$ rpki-client -vvf rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft File: bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft (raw, json) Hash identifier: 7wgQq3DI7x3ufDEPWZaWzHQmy5AHGl/RvwDviWS1pVA= Subject key identifier: 46:F4:0C:E2:D1:59:79:AA:85:9C:6B:34:66:9B:12:62:FB:53:EE:BE Authority key identifier: 6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05 Certificate issuer: /CN=A91881D9/serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505 Certificate serial: 183F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft Manifest number: 1836 Signing time: Fri 22 Aug 2025 16:37:20 +0000 Manifest this update: Fri 22 Aug 2025 16:37:20 +0000 Manifest next update: Fri 29 Aug 2025 16:37:20 +0000 Files and hashes: 1: bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl (hash: HNBH8nE2HIATEQqBpQwWK6CeAmtbWjYhXy8pSwyoz1w=) 2: 870C2B58B47811E788EC7E65C4F9AE02.roa (hash: IgkWueiZzDaSaqXsqac+/PyEgRdDcfnQbUbjQVGTTtM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:37:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6207 (0x183f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91881D9, serialNumber=6C1B638EA9D7C6CE023CB5E57E3CAE16A11B4505 Validity Not Before: Aug 22 16:37:20 2025 GMT Not After : Aug 29 16:37:20 2025 GMT Subject: CN=68a89cc0-4d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:d0:d4:a6:7d:fb:04:21:ff:db:9f:b1:f5: ea:9e:e5:5f:53:24:7c:3a:d0:c2:73:b7:36:00:80: 10:30:c5:db:fb:ee:e1:99:d4:37:37:f4:2e:4b:5f: a4:3d:ad:05:93:bb:52:cb:81:9b:25:7c:58:ca:56: ee:41:12:a1:56:85:52:05:06:9e:22:6a:48:89:47: c9:57:cc:a8:cb:6e:ec:6a:b7:58:6b:04:62:d1:0e: 4a:e8:fb:5d:10:ae:0c:56:64:97:6c:e8:a2:e0:40: de:1b:6b:47:6d:cc:f5:b7:18:ac:83:e6:95:c6:52: c2:43:50:be:24:fa:fe:86:0f:97:a1:ef:f8:21:42: 69:14:49:f1:4a:1c:6b:af:69:1e:45:c3:b1:05:c9: 3a:1f:9c:15:5c:c1:d9:4b:dc:c0:30:93:98:af:9d: f4:e0:b0:16:c9:21:af:ce:90:db:6a:37:bd:de:fa: c7:8a:ac:4c:47:bf:57:e7:55:62:ff:ce:d1:ce:bc: 43:1e:4f:1d:76:62:05:93:cd:f8:4a:36:f4:f0:d1: 9c:62:39:b4:85:17:f9:03:ce:2a:c0:b9:22:82:55: 18:95:a4:59:1a:13:0e:26:7f:19:31:6f:ad:30:72: 83:f6:75:41:fd:c5:09:df:7c:f8:e4:ad:2a:f6:48: a3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F4:0C:E2:D1:59:79:AA:85:9C:6B:34:66:9B:12:62:FB:53:EE:BE X509v3 Authority Key Identifier: keyid:6C:1B:63:8E:A9:D7:C6:CE:02:3C:B5:E5:7E:3C:AE:16:A1:1B:45:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBtjjqnXxs4CPLXlfjyuFqEbRQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91881D9/D89BB30EB47711E7AD54B664C4F9AE02/bBtjjqnXxs4CPLXlfjyuFqEbRQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:f5:42:fb:50:8b:9a:79:32:f3:54:f7:04:bb:0f:06:d5:bb: 2d:5d:92:cb:13:47:26:05:7d:b1:54:e5:22:26:5c:11:db:9e: c9:02:7b:4b:74:33:82:c8:ac:20:72:83:7f:78:1d:c5:d1:aa: ec:d8:00:49:91:73:12:3e:af:65:b8:4a:11:0f:ed:00:c9:89: 66:df:56:02:02:a2:39:2e:88:56:0d:9e:24:e6:67:49:cb:82: ae:df:ac:33:85:98:31:05:3c:ae:9a:1b:7e:e3:23:25:9b:55: 92:60:35:1d:02:3d:d0:31:c0:64:b3:63:5b:22:b9:bf:ac:55: 0d:13:6b:42:95:1e:a2:dd:87:96:bf:73:9a:f7:d5:60:ce:b3: de:1b:1d:64:d8:be:81:bc:c3:de:f1:c2:ae:87:50:34:f0:21: 59:05:21:1d:6a:fe:d8:cb:ab:2c:50:8d:bf:7b:c6:fe:41:93: 0e:b2:ba:11:7a:6b:10:d1:58:9a:61:40:9a:23:ee:29:73:c7: 97:4b:2a:c0:45:22:24:47:33:83:52:5b:b7:24:2e:48:29:33: 92:b0:96:ec:19:2e:88:31:d2:b0:64:0b:f9:4f:da:44:43:33: 84:ac:60:ea:27:66:4a:ab:26:75:9d:0d:d3:97:d1:53:bd:81: 99:6b:f9:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGD8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgxRDkxMTAvBgNVBAUTKDZDMUI2MzhFQTlEN0M2Q0UwMjNDQjVFNTdFM0NBRTE2 QTExQjQ1MDUwHhcNMjUwODIyMTYzNzIwWhcNMjUwODI5MTYzNzIwWjAYMRYwFAYD VQQDEw02OGE4OWNjMC00ZDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwOzQ1KZ9+wQh/9ufsfXqnuVfUyR8OtDCc7c2AIAQMMXb++7hmdQ3N/QuS1+k Pa0Fk7tSy4GbJXxYylbuQRKhVoVSBQaeImpIiUfJV8yoy27sardYawRi0Q5K6Ptd EK4MVmSXbOii4EDeG2tHbcz1txisg+aVxlLCQ1C+JPr+hg+Xoe/4IUJpFEnxShxr r2keRcOxBck6H5wVXMHZS9zAMJOYr5304LAWySGvzpDbaje93vrHiqxMR79X51Vi /87RzrxDHk8ddmIFk834Sjb08NGcYjm0hRf5A84qwLkiglUYlaRZGhMOJn8ZMW+t MHKD9nVB/cUJ33z45K0q9kijKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEb0DOLR WXmqhZxrNGabEmL7U+6+MB8GA1UdIwQYMBaAFGwbY46p18bOAjy15X48rhahG0UF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODFEOS9EODlCQjMwRUI0 NzcxMUU3QUQ1NEI2NjRDNEY5QUUwMi9iQnRqanFuWHhzNENQTFhsZmp5dUZxRWJS UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCdGpqcW5YeHM0Q1BMWGxmanl1RnFFYlJRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODFEOS9EODlCQjMwRUI0NzcxMUU3QUQ1NEI2NjRDNEY5QUUwMi9iQnRqanFuWHhz NENQTFhsZmp5dUZxRWJSUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAp9UL7UIuaeTLzVPcEuw8G1bstXZLLE0cmBX2xVOUiJlwR257JAntL dDOCyKwgcoN/eB3F0ars2ABJkXMSPq9luEoRD+0AyYlm31YCAqI5LohWDZ4k5mdJ y4Ku36wzhZgxBTyumht+4yMlm1WSYDUdAj3QMcBks2NbIrm/rFUNE2tClR6i3YeW v3Oa99VgzrPeGx1k2L6BvMPe8cKuh1A08CFZBSEdav7Yy6ssUI2/e8b+QZMOsroR emsQ0ViaYUCaI+4pc8eXSyrARSIkRzODUlu3JC5IKTOSsJbsGS6IMdKwZAv5T9pE QzOErGDqJ2ZKqyZ1nQ3Tl9FTvYGZa/mb -----END CERTIFICATE-----Generated at Sat Aug 23 19:35:07 2025 by rpki-client