$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft File: bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json) Hash identifier: 5Bv4no67XdHbvd+y+gMGXd9zMrH6+fwk2SZPVWMh060= Subject key identifier: 8E:BF:8F:89:7E:EC:FF:A9:9A:C6:BE:43:A2:92:97:05:17:F7:F2:3E Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 094C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft Manifest number: 0912 Signing time: Fri 22 Aug 2025 20:32:37 +0000 Manifest this update: Fri 22 Aug 2025 20:32:36 +0000 Manifest next update: Fri 29 Aug 2025 20:32:36 +0000 Files and hashes: 1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: kaQiS/VN+LKB+upg7TzI8jn6oM2V0bzvspmxM/WZBj8=) 2: F2A462E66B6C11F0B453B656C4F9AE02.roa (hash: Ms6hkj2gNBoVKwju3YpVFi7TOZ5XoCEB+ud2155SGQw=) 3: 1A8C65506B6E11F0AEECA858C4F9AE02.roa (hash: krOpio4wz9zZ7mzvOOi6fz/jljv3s2vU7Ok4eA4dM3Q=) 4: 50805C5C6CF911F0A63D4C65C4F9AE02.roa (hash: Qpx6+MAMFv4aX1D2NecodjsfaY0GuU6bXaL2b1GdFHc=) 5: 88252000B55C11ECA9565039C4F9AE02.roa (hash: ROM2aBA2uOLvGraWZ2OMfhtRxZ5DusfnSKSNI9N61E8=) 6: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: J9pnyjCXshJdQFSggqWmHXW0nySYEfDGHTCaX/EZOYk=) 7: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: Ejx3yVkwMIGPx4PH4VpagQp/pASvV9ahz0Vqhx7EKZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2380 (0x94c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: Aug 22 20:32:36 2025 GMT Not After : Aug 29 20:32:36 2025 GMT Subject: CN=68a8d3e4-b11e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:67:8e:cc:9b:67:5b:9e:f2:04:34:aa:9a:e5: 79:cb:ac:22:32:84:cb:af:3e:c0:f1:f8:ef:d1:94: 08:c3:39:a8:4a:22:4e:af:96:db:1f:e1:11:c3:39: 30:ef:4d:64:20:d0:09:a1:88:8b:d0:cd:ab:4b:51: 50:ac:64:9c:c6:92:50:f8:a3:2a:6a:57:6b:ce:76: 30:9e:56:02:76:7f:86:a3:dc:84:50:ad:47:40:af: c8:ac:bb:5b:48:2c:f5:9f:74:4e:cc:62:4d:80:d4: f9:df:d1:c5:08:61:fe:fc:14:e1:44:6d:da:de:8e: cc:66:e6:04:8a:df:43:2d:62:1c:eb:c0:c0:9d:1f: 23:87:9b:c7:a0:e5:d3:80:05:00:0a:b5:b8:e0:5f: 97:bd:50:76:79:e9:fd:fa:50:2c:c3:e9:3e:f4:37: 1b:5f:07:58:a8:27:0b:de:c3:97:20:93:d8:db:ef: f8:0d:88:16:80:71:fd:c9:1b:8c:e2:80:e0:d5:2c: 08:70:dd:ec:d8:d5:fe:a3:3e:b5:df:2f:bc:92:91: d7:57:0f:d9:34:0e:b4:1a:99:b6:12:0b:65:c4:29: 87:47:7f:09:e6:fa:6d:8b:8f:e0:bd:7c:75:d0:61: 0d:bd:ce:05:97:e9:a4:d0:fe:3e:98:a8:27:61:84: 2d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BF:8F:89:7E:EC:FF:A9:9A:C6:BE:43:A2:92:97:05:17:F7:F2:3E X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:50:01:3a:20:03:55:a9:66:54:80:5f:45:8f:b4:8b:c4:ef: a4:29:8b:63:78:2b:e7:37:7a:d1:07:76:df:e7:f1:af:42:ea: 50:72:d6:b5:4f:3e:68:05:e7:83:eb:ec:d1:66:7c:48:56:2a: 34:fa:e9:cb:70:91:d2:d1:00:e5:01:9f:7e:1e:aa:69:63:d2: 71:75:9c:05:67:8f:49:d4:d8:dc:87:35:97:15:1a:47:b2:0a: b4:59:e5:6c:a6:c7:4f:d1:14:78:a6:cb:b1:d3:9f:1c:c9:44: d3:55:32:94:9d:04:60:95:d9:9b:98:ce:fd:cc:1a:8e:65:18: 29:31:22:22:aa:6d:78:3d:c8:b8:31:4d:51:9f:d4:d6:f5:79: 03:ce:d4:5a:f9:34:8f:f9:79:e4:99:5a:f8:5c:15:c8:e9:3f: 5b:dd:db:a0:43:19:c2:bf:c9:00:66:7c:25:03:8d:93:88:55: 8d:41:b5:9d:c4:af:cc:4b:c1:47:26:89:ac:e3:5e:db:df:54: c1:e5:b9:df:16:c7:28:7a:39:34:d1:e2:59:9c:d6:2f:7d:3e: 44:48:b4:a2:fc:09:63:7c:0c:cf:2c:01:c5:5b:9a:f3:6c:a6: b5:30:29:e4:91:b5:8c:70:ab:c4:80:7d:5b:63:a6:c7:1e:8b: 1b:37:fd:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCUwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjUwODIyMjAzMjM2WhcNMjUwODI5MjAzMjM2WjAYMRYwFAYD VQQDEw02OGE4ZDNlNC1iMTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4meOzJtnW57yBDSqmuV5y6wiMoTLrz7A8fjv0ZQIwzmoSiJOr5bbH+ERwzkw 701kINAJoYiL0M2rS1FQrGScxpJQ+KMqaldrznYwnlYCdn+Go9yEUK1HQK/IrLtb SCz1n3ROzGJNgNT539HFCGH+/BThRG3a3o7MZuYEit9DLWIc68DAnR8jh5vHoOXT gAUACrW44F+XvVB2een9+lAsw+k+9DcbXwdYqCcL3sOXIJPY2+/4DYgWgHH9yRuM 4oDg1SwIcN3s2NX+oz613y+8kpHXVw/ZNA60Gpm2EgtlxCmHR38J5vpti4/gvXx1 0GENvc4Fl+mk0P4+mKgnYYQt6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6/j4l+ 7P+pmsa+Q6KSlwUX9/I+MB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTQ2RS8wQ0Q0MURBOEI3NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZi N1JfWW4xcl9Zd3lTZFhSQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMUAE6IANVqWZUgF9Fj7SLxO+kKYtjeCvnN3rRB3bf5/GvQupQcta1 Tz5oBeeD6+zRZnxIVio0+unLcJHS0QDlAZ9+HqppY9JxdZwFZ49J1NjchzWXFRpH sgq0WeVspsdP0RR4psux058cyUTTVTKUnQRgldmbmM79zBqOZRgpMSIiqm14Pci4 MU1Rn9TW9XkDztRa+TSP+XnkmVr4XBXI6T9b3dugQxnCv8kAZnwlA42TiFWNQbWd xK/MS8FHJoms417b31TB5bnfFscoejk00eJZnNYvfT5ESLSi/AljfAzPLAHFW5rz bKa1MCnkkbWMcKvEgH1bY6bHHosbN/3X -----END CERTIFICATE-----Generated at Sun Aug 24 00:14:09 2025 by rpki-client