$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json) Hash identifier: R0bk1NXv/9Gc6sUuyi7S9+m0TMMEH0wFU2Icg/KS2go= Subject key identifier: 96:B2:79:B4:E0:2F:AD:F6:7A:CE:E1:0A:DD:62:49:63:B5:66:F4:65 Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 Certificate issuer: /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Certificate serial: 077E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft Manifest number: 0EEE Signing time: Sat 28 Jun 2025 21:08:45 +0000 Manifest this update: Sat 28 Jun 2025 21:08:44 +0000 Manifest next update: Sat 05 Jul 2025 21:08:44 +0000 Files and hashes: 1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: 2t74d6RiCxEs/nYoRzlJYC02uYMAZZGsCEicWXh+8vE=) 2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: hkxmNGokisQG0mbBKypviapB/RNUZ9nsMjdRwBRak9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1918 (0x77e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Validity Not Before: Jun 28 21:08:44 2025 GMT Not After : Jul 5 21:08:44 2025 GMT Subject: CN=686059dc-a25b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fd:3e:69:96:13:b8:7a:5d:53:49:bc:8c:11: e4:0c:db:2d:4b:6f:c3:31:7b:3b:61:c7:94:d0:13: d4:dd:15:3b:09:54:f4:6e:df:c6:a8:c6:64:3a:5c: e1:43:9a:1a:3e:13:a3:af:50:7a:47:1d:b3:49:e6: 32:91:1f:3b:45:3c:28:a3:82:57:96:12:18:d3:ea: e6:cb:32:35:c2:23:e7:cc:54:3a:9f:1c:17:5e:64: 50:37:52:e0:76:3e:39:09:80:6f:5c:64:a8:4a:14: 6d:12:95:e6:1e:d7:b5:0a:71:25:ad:16:b1:a7:b6: 60:c4:7a:b9:ae:55:d0:87:df:42:d4:d5:75:76:fa: 53:39:24:39:d0:96:87:0f:d5:d7:02:8a:1f:a3:bd: 44:df:07:43:98:7a:5f:32:61:67:10:a8:99:c4:24: 1f:e3:d6:3a:76:e0:60:85:cd:ba:ab:92:30:b7:7b: 82:47:04:82:d7:26:7e:be:45:c1:da:39:56:72:3b: 4c:31:83:26:fc:97:95:8a:ed:8b:c7:5e:f4:f0:3c: 71:4f:ee:21:60:4d:b9:34:4c:6f:4d:0a:57:31:64: 17:a7:83:5f:d9:6b:84:f3:60:77:5c:52:a0:be:35: 53:b0:4a:0a:df:f9:cc:d2:55:54:6d:a5:38:d8:2a: 68:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B2:79:B4:E0:2F:AD:F6:7A:CE:E1:0A:DD:62:49:63:B5:66:F4:65 X509v3 Authority Key Identifier: keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:f1:69:af:bf:32:7d:a7:75:99:51:a4:b3:24:b4:d1:f4:e1: 2d:77:60:b3:62:31:62:39:4d:57:41:d0:de:b0:99:14:a6:21: 22:64:72:77:59:8c:43:dd:f5:c0:e3:70:f2:74:bf:85:18:d5: 94:35:70:60:be:c2:74:89:c8:d6:6b:08:53:4b:e8:f8:99:49: 20:3d:db:71:e3:46:4f:dc:9a:59:2b:da:a5:2f:8f:23:d3:d7: c8:a2:9f:01:72:dc:19:f6:71:4f:6d:6a:84:63:f2:96:c9:8b: ea:18:ea:08:6c:81:0a:29:20:93:ed:27:76:e4:da:a5:d6:6f: e2:1b:7a:ac:74:f1:2c:97:6e:c4:5e:0b:d5:94:c2:f8:e0:cc: 17:9d:97:61:de:61:40:a3:c0:99:ac:ab:63:ec:2a:3e:45:62: a9:ec:de:57:2d:92:d6:dd:cf:ec:22:bb:d6:73:1b:6a:32:c8: 40:84:e3:0d:f2:69:73:7a:72:82:35:11:7a:61:b6:44:ca:ba: 54:ce:7e:bb:fb:6b:50:a3:eb:c5:29:09:29:b6:c2:9a:37:37: 92:86:3d:c9:40:2c:da:37:b3:74:c8:d6:df:ef:8e:0e:a1:47: a3:8b:c8:58:63:93:55:bf:a5:85:69:d9:3c:b6:79:5b:d5:c3: 33:0c:df:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB34wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKDQ0MTZFODk4NThEQTY3N0IwQ0RBMzNCODdCMkU4QzhB RkQxQzYwNzgwHhcNMjUwNjI4MjEwODQ0WhcNMjUwNzA1MjEwODQ0WjAYMRYwFAYD VQQDEw02ODYwNTlkYy1hMjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsP0+aZYTuHpdU0m8jBHkDNstS2/DMXs7YceU0BPU3RU7CVT0bt/GqMZkOlzh Q5oaPhOjr1B6Rx2zSeYykR87RTwoo4JXlhIY0+rmyzI1wiPnzFQ6nxwXXmRQN1Lg dj45CYBvXGSoShRtEpXmHte1CnElrRaxp7ZgxHq5rlXQh99C1NV1dvpTOSQ50JaH D9XXAoofo71E3wdDmHpfMmFnEKiZxCQf49Y6duBghc26q5Iwt3uCRwSC1yZ+vkXB 2jlWcjtMMYMm/JeViu2Lx1708DxxT+4hYE25NExvTQpXMWQXp4Nf2WuE82B3XFKg vjVTsEoK3/nM0lVUbaU42CpokwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJayebTg L632es7hCt1iSWO1ZvRlMB8GA1UdIwQYMBaAFEQW6JhY2md7DNozuHsujIr9HGB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVozc00yak80ZXk2TWl2MGNZ SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCYm9tRmphWjNzTTJqTzRleTZNaXYwY1lIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVoz c00yak80ZXk2TWl2MGNZSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk8WmvvzJ9p3WZUaSzJLTR9OEtd2CzYjFiOU1XQdDesJkUpiEiZHJ3 WYxD3fXA43DydL+FGNWUNXBgvsJ0icjWawhTS+j4mUkgPdtx40ZP3JpZK9qlL48j 09fIop8BctwZ9nFPbWqEY/KWyYvqGOoIbIEKKSCT7Sd25Nql1m/iG3qsdPEsl27E XgvVlML44MwXnZdh3mFAo8CZrKtj7Co+RWKp7N5XLZLW3c/sIrvWcxtqMshAhOMN 8mlzenKCNRF6YbZEyrpUzn67+2tQo+vFKQkptsKaNzeShj3JQCzaN7N0yNbf744O oUeji8hYY5NVv6WFadk8tnlb1cMzDN95 -----END CERTIFICATE-----Generated at Mon Jun 30 16:00:11 2025 by rpki-client