$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft File: bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft (raw, json) Hash identifier: AgtWCw9uzTTDJG42wj/8hXQU17bzfAZbv069MZj+6mA= Subject key identifier: E4:F7:FA:B4:44:18:10:C8:B2:7F:04:49:F1:D1:FE:22:FC:AD:05:9F Authority key identifier: 6D:D0:75:C0:70:CD:19:40:5C:09:4D:4D:3D:4B:DA:16:34:0C:EE:FC Certificate issuer: /CN=A91B4873/serialNumber=6DD075C070CD19405C094D4D3D4BDA16340CEEFC Certificate serial: D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdB1wHDNGUBcCU1NPUvaFjQM7vw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft Manifest number: D5 Signing time: Sat 23 Aug 2025 05:44:01 +0000 Manifest this update: Sat 23 Aug 2025 05:44:01 +0000 Manifest next update: Sat 30 Aug 2025 05:44:01 +0000 Files and hashes: 1: bdB1wHDNGUBcCU1NPUvaFjQM7vw.crl (hash: sXiBGsIMAlzgWWUSi+NTdy039dvOZObMVoksORLI3YU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.crl rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdB1wHDNGUBcCU1NPUvaFjQM7vw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 213 (0xd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4873, serialNumber=6DD075C070CD19405C094D4D3D4BDA16340CEEFC Validity Not Before: Aug 23 05:44:01 2025 GMT Not After : Aug 30 05:44:01 2025 GMT Subject: CN=68a95521-1a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9e:91:54:cc:71:b8:2a:8e:63:f5:4d:d2:4e: fe:ef:34:a0:53:22:13:28:16:e4:94:00:e6:0d:dd: 79:f6:8a:93:4b:7f:55:9e:eb:2a:7a:86:93:37:58: 44:95:63:fb:9a:de:2a:3c:52:97:d6:cb:f8:a4:05: 54:c0:ff:cc:59:1b:c5:cb:08:81:7b:59:ef:33:15: be:cb:a2:ff:6e:89:f3:67:6c:00:c4:f6:ed:f3:98: a6:ab:d3:d3:22:be:ff:d0:2d:a3:52:4d:5e:61:85: fe:e3:59:6e:c4:52:31:d7:7a:95:6e:70:80:41:b0: aa:bd:cb:29:03:67:01:70:4b:cb:19:c8:99:d1:fb: 44:cf:b6:14:99:e3:8a:0d:9b:47:c1:f6:76:7e:7b: 19:a3:0f:fa:48:b7:d0:c4:e2:16:5c:48:20:e9:7e: 7f:6c:e4:ff:47:1a:6f:e9:12:e4:88:f2:fb:b7:8f: 3f:d1:df:80:d0:3e:25:fa:4e:60:96:25:8f:a5:6d: c2:d6:e0:a8:cb:e6:43:cd:f9:49:89:8d:b1:a9:a6: d7:f1:3f:c8:48:6e:5f:93:c1:24:63:71:20:e4:10: 92:f6:a2:4b:c9:a7:c4:bf:4c:9a:86:48:b2:0e:e1: b8:97:bf:81:9c:9c:e4:09:90:23:98:d8:43:d8:f2: 07:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:F7:FA:B4:44:18:10:C8:B2:7F:04:49:F1:D1:FE:22:FC:AD:05:9F X509v3 Authority Key Identifier: keyid:6D:D0:75:C0:70:CD:19:40:5C:09:4D:4D:3D:4B:DA:16:34:0C:EE:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdB1wHDNGUBcCU1NPUvaFjQM7vw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:07:4d:64:75:83:72:72:a0:96:36:6a:8b:ce:5a:05:86:93: 4c:fc:1f:b5:34:dd:c9:eb:59:14:e4:78:8a:17:de:f4:d1:bc: 3b:0e:fc:70:d8:ca:f4:bd:d4:5c:08:53:0f:70:49:d5:3f:d5: 21:15:2b:93:c4:54:60:d8:11:f4:c5:f2:6d:d9:1b:bb:40:53: 7a:91:be:39:49:77:e7:80:1d:1e:4f:71:40:32:b8:62:ca:69: 29:cd:9a:b6:98:4b:3d:42:59:2d:c1:cb:b7:46:a4:ac:fd:19: d1:b0:ae:0d:66:f4:da:c5:55:df:55:49:7d:ab:c8:a5:ba:d7: 9b:01:fb:2e:f2:03:c3:07:32:89:a1:bc:ee:c4:65:9c:a1:3e: 4d:c1:78:fd:7e:e5:98:f4:a2:f6:84:7a:7a:9e:d6:e1:ea:2e: 9e:de:6d:f3:7f:80:1f:b9:58:a4:3d:11:05:f6:d6:65:b8:75: 9d:e2:df:d4:74:d3:64:17:bd:4f:78:10:04:ee:be:a9:67:ce: 8f:e7:44:da:a0:06:49:51:49:4a:12:92:c6:5c:db:c3:f3:6a: b5:89:50:66:7d:ce:0a:6e:b7:0b:44:98:18:d6:f6:54:58:5a: 50:20:eb:be:4a:50:6f:fd:0b:b1:e0:ec:ee:1d:1d:79:9a:0e: 6e:34:b9:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4NzMxMTAvBgNVBAUTKDZERDA3NUMwNzBDRDE5NDA1QzA5NEQ0RDNENEJEQTE2 MzQwQ0VFRkMwHhcNMjUwODIzMDU0NDAxWhcNMjUwODMwMDU0NDAxWjAYMRYwFAYD VQQDEw02OGE5NTUyMS0xYTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Z6RVMxxuCqOY/VN0k7+7zSgUyITKBbklADmDd159oqTS39VnusqeoaTN1hE lWP7mt4qPFKX1sv4pAVUwP/MWRvFywiBe1nvMxW+y6L/bonzZ2wAxPbt85imq9PT Ir7/0C2jUk1eYYX+41luxFIx13qVbnCAQbCqvcspA2cBcEvLGciZ0ftEz7YUmeOK DZtHwfZ2fnsZow/6SLfQxOIWXEgg6X5/bOT/Rxpv6RLkiPL7t48/0d+A0D4l+k5g liWPpW3C1uCoy+ZDzflJiY2xqabX8T/ISG5fk8EkY3Eg5BCS9qJLyafEv0yahkiy DuG4l7+BnJzkCZAjmNhD2PIH/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOT3+rRE GBDIsn8ESfHR/iL8rQWfMB8GA1UdIwQYMBaAFG3QdcBwzRlAXAlNTT1L2hY0DO78 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg3My81NkE1QjJBRTM4 RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi9iZEIxd0hETkdVQmNDVTFOUFV2YUZqUU03 dncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JkQjF3SEROR1VCY0NVMU5QVXZhRmpRTTd2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NDg3My81NkE1QjJBRTM4RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi9iZEIxd0hETkdV QmNDVTFOUFV2YUZqUU03dncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3B01kdYNycqCWNmqLzloFhpNM/B+1NN3J61kU5HiKF9700bw7Dvxw 2Mr0vdRcCFMPcEnVP9UhFSuTxFRg2BH0xfJt2Ru7QFN6kb45SXfngB0eT3FAMrhi ymkpzZq2mEs9Qlktwcu3RqSs/RnRsK4NZvTaxVXfVUl9q8ilutebAfsu8gPDBzKJ obzuxGWcoT5NwXj9fuWY9KL2hHp6ntbh6i6e3m3zf4AfuVikPREF9tZluHWd4t/U dNNkF71PeBAE7r6pZ86P50TaoAZJUUlKEpLGXNvD82q1iVBmfc4KbrcLRJgY1vZU WFpQIOu+SlBv/Qux4OzuHR15mg5uNLkl -----END CERTIFICATE-----Generated at Sat Aug 23 20:31:37 2025 by rpki-client