$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft File: BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft (raw, json) Hash identifier: OFuvZFRdS7IDTNFnQYpRCM7oBwSyEkAh4Q/R35rolPo= Subject key identifier: B4:FB:FD:53:29:8A:24:1A:3C:2F:7E:78:D6:F7:EA:10:23:16:EC:8F Authority key identifier: 06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C Certificate issuer: /CN=A91E0CE8/serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C Certificate serial: 16BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft Manifest number: 16A4 Signing time: Fri 22 Aug 2025 16:47:37 +0000 Manifest this update: Fri 22 Aug 2025 16:47:36 +0000 Manifest next update: Fri 29 Aug 2025 16:47:36 +0000 Files and hashes: 1: BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl (hash: dSZZZ1PY+xdpwNu0oNjETIBmAzTINUoJ88sQvB/yTGY=) 2: 091435C84FA911EFB86F4D40C4F9AE02.roa (hash: e5jgIESXFxNT6NU+78fDrpwylXFQS920y6o/aeQL2pY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:47:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5821 (0x16bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0CE8, serialNumber=06C627D9C312C7B47D1C3A53B44755A10A68487C Validity Not Before: Aug 22 16:47:36 2025 GMT Not After : Aug 29 16:47:36 2025 GMT Subject: CN=68a89f29-8b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9d:de:54:54:e7:73:08:f5:1f:0d:e1:05:f7: 59:19:d9:b5:d2:e5:02:32:25:89:71:80:ee:15:dd: b7:4f:f9:b6:fa:14:25:01:90:6c:07:d9:77:6a:4a: 69:1c:fb:51:a6:4f:09:20:4e:7d:b0:18:b7:9a:38: 04:79:5f:b8:b7:0b:32:9d:a5:28:22:17:fc:96:e2: 4b:ee:bd:e9:7d:73:59:b0:fa:2c:cd:6c:0c:f5:a9: be:a4:6a:13:67:c6:f2:1e:eb:33:ce:3b:f5:f2:78: 20:f3:94:61:ff:51:1d:04:b4:20:79:37:f8:cb:5a: 05:c2:40:70:77:88:a6:42:2b:4d:20:d6:38:62:59: 5e:83:6c:b0:dc:a8:9f:96:4d:7f:0d:d6:4d:45:5a: db:5c:9e:1d:ca:70:66:30:03:5e:b1:73:22:0c:ad: 69:8c:eb:5c:01:ea:48:4a:29:05:41:0f:c7:93:e6: c9:b8:e2:d2:c8:5f:b1:f4:da:6b:18:af:ac:68:6d: 8c:36:e1:1a:67:eb:dc:17:9a:d6:e7:a6:55:7e:4e: 9f:92:79:e4:a0:df:6d:e0:95:db:d0:05:09:cd:99: 22:49:70:b8:e8:03:49:09:04:76:c6:5a:90:b8:40: 16:97:96:b0:56:52:29:90:63:31:62:e4:c0:93:06: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FB:FD:53:29:8A:24:1A:3C:2F:7E:78:D6:F7:EA:10:23:16:EC:8F X509v3 Authority Key Identifier: keyid:06:C6:27:D9:C3:12:C7:B4:7D:1C:3A:53:B4:47:55:A1:0A:68:48:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BsYn2cMSx7R9HDpTtEdVoQpoSHw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0CE8/900D2646066A11E8B9BAF682C4F9AE02/BsYn2cMSx7R9HDpTtEdVoQpoSHw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:08:85:cc:40:41:d1:c8:85:e8:77:11:6e:0b:9b:aa:67:2d: c6:9a:03:54:d9:35:50:01:7a:8f:ac:7b:35:e6:22:cb:b5:ce: e6:c7:1d:14:94:77:0c:40:4d:dc:9b:31:ca:17:8c:c6:a8:e0: da:57:3b:b9:8e:e0:ca:ce:e2:1d:87:23:c4:ae:26:bc:13:27: de:8e:96:87:8f:2b:db:2b:d5:bc:38:11:c8:b1:9e:2f:33:e3: 09:eb:41:a0:3c:0c:77:7c:88:5d:03:ca:e8:10:7c:30:39:37: 47:63:77:2e:86:d4:d5:24:e9:b5:ae:d8:c1:8b:04:94:34:ba: cf:1c:7f:80:35:0f:0f:6b:2d:d1:01:1a:f1:46:0b:1b:78:c2: 57:ef:92:ea:90:cd:14:9a:fd:d1:e6:49:38:31:95:7d:07:d9: 8f:4d:6f:31:e8:95:32:7d:22:57:b9:6e:b8:7d:3f:9f:0e:36: 15:c5:65:0d:2a:75:87:a9:7e:59:eb:0f:bc:96:1d:c0:35:ad: 9f:fa:97:76:24:1a:4d:4e:6a:61:e2:6a:89:dc:f1:a1:db:fa: ca:1c:38:c1:13:0b:e6:00:5a:81:17:f3:30:d9:ef:7d:ac:d3: d2:6a:ff:80:dc:3d:ba:68:04:8e:49:b4:e4:cf:8d:7f:d7:9f: b7:c3:92:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBDRTgxMTAvBgNVBAUTKDA2QzYyN0Q5QzMxMkM3QjQ3RDFDM0E1M0I0NDc1NUEx MEE2ODQ4N0MwHhcNMjUwODIyMTY0NzM2WhcNMjUwODI5MTY0NzM2WjAYMRYwFAYD VQQDEw02OGE4OWYyOS04YjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJ3eVFTncwj1Hw3hBfdZGdm10uUCMiWJcYDuFd23T/m2+hQlAZBsB9l3akpp HPtRpk8JIE59sBi3mjgEeV+4twsynaUoIhf8luJL7r3pfXNZsPoszWwM9am+pGoT Z8byHuszzjv18ngg85Rh/1EdBLQgeTf4y1oFwkBwd4imQitNINY4Ylleg2yw3Kif lk1/DdZNRVrbXJ4dynBmMANesXMiDK1pjOtcAepISikFQQ/Hk+bJuOLSyF+x9Npr GK+saG2MNuEaZ+vcF5rW56ZVfk6fknnkoN9t4JXb0AUJzZkiSXC46ANJCQR2xlqQ uEAWl5awVlIpkGMxYuTAkwa6GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLT7/VMp iiQaPC9+eNb36hAjFuyPMB8GA1UdIwQYMBaAFAbGJ9nDEse0fRw6U7RHVaEKaEh8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMENFOC85MDBEMjY0NjA2 NkExMUU4QjlCQUY2ODJDNEY5QUUwMi9Cc1luMmNNU3g3UjlIRHBUdEVkVm9RcG9T SHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzWW4yY01TeDdSOUhEcFR0RWRWb1Fwb1NIdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MENFOC85MDBEMjY0NjA2NkExMUU4QjlCQUY2ODJDNEY5QUUwMi9Cc1luMmNNU3g3 UjlIRHBUdEVkVm9RcG9TSHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzCIXMQEHRyIXodxFuC5uqZy3GmgNU2TVQAXqPrHs15iLLtc7mxx0U lHcMQE3cmzHKF4zGqODaVzu5juDKzuIdhyPEria8EyfejpaHjyvbK9W8OBHIsZ4v M+MJ60GgPAx3fIhdA8roEHwwOTdHY3cuhtTVJOm1rtjBiwSUNLrPHH+ANQ8Pay3R ARrxRgsbeMJX75LqkM0Umv3R5kk4MZV9B9mPTW8x6JUyfSJXuW64fT+fDjYVxWUN KnWHqX5Z6w+8lh3ANa2f+pd2JBpNTmph4mqJ3PGh2/rKHDjBEwvmAFqBF/Mw2e99 rNPSav+A3D26aASOSbTkz41/15+3w5Ik -----END CERTIFICATE-----Generated at Sun Aug 24 00:43:09 2025 by rpki-client