYMBaAFPGfMAL/gx+uyMGsJdHAoG466AE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU0Qy84MUZDOTY1MDZD MTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2N0l3YXdsMGNDZ2Jqcm9B VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhaOHdBdi1ESDY3SXdhd2wwY0NnYmpyb0FUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU0Qy84MUZDOTY1MDZDMTIxMUVEODlGQzkyMEFDNEY5QUUwMi84Wjh3QXYtREg2 N0l3YXdsMGNDZ2Jqcm9BVFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf2ysmXUufPTakfb4orRa08ISNznQpTyd1XBcnurJw1CUb96RVQJCZ zohoxQUyss68wSm/41XkiJwIf+vdPmGuf4jTWE/Vj5b3iktQfAOn8lKqaM7EJ+Dn yZbKrGBq/rLDPysyEsnCYmxZaW52h/aT5rDn2qTTQR2nYgEP/U6HVRf1cF60xp9I iNQBClT2lgeI+XQkGT17OeaJ7j7t35iKVITGeb4VnqTVSm+ugzDhbnJjfvLoy0BX 9PFNvQovoPaHHmFq7sTnd1VgCEdm+p9SLOmQckhumrPXzfFi8uuGOCyeBzYGalRr NB3CuaiyUNxbkE+tylzv7po2SMTiRzDe -----END CERTIFICATE-----Generated at Tue Sep 9 17:26:34 2025 by rpki-client