$ rpki-client -vvf rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft File: bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft (raw, json) Hash identifier: GsVVwoEwWSbqWRS6aEFvCTDrtVfDZDD19iE4O9T5X6U= Subject key identifier: 8D:23:26:EA:13:59:98:7B:62:1D:8A:13:7E:35:55:D1:70:1E:68:D8 Authority key identifier: 6C:51:79:CB:0C:F8:18:9E:1E:20:81:D4:B6:95:94:84:A3:EB:36:A8 Certificate issuer: /CN=A919F554/serialNumber=6C5179CB0CF8189E1E2081D4B6959484A3EB36A8 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft Manifest number: 37 Signing time: Sat 23 Aug 2025 07:51:39 +0000 Manifest this update: Sat 23 Aug 2025 07:51:39 +0000 Manifest next update: Sat 30 Aug 2025 07:51:39 +0000 Files and hashes: 1: bFF5ywz4GJ4eIIHUtpWUhKPrNqg.crl (hash: fhb6rOI2iqWRGYsbWLcLYA0ht+OvcijYMtM9selWAx4=) 2: C420C91231F311F0B07AC76AC4F9AE02.roa (hash: y0vlqXmSe17ZKCdVHqeghf1wdjj+SE0T6AlVqdNqzp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.crl rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F554, serialNumber=6C5179CB0CF8189E1E2081D4B6959484A3EB36A8 Validity Not Before: Aug 23 07:51:39 2025 GMT Not After : Aug 30 07:51:39 2025 GMT Subject: CN=68a9730b-488f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ce:ca:ef:37:3e:8e:5d:68:25:9a:a4:b7:e2: 41:78:cf:ad:92:80:32:93:2a:b5:dc:6a:c3:57:66: ce:6d:e2:8c:bd:e4:29:76:fc:dc:30:3c:ab:d8:32: 4d:57:44:d9:b3:c7:e4:c7:26:a3:91:77:12:ff:19: 13:57:19:43:1d:b1:5b:6c:af:b6:03:47:d2:34:35: e0:c4:ec:0e:78:fc:d7:5e:77:4d:23:7c:9c:cd:a8: 88:4b:70:06:19:3a:d3:00:39:40:94:49:24:a0:7e: a8:ff:81:99:a3:55:a5:23:83:3b:b5:a0:cb:20:51: 7e:50:4c:5e:e8:d1:52:5e:33:93:08:8a:67:86:bb: ac:93:e7:31:c9:7a:cb:f9:8d:11:70:46:e7:c8:dc: 40:66:38:87:b8:6b:33:15:b6:92:7b:a2:c4:d6:27: 3f:f9:b1:73:58:dd:c4:f7:3d:72:f0:1a:fb:b0:c6: b6:e2:54:fc:7a:c7:df:30:99:85:22:5c:84:54:e1: c3:51:d3:eb:1c:f6:ad:b9:c7:bc:b9:53:86:db:f4: 66:4f:56:c5:0c:86:03:f0:50:fe:16:c8:be:9c:ef: 65:8d:8a:45:a0:4d:08:89:b5:77:ae:84:48:a0:8d: 9f:3c:22:11:a3:f9:90:dc:00:7a:74:9c:fb:d4:69: c7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:23:26:EA:13:59:98:7B:62:1D:8A:13:7E:35:55:D1:70:1E:68:D8 X509v3 Authority Key Identifier: keyid:6C:51:79:CB:0C:F8:18:9E:1E:20:81:D4:B6:95:94:84:A3:EB:36:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:60:b7:f0:20:77:91:2b:1e:c5:31:9d:79:63:9f:d6:90:83: 02:85:1d:27:e0:89:b0:03:3c:56:5a:e1:56:5a:92:ca:97:d6: 41:5b:1a:7d:07:b2:60:65:42:c5:2d:c5:c5:e6:2d:00:1a:b5: 0f:60:32:97:3e:56:61:79:79:bc:cc:01:c3:10:8a:d3:98:b2: 03:01:46:8f:94:48:e6:9d:55:ef:33:fd:a0:b1:e3:21:05:44: c4:2d:18:85:9c:a4:db:33:87:78:50:d3:50:b5:3b:55:76:94: fc:ac:b9:93:93:b8:98:66:39:de:46:c7:7a:43:d2:d8:5d:7a: 3e:87:8e:1d:e7:6a:f2:ea:3e:e1:f6:e8:24:71:6e:46:75:5c: c1:0a:67:af:ff:24:4d:23:50:dd:17:92:e0:99:bf:c1:59:57: 5b:f9:9c:ef:0d:6c:31:c9:4d:8f:7d:c8:31:ac:aa:d5:d3:0c: 3d:d0:64:e2:1b:09:81:97:9a:e7:68:c2:36:ae:bb:15:25:bc: 8b:65:a7:63:65:ad:f8:14:59:e4:da:2c:dc:61:08:38:a0:14: e0:f3:a0:91:54:25:50:e8:33:02:a3:05:53:7c:e5:78:2e:d1: e2:72:68:e4:8c:84:54:8e:5e:ba:f8:2f:bd:bb:08:19:96:a3: 14:11:1f:78 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjU1NDExMC8GA1UEBRMoNkM1MTc5Q0IwQ0Y4MTg5RTFFMjA4MUQ0QjY5NTk0ODRB M0VCMzZBODAeFw0yNTA4MjMwNzUxMzlaFw0yNTA4MzAwNzUxMzlaMBgxFjAUBgNV BAMTDTY4YTk3MzBiLTQ4OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHzsrvNz6OXWglmqS34kF4z62SgDKTKrXcasNXZs5t4oy95Cl2/NwwPKvYMk1X RNmzx+THJqORdxL/GRNXGUMdsVtsr7YDR9I0NeDE7A54/Nded00jfJzNqIhLcAYZ OtMAOUCUSSSgfqj/gZmjVaUjgzu1oMsgUX5QTF7o0VJeM5MIimeGu6yT5zHJesv5 jRFwRufI3EBmOIe4azMVtpJ7osTWJz/5sXNY3cT3PXLwGvuwxrbiVPx6x98wmYUi XIRU4cNR0+sc9q25x7y5U4bb9GZPVsUMhgPwUP4WyL6c72WNikWgTQiJtXeuhEig jZ88IhGj+ZDcAHp0nPvUacdRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjSMm6hNZ mHtiHYoTfjVV0XAeaNgwHwYDVR0jBBgwFoAUbFF5ywz4GJ4eIIHUtpWUhKPrNqgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGNTU0LzNGOTVBODUyMzFG MzExRjBBQkJBRTY2OUM0RjlBRTAyL2JGRjV5d3o0R0o0ZUlJSFV0cFdVaEtQck5x Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkZGNXl3ejRHSjRlSUlIVXRwV1VoS1ByTnFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG NTU0LzNGOTVBODUyMzFGMzExRjBBQkJBRTY2OUM0RjlBRTAyL2JGRjV5d3o0R0o0 ZUlJSFV0cFdVaEtQck5xZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHBgt/Agd5ErHsUxnXljn9aQgwKFHSfgibADPFZa4VZaksqX1kFbGn0H smBlQsUtxcXmLQAatQ9gMpc+VmF5ebzMAcMQitOYsgMBRo+USOadVe8z/aCx4yEF RMQtGIWcpNszh3hQ01C1O1V2lPysuZOTuJhmOd5Gx3pD0thdej6Hjh3navLqPuH2 6CRxbkZ1XMEKZ6//JE0jUN0XkuCZv8FZV1v5nO8NbDHJTY99yDGsqtXTDD3QZOIb CYGXmudowjauuxUlvItlp2NlrfgUWeTaLNxhCDigFODzoJFUJVDoMwKjBVN85Xgu 0eJyaOSMhFSOXrr4L727CBmWoxQRH3g= -----END CERTIFICATE-----Generated at Sat Aug 23 16:03:49 2025 by rpki-client