$ rpki-client -vvf rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft File: bz4CYgDVU58n4POqUNMgokUo1X0.mft (raw, json) Hash identifier: tMATX0GlqGa9+hR+NOuaSeSJm7XjPLz/MYZu01YycEo= Subject key identifier: 13:21:72:72:54:83:08:77:DF:60:C5:B1:60:12:CB:5B:8F:5E:E5:44 Authority key identifier: 6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D Certificate issuer: /CN=A91B732A/serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft Manifest number: 73 Signing time: Tue 15 Jul 2025 07:10:34 +0000 Manifest this update: Tue 15 Jul 2025 07:10:33 +0000 Manifest next update: Tue 22 Jul 2025 07:10:33 +0000 Files and hashes: 1: bz4CYgDVU58n4POqUNMgokUo1X0.crl (hash: R2EfDvFMEzqY1kW/ZUdf2tmnSapFjKKYj37eoJ8NY9s=) 2: 31EC2E5CBAAB11EFA97B2C66C4F9AE02.roa (hash: QpBoEt1C2EBI43s0+/uUFeo0zNr6mDnCWlKa7GcSILU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 07:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B732A, serialNumber=6F3E026200D5539F27E0F3AA50D320A24528D57D Validity Not Before: Jul 15 07:10:33 2025 GMT Not After : Jul 22 07:10:33 2025 GMT Subject: CN=6875fee9-d811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:61:90:aa:35:3e:a3:e7:9a:48:6e:e8:12:3f: cf:86:cc:d3:e0:8f:51:6e:90:ad:ef:19:43:22:3a: 9d:7b:64:2d:89:da:95:a5:a9:5e:3f:37:85:d5:bf: 4c:c0:1b:21:cf:cf:a5:08:46:84:75:41:58:9f:c5: 32:5c:93:32:64:57:69:63:f6:90:fb:71:92:32:bd: 96:46:1b:91:d5:44:a9:2d:7e:6d:f8:02:91:25:59: 07:3f:67:e4:11:b2:52:4b:09:ed:60:46:dc:5e:a1: 75:af:17:bc:0d:a9:2a:56:5f:ea:c7:b5:19:50:7c: 36:26:6d:4c:46:64:51:81:f3:2c:dc:2b:79:d5:81: fd:47:e1:30:fe:40:fc:f8:de:65:79:df:a5:c2:b2: e4:29:b3:87:f1:1c:3e:1b:8c:20:a1:af:3a:c8:c6: c6:c3:58:bb:63:63:48:57:14:77:9a:7f:c9:d5:a5: 93:74:19:20:73:fb:3c:f6:61:2c:1e:ef:da:34:a4: 2f:1f:23:39:93:3a:da:b0:df:0b:19:d2:fc:68:75: 00:2e:56:ec:a0:ac:8e:19:d1:1a:33:ae:70:d9:2f: de:60:c2:46:5c:f4:a7:44:63:96:7a:81:2e:3c:e1: 6f:8f:b5:36:a9:1e:d6:87:0a:55:d3:c3:77:f9:61: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:21:72:72:54:83:08:77:DF:60:C5:B1:60:12:CB:5B:8F:5E:E5:44 X509v3 Authority Key Identifier: keyid:6F:3E:02:62:00:D5:53:9F:27:E0:F3:AA:50:D3:20:A2:45:28:D5:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bz4CYgDVU58n4POqUNMgokUo1X0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B732A/FFF2E6A8B63011EFA2D7FB63C4F9AE02/bz4CYgDVU58n4POqUNMgokUo1X0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:97:bf:33:95:7e:2f:10:24:7a:42:9e:76:f8:a4:ee:66:70: 2b:9d:81:f5:91:bf:25:b3:31:89:4b:83:50:f6:39:d1:13:95: ae:8e:93:8c:38:90:19:13:06:3e:e4:ba:73:52:7b:74:6d:72: 93:18:3c:a0:b3:12:32:f3:00:3f:1e:08:bf:c1:4b:82:5e:8a: 24:8f:e4:45:be:34:59:1d:35:39:7c:82:31:21:73:a1:c8:0d: 46:74:ac:71:eb:1a:b3:3a:42:40:28:f3:47:7d:28:67:58:4a: ca:0d:97:ab:b2:f2:92:42:56:ea:75:8c:fb:d4:a0:25:49:02: 99:d5:76:2d:9b:fd:c4:37:3a:38:4c:4f:e7:32:2b:cd:f0:11: cf:4d:d2:b1:e3:b9:dd:e3:db:5d:97:71:3d:fb:0a:f4:ea:e5: 10:94:61:6f:81:44:e0:45:7d:1b:66:cf:c7:68:d3:12:48:9f: 8f:6e:a8:9b:7a:1c:ab:31:c7:87:e1:48:92:4e:75:f9:e1:64: 55:81:ff:21:bb:65:a9:6e:24:3d:a3:72:58:05:af:26:85:5f: aa:23:b2:92:49:59:04:32:e6:df:52:0b:7b:12:2c:53:47:22: 41:80:26:23:07:f1:e8:d8:f1:ad:72:9a:be:e9:30:88:0e:4c: 85:fe:7f:54 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC NzMyQTExMC8GA1UEBRMoNkYzRTAyNjIwMEQ1NTM5RjI3RTBGM0FBNTBEMzIwQTI0 NTI4RDU3RDAeFw0yNTA3MTUwNzEwMzNaFw0yNTA3MjIwNzEwMzNaMBgxFjAUBgNV BAMTDTY4NzVmZWU5LWQ4MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCYZCqNT6j55pIbugSP8+GzNPgj1FukK3vGUMiOp17ZC2J2pWlqV4/N4XVv0zA GyHPz6UIRoR1QVifxTJckzJkV2lj9pD7cZIyvZZGG5HVRKktfm34ApElWQc/Z+QR slJLCe1gRtxeoXWvF7wNqSpWX+rHtRlQfDYmbUxGZFGB8yzcK3nVgf1H4TD+QPz4 3mV536XCsuQps4fxHD4bjCChrzrIxsbDWLtjY0hXFHeaf8nVpZN0GSBz+zz2YSwe 79o0pC8fIzmTOtqw3wsZ0vxodQAuVuygrI4Z0RozrnDZL95gwkZc9KdEY5Z6gS48 4W+PtTapHtaHClXTw3f5Ye1XAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEyFyclSD CHffYMWxYBLLW49e5UQwHwYDVR0jBBgwFoAUbz4CYgDVU58n4POqUNMgokUo1X0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3MzJBL0ZGRjJFNkE4QjYz MDExRUZBMkQ3RkI2M0M0RjlBRTAyL2J6NENZZ0RWVTU4bjRQT3FVTk1nb2tVbzFY MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYno0Q1lnRFZVNThuNFBPcVVOTWdva1VvMVgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI3 MzJBL0ZGRjJFNkE4QjYzMDExRUZBMkQ3RkI2M0M0RjlBRTAyL2J6NENZZ0RWVTU4 bjRQT3FVTk1nb2tVbzFYMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEmXvzOVfi8QJHpCnnb4pO5mcCudgfWRvyWzMYlLg1D2OdETla6Ok4w4 kBkTBj7kunNSe3RtcpMYPKCzEjLzAD8eCL/BS4JeiiSP5EW+NFkdNTl8gjEhc6HI DUZ0rHHrGrM6QkAo80d9KGdYSsoNl6uy8pJCVup1jPvUoCVJApnVdi2b/cQ3OjhM T+cyK83wEc9N0rHjud3j212XcT37CvTq5RCUYW+BROBFfRtmz8do0xJIn49uqJt6 HKsxx4fhSJJOdfnhZFWB/yG7ZaluJD2jclgFryaFX6ojspJJWQQy5t9SC3sSLFNH IkGAJiMH8ejY8a1ymr7pMIgOTIX+f1Q= -----END CERTIFICATE-----Generated at Wed Jul 16 23:09:48 2025 by rpki-client