$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft File: bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json) Hash identifier: IvIVK4hl1WoCE2lQW5RPykajI+CdBXQvHcqsX+iW6hk= Subject key identifier: 1D:70:9D:45:53:73:45:35:19:C0:B0:BF:A4:F4:92:AE:7B:CC:46:D3 Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Certificate serial: 04D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft Manifest number: 04BF Signing time: Sat 23 Aug 2025 00:10:08 +0000 Manifest this update: Sat 23 Aug 2025 00:10:07 +0000 Manifest next update: Sat 30 Aug 2025 00:10:07 +0000 Files and hashes: 1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: W0KytI2wm4sSbYoxeX0OojYwC6rngZixuyjtvzpcOv0=) 2: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: doR4Y7/9fJwk4I8rzXTdhySC0dSmOygHgP5L2cehpw4=) 3: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: YNmXXeohBLlW644lJk9sQ0wTlKH8+7poI39Ki1Khyx0=) 4: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: 8jti7DRjplfPDOWY06XiRJGfKvNLpJCDztlNbOL025A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:10:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1241 (0x4d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Validity Not Before: Aug 23 00:10:07 2025 GMT Not After : Aug 30 00:10:07 2025 GMT Subject: CN=68a906df-2e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:64:6e:99:97:a9:a6:d9:64:e2:e8:43:20:62: f5:69:cf:c1:b2:d8:3a:66:ae:53:d6:46:5d:26:ff: 99:ce:26:cf:2a:4b:d1:2c:db:4d:74:39:cd:82:98: ff:aa:2c:c4:a2:80:6d:4b:f4:85:8c:d2:20:1e:6b: ad:2b:f8:38:2c:bc:78:02:4c:bf:d3:b5:a4:70:fe: 95:aa:6c:6f:81:8a:d8:3f:cd:01:aa:3c:03:d5:ed: 78:0d:6d:93:50:63:1d:91:35:27:f2:31:76:d8:5c: 85:0e:ea:2c:10:3b:62:a9:6d:19:68:35:25:8b:08: 36:cd:b9:52:6b:b6:ee:a2:86:26:cf:15:0f:b0:a8: e7:c6:50:79:ba:af:7c:42:5a:29:f7:4d:09:b0:1c: a3:ce:5d:df:1e:78:6c:df:65:ed:68:f1:2b:51:98: 83:7a:aa:8e:13:04:69:73:d7:bc:67:b7:95:b9:c0: 68:b8:1a:dc:a2:a7:b1:cb:ac:40:4c:6d:63:16:52: 2d:d2:e6:86:a0:39:1c:28:46:81:0b:0e:04:b0:50: 98:e1:9f:26:89:24:8f:4b:3d:ee:7e:18:64:df:20: db:51:60:2b:8f:e8:a2:28:9e:7f:15:f0:28:68:c4: f8:2c:a4:70:07:55:2f:c7:3d:3f:04:80:a8:c4:12: 98:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:70:9D:45:53:73:45:35:19:C0:B0:BF:A4:F4:92:AE:7B:CC:46:D3 X509v3 Authority Key Identifier: keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:f9:1f:5a:9f:da:04:c8:de:26:5a:ce:7e:df:c6:f4:5b:0f: c9:a4:59:97:39:c5:57:3e:32:4c:6d:5b:54:99:b4:b8:0b:19: 87:f3:10:85:9c:ba:ca:6a:06:a4:b1:43:8e:87:4a:41:1f:48: e8:c9:fc:c9:58:79:a1:07:e2:c0:82:3d:ed:08:40:35:6a:57: ab:42:ad:f6:68:02:f3:b1:ec:11:80:05:d3:8b:55:d0:ad:a1: 47:38:7c:45:5e:a1:d0:c7:63:c2:00:14:be:30:9d:a3:e9:d0: 8d:15:9f:78:a0:6b:94:d8:c8:86:5e:78:56:fd:a3:a2:9a:19: 46:90:f5:0a:2d:33:3a:d2:0d:cf:b7:15:99:a2:ac:8a:57:b5: f2:bb:c7:05:75:64:e1:3f:6f:c6:bd:5b:ea:dd:ec:9b:71:97: 75:d4:91:da:28:cf:8b:19:50:24:f5:e3:c4:cf:e1:f6:a5:65: 4a:31:4e:31:ea:66:6b:09:a3:0d:98:b5:ab:5a:e2:3c:06:21: 2b:c5:f0:29:8a:e4:73:ae:a8:1d:2e:0a:45:73:0e:49:98:86: b5:13:1a:ac:4b:78:30:89:e3:29:16:82:4d:07:73:9f:cb:fd: 8c:6f:c9:44:9b:82:3e:78:09:58:8d:5b:a3:86:a8:7d:e2:74: 04:56:1c:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc0RTgxMTAvBgNVBAUTKDZDMDgwQTJCQTdEQUFDOTVENEQ5MzQ4OEE5MDAxNTFB RTNBNTlERjgwHhcNMjUwODIzMDAxMDA3WhcNMjUwODMwMDAxMDA3WjAYMRYwFAYD VQQDEw02OGE5MDZkZi0yZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmRumZepptlk4uhDIGL1ac/Bstg6Zq5T1kZdJv+ZzibPKkvRLNtNdDnNgpj/ qizEooBtS/SFjNIgHmutK/g4LLx4Aky/07WkcP6VqmxvgYrYP80BqjwD1e14DW2T UGMdkTUn8jF22FyFDuosEDtiqW0ZaDUliwg2zblSa7buooYmzxUPsKjnxlB5uq98 Qlop900JsByjzl3fHnhs32XtaPErUZiDeqqOEwRpc9e8Z7eVucBouBrcoqexy6xA TG1jFlIt0uaGoDkcKEaBCw4EsFCY4Z8miSSPSz3ufhhk3yDbUWArj+iiKJ5/FfAo aMT4LKRwB1Uvxz0/BICoxBKYRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1wnUVT c0U1GcCwv6T0kq57zEbTMB8GA1UdIwQYMBaAFGwICiun2qyV1Nk0iKkAFRrjpZ34 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRFOC80N0Y2MjAxMjQz RUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJKWFUyVFNJcVFBVkd1T2xu ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBZ0tLNmZhckpYVTJUU0lxUUFWR3VPbG5mZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzRFOC80N0Y2MjAxMjQzRUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJK WFUyVFNJcVFBVkd1T2xuZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBm+R9an9oEyN4mWs5+38b0Ww/JpFmXOcVXPjJMbVtUmbS4CxmH8xCF nLrKagaksUOOh0pBH0joyfzJWHmhB+LAgj3tCEA1alerQq32aALzsewRgAXTi1XQ raFHOHxFXqHQx2PCABS+MJ2j6dCNFZ94oGuU2MiGXnhW/aOimhlGkPUKLTM60g3P txWZoqyKV7Xyu8cFdWThP2/GvVvq3eybcZd11JHaKM+LGVAk9ePEz+H2pWVKMU4x 6mZrCaMNmLWrWuI8BiErxfApiuRzrqgdLgpFcw5JmIa1ExqsS3gwieMpFoJNB3Of y/2Mb8lEm4I+eAlYjVujhqh94nQEVhwa -----END CERTIFICATE-----Generated at Sat Aug 23 19:15:02 2025 by rpki-client