$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft File: vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json) Hash identifier: oUBh2GOPKud/nwjpx091oAQtznIMGQhLvk7mMOx+IyA= Subject key identifier: 9B:C8:EF:8E:53:D4:96:60:D8:9D:5D:3A:45:80:11:9C:A0:47:EC:8F Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B Certificate issuer: /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Certificate serial: 06A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft Manifest number: 06A1 Signing time: Wed 02 Jul 2025 22:28:06 +0000 Manifest this update: Wed 02 Jul 2025 22:28:05 +0000 Manifest next update: Wed 09 Jul 2025 22:28:05 +0000 Files and hashes: 1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: rWzCMyjIry7LMB4scz603hW3h4aMRQwq8/mYKkASI8E=) 2: 6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (hash: I+eEa2BCG1ocgDoHBOIM7GqSJBtmqFy6z+9Rb7P5WKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:28:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1702 (0x6a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C73A7, serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Validity Not Before: Jul 2 22:28:05 2025 GMT Not After : Jul 9 22:28:05 2025 GMT Subject: CN=6865b276-3f84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:08:fc:44:b0:c8:18:8f:e0:d3:e7:50:ed:c5: a2:85:92:e6:0b:72:68:12:7a:94:07:6b:b2:c7:71: 0a:91:8c:a6:e3:57:11:42:2c:80:80:4c:3f:38:c5: cc:09:dc:8c:79:ad:25:a7:d2:43:45:f5:aa:53:ec: 8f:3f:dd:14:96:82:f2:19:1e:99:88:c3:06:d5:7d: bb:b2:30:e1:98:12:d7:57:ae:d7:ec:e3:5d:0d:65: 75:10:07:55:74:80:9f:c6:d8:30:dd:10:a1:b5:db: db:4a:48:a7:fe:1c:09:4f:61:fc:66:4a:a4:68:16: d8:b3:ce:b4:7b:9d:ff:05:b0:3d:b7:49:ac:b4:44: 4b:1e:8c:19:9f:4f:dd:c9:ad:4d:2d:a8:b2:fe:01: e4:b6:88:2a:bd:b5:9a:42:38:40:66:4e:5e:35:9b: f2:a2:a3:37:0b:6e:bb:31:2d:5d:0d:32:9b:77:77: 00:5c:2f:c0:eb:51:a6:14:5d:c3:b1:a8:72:57:47: 64:b4:c0:54:7f:bc:7f:8c:57:a8:16:a7:4b:0f:b1: e8:47:61:0f:02:41:76:64:30:08:c3:50:78:cf:02: a3:0b:0a:eb:18:02:22:c5:60:a8:03:01:c8:60:27: 3c:75:60:cc:d6:f6:c8:be:05:76:88:dd:58:97:0e: b8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C8:EF:8E:53:D4:96:60:D8:9D:5D:3A:45:80:11:9C:A0:47:EC:8F X509v3 Authority Key Identifier: keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:3d:78:ae:b8:64:24:75:4a:e9:cb:33:ff:e1:7c:f0:b7:2d: 00:92:e2:12:35:1d:b5:b3:f2:6c:b1:b9:5a:fd:1e:2c:63:46: 32:86:51:20:91:92:74:5a:04:5d:4b:0f:be:f8:67:39:a0:b5: 7e:6c:2f:54:a5:f7:55:2b:b6:3b:6b:ca:b3:8e:13:81:6e:81: e7:b8:39:05:18:15:b4:af:c2:13:aa:80:d9:e8:ec:b7:ed:30: 10:46:72:a7:76:c6:d5:3b:6c:c9:2b:19:e4:6e:84:f5:3f:82: a2:6e:fa:63:79:79:58:d7:62:44:d0:6c:33:88:b5:e7:94:bd: b2:f0:d2:08:70:f1:c3:02:ce:fd:a8:72:56:7c:97:a7:3e:1e: 38:58:34:0e:99:79:27:81:45:15:c0:6d:2a:f8:29:b4:7d:a9: 32:8d:bc:95:93:f5:c0:38:b0:fa:85:5f:ca:93:fe:eb:68:f2: d6:70:aa:82:9d:4a:58:d9:c5:67:02:07:fd:54:0a:9d:ea:23: 32:7d:42:5c:1a:a1:4a:5d:7c:61:3b:3b:02:fd:fb:30:c0:1a: 5c:a6:ff:54:09:66:c3:38:f7:74:d2:ba:0f:3a:28:dd:fb:be: dc:03:a5:85:fc:7e:e5:39:70:09:83:95:04:7d:a2:be:42:ac: 80:82:26:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczQTcxMTAvBgNVBAUTKEJDMUI0NDZFOTczN0U0OTY0QzA3QUI4Q0I2REMxODA2 RDZFQkZGOUIwHhcNMjUwNzAyMjIyODA1WhcNMjUwNzA5MjIyODA1WjAYMRYwFAYD VQQDEw02ODY1YjI3Ni0zZjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4gj8RLDIGI/g0+dQ7cWihZLmC3JoEnqUB2uyx3EKkYym41cRQiyAgEw/OMXM CdyMea0lp9JDRfWqU+yPP90UloLyGR6ZiMMG1X27sjDhmBLXV67X7ONdDWV1EAdV dICfxtgw3RChtdvbSkin/hwJT2H8ZkqkaBbYs860e53/BbA9t0mstERLHowZn0/d ya1NLaiy/gHktogqvbWaQjhAZk5eNZvyoqM3C267MS1dDTKbd3cAXC/A61GmFF3D sahyV0dktMBUf7x/jFeoFqdLD7HoR2EPAkF2ZDAIw1B4zwKjCwrrGAIixWCoAwHI YCc8dWDM1vbIvgV2iN1Ylw64SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJvI745T 1JZg2J1dOkWAEZygR+yPMB8GA1UdIwQYMBaAFLwbRG6XN+SWTAerjLbcGAbW6/+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzNBNy8yRDJDQjM0MDZG N0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVKWk1CNnVNdHR3WUJ0YnJf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZCdEVicGMzNUpaTUI2dU10dHdZQnRicl81cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzNBNy8yRDJDQjM0MDZGN0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVK Wk1CNnVNdHR3WUJ0YnJfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3PXiuuGQkdUrpyzP/4Xzwty0AkuISNR21s/Jssbla/R4sY0YyhlEg kZJ0WgRdSw+++Gc5oLV+bC9UpfdVK7Y7a8qzjhOBboHnuDkFGBW0r8ITqoDZ6Oy3 7TAQRnKndsbVO2zJKxnkboT1P4KibvpjeXlY12JE0GwziLXnlL2y8NIIcPHDAs79 qHJWfJenPh44WDQOmXkngUUVwG0q+Cm0fakyjbyVk/XAOLD6hV/Kk/7raPLWcKqC nUpY2cVnAgf9VAqd6iMyfUJcGqFKXXxhOzsC/fswwBpcpv9UCWbDOPd00roPOijd +77cA6WF/H7lOXAJg5UEfaK+QqyAgiZP -----END CERTIFICATE-----Generated at Thu Jul 3 08:09:41 2025 by rpki-client