$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft File: 1bTWxIC76WuryHIkhQJdTEX-x4o.mft (raw, json) Hash identifier: GhaVsXk63s1dK+AQJd/8hIEE+MbpTnbK9jUYymArTRc= Subject key identifier: 32:54:80:F6:4C:3F:34:91:1E:35:96:F3:C1:60:06:E7:C5:4D:5A:A0 Authority key identifier: D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A Certificate issuer: /CN=A91907D3/serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft Manifest number: 15 Signing time: Sat 23 Aug 2025 08:19:25 +0000 Manifest this update: Sat 23 Aug 2025 08:19:25 +0000 Manifest next update: Sat 30 Aug 2025 08:19:25 +0000 Files and hashes: 1: 1bTWxIC76WuryHIkhQJdTEX-x4o.crl (hash: SrtEqBSZnhQBe/mEZU/MaDZC7GRUma8qsc9wWuCknRQ=) 2: 38361A086DD311F08BB89272C4F9AE02.roa (hash: jze8pXPb+Ih57A9PJ1kUit8+mteLPMOuLcigHYQRgfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91907D3, serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A Validity Not Before: Aug 23 08:19:25 2025 GMT Not After : Aug 30 08:19:25 2025 GMT Subject: CN=68a9798d-ec26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e2:3d:21:12:20:c3:5c:7d:7d:9f:58:33:69: 44:ad:09:90:d5:e7:71:55:f8:64:2c:43:b6:a3:a3: d3:23:bb:2a:b8:fd:43:3b:bd:b7:15:c4:8a:75:06: ca:d8:43:af:e7:99:c4:9e:87:c7:4b:c8:38:bc:4e: de:a5:a8:ac:b7:28:38:03:78:f0:3e:08:fe:aa:2c: 29:63:1c:8d:9d:ae:8d:5a:ba:03:d6:bf:e0:57:61: 2a:d6:b7:50:0a:cb:c5:5d:75:52:9e:ef:42:87:e9: 9d:6a:ec:9b:b1:d4:f6:69:4f:53:ee:e1:f7:de:7c: a1:2c:fe:5e:c6:5e:e8:35:27:9d:81:51:13:5d:bf: 64:14:cb:3c:a4:62:c7:26:53:7c:b1:39:bf:1d:26: 7b:be:73:b3:49:b4:6a:7a:d3:f2:c4:34:fd:7a:ff: 6b:8d:05:76:9f:1b:cf:b3:dc:07:f2:9b:5f:65:09: 53:1a:1a:0d:df:8b:52:42:97:4d:f5:e0:3d:81:de: 27:19:ee:05:a3:f1:a7:b7:88:66:8b:60:9b:d1:a7: 72:ae:b4:4e:5e:f7:0d:78:14:9f:b1:8d:21:2a:9b: 98:4b:b2:96:68:62:8a:0d:e6:46:ff:21:a4:e9:f9: 77:50:d1:e8:9b:91:1b:58:e6:53:cf:37:9b:86:1d: 3d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:54:80:F6:4C:3F:34:91:1E:35:96:F3:C1:60:06:E7:C5:4D:5A:A0 X509v3 Authority Key Identifier: keyid:D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:53:aa:3d:aa:fe:7e:bc:aa:41:ce:1e:1c:6d:35:a7:43:f4: 9f:99:28:84:63:3a:af:a6:03:13:7f:19:7e:df:fd:75:79:c9: 55:1d:8a:d0:e5:5a:45:75:cc:7a:25:9e:b3:6f:ed:68:bb:16: 02:c9:34:22:d3:ef:96:0b:85:91:dc:d1:88:6c:1e:57:46:92: ad:36:26:c8:1a:7a:1a:a7:2f:26:f8:de:4b:54:17:6c:51:5d: d3:b1:ab:b2:10:61:d5:05:ae:cc:c6:b7:21:a6:a0:26:7f:60: 11:f8:a2:ac:53:e1:24:c1:b8:07:3d:e8:2a:07:f5:02:e5:0b: 15:f1:6b:67:e3:14:5f:b8:af:32:15:4e:f8:bb:3f:65:04:ac: fd:64:c2:5e:13:ea:8e:21:5f:47:25:a8:49:87:93:66:d1:b4: d8:1d:63:85:1d:fd:70:69:a2:d2:a2:37:40:40:bd:fe:0f:20: 40:3d:5c:fc:76:b2:1c:ef:ec:c8:93:3d:47:70:2b:59:e9:ff: 25:ee:ab:a1:37:10:37:cc:cc:35:6f:0f:99:33:06:e1:d8:8a: 5f:78:0b:0b:01:59:c9:62:09:a5:28:bf:b6:a8:b7:0d:1f:46: fa:f9:3e:88:3c:de:41:78:49:86:ca:34:30:b6:06:b5:ea:75: c6:a8:b3:9c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDdEMzExMC8GA1UEBRMoRDVCNEQ2QzQ4MEJCRTk2QkFCQzg3MjI0ODUwMjVENEM0 NUZFQzc4QTAeFw0yNTA4MjMwODE5MjVaFw0yNTA4MzAwODE5MjVaMBgxFjAUBgNV BAMTDTY4YTk3OThkLWVjMjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu4j0hEiDDXH19n1gzaUStCZDV53FV+GQsQ7ajo9Mjuyq4/UM7vbcVxIp1BsrY Q6/nmcSeh8dLyDi8Tt6lqKy3KDgDePA+CP6qLCljHI2dro1augPWv+BXYSrWt1AK y8VddVKe70KH6Z1q7Jux1PZpT1Pu4ffefKEs/l7GXug1J52BURNdv2QUyzykYscm U3yxOb8dJnu+c7NJtGp60/LENP16/2uNBXafG8+z3Afym19lCVMaGg3fi1JCl031 4D2B3icZ7gWj8ae3iGaLYJvRp3KutE5e9w14FJ+xjSEqm5hLspZoYooN5kb/IaTp +XdQ0eibkRtY5lPPN5uGHT3BAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUMlSA9kw/ NJEeNZbzwWAG58VNWqAwHwYDVR0jBBgwFoAU1bTWxIC76WuryHIkhQJdTEX+x4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwN0QzLzM4RkIyMTVDNkM1 OTExRjBBMzg4NEU3QUM0RjlBRTAyLzFiVFd4SUM3Nld1cnlISWtoUUpkVEVYLXg0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMWJUV3hJQzc2V3VyeUhJa2hRSmRURVgteDRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw N0QzLzM4RkIyMTVDNkM1OTExRjBBMzg4NEU3QUM0RjlBRTAyLzFiVFd4SUM3Nld1 cnlISWtoUUpkVEVYLXg0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEZTqj2q/n68qkHOHhxtNadD9J+ZKIRjOq+mAxN/GX7f/XV5yVUditDl WkV1zHolnrNv7Wi7FgLJNCLT75YLhZHc0YhsHldGkq02JsgaehqnLyb43ktUF2xR XdOxq7IQYdUFrszGtyGmoCZ/YBH4oqxT4STBuAc96CoH9QLlCxXxa2fjFF+4rzIV Tvi7P2UErP1kwl4T6o4hX0clqEmHk2bRtNgdY4Ud/XBpotKiN0BAvf4PIEA9XPx2 shzv7MiTPUdwK1np/yXuq6E3EDfMzDVvD5kzBuHYil94CwsBWcliCaUov7aotw0f Rvr5Pog83kF4SYbKNDC2BrXqdcaos5w= -----END CERTIFICATE-----Generated at Sat Aug 23 10:55:04 2025 by rpki-client