$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json) Hash identifier: kIJHU9EN82dpxMCj+6/ZEjKeLhcGPxJdmOSZAIJkJoU= Subject key identifier: 6F:1E:8A:D9:7C:FA:2D:9F:BB:E4:31:8D:78:37:CB:99:FB:8C:20:B8 Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Certificate serial: 0134 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft Manifest number: 0130 Signing time: Sat 23 Aug 2025 04:43:50 +0000 Manifest this update: Sat 23 Aug 2025 04:43:50 +0000 Manifest next update: Sat 30 Aug 2025 04:43:50 +0000 Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: R7uQP4ElHR5IwbNtFB7UzOLcwjP5ZVXYcN96FuBejVo=) 2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: AnEWPP8X1N6dt7l7V3XsTmB0MKThvDc5dt35NbkXnzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 308 (0x134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Validity Not Before: Aug 23 04:43:50 2025 GMT Not After : Aug 30 04:43:50 2025 GMT Subject: CN=68a94706-0716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3b:f8:4c:08:36:a2:6c:1d:b2:5a:94:83:0a: cc:32:6c:9b:55:24:c3:9e:f5:da:12:f6:a0:6c:f8: ec:b2:15:9f:80:89:58:0d:7e:9f:ed:8c:1f:ec:1b: 00:f2:1c:d8:40:95:33:70:a3:a0:5f:3d:e7:a2:af: 94:0b:b1:70:15:bd:6b:cb:80:27:25:82:bb:2c:a5: 6c:d7:42:ca:e6:b9:7d:ef:00:c5:38:9c:1d:de:85: bc:ca:b5:c7:38:95:db:70:ee:60:92:93:24:e9:c8: 98:22:bc:3d:98:9b:ce:06:73:65:af:23:a4:5a:12: cd:96:a6:66:3d:b3:a7:70:65:d6:20:6a:1b:9a:96: a1:3d:92:23:de:9e:5e:cc:43:c6:7f:af:16:1b:b1: 1a:94:b6:64:cd:8a:7a:14:08:57:b7:af:c4:b4:2f: cb:bb:7a:81:5d:27:01:11:ba:97:e7:72:b0:6c:8f: 90:5b:31:53:d2:57:ba:b1:53:d4:aa:b8:5c:91:f3: a9:7a:da:c6:bd:93:bf:bf:81:18:ca:82:ff:d6:02: 75:bc:4a:bb:65:b6:74:d5:70:a3:b3:1f:e1:2b:dd: 55:72:2f:ad:06:83:96:c1:1c:ac:09:53:e4:6d:fd: a0:ef:e5:a7:97:13:02:55:fa:e2:01:c9:0c:e0:b1: 71:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:1E:8A:D9:7C:FA:2D:9F:BB:E4:31:8D:78:37:CB:99:FB:8C:20:B8 X509v3 Authority Key Identifier: keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:37:01:3c:d1:34:56:0f:59:c2:88:a8:8a:ef:2b:98:bf:12: 10:5a:15:52:19:03:c5:14:71:2c:08:98:3e:7b:6a:3a:4e:ed: b0:fa:3a:3c:b6:52:81:dd:6b:b9:fa:db:dc:ab:ad:8d:13:60: db:dd:d5:94:92:11:ce:ca:4b:ee:f7:c0:ba:63:26:49:9c:0f: b9:55:3b:81:17:59:cf:4e:19:2e:e0:c7:46:54:ba:52:49:87: ab:4a:bc:45:72:75:5b:86:e2:45:bb:5a:71:be:07:71:ef:2e: 64:a7:5d:19:2f:52:e6:c1:a5:6e:f5:a9:81:c7:ce:c7:ac:74: 97:1f:2f:b1:e8:37:25:f6:45:d7:8e:6a:d5:8b:cb:6d:29:b6: dd:4c:60:53:fa:d1:fc:28:c5:09:d0:27:22:09:d8:50:32:9c: 30:29:bc:99:e6:de:69:d6:fe:c7:d7:95:0c:e8:cc:57:4b:85: 4e:8f:a7:42:2e:c9:3d:17:82:f7:bb:ad:a7:1d:d5:a6:5c:a2: b1:88:54:7f:dd:bc:fb:0e:c3:d8:7d:4b:7e:d5:1f:50:bd:19: 42:7a:1a:db:f3:90:3d:b6:0a:fb:38:06:ff:e1:c9:d3:dd:f4: 90:79:dc:48:6c:f8:94:0e:19:9f:ff:3a:b3:a5:8f:02:93:4d: d9:6a:f5:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMDgxMTAvBgNVBAUTKDZDQkI2NzY3RjYzQTBDQjlCN0E3NDkxNEI0QTY1NzQx N0U0QzU3OEEwHhcNMjUwODIzMDQ0MzUwWhcNMjUwODMwMDQ0MzUwWjAYMRYwFAYD VQQDEw02OGE5NDcwNi0wNzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDv4TAg2omwdslqUgwrMMmybVSTDnvXaEvagbPjsshWfgIlYDX6f7Ywf7BsA 8hzYQJUzcKOgXz3noq+UC7FwFb1ry4AnJYK7LKVs10LK5rl97wDFOJwd3oW8yrXH OJXbcO5gkpMk6ciYIrw9mJvOBnNlryOkWhLNlqZmPbOncGXWIGobmpahPZIj3p5e zEPGf68WG7EalLZkzYp6FAhXt6/EtC/Lu3qBXScBEbqX53KwbI+QWzFT0le6sVPU qrhckfOpetrGvZO/v4EYyoL/1gJ1vEq7ZbZ01XCjsx/hK91Vci+tBoOWwRysCVPk bf2g7+WnlxMCVfriAckM4LFx6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8eitl8 +i2fu+QxjXg3y5n7jCC4MB8GA1UdIwQYMBaAFGy7Z2f2Ogy5t6dJFLSmV0F+TFeK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAwOC8wQThGQkIxQUI0 MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRMbTNwMGtVdEtaWFFYNU1W NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAwOC8wQThGQkIxQUI0MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRM bTNwMGtVdEtaWFFYNU1WNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAENwE80TRWD1nCiKiK7yuYvxIQWhVSGQPFFHEsCJg+e2o6Tu2w+jo8 tlKB3Wu5+tvcq62NE2Db3dWUkhHOykvu98C6YyZJnA+5VTuBF1nPThku4MdGVLpS SYerSrxFcnVbhuJFu1pxvgdx7y5kp10ZL1LmwaVu9amBx87HrHSXHy+x6Dcl9kXX jmrVi8ttKbbdTGBT+tH8KMUJ0CciCdhQMpwwKbyZ5t5p1v7H15UM6MxXS4VOj6dC Lsk9F4L3u62nHdWmXKKxiFR/3bz7DsPYfUt+1R9QvRlCehrb85A9tgr7OAb/4cnT 3fSQedxIbPiUDhmf/zqzpY8Ck03ZavWM -----END CERTIFICATE-----Generated at Sat Aug 23 18:55:38 2025 by rpki-client