$ rpki-client -vvf rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft File: b-8AlyoeLPhUsuqBXRBOPG72o6g.mft (raw, json) Hash identifier: 8uUjWAsmHneldQYIfNjQVGAD0wP5ImafJvwmhoCN0D4= Subject key identifier: 8E:5A:D6:E9:93:AE:ED:AF:08:CD:8E:EA:E7:DC:2E:BB:6B:E9:1D:CA Authority key identifier: 6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8 Certificate issuer: /CN=A91A836A/serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8 Certificate serial: 04D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft Manifest number: 04CD Signing time: Sat 19 Jul 2025 00:11:44 +0000 Manifest this update: Sat 19 Jul 2025 00:11:44 +0000 Manifest next update: Sat 26 Jul 2025 00:11:44 +0000 Files and hashes: 1: b-8AlyoeLPhUsuqBXRBOPG72o6g.crl (hash: AM7xmR5+SMXNQtKuQcLSDTFWu5jcbpI1yrvOqsyOnFA=) 2: 8E80453E23EF11EF8A1CE76FC4F9AE02.roa (hash: FfWhc8CE7AXjM2zJsOdKxO4u+IWsNBnU54fEgTxpN1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1238 (0x4d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A836A, serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8 Validity Not Before: Jul 19 00:11:44 2025 GMT Not After : Jul 26 00:11:44 2025 GMT Subject: CN=687ae2c0-a99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:71:5b:b9:3b:f8:5a:fb:22:d4:1e:54:82: 89:30:33:86:3f:7e:7f:07:20:a7:c8:9b:78:42:2b: 2f:a4:b3:69:3b:bb:23:e7:4b:a1:cd:07:83:84:20: 97:74:f2:d5:fc:da:80:9e:19:b4:2f:1f:38:1a:9d: e7:7a:79:52:aa:0d:c6:41:15:53:af:17:f0:8a:fb: f6:2b:6f:2c:ba:06:f5:30:13:ae:22:a7:55:9e:fb: e5:a1:bd:38:71:65:2c:20:57:3c:cb:4a:f1:dc:9f: f5:7e:c5:34:e0:2c:07:4f:fa:c2:ab:6f:c3:63:0d: ff:bb:5c:fe:61:7f:5c:48:91:cc:79:8d:8c:ae:55: 98:e6:56:49:7a:36:40:a0:b9:b8:14:df:0e:3f:73: f6:df:bf:7b:1f:1f:67:58:b3:86:98:7f:a3:62:41: c0:9b:f1:b3:6b:66:5e:58:12:6c:85:00:f0:6f:e8: dc:8c:c1:87:ec:ed:ae:56:39:58:a8:b2:6c:54:aa: 4b:ef:f1:f2:5d:5a:80:90:6a:fd:48:e7:e1:8c:6f: 59:38:5a:13:52:f9:6f:28:9a:a0:81:49:eb:fb:ac: 31:a1:7d:7b:e4:5e:ba:3c:eb:dc:78:3c:81:57:b0: 6a:e8:a4:8b:2f:42:6c:31:1c:2b:6e:94:dd:76:b6: 88:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5A:D6:E9:93:AE:ED:AF:08:CD:8E:EA:E7:DC:2E:BB:6B:E9:1D:CA X509v3 Authority Key Identifier: keyid:6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4a:32:99:a4:b9:21:4c:7d:65:c7:d4:8b:fe:7f:04:fb:2d: c4:c9:f4:a6:6d:41:6a:01:1c:30:d5:19:d4:b1:34:ca:11:e4: 26:fc:b9:e2:49:c2:8d:7d:f8:6d:93:69:ea:05:09:3f:6c:be: 67:50:6e:66:68:21:d6:05:6c:cb:b2:e7:d2:1d:fb:cd:f7:97: 1c:4d:3b:14:36:39:e7:d3:eb:5a:51:a1:3d:7c:cd:28:bb:03: 03:49:6b:5d:33:87:4e:3b:5d:0e:de:12:89:7a:2d:9e:de:8a: 40:8f:67:c8:37:7e:c9:cf:4e:34:12:95:da:36:10:61:6e:13: aa:55:14:10:fd:6d:4c:33:4a:bc:3c:ec:de:25:19:af:56:36: c7:36:a5:47:ec:06:c2:89:e2:15:44:f4:7f:43:8f:2a:65:9c: 78:6a:a5:71:90:bb:1a:6d:30:ed:3f:4b:16:93:c6:fc:9b:92: 45:46:9f:2e:0d:ce:6c:18:a8:3f:21:ac:ec:15:67:25:4d:d4: 95:8d:74:e1:40:75:64:89:33:e1:71:6b:e5:76:da:e7:2c:b2: 27:37:b5:08:57:37:3e:c9:e4:b4:b7:29:60:d7:d9:28:57:d4: ee:b9:23:92:5b:73:b6:9c:3e:d1:24:c2:86:6f:74:e9:13:bf: 61:d2:40:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzNkExMTAvBgNVBAUTKDZGRUYwMDk3MkExRTJDRjg1NEIyRUE4MTVEMTA0RTND NkVGNkEzQTgwHhcNMjUwNzE5MDAxMTQ0WhcNMjUwNzI2MDAxMTQ0WjAYMRYwFAYD VQQDEw02ODdhZTJjMC1hOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiZxW7k7+Fr7ItQeVIKJMDOGP35/ByCnyJt4QisvpLNpO7sj50uhzQeDhCCX dPLV/NqAnhm0Lx84Gp3nenlSqg3GQRVTrxfwivv2K28sugb1MBOuIqdVnvvlob04 cWUsIFc8y0rx3J/1fsU04CwHT/rCq2/DYw3/u1z+YX9cSJHMeY2MrlWY5lZJejZA oLm4FN8OP3P23797Hx9nWLOGmH+jYkHAm/Gza2ZeWBJshQDwb+jcjMGH7O2uVjlY qLJsVKpL7/HyXVqAkGr9SOfhjG9ZOFoTUvlvKJqggUnr+6wxoX175F66POvceDyB V7Bq6KSLL0JsMRwrbpTddraIoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5a1umT ru2vCM2O6ufcLrtr6R3KMB8GA1UdIwQYMBaAFG/vAJcqHiz4VLLqgV0QTjxu9qOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODM2QS9DMUY0QUI3QzJG MzExMUVDOTIzMTBGNEZDNEY5QUUwMi9iLThBbHlvZUxQaFVzdXFCWFJCT1BHNzJv NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ItOEFseW9lTFBoVXN1cUJYUkJPUEc3Mm82Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODM2QS9DMUY0QUI3QzJGMzExMUVDOTIzMTBGNEZDNEY5QUUwMi9iLThBbHlvZUxQ aFVzdXFCWFJCT1BHNzJvNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsSjKZpLkhTH1lx9SL/n8E+y3EyfSmbUFqARww1RnUsTTKEeQm/Lni ScKNffhtk2nqBQk/bL5nUG5maCHWBWzLsufSHfvN95ccTTsUNjnn0+taUaE9fM0o uwMDSWtdM4dOO10O3hKJei2e3opAj2fIN37Jz040EpXaNhBhbhOqVRQQ/W1MM0q8 POzeJRmvVjbHNqVH7AbCieIVRPR/Q48qZZx4aqVxkLsabTDtP0sWk8b8m5JFRp8u Dc5sGKg/IazsFWclTdSVjXThQHVkiTPhcWvldtrnLLInN7UIVzc+yeS0tylg19ko V9TuuSOSW3O2nD7RJMKGb3TpE79h0kCX -----END CERTIFICATE-----Generated at Sun Jul 20 16:31:52 2025 by rpki-client