$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft File: erBCJnIvOevQUQZFFgDAOq7S_Lk.mft (raw, json) Hash identifier: Xz3c6GCw6i5WpmLRk5pirXlq+UYJF288k31I2iQJ4pw= Subject key identifier: 2D:AB:B8:F4:31:A5:90:4E:DF:49:5E:AE:F1:09:B3:C3:06:3E:53:EE Authority key identifier: 7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 Certificate issuer: /CN=A91C6C1D/serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Certificate serial: 0C86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft Manifest number: 0C76 Signing time: Fri 08 Aug 2025 18:32:59 +0000 Manifest this update: Fri 08 Aug 2025 18:32:58 +0000 Manifest next update: Fri 15 Aug 2025 18:32:58 +0000 Files and hashes: 1: erBCJnIvOevQUQZFFgDAOq7S_Lk.crl (hash: 9odaMzpICOd69lbs3JqhkfspuzZcf8ECqwGQ48XOnAs=) 2: C1CAF6C602B311EAABAF727DC4F9AE02.roa (hash: Wk7XsElJ9QejMrm05qJ4YVcTMAAYD+d8lLLUdBQZCXY=) 3: C10D2C4002B311EAABAF727DC4F9AE02.roa (hash: vTFXyGHYGe6s3SqvcZNP+dIhUxLeP7oO2VI4PVLGlrE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3206 (0xc86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6C1D, serialNumber=7AB04226722F39EBD05106451600C03AAED2FCB9 Validity Not Before: Aug 8 18:32:58 2025 GMT Not After : Aug 15 18:32:58 2025 GMT Subject: CN=689642db-92d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f9:7c:ea:54:d6:1e:0e:75:23:fa:dd:9b:2b: e6:89:42:30:ac:39:1f:2b:74:45:98:28:25:de:94: 38:62:76:f5:c4:ca:2f:e2:6d:58:80:9a:d5:92:c3: e9:fa:83:5a:f2:b8:36:f6:80:2f:57:a3:bc:5d:dd: d4:68:9e:ac:28:59:5b:33:9b:5c:e8:8b:28:29:8d: c9:9f:ee:9e:5a:0e:de:fa:00:c5:31:e4:67:9e:61: dd:07:60:59:99:f3:45:24:28:5c:90:27:dd:1c:1a: 40:59:49:9d:1a:6b:5b:5b:06:14:f2:e1:7d:29:fb: 57:54:05:db:d5:9d:49:64:40:78:37:47:67:41:7f: c2:59:25:a8:eb:eb:d1:b3:50:6d:64:2d:b7:35:21: 17:c6:8c:09:28:9c:e8:a6:02:e0:de:90:09:19:29: 0a:5e:9d:88:08:93:e8:9c:41:0f:fc:a5:77:fe:d6: 55:69:8a:61:d4:76:1a:40:1e:38:1a:7c:75:30:4b: b2:8b:fb:06:4f:2c:df:67:06:f5:64:f4:31:aa:81: 0a:7d:2c:64:55:f0:c8:03:2c:c6:d0:98:be:96:0b: 76:69:40:b1:d6:18:12:26:af:60:6c:d1:e6:79:f5: e2:1b:1b:d9:7e:f6:0c:26:3b:da:1b:78:ed:ce:91: 47:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AB:B8:F4:31:A5:90:4E:DF:49:5E:AE:F1:09:B3:C3:06:3E:53:EE X509v3 Authority Key Identifier: keyid:7A:B0:42:26:72:2F:39:EB:D0:51:06:45:16:00:C0:3A:AE:D2:FC:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/erBCJnIvOevQUQZFFgDAOq7S_Lk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6C1D/5DCCF72802B311EA9E774B7DC4F9AE02/erBCJnIvOevQUQZFFgDAOq7S_Lk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:ad:64:cf:54:f7:b6:20:d9:f9:12:b9:d6:21:34:bb:b0:7e: 19:0a:24:18:04:2f:19:85:39:f0:49:35:f2:9e:9d:0e:c9:25: ac:21:87:1d:f4:0b:82:3e:f0:ca:05:0d:41:41:a0:7b:a0:21: 49:3d:99:2e:f2:6d:44:b3:45:f8:bb:bb:a3:fe:7b:ca:00:97: f6:e6:0d:8f:b1:eb:16:4d:07:b1:9e:63:ca:00:85:b0:af:22: a4:c4:24:63:96:30:e7:33:22:e4:45:c1:bd:03:e4:0f:d2:92: 87:de:51:3d:45:83:da:c6:0a:f7:08:19:31:f6:a4:28:9d:17: 06:cc:75:d4:8b:01:fa:18:12:c1:6a:a8:e8:1e:10:d4:3e:07: e7:a5:fb:25:ef:47:1d:94:29:be:82:e0:79:8f:60:82:f9:e8: 02:48:e3:d1:38:b4:87:11:2c:fd:99:34:2a:13:4c:dc:c3:9d: fd:67:5d:fc:15:95:20:fd:d4:8f:ea:85:ff:45:08:7e:00:82: 66:11:dd:f7:ad:98:38:78:9d:e4:01:59:a0:82:56:9c:4b:60: bb:09:c9:51:1b:2a:80:fe:01:2c:5c:3e:35:c6:36:d5:94:11: 1b:65:5e:ad:ec:aa:28:13:63:74:18:38:c4:7c:39:a1:97:64: 72:e7:52:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZDMUQxMTAvBgNVBAUTKDdBQjA0MjI2NzIyRjM5RUJEMDUxMDY0NTE2MDBDMDNB QUVEMkZDQjkwHhcNMjUwODA4MTgzMjU4WhcNMjUwODE1MTgzMjU4WjAYMRYwFAYD VQQDEw02ODk2NDJkYi05MmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAufl86lTWHg51I/rdmyvmiUIwrDkfK3RFmCgl3pQ4Ynb1xMov4m1YgJrVksPp +oNa8rg29oAvV6O8Xd3UaJ6sKFlbM5tc6IsoKY3Jn+6eWg7e+gDFMeRnnmHdB2BZ mfNFJChckCfdHBpAWUmdGmtbWwYU8uF9KftXVAXb1Z1JZEB4N0dnQX/CWSWo6+vR s1BtZC23NSEXxowJKJzopgLg3pAJGSkKXp2ICJPonEEP/KV3/tZVaYph1HYaQB44 Gnx1MEuyi/sGTyzfZwb1ZPQxqoEKfSxkVfDIAyzG0Ji+lgt2aUCx1hgSJq9gbNHm efXiGxvZfvYMJjvaG3jtzpFHMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2ruPQx pZBO30lervEJs8MGPlPuMB8GA1UdIwQYMBaAFHqwQiZyLznr0FEGRRYAwDqu0vy5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkMxRC81RENDRjcyODAy QjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9ldlFVUVpGRmdEQU9xN1Nf TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VyQkNKbkl2T2V2UVVRWkZGZ0RBT3E3U19May5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkMxRC81RENDRjcyODAyQjMxMUVBOUU3NzRCN0RDNEY5QUUwMi9lckJDSm5Jdk9l dlFVUVpGRmdEQU9xN1NfTGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4rWTPVPe2INn5ErnWITS7sH4ZCiQYBC8ZhTnwSTXynp0OySWsIYcd 9AuCPvDKBQ1BQaB7oCFJPZku8m1Es0X4u7uj/nvKAJf25g2PsesWTQexnmPKAIWw ryKkxCRjljDnMyLkRcG9A+QP0pKH3lE9RYPaxgr3CBkx9qQonRcGzHXUiwH6GBLB aqjoHhDUPgfnpfsl70cdlCm+guB5j2CC+egCSOPROLSHESz9mTQqE0zcw539Z138 FZUg/dSP6oX/RQh+AIJmEd33rZg4eJ3kAVmgglacS2C7CclRGyqA/gEsXD41xjbV lBEbZV6t7KooE2N0GDjEfDmhl2Ry51Jm -----END CERTIFICATE-----Generated at Sat Aug 9 05:37:27 2025 by rpki-client