$ rpki-client -vvf rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft File: b-8AlyoeLPhUsuqBXRBOPG72o6g.mft (raw, json) Hash identifier: S1fY39YT7b2+g9VWJ5w7TU8QwxOpmZ01Gjtfgyzb4Sw= Subject key identifier: 1D:C1:4E:98:0D:86:22:03:73:1B:BD:DF:B7:5C:54:67:56:D3:CA:61 Authority key identifier: 6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8 Certificate issuer: /CN=A91A836A/serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8 Certificate serial: 04F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft Manifest number: 04EC Signing time: Wed 17 Sep 2025 00:06:59 +0000 Manifest this update: Wed 17 Sep 2025 00:06:58 +0000 Manifest next update: Wed 24 Sep 2025 00:06:58 +0000 Files and hashes: 1: b-8AlyoeLPhUsuqBXRBOPG72o6g.crl (hash: YRuMd8tlrPToUS5ZSR/fm+rVQYTz+f0bZWSFvRFDwe4=) 2: 8E80453E23EF11EF8A1CE76FC4F9AE02.roa (hash: FfWhc8CE7AXjM2zJsOdKxO4u+IWsNBnU54fEgTxpN1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 00:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1269 (0x4f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A836A, serialNumber=6FEF00972A1E2CF854B2EA815D104E3C6EF6A3A8 Validity Not Before: Sep 17 00:06:58 2025 GMT Not After : Sep 24 00:06:58 2025 GMT Subject: CN=68c9fba2-e4a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:dd:20:8f:83:bc:ac:72:85:ce:ac:89:b3:09: 88:4d:5c:8e:eb:36:64:e1:9a:d6:03:25:c3:00:df: ae:5d:26:67:8a:67:3a:18:ee:bf:73:fc:d6:f9:58: 98:cd:cf:e9:d0:cd:67:35:18:81:bb:4b:5a:1c:99: c1:5d:bc:4d:be:cd:25:3d:94:b2:35:30:33:ff:34: ad:aa:b9:16:16:69:76:0c:27:bb:50:e9:19:b9:4c: af:61:b0:93:41:b0:ff:47:8a:f6:23:0c:17:74:b9: c4:3c:42:0c:21:1c:df:92:8f:f9:70:09:63:b9:b0: 00:d9:63:6a:c2:1a:2b:7a:a8:58:c7:e5:77:19:02: 60:43:29:78:ce:6a:31:33:eb:ad:17:13:69:6e:94: e4:72:5c:d4:8a:05:ab:d8:32:f9:e0:4a:a0:f7:f0: 69:dc:e5:70:ea:d8:5f:01:6d:f8:3c:8b:4e:d5:26: 63:c8:32:74:30:a3:17:aa:9f:15:d3:2a:ee:d4:7d: d8:55:34:91:70:6d:9c:53:f0:5c:00:d4:c6:25:ed: ed:06:8b:b8:d4:12:f0:aa:b6:4b:66:02:d6:3e:97: 55:45:c4:26:12:98:75:e6:3b:12:14:87:1c:ab:42: a6:d1:8f:e5:fe:a0:0c:d1:60:a5:e4:14:96:64:df: 0e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C1:4E:98:0D:86:22:03:73:1B:BD:DF:B7:5C:54:67:56:D3:CA:61 X509v3 Authority Key Identifier: keyid:6F:EF:00:97:2A:1E:2C:F8:54:B2:EA:81:5D:10:4E:3C:6E:F6:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b-8AlyoeLPhUsuqBXRBOPG72o6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A836A/C1F4AB7C2F3111EC92310F4FC4F9AE02/b-8AlyoeLPhUsuqBXRBOPG72o6g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a0:28:8c:83:e8:18:74:5e:6a:90:a1:5f:b6:5a:ed:0d:36: bd:d0:4d:15:02:3f:f0:3a:3c:4a:4c:cf:6c:79:7a:e4:12:2e: 0f:0e:55:71:bd:8b:e2:ef:cf:bb:fa:2b:9e:5c:dd:5d:c8:a0: 38:a6:b0:13:00:ef:d4:4e:65:17:dc:8d:66:ee:6c:e2:1b:ab: 70:af:65:f8:2d:50:3a:e6:cd:fa:20:e2:05:f6:a2:eb:89:ad: e4:5c:f7:44:df:2a:40:70:26:d9:04:51:f1:cf:9d:04:2b:95: ac:34:04:6d:8c:6e:20:e2:ac:57:a1:2e:c6:10:f0:88:09:8c: d6:9c:f6:dc:e2:93:9f:de:4d:b0:83:17:f5:e9:24:d0:42:49: e9:c5:b6:aa:d1:a2:d2:e5:c0:7d:71:ca:dc:7c:d0:71:88:20: 93:ad:37:a9:e4:89:3a:fe:3d:9e:77:a0:8d:51:4f:ff:8f:f5: 1c:a0:83:24:bd:8d:10:ee:63:43:76:51:2c:6f:90:c4:6f:8a: 78:f3:61:d9:83:67:28:25:d3:b2:23:b9:90:e7:65:ce:bc:5c: ae:ca:33:1a:a5:e5:26:03:d5:e5:fb:8b:c3:a9:ab:51:5a:0a: 6b:20:fb:6a:96:5f:0f:28:5d:bc:b3:f2:00:d9:0e:a4:73:0d: e6:c0:f7:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgzNkExMTAvBgNVBAUTKDZGRUYwMDk3MkExRTJDRjg1NEIyRUE4MTVEMTA0RTND NkVGNkEzQTgwHhcNMjUwOTE3MDAwNjU4WhcNMjUwOTI0MDAwNjU4WjAYMRYwFAYD VQQDEw02OGM5ZmJhMi1lNGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6t0gj4O8rHKFzqyJswmITVyO6zZk4ZrWAyXDAN+uXSZnimc6GO6/c/zW+ViY zc/p0M1nNRiBu0taHJnBXbxNvs0lPZSyNTAz/zStqrkWFml2DCe7UOkZuUyvYbCT QbD/R4r2IwwXdLnEPEIMIRzfko/5cAljubAA2WNqwhoreqhYx+V3GQJgQyl4zmox M+utFxNpbpTkclzUigWr2DL54Eqg9/Bp3OVw6thfAW34PItO1SZjyDJ0MKMXqp8V 0yru1H3YVTSRcG2cU/BcANTGJe3tBou41BLwqrZLZgLWPpdVRcQmEph15jsSFIcc q0Km0Y/l/qAM0WCl5BSWZN8OiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB3BTpgN hiIDcxu937dcVGdW08phMB8GA1UdIwQYMBaAFG/vAJcqHiz4VLLqgV0QTjxu9qOo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODM2QS9DMUY0QUI3QzJG MzExMUVDOTIzMTBGNEZDNEY5QUUwMi9iLThBbHlvZUxQaFVzdXFCWFJCT1BHNzJv NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ItOEFseW9lTFBoVXN1cUJYUkJPUEc3Mm82Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODM2QS9DMUY0QUI3QzJGMzExMUVDOTIzMTBGNEZDNEY5QUUwMi9iLThBbHlvZUxQ aFVzdXFCWFJCT1BHNzJvNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBsoCiMg+gYdF5qkKFftlrtDTa90E0VAj/wOjxKTM9seXrkEi4PDlVx vYvi78+7+iueXN1dyKA4prATAO/UTmUX3I1m7mziG6twr2X4LVA65s36IOIF9qLr ia3kXPdE3ypAcCbZBFHxz50EK5WsNARtjG4g4qxXoS7GEPCICYzWnPbc4pOf3k2w gxf16STQQknpxbaq0aLS5cB9ccrcfNBxiCCTrTep5Ik6/j2ed6CNUU//j/UcoIMk vY0Q7mNDdlEsb5DEb4p482HZg2coJdOyI7mQ52XOvFyuyjMapeUmA9Xl+4vDqatR WgprIPtqll8PKF28s/IA2Q6kcw3mwPc5 -----END CERTIFICATE-----Generated at Fri Sep 19 00:38:59 2025 by rpki-client