$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft File: 8YaDAEWuVIbpCXNDfanSB6VmhpE.mft (raw, json) Hash identifier: 8YhjpziBspVw+MFfuEcB35JqBJ3ISh5VrcrGi9/lYQs= Subject key identifier: 7F:8F:45:84:AB:6D:CF:DF:84:1D:9F:5B:DB:01:A6:66:F3:DF:A1:9D Authority key identifier: F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 Certificate issuer: /CN=A91F5AAA/serialNumber=F186830045AE5486E90973437DA9D207A5668691 Certificate serial: 3224 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft Manifest number: 3224 Signing time: Thu 18 Sep 2025 15:29:37 +0000 Manifest this update: Thu 18 Sep 2025 15:29:37 +0000 Manifest next update: Thu 25 Sep 2025 15:29:37 +0000 Files and hashes: 1: 8YaDAEWuVIbpCXNDfanSB6VmhpE.crl (hash: Gt/3LvfB4w1k8qiHb+KnbiwmIZEMx8q0gRtJSETWyrs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12836 (0x3224) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5AAA, serialNumber=F186830045AE5486E90973437DA9D207A5668691 Validity Not Before: Sep 18 15:29:37 2025 GMT Not After : Sep 25 15:29:37 2025 GMT Subject: CN=68cc2561-13cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a3:75:af:33:c9:40:35:72:5e:18:78:23:8a: 24:42:92:c8:9b:12:27:1a:1e:fe:b9:7f:68:1f:aa: 28:8d:8d:63:42:d9:1a:c9:cc:76:3a:51:40:43:ed: 0a:0c:5c:17:62:2d:15:23:6c:2c:81:c3:22:47:a7: 96:d5:2b:46:c0:8a:8c:fc:e0:ed:11:59:7c:0a:cb: 1a:11:02:e5:ff:4f:fb:a8:8e:38:bf:85:07:52:6d: 41:1c:4a:fe:41:1a:02:b4:ac:c6:b3:f5:48:da:ae: 21:0c:d3:4c:c9:9d:b5:04:f5:72:fd:b3:ec:00:c4: ca:02:1f:b7:a3:f4:80:2a:e8:72:c4:ad:8e:46:6c: 77:97:1f:09:8a:a1:80:6c:f5:b0:82:d9:fa:a9:b2: 50:bb:05:ea:64:6f:3b:56:2f:b5:94:1f:2e:21:12: ff:31:14:fa:68:a1:5f:f0:32:97:33:85:65:8c:03: e4:88:8a:de:40:4f:ca:60:46:b3:71:07:14:81:40: 06:dd:2d:4f:1f:36:0c:a0:66:84:cc:d5:cf:c1:cc: d9:af:5f:73:11:fb:f8:b6:53:ae:f8:9f:00:a2:ed: 60:51:61:62:71:59:d7:dc:20:03:9b:74:32:2d:fc: 1f:0b:14:ab:d9:1e:f0:9e:e2:aa:ab:0e:34:27:76: 60:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8F:45:84:AB:6D:CF:DF:84:1D:9F:5B:DB:01:A6:66:F3:DF:A1:9D X509v3 Authority Key Identifier: keyid:F1:86:83:00:45:AE:54:86:E9:09:73:43:7D:A9:D2:07:A5:66:86:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YaDAEWuVIbpCXNDfanSB6VmhpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5AAA/8B2824529FF711E2AD9CEDEE2F5A7754/8YaDAEWuVIbpCXNDfanSB6VmhpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:78:1c:a5:3e:0f:1e:5e:cd:b5:67:8c:49:49:12:0f:06:fa: e8:22:d1:2f:b1:61:3b:69:d3:b7:4b:5b:95:38:33:a8:52:e1: e1:df:76:0e:02:bd:54:f7:8b:0b:6b:e0:cb:27:66:9a:b6:08: ab:b0:b2:36:cc:2d:8b:0f:e6:37:de:70:f8:e5:8a:db:ab:ef: 2d:46:09:91:e8:4b:8b:c9:e2:7f:3d:e3:c6:89:5b:04:0a:24: 2f:30:21:60:69:f8:cb:1b:15:c9:c9:0e:7b:16:ff:f9:c6:81: 01:20:2a:2a:df:35:84:60:7b:bf:48:da:4c:bf:88:05:85:91: 77:dd:ae:cf:6b:43:4b:6a:92:f9:6a:c1:5d:48:b1:3c:6c:aa: 8e:09:bd:55:68:38:f3:3d:bf:2b:cd:37:9b:0b:cd:fb:bb:49: 4e:d7:c8:7c:47:53:14:c4:34:6e:84:7e:b4:e3:e3:39:9b:53: 67:73:09:6a:04:f0:55:2c:87:de:20:f8:6c:fe:9b:b3:82:f2: a7:b9:d4:de:28:d8:88:20:85:27:fb:34:aa:22:6b:f8:dd:05: 86:68:6b:62:73:98:76:c5:40:27:81:4b:24:7f:61:5d:9e:f9: ae:4c:e3:bc:d3:af:7e:4b:2f:ba:d7:ac:02:83:97:f9:a8:4b: d4:74:96:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICMiQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjVBQUExMTAvBgNVBAUTKEYxODY4MzAwNDVBRTU0ODZFOTA5NzM0MzdEQTlEMjA3 QTU2Njg2OTEwHhcNMjUwOTE4MTUyOTM3WhcNMjUwOTI1MTUyOTM3WjAYMRYwFAYD VQQDEw02OGNjMjU2MS0xM2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3aN1rzPJQDVyXhh4I4okQpLImxInGh7+uX9oH6oojY1jQtkaycx2OlFAQ+0K DFwXYi0VI2wsgcMiR6eW1StGwIqM/ODtEVl8CssaEQLl/0/7qI44v4UHUm1BHEr+ QRoCtKzGs/VI2q4hDNNMyZ21BPVy/bPsAMTKAh+3o/SAKuhyxK2ORmx3lx8JiqGA bPWwgtn6qbJQuwXqZG87Vi+1lB8uIRL/MRT6aKFf8DKXM4VljAPkiIreQE/KYEaz cQcUgUAG3S1PHzYMoGaEzNXPwczZr19zEfv4tlOu+J8Aou1gUWFicVnX3CADm3Qy LfwfCxSr2R7wnuKqqw40J3ZgbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH+PRYSr bc/fhB2fW9sBpmbz36GdMB8GA1UdIwQYMBaAFPGGgwBFrlSG6QlzQ32p0gelZoaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNUFBQS84QjI4MjQ1MjlG RjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJYnBDWE5EZmFuU0I2Vm1o cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhZYURBRVd1VklicENYTkRmYW5TQjZWbWhwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NUFBQS84QjI4MjQ1MjlGRjcxMUUyQUQ5Q0VERUUyRjVBNzc1NC84WWFEQUVXdVZJ YnBDWE5EZmFuU0I2Vm1ocEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCeBylPg8eXs21Z4xJSRIPBvroItEvsWE7adO3S1uVODOoUuHh33YO Ar1U94sLa+DLJ2aatgirsLI2zC2LD+Y33nD45Yrbq+8tRgmR6EuLyeJ/PePGiVsE CiQvMCFgafjLGxXJyQ57Fv/5xoEBICoq3zWEYHu/SNpMv4gFhZF33a7Pa0NLapL5 asFdSLE8bKqOCb1VaDjzPb8rzTebC837u0lO18h8R1MUxDRuhH604+M5m1Nncwlq BPBVLIfeIPhs/puzgvKnudTeKNiIIIUn+zSqImv43QWGaGtic5h2xUAngUskf2Fd nvmuTOO8069+Sy+616wCg5f5qEvUdJZa -----END CERTIFICATE-----Generated at Thu Sep 18 20:26:37 2025 by rpki-client