$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft File: bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft (raw, json) Hash identifier: 5gvQyR+/gZBdcGLS5ixK2UpBbcsYqBTzQwRPjFHlH68= Subject key identifier: B7:A5:DB:50:5A:D1:74:7A:D3:E7:DE:95:FA:57:6E:08:CC:AA:63:B9 Authority key identifier: 6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05 Certificate issuer: /CN=A91881D9/serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505 Certificate serial: 1825 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft Manifest number: 181C Signing time: Wed 02 Jul 2025 16:39:08 +0000 Manifest this update: Wed 02 Jul 2025 16:39:07 +0000 Manifest next update: Wed 09 Jul 2025 16:39:07 +0000 Files and hashes: 1: bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl (hash: 1Vt2R0vTw49vP7Xdf9FB/1BBiIz3+PQCyU3OPho5gWY=) 2: 870C2B58B47811E788EC7E65C4F9AE02.roa (hash: IgkWueiZzDaSaqXsqac+/PyEgRdDcfnQbUbjQVGTTtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 16:39:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6181 (0x1825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D9, serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505 Validity Not Before: Jul 2 16:39:07 2025 GMT Not After : Jul 9 16:39:07 2025 GMT Subject: CN=686560ac-bd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d0:54:50:5c:ed:d3:4c:4b:ec:3c:c1:23:d0: dc:9c:8c:2c:44:0d:a2:10:df:e1:22:11:0f:8d:63: 77:33:f4:05:85:e4:37:45:9b:a4:c7:b4:e0:1d:d0: de:de:9a:e8:44:ae:ee:c5:27:e4:6a:74:21:2e:f8: 43:53:36:07:5f:49:db:49:3c:90:25:f3:c5:8e:da: 42:51:01:51:e0:f6:07:75:07:52:6c:d6:1d:59:18: 1d:bc:cc:97:4b:f1:10:af:22:6b:38:39:7d:a7:c3: fa:55:80:1f:4e:3e:61:c7:1c:73:e3:11:57:ac:92: 9a:5e:af:57:2a:5c:d8:53:44:2e:0e:fa:5c:d1:06: 55:af:d1:a8:95:52:05:56:46:30:49:89:eb:67:fd: aa:5d:8a:11:68:69:76:bc:93:35:25:2f:71:50:95: 71:bd:8d:a6:bf:b1:88:f0:7c:0e:d1:64:85:26:1d: 94:15:a5:84:1e:09:44:62:6d:3e:75:19:a7:91:4b: 15:3b:b2:78:6e:bb:c7:19:56:8f:a7:bb:29:3f:39: 69:98:28:ed:7f:a3:77:68:17:bf:53:d6:26:c5:f4: 5a:0d:3b:9c:e2:3c:6a:54:e2:cc:2a:b3:47:71:67: f9:54:56:18:6a:5c:84:ff:5a:ae:bb:5f:68:6a:fc: 1e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A5:DB:50:5A:D1:74:7A:D3:E7:DE:95:FA:57:6E:08:CC:AA:63:B9 X509v3 Authority Key Identifier: keyid:6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:4a:c2:5b:39:86:0c:05:aa:df:be:4d:e3:9f:26:39:67:83: 3e:72:e3:72:d3:f4:b7:c1:c5:ab:bd:04:f0:0a:f0:a4:af:00: c8:87:a8:e4:43:9a:89:04:0a:61:74:81:25:d7:81:dc:8e:82: 4f:58:aa:de:47:36:1d:da:62:38:39:3e:1c:2b:22:6f:0d:7f: 17:52:1b:d2:53:fc:f5:8d:1f:20:df:9e:59:32:85:46:11:4f: e8:af:b8:fb:c3:fd:9e:51:99:fe:a1:a6:fa:6b:68:a9:28:06: b5:b4:31:77:7b:77:26:2f:4b:f0:0f:f2:20:9f:fd:8b:05:28: 47:e7:9c:a9:1e:96:a5:b8:64:5d:40:0c:f2:22:45:de:4c:7e: 48:93:6f:de:38:f5:7c:dc:db:6c:e6:e0:b4:87:a1:b0:4a:d2: 95:30:3f:f7:ce:56:66:72:2d:b8:3b:89:32:47:e7:1d:ea:da: 12:69:55:43:96:ec:1d:d2:18:fd:c6:fd:25:f7:9e:05:ad:7b: 0a:41:b4:62:c9:05:07:8a:b3:7f:b1:36:ab:72:06:33:70:a6: d2:0b:59:7e:69:a8:fd:3c:81:54:53:7e:76:6a:f6:1c:48:7f: ab:b9:b2:9a:52:38:2e:e7:93:83:19:40:b5:11:11:1c:32:0e: e2:74:12:e3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgxRDkxMTAvBgNVBAUTKDZDMUI2MzhFQTlEN0M2Q0UwMjNDQjVFNTdFM0NBRTE2 QTExQjQ1MDUwHhcNMjUwNzAyMTYzOTA3WhcNMjUwNzA5MTYzOTA3WjAYMRYwFAYD VQQDEw02ODY1NjBhYy1iZDM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNBUUFzt00xL7DzBI9DcnIwsRA2iEN/hIhEPjWN3M/QFheQ3RZukx7TgHdDe 3proRK7uxSfkanQhLvhDUzYHX0nbSTyQJfPFjtpCUQFR4PYHdQdSbNYdWRgdvMyX S/EQryJrODl9p8P6VYAfTj5hxxxz4xFXrJKaXq9XKlzYU0QuDvpc0QZVr9GolVIF VkYwSYnrZ/2qXYoRaGl2vJM1JS9xUJVxvY2mv7GI8HwO0WSFJh2UFaWEHglEYm0+ dRmnkUsVO7J4brvHGVaPp7spPzlpmCjtf6N3aBe/U9YmxfRaDTuc4jxqVOLMKrNH cWf5VFYYalyE/1quu19oavwegwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLel21Ba 0XR60+felfpXbgjMqmO5MB8GA1UdIwQYMBaAFGwbY46p18bOAjy15X48rhahG0UF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODFEOS9EODlCQjMwRUI0 NzcxMUU3QUQ1NEI2NjRDNEY5QUUwMi9iQnRqanFuWHhzNENQTFhsZmp5dUZxRWJS UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCdGpqcW5YeHM0Q1BMWGxmanl1RnFFYlJRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODFEOS9EODlCQjMwRUI0NzcxMUU3QUQ1NEI2NjRDNEY5QUUwMi9iQnRqanFuWHhz NENQTFhsZmp5dUZxRWJSUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnSsJbOYYMBarfvk3jnyY5Z4M+cuNy0/S3wcWrvQTwCvCkrwDIh6jk Q5qJBAphdIEl14HcjoJPWKreRzYd2mI4OT4cKyJvDX8XUhvSU/z1jR8g355ZMoVG EU/or7j7w/2eUZn+oab6a2ipKAa1tDF3e3cmL0vwD/Ign/2LBShH55ypHpaluGRd QAzyIkXeTH5Ik2/eOPV83Nts5uC0h6GwStKVMD/3zlZmci24O4kyR+cd6toSaVVD luwd0hj9xv0l954FrXsKQbRiyQUHirN/sTarcgYzcKbSC1l+aaj9PIFUU352avYc SH+rubKaUjgu55ODGUC1EREcMg7idBLj -----END CERTIFICATE-----Generated at Fri Jul 4 14:23:50 2025 by rpki-client