$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft File: E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft (raw, json) Hash identifier: Qb6aetioImFV7+5t32MjsSjeDqw9V0OIpIAw1qvXiGc= Subject key identifier: C5:4C:A6:47:EC:78:26:64:70:49:55:42:D8:61:04:C1:7E:C2:1A:1F Authority key identifier: 13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 Certificate issuer: /CN=A91BA521/serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Certificate serial: 088C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft Manifest number: 0887 Signing time: Sat 02 Aug 2025 20:55:12 +0000 Manifest this update: Sat 02 Aug 2025 20:55:11 +0000 Manifest next update: Sat 09 Aug 2025 20:55:11 +0000 Files and hashes: 1: E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl (hash: ulkaXSik5pjOs4qzYso7kWSU/CqJpRqh60U6yCR5nkQ=) 2: 3046CBE2C4E811EAB607D255C4F9AE02.roa (hash: cbktrrt4RsOUs9FstYccY602a8M1M48rOaYFq7f84Xg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2188 (0x88c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA521, serialNumber=13CB99341E549792A0AC0A3662211DE17F349382 Validity Not Before: Aug 2 20:55:11 2025 GMT Not After : Aug 9 20:55:11 2025 GMT Subject: CN=688e7b30-c734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:87:d7:fb:ae:7e:ad:c4:cd:82:19:3f:c1: 6d:0c:18:aa:05:0a:b1:e4:5a:bc:1c:9f:35:dc:d9: 1c:c2:2c:5d:33:4e:0b:d2:40:ab:fc:24:dd:41:02: 49:01:58:1a:00:b9:30:5d:bc:2e:e9:2d:ee:82:dd: 68:c9:b5:64:d3:18:3c:f5:f1:55:97:1f:28:4c:c4: 60:95:3d:87:18:ed:b8:dc:f7:ca:05:94:24:01:57: 40:13:5f:c5:2e:eb:be:4c:09:42:cb:59:be:9f:e9: 9a:e8:a1:46:3f:77:e7:92:9b:2e:d6:ef:cf:82:fe: 82:df:0e:e0:a0:f1:5e:23:42:53:59:82:ce:84:26: c1:b9:21:2d:cd:e4:72:6b:f9:c2:38:c6:31:65:61: 88:0f:e7:2b:cf:05:06:70:44:fa:21:41:93:97:7b: 00:61:39:2b:c4:8a:c1:c2:fe:44:3e:a9:1f:df:b3: e4:6f:51:99:e0:b8:4d:bb:1a:d1:55:26:c0:05:59: 9b:04:51:d3:bb:9f:89:3f:04:f1:81:7c:b3:c7:81: 1f:c1:45:60:18:c7:dd:38:56:83:b7:29:9f:dd:cf: 92:e8:27:78:ad:0d:58:60:ea:bc:61:d5:66:42:ec: d7:45:ac:29:97:f1:bc:b6:29:5d:b1:57:12:8c:60: 85:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4C:A6:47:EC:78:26:64:70:49:55:42:D8:61:04:C1:7E:C2:1A:1F X509v3 Authority Key Identifier: keyid:13:CB:99:34:1E:54:97:92:A0:AC:0A:36:62:21:1D:E1:7F:34:93:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E8uZNB5Ul5KgrAo2YiEd4X80k4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA521/C9FAE7CAC4E611EAA6454F54C4F9AE02/E8uZNB5Ul5KgrAo2YiEd4X80k4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:c9:76:d3:0f:61:29:39:a9:59:37:bb:56:8a:f3:c1:b4:99: fa:57:d7:19:72:73:63:b3:4a:ea:e1:7a:d3:6b:d2:5f:1c:ce: 1d:06:58:1f:78:73:d5:97:4d:4a:4d:67:ae:76:4f:2e:8a:80: 78:92:7a:17:33:77:58:7b:0a:73:58:91:09:51:3e:69:b4:8e: 0a:27:3c:53:8e:d3:b3:17:12:2b:e2:7d:9e:6e:ab:be:e6:6d: 29:52:58:00:0f:20:14:1f:e8:82:88:56:fa:3a:c8:18:48:02: 6e:d2:49:5b:7b:63:91:a3:0d:fb:75:32:b4:78:5c:f8:c3:2d: fb:9d:cf:fb:3e:bd:cf:54:51:17:64:cc:05:45:d5:ba:58:96: 97:11:c2:4a:23:f8:20:c2:cf:b7:30:d7:fa:30:9a:e9:07:7a: b4:74:b8:a1:57:b6:9f:16:ed:6d:b1:cd:a0:32:08:45:c9:0c: 45:02:aa:85:cd:83:5a:31:15:84:45:1f:9c:14:15:8c:30:22: b9:3d:a9:72:81:44:8d:c2:0a:01:f5:0a:b9:3b:bb:03:58:da: 88:22:2f:d0:2a:7f:6b:e5:fe:d7:91:04:fb:3f:bd:8f:45:74: 76:b2:1a:51:c5:8c:e2:63:62:5f:a3:5a:74:0a:1e:46:ab:77: f2:60:39:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE1MjExMTAvBgNVBAUTKDEzQ0I5OTM0MUU1NDk3OTJBMEFDMEEzNjYyMjExREUx N0YzNDkzODIwHhcNMjUwODAyMjA1NTExWhcNMjUwODA5MjA1NTExWjAYMRYwFAYD VQQDEw02ODhlN2IzMC1jNzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxXWH1/uufq3EzYIZP8FtDBiqBQqx5Fq8HJ813NkcwixdM04L0kCr/CTdQQJJ AVgaALkwXbwu6S3ugt1oybVk0xg89fFVlx8oTMRglT2HGO243PfKBZQkAVdAE1/F Luu+TAlCy1m+n+ma6KFGP3fnkpsu1u/Pgv6C3w7goPFeI0JTWYLOhCbBuSEtzeRy a/nCOMYxZWGID+crzwUGcET6IUGTl3sAYTkrxIrBwv5EPqkf37Pkb1GZ4LhNuxrR VSbABVmbBFHTu5+JPwTxgXyzx4EfwUVgGMfdOFaDtymf3c+S6Cd4rQ1YYOq8YdVm QuzXRawpl/G8tildsVcSjGCFCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVMpkfs eCZkcElVQthhBMF+whofMB8GA1UdIwQYMBaAFBPLmTQeVJeSoKwKNmIhHeF/NJOC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTUyMS9DOUZBRTdDQUM0 RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1S2dyQW8yWWlFZDRYODBr NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0U4dVpOQjVVbDVLZ3JBbzJZaUVkNFg4MGs0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTUyMS9DOUZBRTdDQUM0RTYxMUVBQTY0NTRGNTRDNEY5QUUwMi9FOHVaTkI1VWw1 S2dyQW8yWWlFZDRYODBrNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAIyXbTD2EpOalZN7tWivPBtJn6V9cZcnNjs0rq4XrTa9JfHM4dBlgf eHPVl01KTWeudk8uioB4knoXM3dYewpzWJEJUT5ptI4KJzxTjtOzFxIr4n2ebqu+ 5m0pUlgADyAUH+iCiFb6OsgYSAJu0klbe2ORow37dTK0eFz4wy37nc/7Pr3PVFEX ZMwFRdW6WJaXEcJKI/ggws+3MNf6MJrpB3q0dLihV7afFu1tsc2gMghFyQxFAqqF zYNaMRWERR+cFBWMMCK5PalygUSNwgoB9Qq5O7sDWNqIIi/QKn9r5f7XkQT7P72P RXR2shpRxYziY2Jfo1p0Ch5Gq3fyYDlz -----END CERTIFICATE-----Generated at Mon Aug 4 11:27:13 2025 by rpki-client