$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft File: B82dMe1hhir1A-UglCjHyyfqiB8.mft (raw, json) Hash identifier: nHzDLOgDz4/Jqp3WugY3uUlOD7y8F6w+OFiyCVGxV/c= Subject key identifier: EA:AE:DD:72:8B:03:F1:CF:67:D0:ED:6E:96:8E:38:16:EE:7A:59:AA Authority key identifier: 07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F Certificate issuer: /CN=A91FD609/serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F Certificate serial: 0822 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft Manifest number: 0818 Signing time: Sat 06 Sep 2025 21:05:38 +0000 Manifest this update: Sat 06 Sep 2025 21:05:37 +0000 Manifest next update: Sat 13 Sep 2025 21:05:37 +0000 Files and hashes: 1: B82dMe1hhir1A-UglCjHyyfqiB8.crl (hash: 4TULhOTQNUPnpydyrksmXiSsOkJOUzIJEjo5umWBHQA=) 2: 765DBCFEEC1A11EAA8520072C4F9AE02.roa (hash: LwXV2swiHkwzhmRJHgtxVwl/mp8FDjhnbQvKS2GLsds=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:05:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2082 (0x822) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD609, serialNumber=07CD9D31ED61862AF503E5209428C7CB27EA881F Validity Not Before: Sep 6 21:05:37 2025 GMT Not After : Sep 13 21:05:37 2025 GMT Subject: CN=68bca222-d842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:95:cb:90:df:19:f5:d7:9e:f1:33:e3:d7:68: 61:d8:50:97:e4:0e:7f:b8:28:4b:c8:4c:a7:f0:99: 79:da:da:37:95:21:fc:6e:99:8e:27:96:58:d4:20: 41:a6:13:92:3f:fd:21:43:34:8a:cb:be:bf:07:de: e3:00:11:a7:44:c2:9c:00:f7:4b:6c:29:d1:66:2d: 06:55:81:ba:89:ef:36:12:bc:2a:a6:44:26:e4:14: 42:d6:bd:ee:fe:15:1a:e1:84:fd:96:96:2b:b9:71: 00:d4:ab:87:b0:48:d2:ef:7c:e6:ac:88:90:dc:93: fe:97:97:d5:7e:d8:74:5c:d9:12:e6:5a:68:5f:66: 71:eb:8c:86:eb:f6:34:cf:78:83:80:83:5c:0e:56: 81:e0:4e:45:b7:fd:60:da:1f:09:04:b3:c8:19:cc: 92:46:16:fb:27:12:a8:13:e4:df:09:04:f7:51:d6: 40:cb:f1:d6:4e:5e:19:10:2f:fe:61:c3:22:09:60: ce:a6:e3:7a:b6:cd:41:0d:d6:05:3c:e1:93:a9:37: b7:9e:8e:53:45:a5:0e:20:64:c8:2d:ab:9b:31:80: cb:9d:59:b9:80:6f:88:46:2e:1d:9e:cc:d0:49:91: 70:c3:d3:08:64:dc:5e:5c:5f:cf:7b:ff:fa:cc:9f: 87:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:AE:DD:72:8B:03:F1:CF:67:D0:ED:6E:96:8E:38:16:EE:7A:59:AA X509v3 Authority Key Identifier: keyid:07:CD:9D:31:ED:61:86:2A:F5:03:E5:20:94:28:C7:CB:27:EA:88:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B82dMe1hhir1A-UglCjHyyfqiB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD609/0C609B9CEC1911EA925DFC6FC4F9AE02/B82dMe1hhir1A-UglCjHyyfqiB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:35:f7:40:6c:11:b0:f8:0b:90:6b:3b:40:82:e1:7d:e3:46: 09:8a:c5:0e:91:b5:43:c3:5a:ee:23:4c:23:7d:65:3a:7f:d9: 93:aa:aa:b4:64:eb:4c:6f:b2:82:d0:79:a1:25:12:fb:8f:8b: 09:3f:54:31:7b:55:9c:aa:8d:fc:f0:48:58:28:35:27:21:f8: 16:60:f3:69:3d:a4:c4:ac:02:1a:c9:eb:4e:42:72:60:0a:d7: 42:69:48:02:3e:77:b8:33:e3:36:ae:63:39:37:8e:89:dd:cd: ce:36:fd:c2:5b:46:8d:c7:b5:7f:d7:b7:e5:fe:3e:10:84:46: 56:49:a2:d9:33:91:4f:db:1b:da:ad:38:a3:64:4a:b8:d2:80: e8:59:5e:d9:4e:98:f1:8c:e6:b9:5a:ab:dc:3e:96:cc:3b:03: 1a:fc:81:d9:f8:9f:b7:70:a7:3e:10:0e:5d:61:95:a8:65:1f: b7:d7:3c:fe:e8:f5:c5:e3:ab:d1:6e:ec:62:3c:32:35:a0:32: 26:d9:fc:e2:8c:fc:13:f4:16:1a:52:a2:28:10:19:c7:37:13: 5e:59:40:aa:b7:5e:c0:94:6d:76:df:b9:f8:59:98:51:64:ca: 78:ee:5e:c2:17:dd:82:a3:c0:0b:09:3c:95:ac:44:39:0e:8e: aa:7c:ab:1c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQ2MDkxMTAvBgNVBAUTKDA3Q0Q5RDMxRUQ2MTg2MkFGNTAzRTUyMDk0MjhDN0NC MjdFQTg4MUYwHhcNMjUwOTA2MjEwNTM3WhcNMjUwOTEzMjEwNTM3WjAYMRYwFAYD VQQDEw02OGJjYTIyMi1kODQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZXLkN8Z9dee8TPj12hh2FCX5A5/uChLyEyn8Jl52to3lSH8bpmOJ5ZY1CBB phOSP/0hQzSKy76/B97jABGnRMKcAPdLbCnRZi0GVYG6ie82ErwqpkQm5BRC1r3u /hUa4YT9lpYruXEA1KuHsEjS73zmrIiQ3JP+l5fVfth0XNkS5lpoX2Zx64yG6/Y0 z3iDgINcDlaB4E5Ft/1g2h8JBLPIGcySRhb7JxKoE+TfCQT3UdZAy/HWTl4ZEC/+ YcMiCWDOpuN6ts1BDdYFPOGTqTe3no5TRaUOIGTILaubMYDLnVm5gG+IRi4dnszQ SZFww9MIZNxeXF/Pe//6zJ+HiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqu3XKL A/HPZ9DtbpaOOBbuelmqMB8GA1UdIwQYMBaAFAfNnTHtYYYq9QPlIJQox8sn6ogf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDYwOS8wQzYwOUI5Q0VD MTkxMUVBOTI1REZDNkZDNEY5QUUwMi9CODJkTWUxaGhpcjFBLVVnbENqSHl5ZnFp QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I4MmRNZTFoaGlyMUEtVWdsQ2pIeXlmcWlCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDYwOS8wQzYwOUI5Q0VDMTkxMUVBOTI1REZDNkZDNEY5QUUwMi9CODJkTWUxaGhp cjFBLVVnbENqSHl5ZnFpQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAENfdAbBGw+AuQaztAguF940YJisUOkbVDw1ruI0wjfWU6f9mTqqq0 ZOtMb7KC0HmhJRL7j4sJP1Qxe1Wcqo388EhYKDUnIfgWYPNpPaTErAIayetOQnJg CtdCaUgCPne4M+M2rmM5N46J3c3ONv3CW0aNx7V/17fl/j4QhEZWSaLZM5FP2xva rTijZEq40oDoWV7ZTpjxjOa5WqvcPpbMOwMa/IHZ+J+3cKc+EA5dYZWoZR+31zz+ 6PXF46vRbuxiPDI1oDIm2fzijPwT9BYaUqIoEBnHNxNeWUCqt17AlG1237n4WZhR ZMp47l7CF92Co8ALCTyVrEQ5Do6qfKsc -----END CERTIFICATE-----Generated at Mon Sep 8 04:06:06 2025 by rpki-client