$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft File: L8Qw8eIVy9fgjyZDiDcDUALeMak.mft (raw, json) Hash identifier: tVRXQpE+GmY9Hf591DsMO2YllHKid65f7w+CFrbsW+4= Subject key identifier: 62:A2:7C:1B:FE:7A:46:95:38:90:97:28:9F:DF:1D:BD:B5:A5:70:F2 Authority key identifier: 2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 Certificate issuer: /CN=A91CB8A3/serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Certificate serial: 02D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft Manifest number: 02CE Signing time: Thu 21 Aug 2025 01:33:08 +0000 Manifest this update: Thu 21 Aug 2025 01:33:08 +0000 Manifest next update: Thu 28 Aug 2025 01:33:08 +0000 Files and hashes: 1: L8Qw8eIVy9fgjyZDiDcDUALeMak.crl (hash: /dV+5CbHLMkW9NNeqhdLVH0C9sycSjPhpGLK0MkB4Ss=) 2: 3AA7B0EC6BC811F09EA1EF7EC4F9AE02.roa (hash: x1rSkmkOeFMCvZiNfKlKJPeeli2ytnKQuinhUVmkFyU=) 3: CC1ACE7A6BC711F098C3B76CC4F9AE02.roa (hash: 56NWFLr0dC6w6GZlh7YAHTC6nXr9P2oaly4CuqAwl34=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 01:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 724 (0x2d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB8A3, serialNumber=2FC430F1E215CBD7E08F26438837035002DE31A9 Validity Not Before: Aug 21 01:33:08 2025 GMT Not After : Aug 28 01:33:08 2025 GMT Subject: CN=68a67754-40ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:18:0c:6e:37:5d:1c:a1:70:ab:44:14:f7:ce: c9:bf:4c:fe:29:65:e2:9c:5e:4e:1e:fd:99:e9:f5: e5:8c:10:3a:c0:d8:7a:b3:16:50:1a:db:a8:9b:e3: 30:ba:63:db:48:82:a8:bf:c0:89:58:fb:cc:e6:95: 6f:0e:67:f6:45:53:86:d3:0f:a5:4e:53:96:cb:70: 70:49:f9:72:e0:d1:c0:a9:8a:e6:ae:8c:d8:97:c5: a7:98:1a:06:ca:a4:4a:1e:81:b1:be:64:ad:d3:4e: ad:72:26:96:19:4c:3f:ab:84:5d:d6:a4:07:04:a8: 38:b9:48:81:67:11:22:79:85:b1:b8:96:14:1f:2f: cd:74:51:12:93:63:7f:da:aa:4a:56:a8:86:be:bc: 6a:6a:10:3e:58:d3:ba:3c:30:c8:a2:c8:65:4d:16: db:47:4f:be:9b:4d:4f:95:e5:c8:0a:66:df:47:82: c1:90:e6:d2:11:0a:f8:55:54:64:f3:7e:3c:f4:98: e2:44:34:f6:28:42:ec:e1:f3:66:df:ef:89:d6:b6: e9:0e:f0:e0:d9:39:df:05:38:6d:e3:74:41:82:ed: 86:a8:d1:46:1a:99:ff:71:7c:75:61:18:ab:50:37: f9:1d:13:35:f2:f7:f9:48:8a:22:17:a8:98:bc:ca: 02:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:A2:7C:1B:FE:7A:46:95:38:90:97:28:9F:DF:1D:BD:B5:A5:70:F2 X509v3 Authority Key Identifier: keyid:2F:C4:30:F1:E2:15:CB:D7:E0:8F:26:43:88:37:03:50:02:DE:31:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L8Qw8eIVy9fgjyZDiDcDUALeMak.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB8A3/96650F38FD1711EC82898365C4F9AE02/L8Qw8eIVy9fgjyZDiDcDUALeMak.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3f:37:9e:3a:ca:61:c6:43:a4:a8:80:8e:3b:85:75:e3:47: 12:16:0c:a1:42:52:13:5a:35:12:61:b8:17:8d:1d:84:72:d7: c8:37:3c:a8:72:13:e1:2c:ca:f6:01:96:81:cc:ce:1a:55:fc: c9:78:5e:98:9e:17:a5:dd:7f:2f:f3:4b:56:e9:45:66:f5:f1: bf:f4:97:e6:b5:6f:9a:e9:9c:73:0e:cd:d1:9b:13:8e:95:f5: 8e:1f:a0:8e:91:1d:18:26:14:e1:01:2f:8f:15:4a:6e:3d:c2: e8:b1:d2:05:e9:3d:44:fa:e4:aa:62:b0:1e:73:f6:98:91:11: 04:b5:07:0b:4e:b5:a2:3a:15:35:cf:1d:79:8f:4d:e5:b9:ae: a0:6b:e7:32:41:2c:eb:4e:c4:1a:84:ef:8e:18:24:90:8a:a5: 60:0c:8f:28:3d:4c:c7:7a:26:20:19:f6:d7:ac:f6:ee:0b:41: 4e:79:10:2e:72:44:1e:c6:81:04:22:a7:5b:42:30:49:50:c5: 5f:4d:9d:ae:03:73:78:bf:ea:e7:55:b0:37:4d:1b:23:5e:5e: 84:09:6a:48:25:ac:de:08:3c:50:7c:a3:ae:5c:9a:98:5c:b9: 2b:81:ce:50:85:7c:9e:6e:71:8f:e4:c7:b2:15:98:49:ea:d5: 66:d2:df:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0I4QTMxMTAvBgNVBAUTKDJGQzQzMEYxRTIxNUNCRDdFMDhGMjY0Mzg4MzcwMzUw MDJERTMxQTkwHhcNMjUwODIxMDEzMzA4WhcNMjUwODI4MDEzMzA4WjAYMRYwFAYD VQQDEw02OGE2Nzc1NC00MGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlRgMbjddHKFwq0QU987Jv0z+KWXinF5OHv2Z6fXljBA6wNh6sxZQGtuom+Mw umPbSIKov8CJWPvM5pVvDmf2RVOG0w+lTlOWy3BwSfly4NHAqYrmrozYl8WnmBoG yqRKHoGxvmSt006tciaWGUw/q4Rd1qQHBKg4uUiBZxEieYWxuJYUHy/NdFESk2N/ 2qpKVqiGvrxqahA+WNO6PDDIoshlTRbbR0++m01PleXICmbfR4LBkObSEQr4VVRk 83489JjiRDT2KELs4fNm3++J1rbpDvDg2TnfBTht43RBgu2GqNFGGpn/cXx1YRir UDf5HRM18vf5SIoiF6iYvMoCtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGKifBv+ ekaVOJCXKJ/fHb21pXDyMB8GA1UdIwQYMBaAFC/EMPHiFcvX4I8mQ4g3A1AC3jGp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjhBMy85NjY1MEYzOEZE MTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5ZmdqeVpEaURjRFVBTGVN YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w4UXc4ZUlWeTlmZ2p5WkRpRGNEVUFMZU1hay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjhBMy85NjY1MEYzOEZEMTcxMUVDODI4OTgzNjVDNEY5QUUwMi9MOFF3OGVJVnk5 ZmdqeVpEaURjRFVBTGVNYWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6PzeeOsphxkOkqICOO4V140cSFgyhQlITWjUSYbgXjR2EctfINzyo chPhLMr2AZaBzM4aVfzJeF6Ynhel3X8v80tW6UVm9fG/9JfmtW+a6ZxzDs3RmxOO lfWOH6COkR0YJhThAS+PFUpuPcLosdIF6T1E+uSqYrAec/aYkREEtQcLTrWiOhU1 zx15j03lua6ga+cyQSzrTsQahO+OGCSQiqVgDI8oPUzHeiYgGfbXrPbuC0FOeRAu ckQexoEEIqdbQjBJUMVfTZ2uA3N4v+rnVbA3TRsjXl6ECWpIJazeCDxQfKOuXJqY XLkrgc5QhXyebnGP5MeyFZhJ6tVm0t8k -----END CERTIFICATE-----Generated at Fri Aug 22 16:20:35 2025 by rpki-client