$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft File: BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft (raw, json) Hash identifier: uro4LkXsEAbP2kawwEb6B/3gAinVQQ7Vn9K1WCdMESc= Subject key identifier: 33:3E:52:61:14:56:C0:6A:23:A8:58:48:EE:A6:4A:E1:8D:6B:E4:F1 Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C Certificate issuer: /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C Certificate serial: 16A4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft Manifest number: 168B Signing time: Fri 04 Jul 2025 16:57:35 +0000 Manifest this update: Fri 04 Jul 2025 16:57:35 +0000 Manifest next update: Fri 11 Jul 2025 16:57:35 +0000 Files and hashes: 1: BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl (hash: BG2q1Zkhx/x2gT2Pk11FpCHxaKkBIyZZ/MY6ELe0xv8=) 2: 091435C84FA911EFB86F4D40C4F9AE02.roa (hash: e5jgIESXFxNT6NU+78fDrpwylXFQS920y6o/aeQL2pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5796 (0x16a4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CE8, serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C Validity Not Before: Jul 4 16:57:35 2025 GMT Not After : Jul 11 16:57:35 2025 GMT Subject: CN=686807ff-ec99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:11:89:70:e4:c4:bc:28:ee:c8:73:5a:5d:65: e1:02:6e:1a:ad:fd:58:c0:7c:2f:5c:28:4f:71:61: 00:96:9c:9b:d2:11:8c:cf:84:61:24:c5:a1:52:8d: 98:87:a5:b3:1b:6f:63:31:54:7e:73:34:be:bd:12: f9:dd:79:0f:b8:f0:bc:f8:19:9b:b9:d5:f7:41:77: fc:ab:bc:20:a8:b0:d9:96:d8:b2:8e:ee:d9:22:8f: c3:40:a9:f2:08:8d:45:fe:a1:31:ed:ce:7d:4a:02: 6b:4f:54:1a:24:3c:f9:ea:1c:4b:38:89:c7:17:a6: 1c:7a:c0:5f:45:74:06:a7:04:d5:05:ab:5f:bb:fd: b0:b0:53:84:72:7f:00:e8:0a:69:fe:a7:35:fe:b0: af:da:af:90:95:b9:5d:e7:80:86:bd:b9:54:6b:25: 4b:f5:66:a5:6c:eb:0f:c1:32:4e:46:d0:7b:91:df: db:c4:93:3d:5a:a5:7e:e9:69:66:7a:e8:25:3f:65: 7b:ec:93:40:ba:b7:d3:f0:90:a6:a4:59:66:06:0b: 9d:dc:9d:1e:d0:fa:05:e2:fb:47:7d:ed:72:e6:85: 91:f7:69:94:a5:03:dd:da:15:a8:2e:03:c4:be:51: ed:f5:ef:af:d5:06:45:e2:78:3c:56:a7:26:2e:81: fc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3E:52:61:14:56:C0:6A:23:A8:58:48:EE:A6:4A:E1:8D:6B:E4:F1 X509v3 Authority Key Identifier: keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:8b:db:69:f5:b8:46:74:39:3b:a7:06:ee:86:12:9b:da:f5: 9c:69:ee:9b:23:90:1a:a9:b5:d2:69:53:c9:e0:76:6c:d6:c2: 48:1a:bf:50:e1:cf:2c:e5:a5:ac:db:35:d8:34:7a:8a:39:08: b7:ee:0b:c7:35:b0:cf:0e:f8:c4:4c:4a:3b:87:9f:ab:68:de: ea:7a:84:84:b8:b1:a6:9f:07:9d:a7:ce:63:4e:a9:d9:1c:6e: b5:3d:3e:eb:76:00:28:f6:78:4d:e9:7e:ce:98:ca:df:13:85: 64:96:50:71:d5:7f:1f:76:af:74:ba:a2:1e:7d:d4:f0:33:54: 0c:00:92:c9:8f:8d:84:fe:d6:2a:66:70:74:5d:e2:16:22:06: 0f:1d:6c:b2:2c:1b:88:65:46:c5:af:ef:eb:ee:05:b8:10:b2: 69:6d:81:b6:ff:b6:72:05:e2:e6:9b:e0:94:53:13:0d:3c:e5: 51:f1:24:f5:1a:0e:6f:b3:a5:17:cd:6c:f8:ad:a0:82:4f:9d: 65:97:a1:63:e3:83:a3:14:8a:a4:a3:e3:db:32:46:c4:6b:64: 9b:1b:fb:e2:98:d3:2a:29:f8:8c:c1:8e:29:84:78:26:0e:ae: 10:5e:79:9b:1c:7b:40:c5:30:d6:2c:54:01:b2:84:d0:d9:82: 82:1e:b7:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFqQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRTgxMTAvBgNVBAUTKDA2QzYyN0Q5QzMxMkM3QjQ3RDFDM0E1M0I0NDc1NUEx MEE2ODQ4N0MwHhcNMjUwNzA0MTY1NzM1WhcNMjUwNzExMTY1NzM1WjAYMRYwFAYD VQQDEw02ODY4MDdmZi1lYzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBGJcOTEvCjuyHNaXWXhAm4arf1YwHwvXChPcWEAlpyb0hGMz4RhJMWhUo2Y h6WzG29jMVR+czS+vRL53XkPuPC8+BmbudX3QXf8q7wgqLDZltiyju7ZIo/DQKny CI1F/qEx7c59SgJrT1QaJDz56hxLOInHF6YcesBfRXQGpwTVBatfu/2wsFOEcn8A 6App/qc1/rCv2q+Qlbld54CGvblUayVL9WalbOsPwTJORtB7kd/bxJM9WqV+6Wlm euglP2V77JNAurfT8JCmpFlmBgud3J0e0PoF4vtHfe1y5oWR92mUpQPd2hWoLgPE vlHt9e+v1QZF4ng8VqcmLoH8HQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDM+UmEU VsBqI6hYSO6mSuGNa+TxMB8GA1UdIwQYMBaAFAbGJ9nDEse0fRw6U7RHVaEKaEh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENFOC85MDBEMjY0NjA2 NkExMUU4QjlCQUY2ODJDNEY5QUUwMi9Cc1luMmNNU3g3UjlIRHBUdEVkVm9RcG9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzWW4yY01TeDdSOUhEcFR0RWRWb1Fwb1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENFOC85MDBEMjY0NjA2NkExMUU4QjlCQUY2ODJDNEY5QUUwMi9Cc1luMmNNU3g3 UjlIRHBUdEVkVm9RcG9TSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApi9tp9bhGdDk7pwbuhhKb2vWcae6bI5AaqbXSaVPJ4HZs1sJIGr9Q 4c8s5aWs2zXYNHqKOQi37gvHNbDPDvjETEo7h5+raN7qeoSEuLGmnwedp85jTqnZ HG61PT7rdgAo9nhN6X7OmMrfE4VkllBx1X8fdq90uqIefdTwM1QMAJLJj42E/tYq ZnB0XeIWIgYPHWyyLBuIZUbFr+/r7gW4ELJpbYG2/7ZyBeLmm+CUUxMNPOVR8ST1 Gg5vs6UXzWz4raCCT51ll6Fj44OjFIqko+PbMkbEa2SbG/vimNMqKfiMwY4phHgm Dq4QXnmbHHtAxTDWLFQBsoTQ2YKCHrcG -----END CERTIFICATE-----Generated at Fri Jul 4 18:38:50 2025 by rpki-client