$ rpki-client -vvf rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft File: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft (raw, json) Hash identifier: 8lNsdcr99JOJYdgCm579Om5Rk/X3xXsBF6pdvQNcNkg= Subject key identifier: FC:2D:B5:B6:38:F3:A3:43:E8:99:12:09:BE:A5:49:CC:8C:3E:82:B4 Authority key identifier: F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 Certificate issuer: /CN=A91D962B/serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft Manifest number: 015E Signing time: Sun 07 Sep 2025 04:27:46 +0000 Manifest this update: Sun 07 Sep 2025 04:27:45 +0000 Manifest next update: Sun 14 Sep 2025 04:27:45 +0000 Files and hashes: 1: 8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl (hash: vKRNM36xwb+fHD8rAqxnpMv5br9VDNbc4mQiX2JihIg=) 2: 74DC3F3C779E11EE842F9D85C4F9AE02.roa (hash: C0wDD+AgzZ7rjhppUX9KQGRP55NqDPFQsX30TucXWZw=) 3: 743EA894779E11EE842F9D85C4F9AE02.roa (hash: A+eIQ7dJ6b4jdnXFCKHgDz5bYK+SgjdqalthmATouvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 04:27:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D962B, serialNumber=F014860172D4FB8B79022FBD59F2ECA0BE7648F1 Validity Not Before: Sep 7 04:27:45 2025 GMT Not After : Sep 14 04:27:45 2025 GMT Subject: CN=68bd09c1-f4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:57:ba:e3:1f:4c:25:d4:0c:1a:43:be:8e:80: 8c:27:fc:4e:b7:bc:c2:1f:7b:78:66:26:4a:22:c6: 2f:43:93:57:89:74:df:de:3c:46:a9:ba:82:6d:d2: d8:71:a8:47:c3:1a:ca:ea:7a:fc:b6:05:20:8e:0a: 37:46:11:f7:6f:b6:6c:9c:04:2b:63:29:e9:b0:76: 3f:87:71:a9:03:2d:97:83:ce:99:5f:f3:8f:88:bc: e0:f8:77:c9:44:ad:d0:72:0c:b3:19:a7:56:d8:58: 8c:ac:26:51:43:73:c4:98:00:d6:41:f2:4b:88:f2: 42:07:9f:80:8e:ba:29:10:00:2d:92:5f:76:94:65: b2:ed:c6:6e:7b:5a:31:c5:fe:78:20:31:a7:46:31: b5:48:1d:9a:92:1c:59:cd:52:46:58:98:cd:5e:e1: 41:30:83:0d:5e:65:19:34:33:7b:d8:13:7c:19:6c: 9d:56:9a:ef:54:f0:97:c4:4c:ab:45:2c:0b:ef:9d: 20:a6:6d:6c:f8:4e:63:4e:a5:6d:e1:e4:7b:97:4f: 76:a2:31:a1:13:75:90:ec:77:d8:b5:dc:0e:e6:75: e3:a5:40:2f:7c:33:47:d7:af:62:34:a8:c8:47:0c: ea:3d:46:0f:1d:88:82:a3:16:03:94:19:81:90:79: 31:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:2D:B5:B6:38:F3:A3:43:E8:99:12:09:BE:A5:49:CC:8C:3E:82:B4 X509v3 Authority Key Identifier: keyid:F0:14:86:01:72:D4:FB:8B:79:02:2F:BD:59:F2:EC:A0:BE:76:48:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8BSGAXLU-4t5Ai-9WfLsoL52SPE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D962B/3F0F5CEC779C11EE82213967C4F9AE02/8BSGAXLU-4t5Ai-9WfLsoL52SPE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 88:66:eb:b3:22:f7:7d:45:5a:55:c7:b6:f1:89:bf:43:99:33: fb:c7:d0:e0:62:45:3d:04:85:0a:88:18:ec:b7:92:d7:0c:07: ea:d5:58:e4:4e:76:d2:aa:aa:d6:ec:f7:0f:69:d7:15:ba:55: 12:be:34:48:82:f1:2a:59:2d:94:3d:f7:39:c9:2d:f2:ed:46: 88:d1:86:ed:b9:01:33:aa:aa:93:49:2c:f1:55:83:d5:22:d0: e0:72:30:42:04:25:62:7e:bd:3d:e6:46:e6:c7:b0:9a:6a:a1: 12:08:86:c9:33:04:2b:38:18:6b:39:1b:c4:5a:01:08:8b:d4: 2e:8e:ea:ac:31:08:50:9e:da:74:59:d1:ab:57:b2:45:a9:77: 84:42:bc:eb:1a:37:31:81:21:50:3c:86:79:9c:97:40:33:f8: d2:91:07:71:3a:74:a6:1c:ba:e3:be:98:15:a5:78:28:2b:2c: d0:a8:58:3c:af:d3:e0:8b:dc:7f:81:69:2e:6a:fc:19:be:63: b4:e0:ab:15:e1:46:96:aa:9f:21:56:f5:e0:1f:ed:c9:e3:b2: 46:df:7d:24:1f:2b:7e:69:24:cb:23:63:e4:1e:2a:dc:52:e9: 27:df:3f:68:62:b2:1d:da:d8:70:ce:e6:cc:19:9e:45:50:6e: 0b:30:2a:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDk2MkIxMTAvBgNVBAUTKEYwMTQ4NjAxNzJENEZCOEI3OTAyMkZCRDU5RjJFQ0Ew QkU3NjQ4RjEwHhcNMjUwOTA3MDQyNzQ1WhcNMjUwOTE0MDQyNzQ1WjAYMRYwFAYD VQQDEw02OGJkMDljMS1mNGFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAule64x9MJdQMGkO+joCMJ/xOt7zCH3t4ZiZKIsYvQ5NXiXTf3jxGqbqCbdLY cahHwxrK6nr8tgUgjgo3RhH3b7ZsnAQrYynpsHY/h3GpAy2Xg86ZX/OPiLzg+HfJ RK3QcgyzGadW2FiMrCZRQ3PEmADWQfJLiPJCB5+AjropEAAtkl92lGWy7cZue1ox xf54IDGnRjG1SB2akhxZzVJGWJjNXuFBMIMNXmUZNDN72BN8GWydVprvVPCXxEyr RSwL750gpm1s+E5jTqVt4eR7l092ojGhE3WQ7HfYtdwO5nXjpUAvfDNH169iNKjI RwzqPUYPHYiCoxYDlBmBkHkxXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwttbY4 86ND6JkSCb6lScyMPoK0MB8GA1UdIwQYMBaAFPAUhgFy1PuLeQIvvVny7KC+dkjx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOTYyQi8zRjBGNUNFQzc3 OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00dDVBaS05V2ZMc29MNTJT UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhCU0dBWExVLTR0NUFpLTlXZkxzb0w1MlNQRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTYyQi8zRjBGNUNFQzc3OUMxMUVFODIyMTM5NjdDNEY5QUUwMi84QlNHQVhMVS00 dDVBaS05V2ZMc29MNTJTUEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCIZuuzIvd9RVpVx7bxib9DmTP7x9DgYkU9BIUKiBjst5LXDAfq1Vjk TnbSqqrW7PcPadcVulUSvjRIgvEqWS2UPfc5yS3y7UaI0YbtuQEzqqqTSSzxVYPV ItDgcjBCBCVifr095kbmx7CaaqESCIbJMwQrOBhrORvEWgEIi9QujuqsMQhQntp0 WdGrV7JFqXeEQrzrGjcxgSFQPIZ5nJdAM/jSkQdxOnSmHLrjvpgVpXgoKyzQqFg8 r9Pgi9x/gWkuavwZvmO04KsV4UaWqp8hVvXgH+3J47JG330kHyt+aSTLI2PkHirc Uukn3z9oYrId2thwzubMGZ5FUG4LMCqL -----END CERTIFICATE-----Generated at Mon Sep 8 16:57:28 2025 by rpki-client