$ rpki-client -vvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft File: bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft (raw, json) Hash identifier: UN+mtEcshCziKbF2b+uETS+fVmrvS4ztFhFR1NytGXQ= Subject key identifier: 91:98:E5:2A:67:B0:41:DB:D4:46:37:5D:7F:02:B1:13:C6:AF:ED:EB Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54 Certificate issuer: /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft Manifest number: D5 Signing time: Sat 05 Jul 2025 05:51:50 +0000 Manifest this update: Sat 05 Jul 2025 05:51:49 +0000 Manifest next update: Sat 12 Jul 2025 05:51:49 +0000 Files and hashes: 1: bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl (hash: 1JrNeq1ZausL4/M/SDZjRP81CLTs4xsA4GEgwMOy9ck=) 2: 8093CCBA13F611EF8ED7D71EC4F9AE02.roa (hash: J6cm0tDS7Sdy7/sJGsGgF8rSkOKz7v9OX913NFApE9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54 Validity Not Before: Jul 5 05:51:49 2025 GMT Not After : Jul 12 05:51:49 2025 GMT Subject: CN=6868bd76-1c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:27:40:8e:f3:88:c6:e4:b7:33:e8:20:cb:62: d5:62:c5:86:b3:c9:c8:6e:43:74:ef:7e:5c:89:3b: de:fd:8e:e3:f9:5a:02:57:66:b4:0b:63:8b:25:e1: 29:8e:25:06:47:92:64:7c:9f:ad:4b:3f:6e:aa:b6: 30:5c:0e:18:23:66:82:7d:45:53:32:27:fe:ca:06: d5:a7:a5:a5:15:8d:ed:e5:41:e1:10:a6:ac:b2:50: 35:4b:d9:81:fa:c1:5c:db:b7:67:6d:47:8f:80:99: 35:ac:ed:f5:24:d6:e8:d4:9f:a7:01:6c:4e:07:a0: e1:f2:cb:fd:dd:24:e9:e0:a1:d1:2c:1b:3b:1b:f3: a5:cb:77:1d:a3:d4:f0:dd:fa:d9:63:b7:0a:5a:1c: b9:b4:61:b9:0d:71:58:06:23:a5:7e:7d:6a:44:48: 52:3d:ba:99:53:67:e8:be:1a:c6:6e:09:12:e9:a3: a1:ce:29:7f:3c:83:d0:2a:37:02:4b:69:fc:bd:f9: 78:0a:4a:1d:76:ab:0f:72:49:b0:c7:aa:a2:2f:e3: b7:c4:c2:07:64:9c:f2:54:35:31:6b:20:a7:9c:48: 8e:06:e2:2b:de:c4:6d:a1:a8:da:43:30:aa:59:fb: 7a:b9:15:5a:04:56:fd:7a:2a:dc:fb:4b:ab:2a:3e: 37:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:98:E5:2A:67:B0:41:DB:D4:46:37:5D:7F:02:B1:13:C6:AF:ED:EB X509v3 Authority Key Identifier: keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:84:64:24:80:18:11:2b:c0:75:16:4e:ec:e6:c6:0f:0e:2a: 86:95:9e:a2:9e:9b:82:6f:36:e6:5a:8b:64:8b:af:ff:ea:99: 57:4d:21:ab:b2:e5:8c:12:69:da:4c:a5:bd:6f:ee:cc:22:59: 0b:02:e4:46:c1:f6:c5:b3:5b:56:5b:d9:0d:33:0e:f3:9f:37: 41:b9:48:55:90:c8:92:6c:c0:52:d2:d5:51:e9:2a:d1:b0:6c: 62:30:81:db:dc:e2:28:4f:ff:ed:60:93:df:16:a4:52:f4:63: dc:1c:62:97:c6:3d:f2:e7:f3:28:00:e8:0e:91:1b:93:86:d5: fa:50:dc:2b:5a:1a:89:f2:1c:66:23:37:2b:11:87:e3:56:05: 57:ea:6c:c0:7b:4e:fe:f2:0a:5f:24:f3:d1:9d:78:64:c8:84: 41:c6:f6:23:63:fa:7e:ba:68:99:23:8b:19:75:9f:2f:75:a1: 81:03:e5:e3:0d:ec:9a:2e:26:db:10:ac:51:2b:94:ab:9e:fc: 71:68:d6:06:e2:75:7c:30:30:9d:44:42:ae:1f:05:73:c4:51: de:2f:64:d3:4b:0a:a5:bc:72:2b:8c:3d:d8:fb:68:c4:b8:2e: c8:d4:21:d0:d2:32:9e:c0:0f:2c:bd:d9:bb:4f:f3:4c:18:ef: b0:92:5e:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI2RDIxMTAvBgNVBAUTKDZDM0I3RjFDMTMzREE5QzUxRDQ0NERBODVFNjAyQTk2 ODQ1MUZFNTQwHhcNMjUwNzA1MDU1MTQ5WhcNMjUwNzEyMDU1MTQ5WjAYMRYwFAYD VQQDEw02ODY4YmQ3Ni0xYzc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSdAjvOIxuS3M+ggy2LVYsWGs8nIbkN0735ciTve/Y7j+VoCV2a0C2OLJeEp jiUGR5JkfJ+tSz9uqrYwXA4YI2aCfUVTMif+ygbVp6WlFY3t5UHhEKasslA1S9mB +sFc27dnbUePgJk1rO31JNbo1J+nAWxOB6Dh8sv93STp4KHRLBs7G/Oly3cdo9Tw 3frZY7cKWhy5tGG5DXFYBiOlfn1qREhSPbqZU2fovhrGbgkS6aOhzil/PIPQKjcC S2n8vfl4CkoddqsPckmwx6qiL+O3xMIHZJzyVDUxayCnnEiOBuIr3sRtoajaQzCq Wft6uRVaBFb9eirc+0urKj43yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGY5Spn sEHb1EY3XX8CsRPGr+3rMB8GA1UdIwQYMBaAFGw7fxwTPanFHURNqF5gKpaEUf5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjZEMi9BRjIwODM0RTEz RjUxMUVGQTA5RDMyMUJDNEY5QUUwMi9iRHRfSEJNOXFjVWRSRTJvWG1BcWxvUlJf bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JEdF9IQk05cWNVZFJFMm9YbUFxbG9SUl9sUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjZEMi9BRjIwODM0RTEzRjUxMUVGQTA5RDMyMUJDNEY5QUUwMi9iRHRfSEJNOXFj VWRSRTJvWG1BcWxvUlJfbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGhGQkgBgRK8B1Fk7s5sYPDiqGlZ6inpuCbzbmWotki6//6plXTSGr suWMEmnaTKW9b+7MIlkLAuRGwfbFs1tWW9kNMw7znzdBuUhVkMiSbMBS0tVR6SrR sGxiMIHb3OIoT//tYJPfFqRS9GPcHGKXxj3y5/MoAOgOkRuThtX6UNwrWhqJ8hxm IzcrEYfjVgVX6mzAe07+8gpfJPPRnXhkyIRBxvYjY/p+umiZI4sZdZ8vdaGBA+Xj DeyaLibbEKxRK5SrnvxxaNYG4nV8MDCdREKuHwVzxFHeL2TTSwqlvHIrjD3Y+2jE uC7I1CHQ0jKewA8svdm7T/NMGO+wkl4i -----END CERTIFICATE-----Generated at Sat Jul 5 14:54:17 2025 by rpki-client