$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft File: bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json) Hash identifier: zAcpD5vO/+Ikc6/dagDVwSoa+cnKnHXszRMEhCT8C0E= Subject key identifier: 08:25:5E:2E:6F:27:8D:B2:BA:45:07:73:70:70:9C:3F:BE:3F:FB:E4 Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 0379 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft Manifest number: 034D Signing time: Sat 23 Aug 2025 01:23:46 +0000 Manifest this update: Sat 23 Aug 2025 01:23:45 +0000 Manifest next update: Sat 30 Aug 2025 01:23:45 +0000 Files and hashes: 1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: aNHUVDBbMXJLbvTdaf79ZS6kLp0kwfEy9BnZo9JpVyE=) 2: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: PsC0/VUJuwAMkmEBhdJkaydKW8CflQBB5EZOYU0cJtQ=) 3: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: /TyJbdztz4Y61/Gz2zhowON+Tt9+b5wqgCKpbZ339lw=) 4: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: SwY/Crs5L/QLrOTdNtWGBh9zEFcoCIW07axxQKOSACI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:23:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 889 (0x379) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: Aug 23 01:23:45 2025 GMT Not After : Aug 30 01:23:45 2025 GMT Subject: CN=68a91821-0c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e1:52:2a:86:e3:7c:b8:06:31:85:31:93:49: df:66:d4:bc:db:e4:84:15:88:a8:b2:1c:48:e5:f6: eb:0f:0b:98:a2:57:25:da:77:2a:5d:ac:d3:d4:f6: e3:5b:d4:b6:be:8f:50:58:c7:60:ad:8a:b0:af:86: cb:5b:41:d6:92:d3:1c:76:9f:f3:cc:f2:4e:61:9f: b6:30:fa:11:ee:3d:a9:32:b0:8b:29:c8:20:db:b3: 65:1e:1f:df:5c:1f:55:f0:12:cd:8f:07:71:dc:25: 16:c9:7b:5f:ed:b9:93:b6:df:b8:7b:99:94:e6:4a: f8:e7:57:cf:7d:2e:1f:ed:41:b7:9f:de:d8:04:d2: 7e:45:b9:34:cd:f0:69:97:92:d6:18:5c:34:9f:1f: 03:ba:63:2c:f2:d3:52:fa:ad:5b:ec:02:e0:0a:35: 6d:61:3b:2d:2c:23:dc:81:41:47:bf:47:b7:ec:9e: 1b:ed:6a:68:3f:c6:f8:50:a4:ad:c5:75:7f:f6:4f: fb:b7:0c:ce:fa:68:4f:82:12:7c:c2:db:86:97:cc: cc:b2:d5:0d:03:cc:0d:78:70:29:98:29:33:01:b5: c2:e2:9a:d3:1b:44:94:a0:95:48:9a:8d:cf:c7:e5: 06:95:59:c7:81:3e:14:67:df:1a:94:4f:1e:8c:27: e8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:25:5E:2E:6F:27:8D:B2:BA:45:07:73:70:70:9C:3F:BE:3F:FB:E4 X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:09:c5:70:a6:b4:8c:14:36:0a:c2:96:67:69:8c:0f:2a:57: 2b:5a:9c:32:49:98:7f:24:54:08:bf:86:cc:b2:96:21:4a:bb: 53:4d:b0:b8:24:ab:ae:82:90:60:13:3c:84:2e:63:ac:7f:07: cf:64:6b:11:4b:c1:48:9b:36:48:10:73:40:1b:d3:6b:d6:8b: e1:c2:70:97:8b:0d:1e:2c:21:36:9c:63:de:07:6c:b0:67:26: 37:b4:64:3c:b8:95:35:73:21:a4:99:7c:39:9e:ec:6b:e0:cd: dd:3b:4d:bf:b1:6c:6e:d9:dc:f8:1c:ff:2a:d7:3f:5b:d6:fe: bd:e6:65:f9:77:0e:8b:f4:17:e5:81:ab:76:b4:60:71:c0:2b: c1:f0:49:4c:95:17:e9:7e:f3:46:66:fb:e8:db:18:3e:13:9a: 60:88:a6:ce:21:0d:10:a8:89:d6:12:99:e5:70:84:d3:f0:56: d2:6b:cc:fa:10:0f:2e:5e:9e:a9:29:ed:d1:d1:b4:f8:c4:8f: 96:6c:a5:f6:65:4d:63:1f:05:80:05:2c:c1:9f:5e:1b:b3:81: d7:3f:e4:32:a1:b6:4a:89:d5:b9:ee:3d:1f:a7:ce:88:a0:c4: cf:44:6a:c9:6d:39:2d:92:9e:77:b0:6a:48:f8:5a:31:3e:22: 16:eb:d3:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjUwODIzMDEyMzQ1WhcNMjUwODMwMDEyMzQ1WjAYMRYwFAYD VQQDEw02OGE5MTgyMS0wYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAueFSKobjfLgGMYUxk0nfZtS82+SEFYioshxI5fbrDwuYolcl2ncqXazT1Pbj W9S2vo9QWMdgrYqwr4bLW0HWktMcdp/zzPJOYZ+2MPoR7j2pMrCLKcgg27NlHh/f XB9V8BLNjwdx3CUWyXtf7bmTtt+4e5mU5kr451fPfS4f7UG3n97YBNJ+Rbk0zfBp l5LWGFw0nx8DumMs8tNS+q1b7ALgCjVtYTstLCPcgUFHv0e37J4b7WpoP8b4UKSt xXV/9k/7twzO+mhPghJ8wtuGl8zMstUNA8wNeHApmCkzAbXC4prTG0SUoJVImo3P x+UGlVnHgT4UZ98alE8ejCfoNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAglXi5v J42yukUHc3BwnD++P/vkMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTFCQy9BRTQ0RDI0QURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFpl aXYyaWpDenFZVkFTY0RoZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJCcVwprSMFDYKwpZnaYwPKlcrWpwySZh/JFQIv4bMspYhSrtTTbC4 JKuugpBgEzyELmOsfwfPZGsRS8FImzZIEHNAG9Nr1ovhwnCXiw0eLCE2nGPeB2yw ZyY3tGQ8uJU1cyGkmXw5nuxr4M3dO02/sWxu2dz4HP8q1z9b1v695mX5dw6L9Bfl gat2tGBxwCvB8ElMlRfpfvNGZvvo2xg+E5pgiKbOIQ0QqInWEpnlcITT8FbSa8z6 EA8uXp6pKe3R0bT4xI+WbKX2ZU1jHwWABSzBn14bs4HXP+QyobZKidW57j0fp86I oMTPRGrJbTktkp53sGpI+FoxPiIW69Os -----END CERTIFICATE-----Generated at Sun Aug 24 00:15:55 2025 by rpki-client