$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: t/tu6iZwy8oehvQkxgSernm+xtOwbRFQ2qy2zfgWMEY= Subject key identifier: 6F:66:8E:B7:1F:A9:25:D9:0D:DB:D6:39:8F:0C:CB:21:5E:5F:57:EE Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: 71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: 6A Signing time: Sat 23 Aug 2025 07:16:05 +0000 Manifest this update: Sat 23 Aug 2025 07:16:05 +0000 Manifest next update: Sat 30 Aug 2025 07:16:05 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: RRLuAGH2dwwWZmc2Te3rg7u6JE3fV25ZI8SVWquGl04=) 2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: /RmfZz46so9ge+fbPNaFv77MZSPZTzTOQnyx59sNwag=) 3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: b+8Vf+1PI1yNyvvstVRxJPifoMZ8KqBIQc0NBIzO5qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 113 (0x71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Validity Not Before: Aug 23 07:16:05 2025 GMT Not After : Aug 30 07:16:05 2025 GMT Subject: CN=68a96ab5-efc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b5:ed:6a:c6:22:84:df:26:a6:a9:b0:05:5c: 67:78:01:5d:34:8e:96:f0:03:ea:32:fa:82:2a:f1: 88:20:7d:f1:39:8b:96:3b:a5:4e:d2:96:8b:ce:5a: 9e:bf:3b:68:81:bd:2e:7d:64:69:09:e6:64:29:44: 1d:e4:1b:90:67:94:00:ed:9a:e1:db:65:79:07:65: da:6b:dc:e7:a3:aa:2e:93:7a:33:0d:2b:59:af:ad: ae:5f:6a:91:55:fc:91:6e:9b:4b:22:d2:00:75:e3: b8:a0:39:ed:15:3c:6c:56:42:c7:a6:79:7a:28:37: 9f:64:02:63:c4:bd:fd:49:56:fa:ed:f2:46:4b:3e: 55:e5:f7:b4:ea:85:ca:11:8f:52:2f:8c:33:19:f2: 13:54:45:85:68:88:89:f5:b0:dc:5a:ab:b7:f6:35: 42:96:8b:56:ee:da:d6:4f:d5:51:67:d2:2d:0b:3e: 18:68:1d:e7:f2:89:36:20:a3:74:c7:0a:9b:3d:29: b8:09:0c:c6:8c:d9:5b:25:60:6c:a4:9e:fb:55:2e: 7c:37:40:58:3d:6f:e2:35:bc:93:1a:6c:9f:b7:51: 9d:10:81:77:e7:1b:53:03:c8:a1:d4:66:63:9a:b5: 7d:b6:3b:8c:01:4e:5e:c7:30:c8:82:e6:6a:c0:ef: 7a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:66:8E:B7:1F:A9:25:D9:0D:DB:D6:39:8F:0C:CB:21:5E:5F:57:EE X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ba:83:da:62:f8:58:15:dd:03:5c:3a:86:03:58:26:af:8b:de: bf:ee:3f:f4:60:17:77:e2:a5:e2:6d:e2:7c:ab:c7:4d:52:3b: 68:50:09:ef:f3:b9:75:58:ef:61:5c:0b:1b:71:b4:3d:29:94: 49:b6:46:8c:a7:0a:7b:cf:70:f8:01:0d:af:be:a3:48:7a:8e: 2e:aa:cf:12:27:63:88:e1:b9:c7:39:2b:24:d3:c3:74:55:5b: f6:28:68:c6:dc:fe:1b:78:c1:6f:c3:cf:38:1f:d9:75:da:0d: ae:a6:f5:a4:9b:0f:65:bf:61:0b:8c:30:e3:0b:b6:47:9b:af: e8:0c:f9:92:39:d1:4c:13:c4:c3:b8:6a:fb:3b:b8:de:36:aa: 97:00:be:07:38:af:e2:11:65:24:06:83:dd:9c:33:ac:ff:b8: 07:b2:1a:48:90:0f:c5:4b:ec:3e:92:f9:f6:7a:e5:d2:b3:d8: e2:4f:d0:51:11:28:0a:3d:8c:ee:5b:c1:67:14:07:56:4f:11: 93:d9:f4:c6:fe:92:d8:46:1a:62:e1:d1:e1:ae:bb:3e:26:f2: df:05:8b:b2:27:4e:05:63:f9:70:16:e2:8e:b2:35:2c:89:a8: 58:29:a4:2e:5d:04:67:a6:fd:ee:03:d8:cf:67:82:4f:a6:b5: fd:cd:c8:09 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBcTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTRDMTExMC8GA1UEBRMoMDQ3RUYxQTFDRjY1OTY2MzQ5ODY2NzY3NjU1NjQ4RUVG OTExMEM1QTAeFw0yNTA4MjMwNzE2MDVaFw0yNTA4MzAwNzE2MDVaMBgxFjAUBgNV BAMTDTY4YTk2YWI1LWVmYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkte1qxiKE3yamqbAFXGd4AV00jpbwA+oy+oIq8YggffE5i5Y7pU7SlovOWp6/ O2iBvS59ZGkJ5mQpRB3kG5BnlADtmuHbZXkHZdpr3Oejqi6TejMNK1mvra5fapFV /JFum0si0gB147igOe0VPGxWQsemeXooN59kAmPEvf1JVvrt8kZLPlXl97TqhcoR j1IvjDMZ8hNURYVoiIn1sNxaq7f2NUKWi1bu2tZP1VFn0i0LPhhoHefyiTYgo3TH Cps9KbgJDMaM2VslYGyknvtVLnw3QFg9b+I1vJMabJ+3UZ0QgXfnG1MDyKHUZmOa tX22O4wBTl7HMMiC5mrA73pzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb2aOtx+p JdkN29Y5jwzLIV5fV+4wHwYDVR0jBBgwFoAUBH7xoc9llmNJhmdnZVZI7vkRDFow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFNEMxLzM2NDQ4ODdBRTlC QjExRUZCQUFDOUQ3MEM0RjlBRTAyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRG by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQkg3eG9jOWxsbU5KaG1kblpWWkk3dmtSREZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF NEMxLzM2NDQ4ODdBRTlCQjExRUZCQUFDOUQ3MEM0RjlBRTAyL0JIN3hvYzlsbG1O SmhtZG5aVlpJN3ZrUkRGby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALqD2mL4WBXdA1w6hgNYJq+L3r/uP/RgF3fipeJt4nyrx01SO2hQCe/z uXVY72FcCxtxtD0plEm2RoynCnvPcPgBDa++o0h6ji6qzxInY4jhucc5KyTTw3RV W/YoaMbc/ht4wW/Dzzgf2XXaDa6m9aSbD2W/YQuMMOMLtkebr+gM+ZI50UwTxMO4 avs7uN42qpcAvgc4r+IRZSQGg92cM6z/uAeyGkiQD8VL7D6S+fZ65dKz2OJP0FER KAo9jO5bwWcUB1ZPEZPZ9Mb+kthGGmLh0eGuuz4m8t8Fi7InTgVj+XAW4o6yNSyJ qFgppC5dBGem/e4D2M9ngk+mtf3NyAk= -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:09 2025 by rpki-client