$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft File: bb1cTQEh_LMY54xFG29WcyCYYAI.mft (raw, json) Hash identifier: z1KyagKAWjJSnZ06eJyNNAxkHJmR4upe4LthF79KX0Q= Subject key identifier: 2A:09:4C:2F:5A:D5:B2:9F:A4:B7:B1:38:7D:8A:53:A9:57:CC:69:24 Authority key identifier: 6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02 Certificate issuer: /CN=A91D1216/serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002 Certificate serial: 03E9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft Manifest number: 03B5 Signing time: Sat 23 Aug 2025 01:07:03 +0000 Manifest this update: Sat 23 Aug 2025 01:07:03 +0000 Manifest next update: Sat 30 Aug 2025 01:07:03 +0000 Files and hashes: 1: bb1cTQEh_LMY54xFG29WcyCYYAI.crl (hash: HiBKY1eeuGr7anJ4IQYAUdYjMwm4vjJxEYbfGKYUe2w=) 2: AEE9F9E6326011ED9031BC4FC4F9AE02.roa (hash: uzprXmLZAeVeFEFGMakzKpKMKq1iIlqcTuQSaK0YrGo=) 3: AD17704445F611EE97DF317CC4F9AE02.roa (hash: sdrVSjIs8Qd6YgjT3RuNMeG76kE1PDfBoWYkgwiCgcM=) 4: 943D15902D1011EFBBEBA67BC4F9AE02.roa (hash: r7+Epywiay/UAmGWjEXTbZ6MxuYjSj6zJi2sl5IN5FE=) 5: 9B0C244C73B611EEB18A0385C4F9AE02.roa (hash: YgWtLAFjeyb8EUf6jgk5P6z3rHF4ij9vs7WYRKlGxPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1001 (0x3e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1216, serialNumber=6DBD5C4D0121FCB318E78C451B6F567320986002 Validity Not Before: Aug 23 01:07:03 2025 GMT Not After : Aug 30 01:07:03 2025 GMT Subject: CN=68a91437-54b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:90:f1:9b:c8:f6:b7:64:56:8f:3d:69:40:21: 8d:50:54:f1:95:88:ea:d5:e5:60:94:f2:1f:6a:16: 59:ab:4d:b2:8b:44:f6:71:03:a9:65:74:d4:c5:e0: 68:2d:7d:34:da:bf:79:b2:33:d6:0c:c7:1e:d0:8f: 2a:2c:a3:cc:d6:4a:c1:4c:bd:0c:76:c4:99:e8:29: a1:cd:7e:72:d5:8f:01:7a:df:65:35:c3:fa:64:b1: e9:fe:2f:72:0a:e6:3e:34:c8:70:a9:9c:b7:b0:24: e9:a2:dd:07:98:ca:ea:4c:91:b6:ba:42:46:b6:95: 02:92:7a:88:ff:50:03:19:f3:40:63:3d:b8:2b:60: cb:21:20:61:6c:f6:43:b2:55:57:b9:5d:cb:f7:5d: a1:e6:63:ec:58:96:07:c7:e2:d2:0d:57:b8:d2:58: 92:dc:18:03:1c:e8:b1:b9:78:7f:19:2c:48:f3:72: 09:39:b9:bb:f7:51:50:29:2b:ff:21:a0:ba:3d:61: ef:ef:a2:c9:a7:f0:0a:25:af:19:c4:ea:d7:7a:9b: 85:b9:5f:0e:62:3c:6f:bc:13:8f:c9:9a:29:9f:87: 5c:fa:b8:4e:a6:04:a1:49:25:0d:4d:cc:da:64:ca: 5c:a6:5d:07:59:77:db:23:78:2e:13:11:6e:55:a5: 93:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:09:4C:2F:5A:D5:B2:9F:A4:B7:B1:38:7D:8A:53:A9:57:CC:69:24 X509v3 Authority Key Identifier: keyid:6D:BD:5C:4D:01:21:FC:B3:18:E7:8C:45:1B:6F:56:73:20:98:60:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bb1cTQEh_LMY54xFG29WcyCYYAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1216/DC78268CB94B11EC832B7419C4F9AE02/bb1cTQEh_LMY54xFG29WcyCYYAI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:34:6b:92:08:5c:c1:b4:8f:c6:f1:d7:02:a9:d9:7a:c6:27: f9:49:f1:c6:64:17:39:9e:78:66:59:34:a4:13:d1:0b:1c:2d: d7:1d:6c:fc:fe:2b:62:9b:61:2c:b6:81:45:25:40:6f:ae:51: 8a:4d:f8:93:63:bf:c2:c2:5e:09:6b:d7:f7:e5:51:91:f3:9a: 6f:9e:f4:b2:b6:b8:22:9d:e6:ab:0a:86:37:bb:b5:64:a8:01: 5f:25:b3:2d:0e:a9:fe:3d:94:68:20:64:82:3e:92:7d:2b:3b: e4:e3:8e:ca:e5:ee:31:71:5e:ca:d9:16:5c:e1:1e:dd:33:2f: 04:86:74:ec:14:40:78:0c:b2:2f:47:5d:db:c3:d4:9e:0e:cf: 90:4b:c6:f6:b7:a6:93:9d:42:af:66:3f:2e:3d:55:20:13:06: aa:ed:6d:27:17:45:3b:e0:37:64:bc:5b:87:29:37:38:0b:83: dc:6e:07:c4:4c:0a:63:12:ab:5f:76:66:7c:78:55:87:3d:0a: 12:11:ac:4e:69:67:51:50:fa:74:21:74:9c:ee:42:ed:50:ad: 0c:ac:bb:96:31:6e:dd:59:bc:59:95:5a:07:a2:19:3e:7f:0e: 6e:90:70:cb:b4:6f:fd:06:d9:0e:5f:41:89:e1:d5:6b:68:74: f8:dd:35:bc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDEyMTYxMTAvBgNVBAUTKDZEQkQ1QzREMDEyMUZDQjMxOEU3OEM0NTFCNkY1Njcz MjA5ODYwMDIwHhcNMjUwODIzMDEwNzAzWhcNMjUwODMwMDEwNzAzWjAYMRYwFAYD VQQDEw02OGE5MTQzNy01NGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnZDxm8j2t2RWjz1pQCGNUFTxlYjq1eVglPIfahZZq02yi0T2cQOpZXTUxeBo LX002r95sjPWDMce0I8qLKPM1krBTL0MdsSZ6CmhzX5y1Y8Bet9lNcP6ZLHp/i9y CuY+NMhwqZy3sCTpot0HmMrqTJG2ukJGtpUCknqI/1ADGfNAYz24K2DLISBhbPZD slVXuV3L912h5mPsWJYHx+LSDVe40liS3BgDHOixuXh/GSxI83IJObm791FQKSv/ IaC6PWHv76LJp/AKJa8ZxOrXepuFuV8OYjxvvBOPyZopn4dc+rhOpgShSSUNTcza ZMpcpl0HWXfbI3guExFuVaWTLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoJTC9a 1bKfpLexOH2KU6lXzGkkMB8GA1UdIwQYMBaAFG29XE0BIfyzGOeMRRtvVnMgmGAC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTIxNi9EQzc4MjY4Q0I5 NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9MTVk1NHhGRzI5V2N5Q1lZ QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JiMWNUUUVoX0xNWTU0eEZHMjlXY3lDWVlBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTIxNi9EQzc4MjY4Q0I5NEIxMUVDODMyQjc0MTlDNEY5QUUwMi9iYjFjVFFFaF9M TVk1NHhGRzI5V2N5Q1lZQUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKNGuSCFzBtI/G8dcCqdl6xif5SfHGZBc5nnhmWTSkE9ELHC3XHWz8 /itim2EstoFFJUBvrlGKTfiTY7/Cwl4Ja9f35VGR85pvnvSytrginearCoY3u7Vk qAFfJbMtDqn+PZRoIGSCPpJ9Kzvk447K5e4xcV7K2RZc4R7dMy8EhnTsFEB4DLIv R13bw9SeDs+QS8b2t6aTnUKvZj8uPVUgEwaq7W0nF0U74DdkvFuHKTc4C4PcbgfE TApjEqtfdmZ8eFWHPQoSEaxOaWdRUPp0IXSc7kLtUK0MrLuWMW7dWbxZlVoHohk+ fw5ukHDLtG/9BtkOX0GJ4dVraHT43TW8 -----END CERTIFICATE-----Generated at Sat Aug 23 23:23:54 2025 by rpki-client