$ rpki-client -vvf rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft File: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft (raw, json) Hash identifier: GURyBiZrdqPJzmwHinhTEitmWk9gJXZvPv6SjU4MX2I= Subject key identifier: BC:61:68:56:A7:FC:7F:F1:D2:76:BC:DD:7F:62:32:E6:07:E3:7F:4C Authority key identifier: F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED Certificate issuer: /CN=A91E094D/serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Certificate serial: 05CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft Manifest number: 05B8 Signing time: Thu 04 Sep 2025 23:26:05 +0000 Manifest this update: Thu 04 Sep 2025 23:26:05 +0000 Manifest next update: Thu 11 Sep 2025 23:26:05 +0000 Files and hashes: 1: 8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl (hash: pi0MXmUdPyNs1xPyZCi06bFv4c67lQVupmV6VVBmBUE=) 2: 22A3D2E4E5D311EFB5545A4EC4F9AE02.roa (hash: KgAjUYIuzjhpkZFNtYWs181NTAA2NQcYLWH/gU6nAAg=) 3: ED49BD3C649A11ECBDAC9565C4F9AE02.roa (hash: lBw/oXqYii+CxdFQl9gOeByngEJHo8e2NzPJY0PJwPA=) 4: 660A349884C511EFB2831C16C4F9AE02.roa (hash: q2RN3xLXUOsYwfNjHGYHuCEJyjXQ1ifjwY5JK1sjpVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1484 (0x5cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E094D, serialNumber=F31705E818EA4803B0934193F61FC6E3371772ED Validity Not Before: Sep 4 23:26:05 2025 GMT Not After : Sep 11 23:26:05 2025 GMT Subject: CN=68ba200d-0a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:98:c8:c0:db:43:02:00:7b:05:4d:90:13:46: e4:80:78:69:b6:05:39:66:b9:a4:3c:ec:e6:c4:14: 6e:b4:19:ed:f5:ba:fd:c4:70:98:80:76:a8:71:58: bf:99:df:46:ab:3b:21:4f:ca:47:bc:ca:06:26:78: 9a:04:9e:cc:c5:9b:89:e2:6d:71:b8:df:2f:ae:c2: d8:2c:b7:16:35:d4:9d:f3:6e:bb:b0:bf:2a:93:78: 4b:2f:ea:45:7b:2e:d0:9f:00:b9:e9:d2:ee:5a:2e: c8:97:17:40:80:0f:2e:15:88:51:f0:cd:80:3c:a5: 54:8f:e2:2f:f2:fe:b5:91:cb:df:66:e5:7a:22:80: 4e:4f:f9:33:2a:5b:bb:ff:9b:8f:07:40:a3:0d:ea: 90:dd:79:3f:e5:31:ef:64:d1:e4:7e:0e:f6:03:4f: 94:03:54:17:97:2a:53:cb:f3:01:fd:ad:1d:02:53: 39:a3:32:4c:d0:29:c8:22:98:02:d8:35:ea:62:28: cb:f3:e7:88:be:07:41:c7:41:06:89:8f:84:6e:d8: 9d:ac:b6:33:6c:d6:9c:33:ae:d3:c5:9b:74:f8:65: 02:c5:48:91:3b:42:8e:23:45:12:1c:51:eb:6d:50: 03:7b:39:4e:65:de:bf:8e:d8:b3:8a:06:8f:2b:e1: 2b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:61:68:56:A7:FC:7F:F1:D2:76:BC:DD:7F:62:32:E6:07:E3:7F:4C X509v3 Authority Key Identifier: keyid:F3:17:05:E8:18:EA:48:03:B0:93:41:93:F6:1F:C6:E3:37:17:72:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8xcF6BjqSAOwk0GT9h_G4zcXcu0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E094D/40B7386EDE8111EBA9FC7D72C4F9AE02/8xcF6BjqSAOwk0GT9h_G4zcXcu0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1a:e7:43:66:88:10:69:07:e3:65:6e:c8:c1:aa:06:d9:e7: 1e:e3:e0:a4:79:9b:26:c5:c2:31:da:93:0a:48:e3:62:6d:83: 7c:62:ce:21:31:f3:17:cf:a4:04:b6:41:eb:d3:0a:f7:0b:c2: 96:56:f2:19:49:b8:a8:f8:f3:4f:cd:a1:e8:ea:ef:87:df:81: dd:b1:68:97:3e:5d:13:53:8e:21:10:ce:a1:c6:8f:83:1c:a5: 29:6c:0d:a1:e1:eb:4b:2e:cf:a3:40:4b:55:52:0f:72:8e:74: 87:ee:b7:01:53:ae:7b:69:84:cb:06:82:99:c4:11:f7:b1:6b: 1d:31:98:ee:0d:88:c3:c7:d7:7b:ff:97:71:7d:3d:73:4a:2d: eb:96:c9:f5:fa:3c:f1:f3:73:62:58:b9:62:94:9f:de:48:a1: ce:cd:3d:59:72:6c:14:34:29:88:82:97:45:47:4f:db:20:26: 79:76:18:b6:b2:ed:e3:4a:96:ca:57:89:0c:d3:35:ca:83:b0: 23:54:cb:57:2c:ca:76:fd:6d:04:3d:cc:db:6c:d6:5d:6c:b0: 81:76:0d:0a:84:80:df:c9:0d:68:36:fb:a6:bb:eb:35:7b:be: 50:fc:97:0e:04:fa:23:b1:a3:09:7d:75:9b:e7:01:c8:d9:da: 22:36:46:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTA5NEQxMTAvBgNVBAUTKEYzMTcwNUU4MThFQTQ4MDNCMDkzNDE5M0Y2MUZDNkUz MzcxNzcyRUQwHhcNMjUwOTA0MjMyNjA1WhcNMjUwOTExMjMyNjA1WjAYMRYwFAYD VQQDEw02OGJhMjAwZC0wYTI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxZjIwNtDAgB7BU2QE0bkgHhptgU5ZrmkPOzmxBRutBnt9br9xHCYgHaocVi/ md9GqzshT8pHvMoGJniaBJ7MxZuJ4m1xuN8vrsLYLLcWNdSd8267sL8qk3hLL+pF ey7QnwC56dLuWi7IlxdAgA8uFYhR8M2APKVUj+Iv8v61kcvfZuV6IoBOT/kzKlu7 /5uPB0CjDeqQ3Xk/5THvZNHkfg72A0+UA1QXlypTy/MB/a0dAlM5ozJM0CnIIpgC 2DXqYijL8+eIvgdBx0EGiY+EbtidrLYzbNacM67TxZt0+GUCxUiRO0KOI0USHFHr bVADezlOZd6/jtizigaPK+ErswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLxhaFan /H/x0na83X9iMuYH439MMB8GA1UdIwQYMBaAFPMXBegY6kgDsJNBk/YfxuM3F3Lt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDk0RC80MEI3Mzg2RURF ODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNBT3drMEdUOWhfRzR6Y1hj dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzh4Y0Y2QmpxU0FPd2swR1Q5aF9HNHpjWGN1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDk0RC80MEI3Mzg2RURFODExMUVCQTlGQzdENzJDNEY5QUUwMi84eGNGNkJqcVNB T3drMEdUOWhfRzR6Y1hjdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8GudDZogQaQfjZW7IwaoG2ece4+CkeZsmxcIx2pMKSONibYN8Ys4h MfMXz6QEtkHr0wr3C8KWVvIZSbio+PNPzaHo6u+H34HdsWiXPl0TU44hEM6hxo+D HKUpbA2h4etLLs+jQEtVUg9yjnSH7rcBU657aYTLBoKZxBH3sWsdMZjuDYjDx9d7 /5dxfT1zSi3rlsn1+jzx83NiWLlilJ/eSKHOzT1ZcmwUNCmIgpdFR0/bICZ5dhi2 su3jSpbKV4kM0zXKg7AjVMtXLMp2/W0EPczbbNZdbLCBdg0KhIDfyQ1oNvumu+s1 e75Q/JcOBPojsaMJfXWb5wHI2doiNkag -----END CERTIFICATE-----Generated at Sat Sep 6 16:58:59 2025 by rpki-client