$ rpki-client -vvf rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft File: B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft (raw, json) Hash identifier: vvKI/QdWBcAofFmYFYPzLcoI1QqaNPagbM5wb5dhiAA= Subject key identifier: 6B:A0:B7:B8:83:89:66:62:24:0D:C9:D6:70:57:9A:D7:9C:4A:15:C1 Authority key identifier: 07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 Certificate issuer: /CN=A91B54FE/serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Certificate serial: 073C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft Manifest number: 072C Signing time: Thu 18 Sep 2025 22:05:31 +0000 Manifest this update: Thu 18 Sep 2025 22:05:31 +0000 Manifest next update: Thu 25 Sep 2025 22:05:31 +0000 Files and hashes: 1: B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl (hash: Uk5l8uOouB50y7bjU+zA+N0fWUS+7ouPZoY1VbODiiQ=) 2: AF5A6ADAC0F411EF88E4255EC4F9AE02.roa (hash: K582nD351LCFmocRpDImIyPSP+oUj66WDs3dSAB8W+A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 22:05:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1852 (0x73c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B54FE, serialNumber=07CF81704AD870231E1ED837BC3B80675A027C69 Validity Not Before: Sep 18 22:05:31 2025 GMT Not After : Sep 25 22:05:31 2025 GMT Subject: CN=68cc822b-1a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0d:dc:7b:9d:e2:f1:3a:33:c8:c7:e6:6c:69: 25:77:65:8a:bc:5f:d4:44:82:e6:94:c5:47:67:d3: cf:20:f3:d1:6f:0d:69:9d:9e:70:92:1d:31:8c:0a: 88:fe:57:cb:5f:43:4d:78:ab:5b:7a:a8:69:2c:c3: 07:e3:88:3f:25:05:77:ca:e9:ec:25:ea:5f:5d:18: e1:be:4c:7a:76:4c:42:83:9f:5d:f7:9e:b1:d5:98: 42:1b:5b:90:71:c3:3f:80:a9:75:48:cd:1a:41:94: d0:20:3b:9b:da:94:d5:a8:71:0e:95:23:25:e8:ef: a6:16:51:85:7d:29:8c:8e:73:f7:f4:51:30:60:67: 4f:a4:6b:93:4f:bc:5e:bd:d8:84:2c:8d:1f:c0:18: 6b:c9:97:0c:15:62:5f:d0:53:1f:fd:64:68:61:68: 43:16:a7:09:cd:8f:67:59:83:f6:e6:c5:de:9d:21: 8e:5e:22:16:cf:89:1b:9c:a6:10:97:26:9e:e0:06: 2a:99:1a:88:1b:bd:6e:ae:df:60:6b:5f:c2:dd:f6: 17:e5:e6:0b:bf:67:35:5e:30:9e:04:f9:15:9b:e8: 48:36:fe:be:87:61:5a:2a:46:0d:01:31:e1:d1:d1: 3a:d5:90:63:a4:a4:c8:2f:63:de:23:ea:6a:63:25: 36:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A0:B7:B8:83:89:66:62:24:0D:C9:D6:70:57:9A:D7:9C:4A:15:C1 X509v3 Authority Key Identifier: keyid:07:CF:81:70:4A:D8:70:23:1E:1E:D8:37:BC:3B:80:67:5A:02:7C:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B8-BcErYcCMeHtg3vDuAZ1oCfGk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B54FE/FEDDC0C0511311EBAF28CA0DC4F9AE02/B8-BcErYcCMeHtg3vDuAZ1oCfGk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:f9:38:04:1f:ec:9c:18:1b:31:9f:e3:45:2b:37:e9:8a:48: 09:95:32:21:df:9f:f6:99:d7:8a:81:a5:4c:e4:46:a0:11:34: 63:a6:31:71:48:8e:af:ce:83:5f:16:80:2e:c6:de:0d:ac:a6: ea:90:28:c7:a8:9b:e9:90:49:d9:c1:01:4d:30:32:75:94:c2: 5d:52:f4:cb:50:1b:69:d4:d7:71:24:62:19:8f:56:0f:0b:ee: 6b:97:0b:a7:38:de:16:fc:a3:b5:cb:c7:4e:16:9e:32:b4:93: 7e:26:17:5f:e1:06:21:b0:60:c9:96:f1:b9:56:94:1e:c1:ca: 45:84:5c:b8:f6:e6:4e:21:b9:d3:93:ee:1f:3f:f5:46:c5:6c: c6:4c:16:84:78:90:c5:68:c5:02:1e:2e:a8:9e:86:21:96:de: 99:55:62:89:15:27:d8:c9:5d:1b:10:75:ac:e2:8d:ca:c4:d5: e1:83:66:15:ea:c0:7c:9a:b2:86:aa:c7:fb:9b:5a:96:6b:87: f8:e7:39:76:89:91:a8:fa:c2:3f:0d:cb:c0:9e:3b:a3:41:a9: 43:ac:6d:23:4c:15:75:d7:91:99:aa:f8:8b:4e:68:8f:51:f9: a7:c3:d4:32:c5:f8:ad:01:4e:9d:6a:a5:81:bb:b5:28:ac:67: f4:7e:6c:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0RkUxMTAvBgNVBAUTKDA3Q0Y4MTcwNEFEODcwMjMxRTFFRDgzN0JDM0I4MDY3 NUEwMjdDNjkwHhcNMjUwOTE4MjIwNTMxWhcNMjUwOTI1MjIwNTMxWjAYMRYwFAYD VQQDEw02OGNjODIyYi0xYTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Q3ce53i8TozyMfmbGkld2WKvF/URILmlMVHZ9PPIPPRbw1pnZ5wkh0xjAqI /lfLX0NNeKtbeqhpLMMH44g/JQV3yunsJepfXRjhvkx6dkxCg59d956x1ZhCG1uQ ccM/gKl1SM0aQZTQIDub2pTVqHEOlSMl6O+mFlGFfSmMjnP39FEwYGdPpGuTT7xe vdiELI0fwBhryZcMFWJf0FMf/WRoYWhDFqcJzY9nWYP25sXenSGOXiIWz4kbnKYQ lyae4AYqmRqIG71urt9ga1/C3fYX5eYLv2c1XjCeBPkVm+hINv6+h2FaKkYNATHh 0dE61ZBjpKTIL2PeI+pqYyU2IwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGugt7iD iWZiJA3J1nBXmtecShXBMB8GA1UdIwQYMBaAFAfPgXBK2HAjHh7YN7w7gGdaAnxp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTRGRS9GRUREQzBDMDUx MTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWNDTWVIdGczdkR1QVoxb0Nm R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I4LUJjRXJZY0NNZUh0ZzN2RHVBWjFvQ2ZHay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTRGRS9GRUREQzBDMDUxMTMxMUVCQUYyOENBMERDNEY5QUUwMi9COC1CY0VyWWND TWVIdGczdkR1QVoxb0NmR2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAX+TgEH+ycGBsxn+NFKzfpikgJlTIh35/2mdeKgaVM5EagETRjpjFx SI6vzoNfFoAuxt4NrKbqkCjHqJvpkEnZwQFNMDJ1lMJdUvTLUBtp1NdxJGIZj1YP C+5rlwunON4W/KO1y8dOFp4ytJN+Jhdf4QYhsGDJlvG5VpQewcpFhFy49uZOIbnT k+4fP/VGxWzGTBaEeJDFaMUCHi6onoYhlt6ZVWKJFSfYyV0bEHWs4o3KxNXhg2YV 6sB8mrKGqsf7m1qWa4f45zl2iZGo+sI/DcvAnjujQalDrG0jTBV115GZqviLTmiP Ufmnw9QyxfitAU6daqWBu7UorGf0fmxF -----END CERTIFICATE-----Generated at Fri Sep 19 15:11:00 2025 by rpki-client