$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft File: erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json) Hash identifier: l1Q4/t1n3FISoH/9tROcxxsKvOi9vTXHnS/sIGv6WNA= Subject key identifier: 51:43:7D:60:E0:E5:6B:B7:25:60:16:EF:DF:F1:0C:D0:60:9A:2D:21 Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0C8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft Manifest number: 0C7D Signing time: Fri 22 Aug 2025 18:25:44 +0000 Manifest this update: Fri 22 Aug 2025 18:25:43 +0000 Manifest next update: Fri 29 Aug 2025 18:25:43 +0000 Files and hashes: 1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: EzhuIcE0XXhdpsS/LyY360u3nQGZ3pIAliBSSqG/K3A=) 2: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: Wk7XsElJ9QejMrm05qJ4YVcTMAAYD+d8lLLUdBQZCXY=) 3: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: vTFXyGHYGe6s3SqvcZNP+dIhUxLeP7oO2VI4PVLGlrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:25:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3213 (0xc8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: Aug 22 18:25:43 2025 GMT Not After : Aug 29 18:25:43 2025 GMT Subject: CN=68a8b628-be73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:82:de:f7:4e:1b:18:32:b4:64:51:2c:d6:c3: ee:cb:1c:40:dd:c7:cc:5c:3d:74:6f:31:3a:00:55: 1b:84:22:f1:3c:67:4a:33:d0:c8:4e:a3:d3:15:37: e0:6f:57:cc:b4:2e:b1:30:3c:98:a2:a7:9f:04:4f: 09:41:d2:d9:2b:98:86:44:a6:f3:ca:e6:3d:3e:0c: cb:d0:28:51:19:99:28:f4:a0:ed:61:32:7c:0a:17: fc:0e:83:0c:48:c2:95:99:9a:e4:78:a7:b0:0a:8c: cc:31:5b:ba:4e:d8:c2:dc:f6:93:73:04:45:d5:3e: d6:00:2a:89:a5:8a:91:5c:2d:59:07:30:b8:ed:93: 08:1f:eb:b9:ea:54:b7:a0:bc:2a:fd:1f:d5:de:f5: 7f:b3:2e:83:0c:0e:5e:4d:2d:5c:1d:d7:47:bd:f4: 74:44:e8:b8:67:9a:a0:b8:7f:b4:79:7e:57:7d:5e: b1:6b:cf:ac:32:a0:52:15:4d:81:41:19:b9:8d:55: c6:62:87:34:82:33:bf:eb:0f:5a:90:26:71:5f:47: c4:6d:ce:82:45:5d:04:b8:b5:18:6b:18:4c:15:f7: da:15:56:c6:90:cc:a8:f2:b2:0e:a8:bc:72:07:ea: ca:03:50:10:92:5a:05:54:d2:80:73:ac:ca:c9:d3: ea:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:43:7D:60:E0:E5:6B:B7:25:60:16:EF:DF:F1:0C:D0:60:9A:2D:21 X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:03:7f:61:d6:fe:a1:2c:c9:5d:7f:3d:66:e4:d2:3a:16:30: 87:70:55:7b:4d:5a:e3:a4:a8:05:3e:44:d1:40:f8:0b:18:68: 8f:6f:0e:27:8a:51:34:d0:fd:44:9d:b9:0d:0f:3f:fc:e7:5f: a4:ae:0c:25:5a:aa:9b:c0:29:95:00:e1:e5:77:70:26:5c:61: ff:87:96:1e:7c:bc:f3:ae:4c:0a:4f:0a:44:60:f9:46:9f:cb: f4:02:7f:5e:cb:ec:ed:51:33:a1:a9:9c:f8:d8:7b:4e:ef:cd: 7a:a5:70:ef:3f:f2:c7:a2:e3:d6:dc:f6:f8:6b:11:68:8d:f1: b6:f0:59:08:89:63:6d:1c:c3:38:26:15:3c:91:61:9e:a1:c7: 25:55:2c:51:54:7f:79:a1:14:19:bc:e2:6f:14:c6:3c:d9:ca: da:23:21:6d:3e:c7:cf:42:94:ed:32:dc:48:64:df:56:c7:df: 13:38:85:3a:6d:10:52:67:08:fe:00:5c:3e:31:29:90:04:3a: a7:df:06:0a:4d:0f:5d:69:34:02:e9:57:13:52:9e:5e:aa:32: 50:ca:01:88:28:2b:9a:f8:24:ad:12:7d:0b:98:4e:e6:44:03: e7:4e:36:33:87:af:dd:8f:36:03:84:ab:e4:db:b3:26:61:f3: 18:76:a3:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjUwODIyMTgyNTQzWhcNMjUwODI5MTgyNTQzWjAYMRYwFAYD VQQDEw02OGE4YjYyOC1iZTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm4Le904bGDK0ZFEs1sPuyxxA3cfMXD10bzE6AFUbhCLxPGdKM9DITqPTFTfg b1fMtC6xMDyYoqefBE8JQdLZK5iGRKbzyuY9PgzL0ChRGZko9KDtYTJ8Chf8DoMM SMKVmZrkeKewCozMMVu6TtjC3PaTcwRF1T7WACqJpYqRXC1ZBzC47ZMIH+u56lS3 oLwq/R/V3vV/sy6DDA5eTS1cHddHvfR0ROi4Z5qguH+0eX5XfV6xa8+sMqBSFU2B QRm5jVXGYoc0gjO/6w9akCZxX0fEbc6CRV0EuLUYaxhMFffaFVbGkMyo8rIOqLxy B+rKA1AQkloFVNKAc6zKydPq7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFDfWDg 5Wu3JWAW79/xDNBgmi0hMB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkMxRC81RENDRjcyODAyQjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9l dlFVUVpGRmdEQU9xN1NfTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdA39h1v6hLMldfz1m5NI6FjCHcFV7TVrjpKgFPkTRQPgLGGiPbw4n ilE00P1EnbkNDz/851+krgwlWqqbwCmVAOHld3AmXGH/h5YefLzzrkwKTwpEYPlG n8v0An9ey+ztUTOhqZz42HtO7816pXDvP/LHouPW3Pb4axFojfG28FkIiWNtHMM4 JhU8kWGeocclVSxRVH95oRQZvOJvFMY82craIyFtPsfPQpTtMtxIZN9Wx98TOIU6 bRBSZwj+AFw+MSmQBDqn3wYKTQ9daTQC6VcTUp5eqjJQygGIKCua+CStEn0LmE7m RAPnTjYzh6/djzYDhKvk27MmYfMYdqN9 -----END CERTIFICATE-----Generated at Sat Aug 23 16:37:46 2025 by rpki-client