$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft File: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json) Hash identifier: XHK3xxkHs2aq+rE3E4hp6+4RzMJ8Ydaooj2vERIkMkQ= Subject key identifier: 61:9B:97:08:9B:F1:31:A4:9F:C1:39:CE:76:44:BC:2A:62:24:44:E1 Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 Certificate issuer: /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Certificate serial: 0A03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft Manifest number: 09FA Signing time: Sat 28 Jun 2025 19:33:51 +0000 Manifest this update: Sat 28 Jun 2025 19:33:50 +0000 Manifest next update: Sat 05 Jul 2025 19:33:50 +0000 Files and hashes: 1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: iya/hqYM832cwxChUDw7462UfOTutSQmRAghY1msSyo=) 2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: HX1z061ITJ/Mm5axSNQ3ySg9hGI3PSjhgq8jl6nzC3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 19:33:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2563 (0xa03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91A2, serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Validity Not Before: Jun 28 19:33:50 2025 GMT Not After : Jul 5 19:33:50 2025 GMT Subject: CN=6860439e-745b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:0f:0a:b8:e0:a6:bc:0e:41:ef:16:b2:76: 46:21:b3:98:7d:d2:7d:95:6a:98:db:13:d4:20:62: 3a:60:ca:aa:71:25:66:ec:3e:99:c9:a3:07:3d:45: 8e:95:32:c8:72:7d:f9:2d:4d:5a:7f:23:ac:35:ae: 39:f5:1e:9e:80:14:9b:40:14:07:3f:1c:ff:bb:b2: 85:57:3c:4d:cd:c1:5b:f9:86:f9:b2:f6:37:10:a0: 8c:31:dd:8a:fc:8d:30:99:0e:e2:bf:bd:20:f5:57: d4:67:f6:24:0a:c2:90:c4:7e:62:db:ea:c5:8d:45: d0:f1:fb:3a:7c:df:8e:fb:0f:6d:8a:ce:30:c0:b3: d2:9d:35:01:23:af:8b:00:6c:fc:68:f3:e4:90:25: 4e:9c:a1:f0:16:66:04:22:d4:a9:6d:ee:2e:4c:a0: 93:08:1a:86:87:fb:8a:db:cc:5a:11:75:24:3f:e6: 28:5e:97:4b:a1:9c:6e:6d:9b:9c:14:18:6c:2a:4b: 1c:ee:ad:81:f3:38:9d:d7:b8:dd:14:0f:ce:1f:ac: 04:70:c3:36:37:68:98:eb:bb:36:96:89:7c:aa:e7: 0a:c3:1f:ea:2d:c0:ac:c5:11:0e:7a:65:c2:57:46: 49:ff:34:cc:ef:4f:ba:2e:6c:4c:c6:01:32:17:bb: 99:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:9B:97:08:9B:F1:31:A4:9F:C1:39:CE:76:44:BC:2A:62:24:44:E1 X509v3 Authority Key Identifier: keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:c3:4a:a2:8d:e7:1a:da:f5:83:6c:c0:51:6f:5c:b8:e3:6e: 79:f5:41:40:cd:f1:38:2e:3d:3c:7f:c9:61:d8:8a:ba:b5:f0: 53:0a:30:c1:98:e6:fb:37:a0:cd:1d:a1:9e:be:7e:e2:b4:71: 01:ea:8d:3d:89:8c:2e:08:78:d6:a6:bd:7d:e6:31:1e:f5:e0: cb:08:99:f1:58:8c:f1:3a:1c:a0:cc:2e:ff:22:6d:e4:f9:e5: 0c:ff:98:b8:d3:a6:7a:03:2b:06:19:12:f4:1d:4c:be:a2:29: 38:7b:71:8f:a2:77:f1:a7:a3:d1:19:16:13:eb:74:ab:9f:e1: 5f:04:5e:df:e3:af:26:79:ce:6e:43:d1:e2:65:50:b6:9f:51: 6e:36:fc:ff:08:87:b8:00:c8:bb:23:90:68:77:b3:04:8f:42: 87:fb:a8:61:1a:60:48:35:db:01:87:81:82:36:78:10:35:9e: ed:01:46:86:b9:95:2d:d9:0b:ee:09:34:4a:14:43:b8:45:c3: b3:34:51:26:e6:64:2a:df:c7:cc:4b:2c:44:49:57:ca:42:ab: c8:a5:79:1d:a6:43:9b:09:dd:38:db:ce:de:28:9b:b4:ff:d3: 65:7e:a4:2c:9d:62:93:4c:2c:4d:4f:3d:e8:f1:75:c7:30:51: 8c:6b:a2:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQTIxMTAvBgNVBAUTKDZFOTI2QkNFNjE5RTRGNTAwQUJGQTQyNEZEQjA3NjRE MjU4Q0FCNTMwHhcNMjUwNjI4MTkzMzUwWhcNMjUwNzA1MTkzMzUwWjAYMRYwFAYD VQQDEw02ODYwNDM5ZS03NDViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAydAPCrjgprwOQe8WsnZGIbOYfdJ9lWqY2xPUIGI6YMqqcSVm7D6ZyaMHPUWO lTLIcn35LU1afyOsNa459R6egBSbQBQHPxz/u7KFVzxNzcFb+Yb5svY3EKCMMd2K /I0wmQ7iv70g9VfUZ/YkCsKQxH5i2+rFjUXQ8fs6fN+O+w9tis4wwLPSnTUBI6+L AGz8aPPkkCVOnKHwFmYEItSpbe4uTKCTCBqGh/uK28xaEXUkP+YoXpdLoZxubZuc FBhsKksc7q2B8zid17jdFA/OH6wEcMM2N2iY67s2lol8qucKwx/qLcCsxREOemXC V0ZJ/zTM70+6LmxMxgEyF7uZDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGblwib 8TGkn8E5znZEvCpiJEThMB8GA1UdIwQYMBaAFG6Sa85hnk9QCr+kJP2wdk0ljKtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFBMi84OTcxMzA5QzdC MTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQxQUt2NlFrX2JCMlRTV01x MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwSnJ6bUdlVDFBS3Y2UWtfYkIyVFNXTXExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFBMi84OTcxMzA5QzdCMTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQx QUt2NlFrX2JCMlRTV01xMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADw0qijeca2vWDbMBRb1y442559UFAzfE4Lj08f8lh2Iq6tfBTCjDB mOb7N6DNHaGevn7itHEB6o09iYwuCHjWpr195jEe9eDLCJnxWIzxOhygzC7/Im3k +eUM/5i406Z6AysGGRL0HUy+oik4e3GPonfxp6PRGRYT63Srn+FfBF7f468mec5u Q9HiZVC2n1FuNvz/CIe4AMi7I5Bod7MEj0KH+6hhGmBINdsBh4GCNngQNZ7tAUaG uZUt2QvuCTRKFEO4RcOzNFEm5mQq38fMSyxESVfKQqvIpXkdpkObCd04287eKJu0 /9NlfqQsnWKTTCxNTz3o8XXHMFGMa6KW -----END CERTIFICATE-----Generated at Sun Jun 29 21:05:06 2025 by rpki-client