$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json) Hash identifier: vW1TlylCM01uGgJigEFGCiU2D3b5TpCH4UAaRW8afoI= Subject key identifier: DA:6F:AA:FA:27:9D:81:0A:16:76:57:78:7A:F7:64:F0:43:46:D4:3C Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Certificate serial: 0B3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft Manifest number: 0B37 Signing time: Fri 22 Aug 2025 19:19:16 +0000 Manifest this update: Fri 22 Aug 2025 19:19:15 +0000 Manifest next update: Fri 29 Aug 2025 19:19:15 +0000 Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: tLqYdlpIHegtnXMj1iCn/BuZDeM8EK3NH44f5WSh7GA=) 2: 494B4070419C11EAAE836772C4F9AE02.roa (hash: Y3JTz6x7Gh76YU/+03lkuBO3MY94CeW1sP7iPG9gZfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2878 (0xb3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Validity Not Before: Aug 22 19:19:15 2025 GMT Not After : Aug 29 19:19:15 2025 GMT Subject: CN=68a8c2b4-9fb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:15:33:59:64:35:78:4f:19:ba:d2:78:f1:eb: 49:0d:6f:6c:fc:cc:48:e6:cb:9a:22:75:0e:94:21: df:a4:cf:59:03:e7:b1:f6:8b:33:ed:22:27:0a:95: 65:31:0e:05:f2:60:df:ef:5a:3e:31:72:6f:27:49: f1:09:19:dc:8f:ed:80:0a:75:6c:55:29:d9:75:ae: ab:f9:3e:58:15:e6:24:e3:7e:6f:05:c8:99:8d:c5: 5d:e5:cb:e5:0e:ed:36:ba:cd:93:44:b2:ca:8d:65: b8:0e:d3:f2:00:05:1e:79:c0:28:a8:05:bf:b0:dd: 51:fd:3b:68:0d:40:95:71:b2:5b:41:fa:4c:4b:2b: 07:3b:5b:0c:50:84:43:99:8a:6c:5f:8f:73:9b:5c: 78:d0:23:93:eb:9e:b0:2f:0f:5e:84:37:05:3e:aa: 44:77:70:29:d2:3c:c0:f0:0a:3c:61:13:a0:48:5f: ca:94:7c:c0:0a:0b:32:42:37:87:86:13:56:8c:65: ff:05:b4:c0:75:7c:d5:ac:88:90:9e:84:47:0e:e0: 16:6b:39:bc:39:9e:8a:7b:79:1f:c2:89:17:02:df: c2:ee:e9:b7:dd:55:2c:b4:7e:dd:98:7f:44:c0:4a: b2:38:1d:33:a1:5a:b6:cb:87:79:60:72:3f:1f:1d: 07:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6F:AA:FA:27:9D:81:0A:16:76:57:78:7A:F7:64:F0:43:46:D4:3C X509v3 Authority Key Identifier: keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1b:b8:82:3f:8e:6c:a5:0b:dd:93:1f:2e:1a:9e:c8:a6:58: 5b:f3:cc:93:6f:2d:60:e1:99:b6:ae:be:8f:2d:bf:87:80:9a: 3b:84:62:19:14:28:ad:c0:5e:1b:23:dd:79:60:22:b4:4e:7a: d3:54:db:09:22:fd:8c:74:92:c6:d5:5e:b7:88:8c:cb:be:49: 80:3e:cf:49:0e:37:58:ba:6f:a2:fc:87:ce:1c:df:64:b5:25: 78:9e:bc:88:3d:4b:f3:44:1c:c1:f2:84:66:68:e9:d3:b4:59: f5:fb:a4:44:fb:6e:4f:de:28:44:d5:f1:fe:6a:ff:dc:b2:39: ad:84:06:67:f3:06:5c:b5:62:b2:32:c7:e3:56:98:8c:0b:84: 1b:dd:51:76:db:38:0d:76:f1:7b:e1:db:45:c7:bb:01:0d:e8: db:d9:7b:af:7a:f3:68:7b:dd:91:0b:2d:8e:36:7c:d8:8a:74: 53:fa:ed:0e:33:5c:0d:fa:56:f5:a7:8d:87:6b:ec:5c:06:3a: 28:6d:38:d8:4d:98:e0:65:d8:f8:db:73:0a:ad:f3:b1:69:62: 02:e4:22:bd:88:19:6f:7c:f5:e3:a2:dd:e8:fb:b6:04:89:f0: b8:6d:aa:84:2d:e9:1a:06:94:77:ae:d2:90:f2:4f:aa:3e:85: 8a:7e:2d:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQyNUExMTAvBgNVBAUTKDA0OEFBOThGM0VDNTRBOTA2MEU1QkMzMDA1OUQ1QzQy MjBEN0MyRjcwHhcNMjUwODIyMTkxOTE1WhcNMjUwODI5MTkxOTE1WjAYMRYwFAYD VQQDEw02OGE4YzJiNC05ZmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxUzWWQ1eE8ZutJ48etJDW9s/MxI5suaInUOlCHfpM9ZA+ex9osz7SInCpVl MQ4F8mDf71o+MXJvJ0nxCRncj+2ACnVsVSnZda6r+T5YFeYk435vBciZjcVd5cvl Du02us2TRLLKjWW4DtPyAAUeecAoqAW/sN1R/TtoDUCVcbJbQfpMSysHO1sMUIRD mYpsX49zm1x40COT656wLw9ehDcFPqpEd3Ap0jzA8Ao8YROgSF/KlHzACgsyQjeH hhNWjGX/BbTAdXzVrIiQnoRHDuAWazm8OZ6Ke3kfwokXAt/C7um33VUstH7dmH9E wEqyOB0zoVq2y4d5YHI/Hx0H4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpvqvon nYEKFnZXeHr3ZPBDRtQ8MB8GA1UdIwQYMBaAFASKqY8+xUqQYOW8MAWdXEIg18L3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDI1QS8wMjRDMjRGODQx NkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNwQmc1Ynd3QloxY1FpRFh3 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJcXBqejdGU3BCZzVid3dCWjFjUWlEWHd2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDI1QS8wMjRDMjRGODQxNkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNw Qmc1Ynd3QloxY1FpRFh3dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeG7iCP45spQvdkx8uGp7Iplhb88yTby1g4Zm2rr6PLb+HgJo7hGIZ FCitwF4bI915YCK0TnrTVNsJIv2MdJLG1V63iIzLvkmAPs9JDjdYum+i/IfOHN9k tSV4nryIPUvzRBzB8oRmaOnTtFn1+6RE+25P3ihE1fH+av/csjmthAZn8wZctWKy MsfjVpiMC4Qb3VF22zgNdvF74dtFx7sBDejb2XuvevNoe92RCy2ONnzYinRT+u0O M1wN+lb1p42Ha+xcBjoobTjYTZjgZdj423MKrfOxaWIC5CK9iBlvfPXjot3o+7YE ifC4baqELekaBpR3rtKQ8k+qPoWKfi3O -----END CERTIFICATE-----Generated at Sat Aug 23 14:31:39 2025 by rpki-client