$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft File: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft (raw, json) Hash identifier: NircSvSjsbk7fZ9pXpkzFR+a3ryjW/W6vK5krfLDTx8= Subject key identifier: EF:FD:BC:4B:B6:D5:33:49:87:0D:D1:EF:07:58:C0:18:E8:11:38:E7 Authority key identifier: F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07 Certificate issuer: /CN=A91C9916/serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07 Certificate serial: 0203 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft Manifest number: 0203 Signing time: Thu 21 Aug 2025 02:19:36 +0000 Manifest this update: Thu 21 Aug 2025 02:19:36 +0000 Manifest next update: Thu 28 Aug 2025 02:19:36 +0000 Files and hashes: 1: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl (hash: r4pKotQHGiIUqfcCWe+URRICsoHBgr/bexax0n6ckb0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:19:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 515 (0x203) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9916, serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07 Validity Not Before: Aug 21 02:19:36 2025 GMT Not After : Aug 28 02:19:36 2025 GMT Subject: CN=68a68238-5c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:25:5b:6d:8c:24:15:c2:fa:25:a8:a2:1a:03: 57:17:04:17:52:b5:a0:21:37:75:0c:cb:fe:97:8a: 4e:a0:c9:3c:d7:15:4a:4b:cc:81:96:67:6d:10:d1: 53:c1:7e:45:21:52:69:54:7a:dd:a9:f1:88:0a:33: be:85:6f:2a:84:fd:ef:28:12:55:21:ad:11:52:e1: fa:db:63:8d:a9:47:6a:fb:4b:52:d7:6a:97:50:c2: 28:cc:a6:43:50:c2:a7:19:a6:73:ac:cb:04:10:1a: d6:c9:42:92:78:6d:ca:4d:1f:c3:90:3a:c7:de:e4: e6:60:0a:df:58:24:56:ef:39:a8:78:e7:73:ce:27: 72:19:29:4c:2f:6d:5f:e1:f3:8d:c9:3e:e6:5b:13: ee:e1:f8:a0:ae:d8:95:c9:bd:82:9d:1a:29:f8:23: b8:83:1e:69:e9:8f:b4:04:66:49:46:d1:25:24:d3: db:ed:4c:c4:7c:d3:0a:09:39:66:7d:3c:b0:e1:e9: f8:1d:d1:da:68:b1:e5:fe:b7:4a:33:58:b5:fb:9f: b6:08:37:38:df:1e:df:f5:1a:82:fa:cb:02:55:95: da:d0:6f:f0:39:2a:40:c8:d3:7a:c0:63:15:e7:1b: 17:5d:1e:b2:e4:39:9e:f6:b7:a0:ce:a5:f6:14:fa: 78:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FD:BC:4B:B6:D5:33:49:87:0D:D1:EF:07:58:C0:18:E8:11:38:E7 X509v3 Authority Key Identifier: keyid:F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:93:23:6e:85:e6:0d:f3:a2:2d:8d:25:5b:27:12:3a:c4:45: f6:fc:e1:73:12:27:a7:03:1c:a6:9f:43:a2:67:13:76:65:52: 75:c5:1b:04:e2:ef:7b:40:14:10:7b:9e:a7:a6:92:fc:cb:03: e7:6d:ac:88:4d:d4:cf:dd:8b:ed:8f:2c:f9:78:af:38:61:7e: 58:d3:3f:9a:fd:4e:84:42:be:7b:2f:3b:4a:4f:03:14:d6:d8: 30:1a:1b:15:89:1e:84:5a:d8:8b:fc:8c:e4:8f:60:f2:1e:5f: 77:b6:35:3b:bb:ea:c8:eb:ac:a5:64:b8:14:e9:3e:a4:57:d5: 86:aa:30:af:10:6b:40:ca:ae:77:74:34:24:c2:08:af:a3:a5: c3:8d:4e:52:e6:fd:54:71:08:19:97:fe:4a:70:a7:f6:4a:f9: f8:ce:04:d3:28:34:e0:83:20:11:e2:35:b4:bc:7c:a7:9d:20: 13:6e:6e:a8:af:ba:f9:e6:b8:ec:c7:2c:78:e1:9b:80:b3:b2: 00:0f:35:47:d6:43:bb:40:19:d0:8a:ac:c8:af:35:e1:72:11: d2:6a:c2:88:1e:27:fe:13:7f:a4:ff:2e:0a:e3:57:a0:1f:f2: af:24:96:64:40:e7:eb:6e:59:2a:51:9f:f0:e8:9f:ef:af:2b: cf:56:a8:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk5MTYxMTAvBgNVBAUTKEYyRTQ2NTdGQjBCMTUxNDI3M0M1MEVFQkY5MEY0NDE2 RkRBNTRCMDcwHhcNMjUwODIxMDIxOTM2WhcNMjUwODI4MDIxOTM2WjAYMRYwFAYD VQQDEw02OGE2ODIzOC01YzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5yVbbYwkFcL6JaiiGgNXFwQXUrWgITd1DMv+l4pOoMk81xVKS8yBlmdtENFT wX5FIVJpVHrdqfGICjO+hW8qhP3vKBJVIa0RUuH622ONqUdq+0tS12qXUMIozKZD UMKnGaZzrMsEEBrWyUKSeG3KTR/DkDrH3uTmYArfWCRW7zmoeOdzzidyGSlML21f 4fONyT7mWxPu4figrtiVyb2CnRop+CO4gx5p6Y+0BGZJRtElJNPb7UzEfNMKCTlm fTyw4en4HdHaaLHl/rdKM1i1+5+2CDc43x7f9RqC+ssCVZXa0G/wOSpAyNN6wGMV 5xsXXR6y5Dme9regzqX2FPp4mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/9vEu2 1TNJhw3R7wdYwBjoETjnMB8GA1UdIwQYMBaAFPLkZX+wsVFCc8UO6/kPRBb9pUsH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTkxNi8yMzlEQzQyNjYx OEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVVSnp4UTdyLVE5RUZ2MmxT d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh1UmxmN0N4VVVKenhRN3ItUTlFRnYybFN3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTkxNi8yMzlEQzQyNjYxOEIxMUVEODhBQkJDMjJDNEY5QUUwMi84dVJsZjdDeFVV Snp4UTdyLVE5RUZ2MmxTd2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCgkyNuheYN86ItjSVbJxI6xEX2/OFzEienAxymn0OiZxN2ZVJ1xRsE 4u97QBQQe56nppL8ywPnbayITdTP3Yvtjyz5eK84YX5Y0z+a/U6EQr57LztKTwMU 1tgwGhsViR6EWtiL/Izkj2DyHl93tjU7u+rI66ylZLgU6T6kV9WGqjCvEGtAyq53 dDQkwgivo6XDjU5S5v1UcQgZl/5KcKf2Svn4zgTTKDTggyAR4jW0vHynnSATbm6o r7r55rjsxyx44ZuAs7IADzVH1kO7QBnQiqzIrzXhchHSasKIHif+E3+k/y4K41eg H/KvJJZkQOfrblkqUZ/w6J/vryvPVqhw -----END CERTIFICATE-----Generated at Fri Aug 22 16:33:11 2025 by rpki-client