$ rpki-client -vvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft File: B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft (raw, json) Hash identifier: eMlR3IVVr1dP/xZJwGqL7DSBtutiYqSgCtnqxExCP+w= Subject key identifier: BA:84:25:DA:6F:2B:74:93:2E:85:74:19:D2:02:57:1C:7A:66:09:2C Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 Certificate issuer: /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Certificate serial: 0726 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft Manifest number: 0716 Signing time: Wed 06 Aug 2025 22:14:59 +0000 Manifest this update: Wed 06 Aug 2025 22:14:59 +0000 Manifest next update: Wed 13 Aug 2025 22:14:59 +0000 Files and hashes: 1: B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl (hash: bknhApzmEgFbhzGlRK8EkWybJ4Hqfh4QNKQ5qypXAYE=) 2: AF5A6ADAC0F411EF88E4255EC4F9AE02.roa (hash: K582nD351LCFmocRpDImIyPSP+oUj66WDs3dSAB8W+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 22:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1830 (0x726) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B54FE, serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Validity Not Before: Aug 6 22:14:59 2025 GMT Not After : Aug 13 22:14:59 2025 GMT Subject: CN=6893d3e3-7fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:79:8c:28:a1:f1:ff:89:e0:fe:9d:51:44:84: af:b1:3f:5e:af:b9:67:27:79:b3:67:fb:fa:74:8f: 69:e6:37:46:f9:18:39:28:30:1f:be:c8:44:57:eb: ee:24:ec:cd:d6:29:fa:8b:f2:e1:da:28:a7:c0:f2: 4f:ef:83:ae:e7:9f:b4:55:77:0f:20:33:fb:61:2d: 37:13:4e:41:77:29:14:8b:b6:19:cf:2d:90:3f:47: b5:0b:2c:2d:51:15:ca:0e:4a:7f:f5:1c:76:74:23: c4:cb:fe:0e:cb:d9:69:9e:ee:54:a2:32:fb:11:1c: 8c:5b:f4:cb:cb:aa:39:43:ad:53:4e:d8:00:2d:2a: 26:75:5f:86:98:44:fe:fc:06:f3:ed:e2:de:33:6e: 56:03:50:fe:d8:43:de:7f:1f:b0:16:8e:60:71:98: 5e:dd:9c:fd:b5:b2:ef:43:ff:89:bd:c8:37:0d:90: 07:ce:6b:43:fe:46:9b:0a:81:cf:c4:8e:54:ce:15: 32:67:1d:50:fd:cb:40:14:a3:a5:bd:05:f0:a2:35: 77:d3:ba:f2:61:6a:fe:40:5b:a1:8a:15:62:62:d7: 81:7e:da:14:a2:d3:17:18:6b:fa:12:d3:cf:22:a7: e5:3b:ca:95:aa:2f:11:15:4b:27:f2:65:0c:8b:fe: ce:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:84:25:DA:6F:2B:74:93:2E:85:74:19:D2:02:57:1C:7A:66:09:2C X509v3 Authority Key Identifier: keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a6:7d:aa:b7:2a:c1:41:10:92:b5:af:d1:f6:4b:4d:8c:45: 01:b9:2d:1f:33:7f:ff:fb:97:a0:b2:e7:bf:da:b7:bd:b0:8e: 59:e4:b1:83:cd:f3:a5:f5:ea:cd:8a:23:3d:b0:44:a1:7a:2d: bb:8d:fc:ab:f0:15:b6:2a:29:c2:58:a2:e7:f9:35:bb:f7:08: 9e:bf:66:db:54:47:5a:dd:f6:6b:15:d1:8e:b8:5b:f9:4b:5f: 5d:ee:b8:50:63:17:3e:19:96:e9:88:4c:79:f0:59:3b:d8:a3: 06:c5:f9:53:7e:2b:3d:a8:c4:9d:83:cb:18:ca:a2:8e:61:ff: 04:ea:a3:0b:88:62:64:a2:fd:c8:66:4c:73:b5:ab:b9:89:5d: eb:9c:80:ae:53:fe:7e:cb:e2:af:20:e1:c5:03:83:d0:30:af: 98:40:f1:bc:3e:9c:d5:0d:6b:26:f1:57:66:8d:83:35:17:9f: d0:cc:50:09:82:ca:45:82:49:92:df:9e:04:25:1e:ad:2e:64: c7:f1:47:96:93:c5:2f:e4:47:92:9b:19:8b:76:a0:72:3a:49: 51:07:99:a3:d3:d1:fd:f9:d0:bf:5c:28:25:62:5c:63:9a:bb: 72:b4:26:ad:8e:7c:47:e2:e0:cf:29:c9:50:fb:b2:ec:ca:32: 24:4c:02:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICByYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0RkUxMTAvBgNVBAUTKDA3Q0Y4MTcwNEFEODcwMjMxRTFFRDgzN0JDM0I4MDY3 NUEwMjdDNjkwHhcNMjUwODA2MjIxNDU5WhcNMjUwODEzMjIxNDU5WjAYMRYwFAYD VQQDEw02ODkzZDNlMy03ZmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHmMKKHx/4ng/p1RRISvsT9er7lnJ3mzZ/v6dI9p5jdG+Rg5KDAfvshEV+vu JOzN1in6i/Lh2iinwPJP74Ou55+0VXcPIDP7YS03E05BdykUi7YZzy2QP0e1Cywt URXKDkp/9Rx2dCPEy/4Oy9lpnu5UojL7ERyMW/TLy6o5Q61TTtgALSomdV+GmET+ /Abz7eLeM25WA1D+2EPefx+wFo5gcZhe3Zz9tbLvQ/+Jvcg3DZAHzmtD/kabCoHP xI5UzhUyZx1Q/ctAFKOlvQXwojV307ryYWr+QFuhihViYteBftoUotMXGGv6EtPP IqflO8qVqi8RFUsn8mUMi/7OEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqEJdpv K3STLoV0GdICVxx6ZgksMB8GA1UdIwQYMBaAFAfPgXBK2HAjHh7YN7w7gGdaAnxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTRGRS9GRUREQzBDMDUx MTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWNDTWVIdGczdkR1QVoxb0Nm R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I4LUJjRXJZY0NNZUh0ZzN2RHVBWjFvQ2ZHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTRGRS9GRUREQzBDMDUxMTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWND TWVIdGczdkR1QVoxb0NmR2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNpn2qtyrBQRCSta/R9ktNjEUBuS0fM3//+5egsue/2re9sI5Z5LGD zfOl9erNiiM9sEShei27jfyr8BW2KinCWKLn+TW79wiev2bbVEda3fZrFdGOuFv5 S19d7rhQYxc+GZbpiEx58Fk72KMGxflTfis9qMSdg8sYyqKOYf8E6qMLiGJkov3I Zkxztau5iV3rnICuU/5+y+KvIOHFA4PQMK+YQPG8PpzVDWsm8VdmjYM1F5/QzFAJ gspFgkmS354EJR6tLmTH8UeWk8Uv5EeSmxmLdqByOklRB5mj09H9+dC/XCglYlxj mrtytCatjnxH4uDPKclQ+7LsyjIkTAKO -----END CERTIFICATE-----Generated at Thu Aug 7 02:01:32 2025 by rpki-client