$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft File: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft (raw, json) Hash identifier: vAwdG061FVYg+AU7A/MYjqjTzFhzfVZlk8VSf4Vj0WM= Subject key identifier: 1F:BF:6A:75:30:89:54:DF:DF:86:17:5C:3F:C5:AE:9B:17:2D:24:E4 Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD Certificate issuer: /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Certificate serial: 0A42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft Manifest number: 0A23 Signing time: Wed 02 Jul 2025 20:03:50 +0000 Manifest this update: Wed 02 Jul 2025 20:03:49 +0000 Manifest next update: Wed 09 Jul 2025 20:03:49 +0000 Files and hashes: 1: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl (hash: U+ukxEnWwaHHyZziPaZPkoQLT8rg6NlDJJ+Tnz8hAws=) 2: 59E4B0A81B9211F0A5D50649C4F9AE02.roa (hash: 4uAphyYn6AbiifiDtaxCom6jwozyhzmoBVY1cw2irI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:03:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2626 (0xa42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0F3F, serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Validity Not Before: Jul 2 20:03:49 2025 GMT Not After : Jul 9 20:03:49 2025 GMT Subject: CN=686590a6-fa98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:47:08:fc:41:1b:55:9d:fc:0d:3c:dc:56:f1: 2d:00:77:70:5b:13:8a:ce:d6:5a:e1:05:b1:4b:40: ea:6c:e5:7c:72:9f:ae:a7:1a:f0:f3:a3:db:39:a3: 55:13:b8:a5:d5:91:89:a0:55:c2:02:3e:7a:bf:81: 2f:3b:bc:09:2c:3f:c1:40:61:f5:fb:f0:a3:e5:34: f3:47:84:31:10:1e:03:40:49:98:f4:9b:2d:da:f8: 2f:78:21:de:5b:9f:81:ad:8b:fd:49:16:ea:89:9f: d2:9c:ce:ef:b8:75:f7:7d:1b:a4:d5:51:55:2c:9d: b1:e8:3d:50:01:c1:43:ef:66:a0:42:47:b5:e9:23: 49:fc:78:8b:30:ab:06:be:33:db:8e:f3:69:65:f0: 6e:00:c2:5e:22:49:cb:9b:19:58:a1:66:b0:a6:ae: 0c:f0:b6:d3:b3:c1:26:8f:b5:28:92:5a:d0:ef:4b: 6d:e1:bf:2e:21:43:ab:ad:af:ae:c0:aa:90:e0:f5: 55:a6:28:8a:6f:dd:bb:cc:6d:fc:73:88:02:04:bf: f9:e6:30:71:0f:f4:c1:f1:20:b2:a2:bb:c4:5e:73: e4:0a:f8:51:37:c8:3c:70:b5:c4:09:1c:af:63:11: ec:10:56:ee:5f:48:e1:18:e0:f9:30:ef:e4:44:3b: b2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BF:6A:75:30:89:54:DF:DF:86:17:5C:3F:C5:AE:9B:17:2D:24:E4 X509v3 Authority Key Identifier: keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:fb:e1:26:ec:09:83:27:60:2e:ed:97:49:5f:c5:4e:55:32: 43:16:7b:91:8f:91:c7:b3:f5:3d:5a:26:c2:f8:e5:c0:ec:67: 69:9c:bb:f8:0b:c2:90:a4:75:1a:26:aa:a4:85:b3:93:8d:6a: 63:97:0f:e1:d7:20:f2:e3:89:65:62:8e:58:3c:a0:9c:38:8b: 8b:ab:fd:fc:6f:b7:ef:19:33:8c:a4:20:95:09:00:b3:25:4b: 4e:46:99:e7:94:08:76:c4:26:bb:0c:9c:b7:4e:0e:24:6b:fc: 7c:22:38:f8:e4:a0:75:21:f4:76:f6:1d:54:32:f7:04:0f:db: 2c:c1:f1:c7:de:d3:3e:ee:cc:53:5d:17:95:a6:e3:97:be:9d: b2:14:ac:18:04:ef:f5:b0:84:c5:7b:ed:56:59:23:c7:38:1c: be:f8:8f:d7:da:3d:bc:cf:c5:b9:69:52:f0:49:fe:fb:da:95: f5:64:69:28:b8:7d:e8:e8:29:d8:fe:b3:dc:01:5c:11:83:88: 63:31:2f:34:6f:77:e5:5c:f2:d0:0c:40:64:6e:08:12:f4:64: 62:9c:40:53:00:ec:1d:23:6b:fb:67:4c:da:c5:10:d1:03:c0: 15:92:78:46:89:6e:13:4b:e2:f2:62:91:1a:e8:87:fb:fa:aa: 1a:c5:c5:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCkIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBGM0YxMTAvBgNVBAUTKEY4MThGQzk4OEVDNzAzMkMzRTJDNkE0OEE1NTQ5OEFC N0NENTY1RkQwHhcNMjUwNzAyMjAwMzQ5WhcNMjUwNzA5MjAwMzQ5WjAYMRYwFAYD VQQDEw02ODY1OTBhNi1mYTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo0cI/EEbVZ38DTzcVvEtAHdwWxOKztZa4QWxS0DqbOV8cp+upxrw86PbOaNV E7il1ZGJoFXCAj56v4EvO7wJLD/BQGH1+/Cj5TTzR4QxEB4DQEmY9Jst2vgveCHe W5+BrYv9SRbqiZ/SnM7vuHX3fRuk1VFVLJ2x6D1QAcFD72agQke16SNJ/HiLMKsG vjPbjvNpZfBuAMJeIknLmxlYoWawpq4M8LbTs8Emj7UoklrQ70tt4b8uIUOrra+u wKqQ4PVVpiiKb927zG38c4gCBL/55jBxD/TB8SCyorvEXnPkCvhRN8g8cLXECRyv YxHsEFbuX0jhGOD5MO/kRDuy0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+/anUw iVTf34YXXD/FrpsXLSTkMB8GA1UdIwQYMBaAFPgY/JiOxwMsPixqSKVUmKt81WX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEYzRi8wOTM3M0FENjc4 QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5dy1MR3BJcFZTWXEzelZa ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CajhtSTdIQXl3LUxHcElwVlNZcTN6VlpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEYzRi8wOTM3M0FENjc4QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5 dy1MR3BJcFZTWXEzelZaZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAS++Em7AmDJ2Au7ZdJX8VOVTJDFnuRj5HHs/U9WibC+OXA7GdpnLv4 C8KQpHUaJqqkhbOTjWpjlw/h1yDy44llYo5YPKCcOIuLq/38b7fvGTOMpCCVCQCz JUtORpnnlAh2xCa7DJy3Tg4ka/x8Ijj45KB1IfR29h1UMvcED9sswfHH3tM+7sxT XReVpuOXvp2yFKwYBO/1sITFe+1WWSPHOBy++I/X2j28z8W5aVLwSf772pX1ZGko uH3o6CnY/rPcAVwRg4hjMS80b3flXPLQDEBkbggS9GRinEBTAOwdI2v7Z0zaxRDR A8AVknhGiW4TS+LyYpEa6If7+qoaxcUD -----END CERTIFICATE-----Generated at Thu Jul 3 06:12:04 2025 by rpki-client