$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft File: vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json) Hash identifier: LmLlm2q/SMGCWoa9DZqKbAnkNK4tWVTp7R7Y3uyFf2s= Subject key identifier: 36:DE:F6:9B:F1:E8:21:C8:91:E1:01:A4:4F:A9:ED:34:54:DA:93:17 Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B Certificate issuer: /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Certificate serial: 06C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft Manifest number: 06BB Signing time: Fri 22 Aug 2025 22:15:23 +0000 Manifest this update: Fri 22 Aug 2025 22:15:22 +0000 Manifest next update: Fri 29 Aug 2025 22:15:22 +0000 Files and hashes: 1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: BmEDxP0qflqCTJdmEdmSiECNlLxyEZ6DFZyA+pn2Hus=) 2: 6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (hash: I+eEa2BCG1ocgDoHBOIM7GqSJBtmqFy6z+9Rb7P5WKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1728 (0x6c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C73A7, serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Validity Not Before: Aug 22 22:15:22 2025 GMT Not After : Aug 29 22:15:22 2025 GMT Subject: CN=68a8ebfb-451e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:10:d0:54:99:60:0c:54:0a:dd:9e:f9:a9:2a: b6:63:73:6a:c4:9c:5b:3b:fb:d8:a5:a5:86:e3:e4: 53:ea:79:69:e6:84:01:41:71:36:c0:2a:f6:dc:8d: 17:bd:a9:86:72:96:ab:c4:0a:1c:ae:f8:62:ef:33: dc:c4:94:c8:a2:40:2d:22:e7:ef:f6:ab:e9:20:83: a9:fc:98:be:eb:6c:01:34:f8:a3:9b:86:ef:82:ee: df:42:75:b7:e5:4a:87:0f:0c:bc:84:00:10:d4:9f: b0:ca:70:07:53:79:2c:ca:d1:a9:84:cd:d9:98:a5: 28:02:2b:22:03:86:b0:ce:ed:e0:0f:e6:dd:26:fe: 24:07:e6:6b:89:94:bc:16:d3:14:f0:4d:48:fb:65: 59:c2:75:2d:c9:ea:be:f7:71:9a:fd:0b:24:6d:1c: 44:95:d3:3c:0a:50:d8:8f:f2:af:8e:a2:57:c0:5a: 96:1e:33:f0:11:b2:d0:3d:7a:4d:3f:d3:58:ef:1d: 4a:2c:87:48:f7:37:be:23:69:ae:89:2b:3e:77:28: 6c:6c:7c:fb:eb:60:44:75:d9:14:4d:49:e6:d8:ea: 97:98:1f:4e:95:d8:cd:13:89:41:47:d0:0c:58:af: ad:1b:bb:ff:d6:c1:36:c7:e3:cd:f4:ea:b2:f7:63: 31:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DE:F6:9B:F1:E8:21:C8:91:E1:01:A4:4F:A9:ED:34:54:DA:93:17 X509v3 Authority Key Identifier: keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f6:3b:27:ac:5d:5e:1c:29:23:4c:30:09:d3:01:7f:66:60: 3f:da:ee:9f:d3:ca:ec:44:08:82:e4:59:51:a0:62:0d:0b:c8: e3:f7:1e:a6:3f:ba:60:f0:15:6e:ab:37:b9:3d:b2:e0:44:60: 68:d4:65:9c:7e:71:1a:8b:1d:71:16:25:9a:56:2c:e5:c4:9f: f0:39:7a:70:75:e3:fe:63:0e:33:25:26:cd:f0:7b:f6:68:ab: 8f:b2:82:df:d3:c2:43:31:b3:0d:5c:1f:56:d3:82:fe:83:ec: 67:04:b0:da:cc:00:b1:ab:86:7b:7e:a8:51:8d:90:82:ad:7a: 75:08:ef:49:27:03:2a:47:04:fb:cc:b7:3b:f5:29:10:52:18: e7:55:5e:50:97:ab:89:c7:6c:7f:e6:15:23:54:1e:bd:a3:88: c6:4c:ef:2c:ee:77:62:95:2f:c1:e7:40:59:9c:d0:b9:07:8e: fb:fb:56:f5:96:f0:59:25:97:18:51:59:56:51:da:b4:72:19: 69:53:9c:ab:51:c7:d9:ab:b5:8e:e2:cb:59:12:71:27:27:16: 7d:6a:48:d2:9c:73:f1:29:d0:09:0c:f0:d2:5b:75:3b:c6:28: e5:4f:59:b0:44:22:4b:28:55:3a:a0:32:2e:73:1f:52:2e:1c: bf:97:ad:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczQTcxMTAvBgNVBAUTKEJDMUI0NDZFOTczN0U0OTY0QzA3QUI4Q0I2REMxODA2 RDZFQkZGOUIwHhcNMjUwODIyMjIxNTIyWhcNMjUwODI5MjIxNTIyWjAYMRYwFAYD VQQDEw02OGE4ZWJmYi00NTFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzhDQVJlgDFQK3Z75qSq2Y3NqxJxbO/vYpaWG4+RT6nlp5oQBQXE2wCr23I0X vamGcparxAocrvhi7zPcxJTIokAtIufv9qvpIIOp/Ji+62wBNPijm4bvgu7fQnW3 5UqHDwy8hAAQ1J+wynAHU3ksytGphM3ZmKUoAisiA4awzu3gD+bdJv4kB+ZriZS8 FtMU8E1I+2VZwnUtyeq+93Ga/QskbRxEldM8ClDYj/KvjqJXwFqWHjPwEbLQPXpN P9NY7x1KLIdI9ze+I2muiSs+dyhsbHz762BEddkUTUnm2OqXmB9OldjNE4lBR9AM WK+tG7v/1sE2x+PN9Oqy92MxywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDbe9pvx 6CHIkeEBpE+p7TRU2pMXMB8GA1UdIwQYMBaAFLwbRG6XN+SWTAerjLbcGAbW6/+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzNBNy8yRDJDQjM0MDZG N0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVKWk1CNnVNdHR3WUJ0YnJf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZCdEVicGMzNUpaTUI2dU10dHdZQnRicl81cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzNBNy8yRDJDQjM0MDZGN0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVK Wk1CNnVNdHR3WUJ0YnJfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBb9jsnrF1eHCkjTDAJ0wF/ZmA/2u6f08rsRAiC5FlRoGINC8jj9x6m P7pg8BVuqze5PbLgRGBo1GWcfnEaix1xFiWaVizlxJ/wOXpwdeP+Yw4zJSbN8Hv2 aKuPsoLf08JDMbMNXB9W04L+g+xnBLDazACxq4Z7fqhRjZCCrXp1CO9JJwMqRwT7 zLc79SkQUhjnVV5Ql6uJx2x/5hUjVB69o4jGTO8s7ndilS/B50BZnNC5B477+1b1 lvBZJZcYUVlWUdq0chlpU5yrUcfZq7WO4stZEnEnJxZ9akjSnHPxKdAJDPDSW3U7 xijlT1mwRCJLKFU6oDIucx9SLhy/l618 -----END CERTIFICATE-----Generated at Sat Aug 23 21:35:01 2025 by rpki-client