$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft File: b7CqV86Epc0prEfZ19CJSOsh8Go.mft (raw, json) Hash identifier: L4djM5Y25uoLr0g8qU4gsWY6WNY5SAIGw0JA5aAivrc= Subject key identifier: C6:8C:F3:1C:29:1E:9F:A2:4A:39:19:C0:A5:27:9E:E5:68:B8:93:0C Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A Certificate issuer: /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Certificate serial: 0BD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft Manifest number: 0BCA Signing time: Fri 22 Aug 2025 19:02:25 +0000 Manifest this update: Fri 22 Aug 2025 19:02:24 +0000 Manifest next update: Fri 29 Aug 2025 19:02:24 +0000 Files and hashes: 1: b7CqV86Epc0prEfZ19CJSOsh8Go.crl (hash: O2DfPOK/wjDHK/q4vuNX7d4WHLbdGaa/HpneUIh4uSY=) 2: 059432729E6A11EEB0983523C4F9AE02.roa (hash: RnlpXPDYIPfGNZjOgLnab/vPRagmWGYMa1TJEw32Q5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3029 (0xbd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6861, serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Validity Not Before: Aug 22 19:02:24 2025 GMT Not After : Aug 29 19:02:24 2025 GMT Subject: CN=68a8bec0-c6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1d:b1:88:df:bb:d0:fb:c2:de:9d:ae:2c:c0: c2:01:c9:7e:aa:69:5a:3b:ef:aa:24:e9:92:7a:5e: f4:a5:59:4e:50:44:3b:58:a1:59:eb:42:3d:30:f0: 34:65:cb:f4:06:2c:c8:73:b3:d2:c4:d9:45:25:ec: da:dd:e6:97:0e:57:5e:0c:cd:c9:5d:fa:ab:3b:2c: c9:a8:04:9a:3f:dd:27:e4:49:ae:7b:ac:be:bc:60: 9c:8f:c4:29:70:b6:af:1e:73:71:b7:52:8c:5c:87: a8:c1:b0:2a:ed:53:d7:4e:b2:25:92:69:94:f8:16: c8:af:7e:d6:43:af:f5:4d:f2:5e:93:17:56:b6:d0: 4f:1c:25:66:d0:ff:8a:a5:67:f1:94:38:81:25:0b: f1:67:9d:45:12:4f:52:3c:57:fd:88:14:82:12:89: 11:db:7d:69:85:eb:8d:41:5e:ac:94:ce:c0:fd:10: 62:f9:49:e7:32:e7:ab:b0:98:60:09:53:56:3a:31: a9:eb:6f:f5:3f:63:b7:26:f2:a6:cd:54:32:0e:2e: ce:f0:8d:5b:92:92:a3:c1:f1:24:6a:9a:ad:d5:92: 45:c7:81:46:99:82:1b:02:15:0c:72:d2:94:07:0a: 32:14:c1:33:c7:1e:d6:11:76:94:d0:e8:f0:1d:84: 4a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8C:F3:1C:29:1E:9F:A2:4A:39:19:C0:A5:27:9E:E5:68:B8:93:0C X509v3 Authority Key Identifier: keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:be:a3:11:6a:a2:d8:5f:e1:ca:70:5d:eb:8c:6d:62:02:0c: 4f:ae:05:0c:87:65:ac:ef:2a:8c:18:eb:4c:93:c1:45:f1:1a: 49:94:91:a6:e2:f2:ac:df:85:32:97:1f:63:83:bc:87:3d:f7: 33:df:a0:74:b8:d6:62:bf:3c:8b:51:c1:66:ad:34:88:99:42: 48:81:07:7f:53:45:c4:dc:09:10:0b:14:80:15:24:58:15:16: 39:5e:d2:b5:d5:ce:68:ee:79:0e:03:35:7e:22:d2:56:d6:dd: d5:8c:ae:1c:bb:86:f8:03:65:cb:5a:6f:80:03:22:5b:d9:45: 07:da:51:70:a6:8f:6f:d7:33:c0:11:b5:37:d3:85:5b:79:21: ee:39:a0:a3:fd:a6:c7:3b:90:46:46:de:86:8b:44:1a:f4:92: 5e:05:e7:3d:95:e7:b3:7a:c4:ce:ce:a6:9f:f4:21:7f:3d:99: 7b:4d:2d:7e:8f:11:3d:8c:89:ad:9c:4c:ec:dc:30:6e:4e:71: 61:14:0c:41:1f:db:bb:a3:82:5d:40:3b:dd:66:2d:4e:c0:68: 77:69:8d:f0:d3:70:c8:76:39:cd:5e:7f:1f:bf:57:e7:ef:04: 95:92:55:38:c7:ab:36:2d:91:cb:2e:ca:9a:3e:a4:aa:d8:3d: 83:d2:51:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4NjExMTAvBgNVBAUTKDZGQjBBQTU3Q0U4NEE1Q0QyOUFDNDdEOUQ3RDA4OTQ4 RUIyMUYwNkEwHhcNMjUwODIyMTkwMjI0WhcNMjUwODI5MTkwMjI0WjAYMRYwFAYD VQQDEw02OGE4YmVjMC1jNmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApR2xiN+70PvC3p2uLMDCAcl+qmlaO++qJOmSel70pVlOUEQ7WKFZ60I9MPA0 Zcv0BizIc7PSxNlFJeza3eaXDldeDM3JXfqrOyzJqASaP90n5Emue6y+vGCcj8Qp cLavHnNxt1KMXIeowbAq7VPXTrIlkmmU+BbIr37WQ6/1TfJekxdWttBPHCVm0P+K pWfxlDiBJQvxZ51FEk9SPFf9iBSCEokR231pheuNQV6slM7A/RBi+UnnMuersJhg CVNWOjGp62/1P2O3JvKmzVQyDi7O8I1bkpKjwfEkapqt1ZJFx4FGmYIbAhUMctKU BwoyFMEzxx7WEXaU0OjwHYRKqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMaM8xwp Hp+iSjkZwKUnnuVouJMMMB8GA1UdIwQYMBaAFG+wqlfOhKXNKaxH2dfQiUjrIfBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjg2MS81Q0MyMTAwMDI1 NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBjMHByRWZaMTlDSlNPc2g4 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I3Q3FWODZFcGMwcHJFZloxOUNKU09zaDhHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Njg2MS81Q0MyMTAwMDI1NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBj MHByRWZaMTlDSlNPc2g4R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuvqMRaqLYX+HKcF3rjG1iAgxPrgUMh2Ws7yqMGOtMk8FF8RpJlJGm 4vKs34Uylx9jg7yHPfcz36B0uNZivzyLUcFmrTSImUJIgQd/U0XE3AkQCxSAFSRY FRY5XtK11c5o7nkOAzV+ItJW1t3VjK4cu4b4A2XLWm+AAyJb2UUH2lFwpo9v1zPA EbU304VbeSHuOaCj/abHO5BGRt6Gi0Qa9JJeBec9leezesTOzqaf9CF/PZl7TS1+ jxE9jImtnEzs3DBuTnFhFAxBH9u7o4JdQDvdZi1OwGh3aY3w03DIdjnNXn8fv1fn 7wSVklU4x6s2LZHLLsqaPqSq2D2D0lG1 -----END CERTIFICATE-----Generated at Sat Aug 23 16:09:53 2025 by rpki-client