$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json) Hash identifier: eBbq6zoeJojDiuxBKKuAWE2PIcEmr9hhNMJXVHrdPHU= Subject key identifier: B9:E1:74:58:29:51:9C:DD:F2:6C:F7:C7:FE:D8:FD:4A:66:F5:42:CE Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0CC0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft Manifest number: 0C88 Signing time: Mon 30 Jun 2025 18:37:38 +0000 Manifest this update: Mon 30 Jun 2025 18:37:37 +0000 Manifest next update: Mon 07 Jul 2025 18:37:37 +0000 Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: XxbRxSsS4BRX+2ilKYPUb1ymTCIbitIEI9FcMtZolcM=) 2: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: UuY5qtUwk8Dlu801YZxvnO/xKQaWGop0bKAvOOHuar0=) 3: 12561046368911EEA0CB766BC4F9AE02.roa (hash: ZsNiLxfxjjXIOR9efOK6g19RpsthQOBE4XYCmM1hnq8=) 4: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: e/Kuo5QdtsaM/mztDHYG4XkizjKIPPrgUEb1ap1W45w=) 5: 22E63812221211EF9624DB0CC4F9AE02.roa (hash: tEtTFQOPTziC3M/Up8UOSv6VFGJx+4dP/cUQCVWj4l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3264 (0xcc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: Jun 30 18:37:37 2025 GMT Not After : Jul 7 18:37:37 2025 GMT Subject: CN=6862d971-e51d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c9:b0:7e:cc:66:25:ed:24:2b:9a:a3:10:c8: b8:8a:94:3a:42:dc:2b:a0:a4:d1:bb:00:27:11:95: fa:4f:05:b1:4c:c8:25:4a:ec:d1:59:de:01:b9:56: a9:e8:be:b2:60:e9:f5:13:03:f0:b7:9e:04:40:76: f6:70:0f:c9:43:f4:c1:92:fd:0c:21:36:36:63:7d: ac:bf:9d:39:92:a7:21:8e:d0:26:31:4d:bb:7a:23: eb:7e:bc:b6:da:02:11:6e:cc:76:34:7b:dd:5b:72: 69:8d:93:ce:cb:f0:9a:0a:65:62:c7:da:3c:e4:0c: 09:18:a1:56:42:5d:dc:79:93:d5:fb:46:e1:19:f5: c2:9e:a2:25:66:5d:a5:e6:0c:79:a2:a9:ff:1b:77: 52:20:1c:67:94:aa:ee:0e:e2:6f:9a:37:ae:c4:11: bf:5b:a0:03:61:50:40:c7:15:e1:4e:2c:ae:44:4f: 66:08:e6:df:85:f5:d4:6f:ac:6d:da:1b:3d:b5:be: 7e:38:bd:a9:2f:91:c7:88:f5:7f:a1:d6:8a:32:36: 7d:29:3e:b4:a4:ce:90:16:59:e3:34:78:f4:bd:cf: 05:30:7b:8d:4e:31:1e:6e:ac:ee:6d:f4:58:e6:57: f7:7a:30:ef:30:39:c2:be:19:2d:65:f3:d3:42:0b: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E1:74:58:29:51:9C:DD:F2:6C:F7:C7:FE:D8:FD:4A:66:F5:42:CE X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:17:ec:23:fc:34:f7:5f:e5:9b:8c:0a:40:d2:a5:54:e1:71: dd:a9:f6:98:de:a9:fe:f0:89:4e:14:a8:b3:05:9f:da:dc:05: 6e:75:fd:dc:ed:67:f4:17:b3:24:74:75:08:e6:38:bf:35:ae: d1:81:12:3f:78:1c:39:64:dd:6a:c7:43:92:51:40:a5:d6:6d: 14:1e:06:bc:1c:c5:a9:d3:ca:d4:37:93:9c:ed:06:17:f9:f4: 1c:f6:ce:16:24:2b:5f:8b:a6:93:ec:1e:d2:21:80:27:ae:36: 48:66:58:4a:5a:c7:63:89:df:d5:07:a2:85:15:5f:a7:a3:f7: a9:93:10:64:05:12:16:40:9a:c3:e9:f7:91:bf:15:d7:d6:d9: 44:f5:15:d0:6c:63:27:b5:3e:31:2d:5b:d3:5c:51:29:1e:49: 63:a0:ee:48:fb:80:1b:ea:b3:a1:33:cb:e3:23:dd:14:78:1e: f3:6d:50:66:e3:5a:67:66:44:38:9c:15:c6:f9:8c:dd:34:70: 0c:21:d8:d8:7c:ea:98:da:7b:34:d2:41:45:d3:cd:55:52:0e: 0a:16:f9:1c:cb:cd:15:c3:a0:84:a0:20:7a:d8:d5:87:06:c7: 42:70:20:84:d7:78:c0:ac:b3:f8:e9:a1:24:f7:ef:4b:fb:91: 9a:2e:7f:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjUwNjMwMTgzNzM3WhcNMjUwNzA3MTgzNzM3WjAYMRYwFAYD VQQDEw02ODYyZDk3MS1lNTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA58mwfsxmJe0kK5qjEMi4ipQ6QtwroKTRuwAnEZX6TwWxTMglSuzRWd4BuVap 6L6yYOn1EwPwt54EQHb2cA/JQ/TBkv0MITY2Y32sv505kqchjtAmMU27eiPrfry2 2gIRbsx2NHvdW3JpjZPOy/CaCmVix9o85AwJGKFWQl3ceZPV+0bhGfXCnqIlZl2l 5gx5oqn/G3dSIBxnlKruDuJvmjeuxBG/W6ADYVBAxxXhTiyuRE9mCObfhfXUb6xt 2hs9tb5+OL2pL5HHiPV/odaKMjZ9KT60pM6QFlnjNHj0vc8FMHuNTjEebqzubfRY 5lf3ejDvMDnCvhktZfPTQgu1YwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnhdFgp UZzd8mz3x/7Y/Upm9ULOMB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE4MC9COThFODFENjA1QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3kt Q0dqY0M0X0tJOVNsOEgxM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9F+wj/DT3X+WbjApA0qVU4XHdqfaY3qn+8IlOFKizBZ/a3AVudf3c 7Wf0F7MkdHUI5ji/Na7RgRI/eBw5ZN1qx0OSUUCl1m0UHga8HMWp08rUN5Oc7QYX +fQc9s4WJCtfi6aT7B7SIYAnrjZIZlhKWsdjid/VB6KFFV+no/epkxBkBRIWQJrD 6feRvxXX1tlE9RXQbGMntT4xLVvTXFEpHkljoO5I+4Ab6rOhM8vjI90UeB7zbVBm 41pnZkQ4nBXG+YzdNHAMIdjYfOqY2ns00kFF081VUg4KFvkcy80Vw6CEoCB62NWH BsdCcCCE13jArLP46aEk9+9L+5GaLn96 -----END CERTIFICATE-----Generated at Wed Jul 2 19:36:38 2025 by rpki-client