$ rpki-client -vvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft File: B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft (raw, json) Hash identifier: EwcKFEPCNng0Ct63LT8qfIHEFSemCjOZLFlp5UwVfXc= Subject key identifier: 4D:3B:39:02:8E:38:79:C8:87:30:CC:AB:B7:CB:CD:65:13:B4:6C:51 Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 Certificate issuer: /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Certificate serial: 072E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft Manifest number: 071E Signing time: Fri 22 Aug 2025 22:01:15 +0000 Manifest this update: Fri 22 Aug 2025 22:01:15 +0000 Manifest next update: Fri 29 Aug 2025 22:01:15 +0000 Files and hashes: 1: B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl (hash: FnweV5B/T0br35nsQkQlS1KI2UM3Gf+qnZ0lg3pBSUM=) 2: AF5A6ADAC0F411EF88E4255EC4F9AE02.roa (hash: K582nD351LCFmocRpDImIyPSP+oUj66WDs3dSAB8W+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1838 (0x72e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B54FE, serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Validity Not Before: Aug 22 22:01:15 2025 GMT Not After : Aug 29 22:01:15 2025 GMT Subject: CN=68a8e8ab-7439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:85:e7:d9:5d:c7:75:fd:ae:a7:5e:2a:52:20: b4:b9:7d:86:d2:57:de:4e:06:fa:fc:f8:db:b5:46: e0:73:bd:6e:ab:2d:ff:cf:27:59:e2:8b:39:2b:ea: 7b:1b:65:de:87:17:70:d8:f5:f6:31:a2:62:5b:ef: 34:ac:90:ae:8f:15:e5:1f:36:ce:83:35:71:53:04: 2e:31:00:7a:cf:5d:94:c9:5f:3f:f5:68:ca:7a:1d: 31:6e:3f:0a:4c:62:d9:3e:73:5f:69:60:2d:1d:77: 6d:c2:db:91:28:6c:fe:3c:ae:07:12:da:00:5e:e7: 7c:d4:2e:7e:0d:56:30:9e:96:29:34:2a:d5:90:c2: 7b:de:62:0c:b0:7f:1d:6a:66:3f:4e:aa:4d:32:ca: 98:9f:53:4e:2f:f9:5a:fc:5c:02:eb:0e:a4:20:5d: a5:2a:56:87:9f:cf:7f:f7:98:39:5f:05:aa:36:ee: b7:c1:64:c0:1c:14:25:61:c7:32:71:be:65:0b:c2: 3b:1f:57:af:1c:3b:fd:a8:92:b1:68:a9:89:77:9a: fe:c1:91:5f:c5:78:b5:8b:bb:60:b7:0d:13:cd:02: aa:c9:66:da:b4:2c:e4:f8:53:63:7c:8d:f6:c7:70: 52:31:6e:e0:a5:cc:3e:6f:23:a4:92:6b:9d:77:3d: 79:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:3B:39:02:8E:38:79:C8:87:30:CC:AB:B7:CB:CD:65:13:B4:6C:51 X509v3 Authority Key Identifier: keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:70:6a:5c:35:c3:42:3e:36:1a:e5:77:51:ff:30:09:84:dd: 3a:9c:cf:9d:28:b5:b6:da:d1:40:8b:60:6c:8c:1d:73:51:5b: fa:fc:22:e1:53:78:d9:98:db:cc:7f:83:d0:87:41:17:8c:0c: f0:10:59:99:14:58:63:b4:c7:01:94:0c:6b:87:17:91:0f:78: 90:b0:0d:99:93:37:f4:04:ca:68:e1:82:2c:8e:59:68:da:47: 9f:e9:7b:b0:c9:17:b5:2d:82:3f:0a:9a:8b:1c:0c:36:ff:20: 63:9f:1f:31:b7:a6:a0:db:82:4c:1d:3b:9d:16:b6:1f:f8:7f: ff:e5:b9:ee:c9:8c:63:5f:df:e2:5d:09:85:08:ec:38:01:2a: 3a:b2:16:00:be:08:33:7b:c3:9a:74:9b:6f:23:2c:36:67:02: 63:af:e6:f7:f9:58:67:80:e8:b7:c7:30:f8:c7:80:e2:b5:00: f9:50:0c:cb:91:45:66:34:68:20:49:aa:3d:2b:a3:25:05:37: 7e:e4:71:6e:f4:32:f2:22:b7:da:2a:a3:dc:0c:9c:1b:ab:b5: 67:42:2c:7c:ae:57:a6:3b:81:e2:73:3d:21:7f:22:8e:29:97: cf:bb:24:8b:a6:6a:b8:9d:aa:c8:a2:d8:b4:04:78:c7:52:e9: e9:d1:03:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBy4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0RkUxMTAvBgNVBAUTKDA3Q0Y4MTcwNEFEODcwMjMxRTFFRDgzN0JDM0I4MDY3 NUEwMjdDNjkwHhcNMjUwODIyMjIwMTE1WhcNMjUwODI5MjIwMTE1WjAYMRYwFAYD VQQDEw02OGE4ZThhYi03NDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq4Xn2V3Hdf2up14qUiC0uX2G0lfeTgb6/PjbtUbgc71uqy3/zydZ4os5K+p7 G2Xehxdw2PX2MaJiW+80rJCujxXlHzbOgzVxUwQuMQB6z12UyV8/9WjKeh0xbj8K TGLZPnNfaWAtHXdtwtuRKGz+PK4HEtoAXud81C5+DVYwnpYpNCrVkMJ73mIMsH8d amY/TqpNMsqYn1NOL/la/FwC6w6kIF2lKlaHn89/95g5XwWqNu63wWTAHBQlYccy cb5lC8I7H1evHDv9qJKxaKmJd5r+wZFfxXi1i7tgtw0TzQKqyWbatCzk+FNjfI32 x3BSMW7gpcw+byOkkmuddz15ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE07OQKO OHnIhzDMq7fLzWUTtGxRMB8GA1UdIwQYMBaAFAfPgXBK2HAjHh7YN7w7gGdaAnxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTRGRS9GRUREQzBDMDUx MTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWNDTWVIdGczdkR1QVoxb0Nm R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I4LUJjRXJZY0NNZUh0ZzN2RHVBWjFvQ2ZHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTRGRS9GRUREQzBDMDUxMTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWND TWVIdGczdkR1QVoxb0NmR2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdcGpcNcNCPjYa5XdR/zAJhN06nM+dKLW22tFAi2BsjB1zUVv6/CLh U3jZmNvMf4PQh0EXjAzwEFmZFFhjtMcBlAxrhxeRD3iQsA2Zkzf0BMpo4YIsjllo 2kef6XuwyRe1LYI/CpqLHAw2/yBjnx8xt6ag24JMHTudFrYf+H//5bnuyYxjX9/i XQmFCOw4ASo6shYAvggze8OadJtvIyw2ZwJjr+b3+VhngOi3xzD4x4DitQD5UAzL kUVmNGggSao9K6MlBTd+5HFu9DLyIrfaKqPcDJwbq7VnQix8rlemO4Hicz0hfyKO KZfPuySLpmq4narIoti0BHjHUunp0QMk -----END CERTIFICATE-----Generated at Sat Aug 23 20:12:28 2025 by rpki-client