$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft File: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft (raw, json) Hash identifier: W8E51Dt+cCqbWnjkcdJIHAFrPyg4rgk0cczR0ZSxWuQ= Subject key identifier: 3E:C7:EC:70:0A:02:FB:EC:D0:A7:37:58:FD:C9:9B:CF:B5:F4:04:3B Authority key identifier: 6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A Certificate issuer: /CN=A91B9008/serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Certificate serial: 0119 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft Manifest number: 0115 Signing time: Tue 01 Jul 2025 05:23:20 +0000 Manifest this update: Tue 01 Jul 2025 05:23:20 +0000 Manifest next update: Tue 08 Jul 2025 05:23:20 +0000 Files and hashes: 1: bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl (hash: UsKtEViTJy/8Af9OV49TYt+0cruzI0PLrVtcstlFtck=) 2: 4CFDF03AB4DB11EE9FF6FB59C4F9AE02.roa (hash: AnEWPP8X1N6dt7l7V3XsTmB0MKThvDc5dt35NbkXnzs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:23:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 281 (0x119) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9008, serialNumber=6CBB6767F63A0CB9B7A74914B4A657417E4C578A Validity Not Before: Jul 1 05:23:20 2025 GMT Not After : Jul 8 05:23:20 2025 GMT Subject: CN=686370c8-de7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:07:cd:91:81:2d:f8:db:27:5b:0e:5e:c9: 20:a3:29:7b:77:37:47:b0:f1:29:be:ff:2b:94:eb: 1c:e1:43:92:81:fb:98:a7:21:96:80:62:d4:78:89: bd:fd:60:74:5d:1a:4f:80:8e:85:3d:2a:03:8c:50: d5:f5:b1:1c:5f:ba:c6:91:dd:b9:0b:ca:b9:b3:21: 5d:e3:87:64:98:96:f6:8b:1a:aa:7d:31:81:e2:6c: 6f:7b:1a:ea:1e:d9:48:1d:41:62:0a:17:3c:4d:e6: cf:3b:13:41:12:6f:18:1d:dd:46:b5:88:02:3d:15: 38:f4:06:c0:6c:2c:09:c5:c0:ba:cf:c5:d5:05:c9: 4d:45:62:53:34:a1:01:a0:5d:6a:5e:59:80:ec:cf: de:61:dc:a0:9c:82:b3:9b:b1:fa:9b:75:07:3b:f2: 9e:c9:50:47:b4:53:cf:10:73:f5:23:2a:f1:a0:b5: 55:be:f1:b0:c5:27:68:bd:74:a1:13:5d:43:03:fc: d2:d2:dd:f5:dd:14:9b:54:86:df:34:43:75:e8:64: ac:6c:0b:6e:cd:a5:00:67:cc:bb:3c:e2:e2:6e:21: 28:69:ed:fd:4e:7f:4a:24:23:bb:a0:79:fc:9a:1f: 84:d3:a5:4c:07:e0:6c:43:b2:85:a0:04:4c:5d:84: a5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C7:EC:70:0A:02:FB:EC:D0:A7:37:58:FD:C9:9B:CF:B5:F4:04:3B X509v3 Authority Key Identifier: keyid:6C:BB:67:67:F6:3A:0C:B9:B7:A7:49:14:B4:A6:57:41:7E:4C:57:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9008/0A8FBB1AB43211EEA264440CC4F9AE02/bLtnZ_Y6DLm3p0kUtKZXQX5MV4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:ec:bd:7b:50:fe:ad:93:26:35:68:e0:a6:1e:c7:8e:ea:27: aa:19:ab:d3:27:f9:51:cf:4f:c6:75:ac:27:42:12:de:6f:34: cf:2e:75:d0:a5:9d:b5:40:e5:ca:49:a9:e2:32:0a:94:84:8b: 73:50:8a:b5:e9:b9:7a:02:9b:9f:a4:68:da:cb:87:ca:ef:72: 80:30:58:1d:46:93:ca:ec:75:84:bf:3e:9c:38:99:64:5d:64: 49:f0:bc:e8:ba:17:70:f9:2e:5d:00:c4:85:4a:cf:3a:56:fe: 66:58:e9:8e:4a:1b:e0:40:c3:3b:63:5a:dc:05:12:7a:02:c6: ca:52:73:93:6c:97:6f:c0:2d:6d:6f:0d:2d:f0:52:fa:53:93: ce:0d:4f:a1:8d:8d:1d:c6:13:0b:2e:69:1e:14:61:2e:3f:e8: 3c:71:4e:54:17:85:9b:26:8a:69:6a:73:0b:d3:87:64:b7:b3: a2:0c:fa:9d:e9:ca:01:44:f1:24:1d:f2:48:ea:61:4d:5c:50: 59:bf:53:eb:3d:33:69:f5:94:07:03:d2:bc:36:45:c3:f3:53: fe:20:28:66:df:75:b7:63:dd:0f:57:9e:7b:80:d0:e9:7b:20: 1c:f3:0b:8a:a9:a4:4c:77:6a:7c:22:90:a0:58:cf:10:3b:92: ae:b0:f2:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkwMDgxMTAvBgNVBAUTKDZDQkI2NzY3RjYzQTBDQjlCN0E3NDkxNEI0QTY1NzQx N0U0QzU3OEEwHhcNMjUwNzAxMDUyMzIwWhcNMjUwNzA4MDUyMzIwWjAYMRYwFAYD VQQDEw02ODYzNzBjOC1kZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLIHzZGBLfjbJ1sOXskgoyl7dzdHsPEpvv8rlOsc4UOSgfuYpyGWgGLUeIm9 /WB0XRpPgI6FPSoDjFDV9bEcX7rGkd25C8q5syFd44dkmJb2ixqqfTGB4mxvexrq HtlIHUFiChc8TebPOxNBEm8YHd1GtYgCPRU49AbAbCwJxcC6z8XVBclNRWJTNKEB oF1qXlmA7M/eYdygnIKzm7H6m3UHO/KeyVBHtFPPEHP1IyrxoLVVvvGwxSdovXSh E11DA/zS0t313RSbVIbfNEN16GSsbAtuzaUAZ8y7POLibiEoae39Tn9KJCO7oHn8 mh+E06VMB+BsQ7KFoARMXYSlhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7H7HAK Avvs0Kc3WP3Jm8+19AQ7MB8GA1UdIwQYMBaAFGy7Z2f2Ogy5t6dJFLSmV0F+TFeK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTAwOC8wQThGQkIxQUI0 MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRMbTNwMGtVdEtaWFFYNU1W NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JMdG5aX1k2RExtM3Awa1V0S1pYUVg1TVY0by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTAwOC8wQThGQkIxQUI0MzIxMUVFQTI2NDQ0MENDNEY5QUUwMi9iTHRuWl9ZNkRM bTNwMGtVdEtaWFFYNU1WNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC97L17UP6tkyY1aOCmHseO6ieqGavTJ/lRz0/GdawnQhLebzTPLnXQ pZ21QOXKSaniMgqUhItzUIq16bl6ApufpGjay4fK73KAMFgdRpPK7HWEvz6cOJlk XWRJ8Lzouhdw+S5dAMSFSs86Vv5mWOmOShvgQMM7Y1rcBRJ6AsbKUnOTbJdvwC1t bw0t8FL6U5PODU+hjY0dxhMLLmkeFGEuP+g8cU5UF4WbJoppanML04dkt7OiDPqd 6coBRPEkHfJI6mFNXFBZv1PrPTNp9ZQHA9K8NkXD81P+IChm33W3Y90PV557gNDp eyAc8wuKqaRMd2p8IpCgWM8QO5KusPLD -----END CERTIFICATE-----Generated at Tue Jul 1 13:22:03 2025 by rpki-client