$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft File: bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json) Hash identifier: k37DMgexIk6JXtyRX/rco4tIokz5PRdQ2abHkFRFm9A= Subject key identifier: 2A:F4:12:6D:21:F5:5C:46:14:47:CC:C1:5D:5F:50:C4:1B:FD:31:3F Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 Certificate issuer: /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Certificate serial: 0270 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft Manifest number: 026B Signing time: Sat 23 Aug 2025 01:58:52 +0000 Manifest this update: Sat 23 Aug 2025 01:58:51 +0000 Manifest next update: Sat 30 Aug 2025 01:58:51 +0000 Files and hashes: 1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: mH0tke6XAkWph7X9URB7xsie+XG+gE9HbawPSFK5Kfk=) 2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: F+DLJ1aQV5oLLpGFe5erh1ip1G2eNsPVMkZyfdufJjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:58:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 624 (0x270) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Validity Not Before: Aug 23 01:58:51 2025 GMT Not After : Aug 30 01:58:51 2025 GMT Subject: CN=68a9205b-c4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:44:5f:54:8e:60:94:cb:b2:28:8c:89:74:f4: c2:f3:a7:ea:c9:9e:0d:34:b1:15:c1:ba:64:9e:96: 54:43:17:8a:6d:a1:00:b3:24:7b:81:7b:1b:bd:68: 13:22:98:0a:00:0e:9a:88:c5:d6:8e:7b:5f:f4:3b: 8a:1f:73:f8:2a:ae:98:7b:9f:a6:6e:3c:22:38:ba: 72:51:a2:af:7c:02:2b:67:d6:b7:90:41:a5:aa:9f: 9c:8c:0c:10:3b:ab:ab:fb:3a:3c:b6:2f:a9:a8:c5: 23:cf:16:4b:b1:0a:f3:f4:1f:b1:76:4f:ff:f5:69: ef:8b:bf:6b:9f:73:89:c5:da:91:b7:cf:cc:aa:60: 65:0f:aa:6b:cb:31:c0:8b:dc:2b:8f:d7:83:43:ee: b7:88:3c:4c:b8:05:88:f2:b9:0a:26:0b:b3:a6:98: a5:6a:a2:8e:77:49:08:6f:fc:5b:ef:40:17:a6:e9: 3a:98:0b:0a:34:da:a6:c1:13:d2:9e:6c:42:ca:3e: 86:88:f2:72:23:49:57:37:81:23:49:d6:ed:23:e8: 7b:b5:5a:14:15:30:ae:7f:fa:11:ef:65:9b:fd:ea: 57:78:f8:ea:0b:70:32:59:41:b9:2c:3a:f2:51:4a: b9:43:0b:4c:11:be:a6:22:9c:1c:97:37:1d:36:12: 1b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F4:12:6D:21:F5:5C:46:14:47:CC:C1:5D:5F:50:C4:1B:FD:31:3F X509v3 Authority Key Identifier: keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:b3:c5:9a:25:4b:3a:ea:29:8c:ca:7d:5a:a4:7e:ce:c9:58: df:71:6f:2f:c9:d6:a8:4e:6b:b8:07:cf:5a:ce:f9:33:37:31: e3:f4:61:7e:02:22:41:f1:6e:e2:23:f3:ed:75:9a:25:28:e0: ff:68:69:c8:6a:68:79:0d:3b:29:53:ad:97:5e:a2:a0:88:0b: 3b:42:4b:9f:2c:87:12:cd:15:12:a6:d9:9d:88:a3:2d:48:7c: c4:e4:5f:79:85:c9:94:3b:d2:61:20:df:30:ba:fe:8f:49:69: 61:8e:73:5b:4e:a8:60:f9:54:a8:67:ce:0d:a1:6c:03:cf:d9: 14:41:49:6c:88:29:ca:ef:64:ee:db:92:02:58:74:6f:9e:e0: 4f:af:c4:7b:16:6b:0b:1a:50:4c:33:0e:5c:61:34:43:7e:9c: 78:fa:38:b9:c7:b9:51:7b:5d:44:a4:6c:b3:a8:6a:ee:63:6a: 0b:70:06:8a:2f:78:ef:ab:c2:f0:59:ce:2d:c7:74:4d:d5:7f: 0a:53:91:7c:4f:ce:07:23:6b:82:ac:33:e7:e9:d1:a1:e8:73: 7f:70:63:dd:70:67:24:24:ac:0e:3e:e9:2d:ac:30:b8:4e:df: b5:9e:af:5d:ca:a3:54:a7:48:d7:f8:ab:53:60:70:25:ff:7c: ff:c2:79:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1QUExMTAvBgNVBAUTKDZDOUI5Njg3RDA1RTJCNUJFNTM2MTA5QTZBRjlCRkZB MTk5ODczRDQwHhcNMjUwODIzMDE1ODUxWhcNMjUwODMwMDE1ODUxWjAYMRYwFAYD VQQDEw02OGE5MjA1Yi1jNGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw0RfVI5glMuyKIyJdPTC86fqyZ4NNLEVwbpknpZUQxeKbaEAsyR7gXsbvWgT IpgKAA6aiMXWjntf9DuKH3P4Kq6Ye5+mbjwiOLpyUaKvfAIrZ9a3kEGlqp+cjAwQ O6ur+zo8ti+pqMUjzxZLsQrz9B+xdk//9Wnvi79rn3OJxdqRt8/MqmBlD6pryzHA i9wrj9eDQ+63iDxMuAWI8rkKJguzppilaqKOd0kIb/xb70AXpuk6mAsKNNqmwRPS nmxCyj6GiPJyI0lXN4EjSdbtI+h7tVoUFTCuf/oR72Wb/epXePjqC3AyWUG5LDry UUq5QwtMEb6mIpwclzcdNhIbNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCr0Em0h 9VxGFEfMwV1fUMQb/TE/MB8GA1UdIwQYMBaAFGyblofQXitb5TYQmmr5v/oZmHPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTVBQS8xNTZCRDg5RTI0 MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsxdmxOaENhYXZtXy1obVlj OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKdVdoOUJlSzF2bE5oQ2Fhdm1fLWhtWWM5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTVBQS8xNTZCRDg5RTI0MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsx dmxOaENhYXZtXy1obVljOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChs8WaJUs66imMyn1apH7OyVjfcW8vydaoTmu4B89azvkzNzHj9GF+ AiJB8W7iI/PtdZolKOD/aGnIamh5DTspU62XXqKgiAs7QkufLIcSzRUSptmdiKMt SHzE5F95hcmUO9JhIN8wuv6PSWlhjnNbTqhg+VSoZ84NoWwDz9kUQUlsiCnK72Tu 25ICWHRvnuBPr8R7FmsLGlBMMw5cYTRDfpx4+ji5x7lRe11EpGyzqGruY2oLcAaK L3jvq8LwWc4tx3RN1X8KU5F8T84HI2uCrDPn6dGh6HN/cGPdcGckJKwOPuktrDC4 Tt+1nq9dyqNUp0jX+KtTYHAl/3z/wnms -----END CERTIFICATE-----Generated at Sat Aug 23 20:45:05 2025 by rpki-client