$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft File: 8gWyi6x-663pr5ttBPtJIPlhP4k.mft (raw, json) Hash identifier: 3K80G76ZZtMl2X8TtjT5IxY1++2doRErU3z6InkTbhs= Subject key identifier: 04:D5:9C:41:0C:96:90:9E:33:51:51:5B:58:C0:13:77:22:99:74:3F Authority key identifier: F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 Certificate issuer: /CN=A91DF70D/serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Certificate serial: 04BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft Manifest number: 04BA Signing time: Wed 20 Aug 2025 23:58:08 +0000 Manifest this update: Wed 20 Aug 2025 23:58:07 +0000 Manifest next update: Wed 27 Aug 2025 23:58:07 +0000 Files and hashes: 1: 8gWyi6x-663pr5ttBPtJIPlhP4k.crl (hash: mLRFmHWPird/IRV6ajpbuatQJoBrXMdQMw7mKOCXzfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 23:58:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1213 (0x4bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF70D, serialNumber=F205B28BAC7EEBADE9AF9B6D04FB4920F9613F89 Validity Not Before: Aug 20 23:58:07 2025 GMT Not After : Aug 27 23:58:07 2025 GMT Subject: CN=68a6610f-f446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e6:6a:45:24:0d:00:4c:fa:e1:ef:00:b3:0a: 76:07:56:d6:a0:f1:5d:a5:eb:d2:1e:e8:b9:ec:c9: f0:8d:e2:d8:a2:71:02:21:c0:c5:52:28:04:6a:fb: 47:5d:bc:94:65:a2:c3:0f:90:3c:45:12:cd:4d:09: 7f:79:1c:83:6c:dc:a3:ab:32:b6:e1:98:0c:29:f1: b2:c3:ae:19:01:68:2b:97:9d:9a:97:2f:9a:1e:d7: 0c:6b:04:1a:98:d0:89:e1:92:71:8e:5d:a5:bd:c1: ea:60:3b:9d:1a:4f:89:47:5c:e6:7b:f2:72:fa:a4: 86:1d:cc:dc:df:e4:96:e7:48:a2:d8:eb:19:39:c9: a8:81:3c:a0:9a:1c:9e:f8:21:94:33:b2:7b:05:d5: f3:d0:49:f5:79:7e:25:fe:7b:bf:93:7f:f8:2a:41: f4:6a:07:85:ca:a0:78:7c:f9:c5:8a:54:80:3c:13: 0c:f4:9c:83:e1:16:54:d7:be:4e:a3:dd:48:a4:0e: 2b:0d:7f:88:3c:7c:04:55:4e:c2:95:af:07:4b:02: c8:1b:ff:aa:71:68:3a:d0:71:ce:90:50:73:59:81: 25:7c:ae:a6:28:30:80:76:39:7c:1a:23:61:90:51: 08:ee:5d:6f:85:af:86:df:a0:bf:20:ab:3c:f4:35: 18:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D5:9C:41:0C:96:90:9E:33:51:51:5B:58:C0:13:77:22:99:74:3F X509v3 Authority Key Identifier: keyid:F2:05:B2:8B:AC:7E:EB:AD:E9:AF:9B:6D:04:FB:49:20:F9:61:3F:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8gWyi6x-663pr5ttBPtJIPlhP4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF70D/F6A9D7D637AE11ECB8CA1031C4F9AE02/8gWyi6x-663pr5ttBPtJIPlhP4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:83:8f:60:d1:80:0d:da:92:b3:7f:3b:85:5f:21:ef:65:7f: d5:8a:0e:b9:09:b8:ca:2b:3e:07:b5:b5:44:fa:0f:0c:d6:c2: 68:8d:9c:32:36:1a:90:19:e2:ef:9a:f4:c5:70:50:d7:84:07: 16:bb:36:d9:ec:cb:71:76:ca:50:05:61:50:44:df:ca:62:62: ef:2e:f8:03:78:f4:ae:e2:62:6e:b6:5f:2e:5d:eb:e3:df:21: 8f:12:fa:8a:7c:9d:f3:f7:25:84:83:c0:65:47:4a:66:f6:ca: 45:b1:fb:a2:48:3a:2f:7e:9f:06:6c:12:2f:14:cf:68:94:1a: 56:e0:42:13:35:07:30:2d:f5:b3:26:38:2d:5f:e3:de:ac:83: 1d:94:f4:93:aa:b6:e1:4e:86:cb:49:1f:f2:e9:eb:cf:6f:d2: cd:d8:62:79:9a:bb:b6:8e:2c:43:1a:ba:38:61:83:a7:0a:50: c5:75:f8:18:1c:b2:9a:40:92:fe:43:62:2c:a6:11:bd:53:de: 4b:19:b1:36:4d:c7:f9:66:79:8f:a9:f6:85:e3:57:50:e2:14: 87:bf:ff:b0:6a:18:ca:49:58:ee:aa:23:87:a1:7a:e1:0c:1e: 5b:7d:46:38:aa:b5:47:e2:01:32:e5:ed:9a:69:93:c1:11:da: b5:72:18:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY3MEQxMTAvBgNVBAUTKEYyMDVCMjhCQUM3RUVCQURFOUFGOUI2RDA0RkI0OTIw Rjk2MTNGODkwHhcNMjUwODIwMjM1ODA3WhcNMjUwODI3MjM1ODA3WjAYMRYwFAYD VQQDEw02OGE2NjEwZi1mNDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy+ZqRSQNAEz64e8Aswp2B1bWoPFdpevSHui57MnwjeLYonECIcDFUigEavtH XbyUZaLDD5A8RRLNTQl/eRyDbNyjqzK24ZgMKfGyw64ZAWgrl52aly+aHtcMawQa mNCJ4ZJxjl2lvcHqYDudGk+JR1zme/Jy+qSGHczc3+SW50ii2OsZOcmogTygmhye +CGUM7J7BdXz0En1eX4l/nu/k3/4KkH0ageFyqB4fPnFilSAPBMM9JyD4RZU175O o91IpA4rDX+IPHwEVU7Cla8HSwLIG/+qcWg60HHOkFBzWYElfK6mKDCAdjl8GiNh kFEI7l1vha+G36C/IKs89DUY+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATVnEEM lpCeM1FRW1jAE3cimXQ/MB8GA1UdIwQYMBaAFPIFsousfuut6a+bbQT7SSD5YT+J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjcwRC9GNkE5RDdENjM3 QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2M3ByNXR0QlB0SklQbGhQ NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhnV3lpNngtNjYzcHI1dHRCUHRKSVBsaFA0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjcwRC9GNkE5RDdENjM3QUUxMUVDQjhDQTEwMzFDNEY5QUUwMi84Z1d5aTZ4LTY2 M3ByNXR0QlB0SklQbGhQNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXg49g0YAN2pKzfzuFXyHvZX/Vig65CbjKKz4HtbVE+g8M1sJojZwy NhqQGeLvmvTFcFDXhAcWuzbZ7MtxdspQBWFQRN/KYmLvLvgDePSu4mJutl8uXevj 3yGPEvqKfJ3z9yWEg8BlR0pm9spFsfuiSDovfp8GbBIvFM9olBpW4EITNQcwLfWz JjgtX+PerIMdlPSTqrbhTobLSR/y6evPb9LN2GJ5mru2jixDGro4YYOnClDFdfgY HLKaQJL+Q2IsphG9U95LGbE2Tcf5ZnmPqfaF41dQ4hSHv/+wahjKSVjuqiOHoXrh DB5bfUY4qrVH4gEy5e2aaZPBEdq1chjK -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:35 2025 by rpki-client