$ rpki-client -vvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft File: B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft (raw, json) Hash identifier: tn/8pp/R/++j8AaIHyDwom3ffSUkvCCzGUamU6FiC7o= Subject key identifier: D9:22:E0:89:BF:75:84:FA:65:32:1F:25:B5:A7:FF:73:9D:1C:EA:DD Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 Certificate issuer: /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Certificate serial: 0713 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft Manifest number: 0703 Signing time: Mon 30 Jun 2025 22:15:22 +0000 Manifest this update: Mon 30 Jun 2025 22:15:21 +0000 Manifest next update: Mon 07 Jul 2025 22:15:21 +0000 Files and hashes: 1: B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl (hash: ktBq76bH/bBlzl3ns+4LWqfNGsh+GZCpkx+dLTyWfQM=) 2: AF5A6ADAC0F411EF88E4255EC4F9AE02.roa (hash: K582nD351LCFmocRpDImIyPSP+oUj66WDs3dSAB8W+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:15:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1811 (0x713) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B54FE, serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Validity Not Before: Jun 30 22:15:21 2025 GMT Not After : Jul 7 22:15:21 2025 GMT Subject: CN=68630c7a-66e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:4a:92:3b:75:74:0b:65:2b:58:f3:9a:12: de:c9:56:a4:a8:09:16:11:74:76:c5:0e:7d:fb:96: c0:9b:10:f0:2a:ac:a5:07:51:c4:90:89:93:7f:08: 88:74:40:ec:b1:27:04:76:c5:37:9d:9f:9c:c6:b9: 36:de:92:57:73:2b:9f:eb:fa:63:2a:6e:4f:79:21: 0d:f7:06:23:0e:13:a2:dc:36:91:7e:c1:cc:d6:07: a7:69:6b:eb:48:05:bd:8d:2f:56:13:f3:9e:ec:4b: 57:bf:28:c6:01:ab:12:7f:ae:44:05:53:36:c1:d3: 35:6f:ee:c9:31:09:e4:82:2b:63:81:d6:35:97:02: 60:cf:b7:2c:b3:5a:39:d2:8a:fd:f0:36:a9:2d:7d: 59:af:80:18:1f:8b:cd:25:db:7e:00:b9:07:42:92: 9f:91:5c:7a:ca:9d:25:74:20:92:30:d7:bb:37:f0: c7:a9:52:b1:1f:af:87:41:97:97:9e:30:85:b9:8a: 40:59:a9:ea:e8:e5:66:20:7e:65:74:86:a4:66:12: b8:41:ef:53:79:a4:93:76:53:d1:36:a4:10:93:ff: 80:dd:92:fe:53:ef:f7:6f:97:c0:61:0e:42:0a:99: 4f:d9:d6:1d:b5:7c:50:38:c4:aa:d5:6a:5f:ca:5a: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:22:E0:89:BF:75:84:FA:65:32:1F:25:B5:A7:FF:73:9D:1C:EA:DD X509v3 Authority Key Identifier: keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:85:c8:78:f8:83:03:87:92:98:9e:4d:3f:e7:41:66:a5:80: 43:e9:11:d9:ea:34:e0:f5:fe:5e:0d:5a:2b:a9:57:cf:b0:47: 3a:c3:a0:ac:a7:47:c9:7e:b9:04:bb:21:de:4f:f0:66:19:ce: 9f:91:25:ef:b7:a0:dd:ac:ff:7e:c5:fc:49:b0:cf:e5:ac:fd: 1e:49:bd:71:c8:c8:17:a3:b4:33:c4:1a:23:81:36:48:f2:95: 01:89:04:95:c3:2b:a9:7f:0c:6d:46:73:99:c6:d5:96:54:c4: 9e:dd:00:9e:66:71:52:6e:ca:70:9f:6b:6c:ee:75:02:44:e2: 01:0c:5d:a7:b8:17:1f:fd:06:56:4e:9a:5e:3c:50:97:c2:59: 40:cd:ef:78:10:16:fd:04:9a:7c:f6:fd:bf:98:70:7d:9f:68: a9:e2:2d:53:a9:c2:69:47:d2:a8:a0:16:9d:4f:2b:8b:79:6c: 8a:fd:92:22:0e:f6:2a:0c:31:ab:1d:ec:3e:20:24:0d:9c:ce: 7b:a3:c4:20:96:1b:64:14:36:6c:cc:d2:98:f8:35:6a:3d:f1: 8b:1b:aa:48:3f:cd:7b:ce:29:78:05:ad:0b:b9:7a:0a:21:d3: 8b:8f:ee:57:89:bf:79:cf:0b:81:d8:7a:97:bb:23:22:94:8a: b5:f5:f4:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0RkUxMTAvBgNVBAUTKDA3Q0Y4MTcwNEFEODcwMjMxRTFFRDgzN0JDM0I4MDY3 NUEwMjdDNjkwHhcNMjUwNjMwMjIxNTIxWhcNMjUwNzA3MjIxNTIxWjAYMRYwFAYD VQQDEw02ODYzMGM3YS02NmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtTxKkjt1dAtlK1jzmhLeyVakqAkWEXR2xQ59+5bAmxDwKqylB1HEkImTfwiI dEDssScEdsU3nZ+cxrk23pJXcyuf6/pjKm5PeSEN9wYjDhOi3DaRfsHM1genaWvr SAW9jS9WE/Oe7EtXvyjGAasSf65EBVM2wdM1b+7JMQnkgitjgdY1lwJgz7css1o5 0or98DapLX1Zr4AYH4vNJdt+ALkHQpKfkVx6yp0ldCCSMNe7N/DHqVKxH6+HQZeX njCFuYpAWanq6OVmIH5ldIakZhK4Qe9TeaSTdlPRNqQQk/+A3ZL+U+/3b5fAYQ5C CplP2dYdtXxQOMSq1Wpfylr53wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNki4Im/ dYT6ZTIfJbWn/3OdHOrdMB8GA1UdIwQYMBaAFAfPgXBK2HAjHh7YN7w7gGdaAnxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTRGRS9GRUREQzBDMDUx MTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWNDTWVIdGczdkR1QVoxb0Nm R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I4LUJjRXJZY0NNZUh0ZzN2RHVBWjFvQ2ZHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTRGRS9GRUREQzBDMDUxMTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWND TWVIdGczdkR1QVoxb0NmR2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyhch4+IMDh5KYnk0/50FmpYBD6RHZ6jTg9f5eDVorqVfPsEc6w6Cs p0fJfrkEuyHeT/BmGc6fkSXvt6DdrP9+xfxJsM/lrP0eSb1xyMgXo7QzxBojgTZI 8pUBiQSVwyupfwxtRnOZxtWWVMSe3QCeZnFSbspwn2ts7nUCROIBDF2nuBcf/QZW TppePFCXwllAze94EBb9BJp89v2/mHB9n2ip4i1TqcJpR9KooBadTyuLeWyK/ZIi DvYqDDGrHew+ICQNnM57o8QglhtkFDZszNKY+DVqPfGLG6pIP817zil4Ba0LuXoK IdOLj+5Xib95zwuB2HqXuyMilIq19fQo -----END CERTIFICATE-----Generated at Tue Jul 1 12:35:05 2025 by rpki-client