$ rpki-client -vvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft File: B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft (raw, json) Hash identifier: Wpm8eLOLSA1irAHyJltbDTkGwxzerkA/gxn1cPSdiq8= Subject key identifier: 89:A1:15:2C:C5:04:40:48:1A:98:C2:69:67:DD:F0:D1:36:2C:D2:59 Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 Certificate issuer: /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Certificate serial: 0752 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft Manifest number: 0742 Signing time: Sun 02 Nov 2025 21:44:34 +0000 Manifest this update: Sun 02 Nov 2025 21:44:34 +0000 Manifest next update: Sun 09 Nov 2025 21:44:34 +0000 Files and hashes: 1: B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl (hash: gG9GbryjiHrbDQWITS1E5CHJWvsAufBIUA/NoacmMDg=) 2: AF5A6ADAC0F411EF88E4255EC4F9AE02.roa (hash: K582nD351LCFmocRpDImIyPSP+oUj66WDs3dSAB8W+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:44:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1874 (0x752) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B54FE, serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Validity Not Before: Nov 2 21:44:34 2025 GMT Not After : Nov 9 21:44:34 2025 GMT Subject: CN=6907d0c2-b8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:75:e2:b3:7e:2d:17:16:1f:a5:55:d2:9c:1e: 0c:ed:1a:ea:42:ea:45:6a:9b:f4:dd:b6:31:3b:82: d6:db:17:50:e4:45:eb:ac:11:24:de:a3:c9:be:91: 73:ad:e4:df:c0:79:1f:9f:53:39:80:ee:cf:3e:07: 26:68:cb:57:b1:f4:09:e6:1d:d8:60:ba:03:ce:10: d5:4d:ff:c8:4c:a9:34:8b:ec:7b:93:52:b4:62:99: e8:7f:47:74:44:2a:5b:c6:4e:32:4e:b5:d1:67:8e: 03:09:04:06:49:6c:3a:50:3d:9c:3d:98:d7:6f:47: 89:bf:b3:bd:17:d8:32:61:62:84:9a:ca:1a:ac:cd: ef:f8:03:62:98:fb:67:98:c0:2e:33:aa:20:4e:62: 6d:56:05:e9:6f:3e:97:3e:af:9d:61:22:fb:7a:61: e9:b2:71:d6:8f:40:b4:2d:66:b6:0d:14:0b:5d:a7: f0:b6:9c:56:3d:b3:05:9c:13:7b:d8:26:f8:ac:f0: 76:9f:ee:49:fd:61:e8:5d:f4:41:83:10:9c:f3:fb: ff:e4:19:c9:b1:fd:bd:f9:ed:e0:33:d6:f8:ee:75: 1c:99:84:87:0b:fa:97:48:0c:e6:7c:36:a4:f7:31: 1b:c7:df:c8:ef:f9:c2:0d:a9:8b:d9:3f:94:28:c8: 4a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A1:15:2C:C5:04:40:48:1A:98:C2:69:67:DD:F0:D1:36:2C:D2:59 X509v3 Authority Key Identifier: keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:f6:a0:43:c9:9e:6f:14:80:0e:f4:af:9e:12:85:8a:b7:6c: c6:b6:7a:5b:14:42:08:cb:22:df:58:11:f6:aa:ad:66:53:87: 8c:fe:f6:42:c4:35:48:97:fe:b0:f2:48:60:2f:c0:dc:35:48: ca:e1:5d:d0:bc:43:0a:9c:e1:39:57:4e:b6:96:fe:47:2a:3c: 53:c7:c6:60:bc:77:09:e7:8a:ca:b7:2c:4d:01:38:03:86:39: ef:06:78:f0:f5:6f:c8:23:c7:4c:d8:03:a0:f3:5c:aa:ad:6f: 6c:04:bb:84:18:07:59:dd:16:3e:3d:6f:2b:d0:d7:db:66:7f: 27:40:2d:0d:33:89:93:6d:f3:4e:5d:cb:d6:94:af:33:d3:7e: 33:d6:53:73:05:6f:51:7a:0f:80:a1:9f:7b:25:af:bb:32:25: 32:d7:40:42:2e:c1:ed:2e:61:89:b2:96:92:0d:6c:67:fd:ea: b8:f3:a3:14:78:00:50:7e:27:cb:d2:69:b3:fd:c6:37:f8:cf: 13:22:36:3a:cb:df:55:e6:7f:3e:89:92:fc:b7:8c:4b:db:96: f7:43:19:3a:12:91:04:4d:76:ed:ed:3e:fe:0a:56:20:2b:be: 32:2f:f2:34:04:8c:26:f8:9a:0a:ee:27:87:a8:c6:9c:65:82: 87:a6:67:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0RkUxMTAvBgNVBAUTKDA3Q0Y4MTcwNEFEODcwMjMxRTFFRDgzN0JDM0I4MDY3 NUEwMjdDNjkwHhcNMjUxMTAyMjE0NDM0WhcNMjUxMTA5MjE0NDM0WjAYMRYwFAYD VQQDEw02OTA3ZDBjMi1iOGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHXis34tFxYfpVXSnB4M7RrqQupFapv03bYxO4LW2xdQ5EXrrBEk3qPJvpFz reTfwHkfn1M5gO7PPgcmaMtXsfQJ5h3YYLoDzhDVTf/ITKk0i+x7k1K0Ypnof0d0 RCpbxk4yTrXRZ44DCQQGSWw6UD2cPZjXb0eJv7O9F9gyYWKEmsoarM3v+ANimPtn mMAuM6ogTmJtVgXpbz6XPq+dYSL7emHpsnHWj0C0LWa2DRQLXafwtpxWPbMFnBN7 2Cb4rPB2n+5J/WHoXfRBgxCc8/v/5BnJsf29+e3gM9b47nUcmYSHC/qXSAzmfDak 9zEbx9/I7/nCDamL2T+UKMhKJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImhFSzF BEBIGpjCaWfd8NE2LNJZMB8GA1UdIwQYMBaAFAfPgXBK2HAjHh7YN7w7gGdaAnxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTRGRS9GRUREQzBDMDUx MTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWNDTWVIdGczdkR1QVoxb0Nm R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I4LUJjRXJZY0NNZUh0ZzN2RHVBWjFvQ2ZHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTRGRS9GRUREQzBDMDUxMTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWND TWVIdGczdkR1QVoxb0NmR2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDA9qBDyZ5vFIAO9K+eEoWKt2zGtnpbFEIIyyLfWBH2qq1mU4eM/vZC xDVIl/6w8khgL8DcNUjK4V3QvEMKnOE5V062lv5HKjxTx8ZgvHcJ54rKtyxNATgD hjnvBnjw9W/II8dM2AOg81yqrW9sBLuEGAdZ3RY+PW8r0NfbZn8nQC0NM4mTbfNO XcvWlK8z034z1lNzBW9Reg+AoZ97Ja+7MiUy10BCLsHtLmGJspaSDWxn/eq486MU eABQfifL0mmz/cY3+M8TIjY6y99V5n8+iZL8t4xL25b3Qxk6EpEETXbt7T7+ClYg K74yL/I0BIwm+JoK7ieHqMacZYKHpmeU -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:01 2025 by rpki-client