$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: SlOrm9UFG2syVvPQUgz+WeNJcaRfscyu6eAuLhovmRo= Subject key identifier: AA:2F:A2:14:5F:E3:CC:37:1A:EA:32:65:F2:DF:69:1A:3E:60:CF:E1 Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: EC Signing time: Sat 23 Aug 2025 05:34:59 +0000 Manifest this update: Sat 23 Aug 2025 05:34:59 +0000 Manifest next update: Sat 30 Aug 2025 05:34:59 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: 5ExYpLE36c2/Ijf//QYjyYiWlOmKxGEaf7kuTGT/N+Q=) 2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: vY7AsZ08Pw1TlHVY7hGbU3NQuV3eecatAeSNrTUiOFk=) 3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: c1fiRMTzx+sKc+PUXDGG2MhU2IceNjiS5ZTGcmsSFDc=) 4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: Zeo9E1pvK7pqXxcoNJpNgvy4k5rrUkurswNhSqNf24s=) 5: A074721624CA11EF93486579C4F9AE02.roa (hash: EAuwmClXGMo+6npZ19N/RRkMj4x/6MUGDRCOhMDeS9A=) 6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: NR/+YgQkm7A4mmhSV+xz9O4OYp+ZS9oT3gP6zL7oedM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Aug 23 05:34:59 2025 GMT Not After : Aug 30 05:34:59 2025 GMT Subject: CN=68a95303-22a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8d:0d:2e:9b:c0:5e:fa:58:9a:9d:6d:03:a2: 14:64:33:57:ae:48:61:67:d1:39:9c:79:86:dc:8d: 13:b5:3e:82:88:13:64:4a:f8:7d:29:94:da:c9:e9: 09:cc:44:9b:76:a0:69:a3:8c:34:10:39:a6:2d:04: 43:65:3e:24:fe:10:fa:6b:84:8f:24:ff:16:a8:c9: 29:53:3b:f3:96:b6:d4:46:3d:d3:60:c4:56:69:ec: 68:81:4e:75:20:4a:80:82:c2:32:da:c3:ee:0b:7b: f6:f8:b9:fd:cb:95:a9:c5:05:5c:f3:00:8f:91:5c: b7:d3:67:65:c1:e1:43:1e:b9:e4:ef:4d:25:e2:89: 26:08:a9:70:73:59:97:a1:26:57:73:56:0f:8c:d4: 61:55:b0:6c:23:04:11:2e:50:67:80:b8:d3:a7:c8: b0:9d:0e:8b:85:c0:78:51:37:f3:ea:53:32:1b:3e: eb:65:87:7e:d8:65:db:dd:61:0c:76:8a:20:77:7c: c8:a3:67:13:5f:05:31:75:24:e8:95:da:3a:86:0e: bb:d3:ba:76:ba:18:06:37:e3:07:c6:f2:d1:a5:c5: d8:e1:cf:e8:77:bc:d5:b5:34:0e:6d:98:21:db:e9: 01:6f:05:4f:ab:e3:4a:53:f8:3b:8c:cf:bd:80:a1: 32:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2F:A2:14:5F:E3:CC:37:1A:EA:32:65:F2:DF:69:1A:3E:60:CF:E1 X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:99:1a:24:cc:1d:c0:76:c1:17:42:fa:a1:45:cd:67:6d:37: 9b:a2:22:de:5f:d1:4f:2e:a8:94:a5:14:98:30:41:d4:57:c9: f3:7e:0b:80:9c:ef:65:e4:05:11:94:96:48:5e:20:ce:7b:86: fe:95:58:3c:2f:96:7a:66:d8:30:b2:63:56:95:17:0f:c1:b2: 6f:d0:07:50:f8:96:79:d3:06:a7:4f:09:a0:b4:23:c5:0b:85: 4f:aa:53:b9:89:5d:1d:89:6c:d9:54:08:29:aa:91:37:f6:65: 23:e6:55:70:13:3d:2e:51:50:e0:37:05:54:17:8b:d6:d7:5b: 6c:ab:dd:05:f9:6b:7a:75:21:cb:7d:e9:36:af:7f:23:c3:03: 7a:05:4c:4e:25:39:69:f8:22:71:31:90:64:a7:45:68:57:d1: 9f:b2:57:94:98:59:e7:86:7c:f3:a0:a4:6e:fc:29:c9:79:7e: 32:70:61:1f:19:d4:8d:53:d6:e3:7d:7c:60:20:88:fb:c7:06: c5:01:72:42:6d:6a:4e:14:7a:20:0d:35:ca:da:31:75:5d:0c: 9c:dc:d8:62:40:ac:fc:a2:f1:ea:e3:a8:d3:38:0c:fc:82:f1: 2f:a1:ce:d0:50:34:06:40:7e:ce:2e:e8:53:52:f1:42:02:8c: e5:69:db:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjUwODIzMDUzNDU5WhcNMjUwODMwMDUzNDU5WjAYMRYwFAYD VQQDEw02OGE5NTMwMy0yMmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwI0NLpvAXvpYmp1tA6IUZDNXrkhhZ9E5nHmG3I0TtT6CiBNkSvh9KZTayekJ zESbdqBpo4w0EDmmLQRDZT4k/hD6a4SPJP8WqMkpUzvzlrbURj3TYMRWaexogU51 IEqAgsIy2sPuC3v2+Ln9y5WpxQVc8wCPkVy302dlweFDHrnk700l4okmCKlwc1mX oSZXc1YPjNRhVbBsIwQRLlBngLjTp8iwnQ6LhcB4UTfz6lMyGz7rZYd+2GXb3WEM doogd3zIo2cTXwUxdSToldo6hg6707p2uhgGN+MHxvLRpcXY4c/od7zVtTQObZgh 2+kBbwVPq+NKU/g7jM+9gKEyOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKovohRf 48w3GuoyZfLfaRo+YM/hMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBvmRokzB3AdsEXQvqhRc1nbTeboiLeX9FPLqiUpRSYMEHUV8nzfguA nO9l5AURlJZIXiDOe4b+lVg8L5Z6ZtgwsmNWlRcPwbJv0AdQ+JZ50wanTwmgtCPF C4VPqlO5iV0diWzZVAgpqpE39mUj5lVwEz0uUVDgNwVUF4vW11tsq90F+Wt6dSHL fek2r38jwwN6BUxOJTlp+CJxMZBkp0VoV9GfsleUmFnnhnzzoKRu/CnJeX4ycGEf GdSNU9bjfXxgIIj7xwbFAXJCbWpOFHogDTXK2jF1XQyc3NhiQKz8ovHq46jTOAz8 gvEvoc7QUDQGQH7OLuhTUvFCAozladsX -----END CERTIFICATE-----Generated at Sun Aug 24 00:44:05 2025 by rpki-client