$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft File: bBl9pJIs_dxOmMiEbgOn19DkC3E.mft (raw, json) Hash identifier: SY2eFe+sNkHT9szPWh6TnBCbeTXyjKv0a6CWkxQS4Ps= Subject key identifier: 3E:4F:A1:95:7A:6E:94:4A:4E:8F:CA:D6:7C:D5:76:69:3A:3E:FE:AF Authority key identifier: 6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 Certificate issuer: /CN=A91EF2E1/serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Certificate serial: 06AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft Manifest number: 0696 Signing time: Fri 22 Aug 2025 22:24:58 +0000 Manifest this update: Fri 22 Aug 2025 22:24:58 +0000 Manifest next update: Fri 29 Aug 2025 22:24:58 +0000 Files and hashes: 1: bBl9pJIs_dxOmMiEbgOn19DkC3E.crl (hash: 7FNXuRvsr2BWBW5yssrBLdn/EsDc5HjDG4zVFXPgJIs=) 2: ECCDCA04809A11EB9093216EC4F9AE02.roa (hash: //P4Dwc0yC8aNI6dL5grZWmAPuUGPAB2QMNisS1s91o=) 3: 397ED08A2F7911ED93B17C0FC4F9AE02.roa (hash: sO+5ZUlz1ZfgN4m9jGacz4xKmgRg5xQ7WfaHnr5n8EY=) 4: 7D6F53547F0411EBB8CAEE2BC4F9AE02.roa (hash: VneqGQNP18iG+RzoK9rzGT1v0y/EKMK88ucBZjMvCCE=) 5: 08C849682F6E11EDA8ABA74BC4F9AE02.roa (hash: hmEwq8j3GlUgHO4QkFMDsLDsFyKYgDX+OadwrR+PhRU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1707 (0x6ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF2E1, serialNumber=6C197DA4922CFDDC4E98C8846E03A7D7D0E40B71 Validity Not Before: Aug 22 22:24:58 2025 GMT Not After : Aug 29 22:24:58 2025 GMT Subject: CN=68a8ee3a-5329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:44:fc:8b:f6:70:b9:00:c0:5f:32:8b:b2: cb:e4:09:9e:fa:3b:62:11:ea:7e:54:31:bb:af:4e: b0:fa:46:0e:2b:5c:4f:82:22:00:b4:c0:42:27:c8: 26:31:99:7d:36:16:22:28:7b:58:87:5b:85:7b:9d: 91:59:94:19:fe:0f:37:ac:fa:af:7a:b0:8a:07:6b: 66:a6:bf:50:4f:5b:5e:a8:b4:df:f2:6c:7e:cd:2e: bc:35:ac:3d:0b:db:86:da:66:d0:04:45:4e:24:f2: 45:55:8e:d2:c7:5b:25:b7:35:32:20:44:8b:6a:12: 03:2b:67:74:fc:02:03:4e:da:9b:35:7e:8c:19:90: 32:fb:bf:67:0f:f0:e8:be:df:d0:65:ad:6a:2e:23: bc:c9:bd:22:40:5b:42:d7:a3:75:12:24:89:1a:f9: e4:d0:b7:ed:61:41:0e:15:01:32:7d:4a:bc:55:53: 2f:63:95:75:9a:b6:87:c5:da:09:b2:b8:dc:a3:06: ba:07:3e:c2:29:8b:9e:6d:c1:0f:6d:31:ae:11:43: 62:d1:43:96:e5:3a:be:bf:5e:9f:69:84:66:1c:88: c5:30:ef:f9:fe:1f:ff:8b:61:20:8d:8a:75:73:68: dc:da:dc:20:c9:be:64:1b:33:5b:73:a0:70:31:9c: 23:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4F:A1:95:7A:6E:94:4A:4E:8F:CA:D6:7C:D5:76:69:3A:3E:FE:AF X509v3 Authority Key Identifier: keyid:6C:19:7D:A4:92:2C:FD:DC:4E:98:C8:84:6E:03:A7:D7:D0:E4:0B:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBl9pJIs_dxOmMiEbgOn19DkC3E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF2E1/3F69CC667F0311EBA081A02BC4F9AE02/bBl9pJIs_dxOmMiEbgOn19DkC3E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:17:d6:0e:6c:2f:de:30:d9:59:ef:98:f7:3e:c6:8f:95:b6: c7:a7:d3:b4:f3:c0:99:d0:15:f3:75:7f:fa:87:f1:06:49:93: 40:69:de:f3:5c:28:a4:e1:94:45:fa:be:64:f5:04:50:f6:79: f3:48:20:7c:89:d7:84:cb:bd:cc:f5:73:44:d7:1e:9a:4d:40: 89:4d:28:00:ee:ba:5c:78:4f:ad:3b:e2:bb:bf:f6:ae:c9:7d: 1a:42:b9:a4:22:a8:02:51:f3:62:8d:b8:28:d2:ca:88:b3:7a: fe:e2:0d:29:97:cc:ee:ba:e9:e3:68:51:82:1a:ee:97:93:ea: 47:1e:82:f9:0b:e6:62:f3:62:bd:5c:72:71:6f:b6:3a:79:32: bc:cd:42:16:71:64:86:03:40:93:67:20:e1:85:82:c3:05:69: 70:89:a8:68:f9:46:fc:23:03:67:eb:63:26:3b:e9:8c:b0:72: 76:f9:73:29:12:e8:12:8c:22:cd:64:64:66:dd:34:40:3b:a1: 06:68:41:90:0b:79:f6:03:83:99:32:e6:5b:6f:c3:9e:7b:de: 17:97:92:b5:f7:36:9a:23:e6:ca:d7:31:aa:48:b4:1a:68:4d: 89:41:bc:e4:09:73:b0:cb:12:ec:55:f7:b1:e7:b2:ed:24:72: 23:17:1f:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYyRTExMTAvBgNVBAUTKDZDMTk3REE0OTIyQ0ZEREM0RTk4Qzg4NDZFMDNBN0Q3 RDBFNDBCNzEwHhcNMjUwODIyMjIyNDU4WhcNMjUwODI5MjIyNDU4WjAYMRYwFAYD VQQDEw02OGE4ZWUzYS01MzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzGNE/Iv2cLkAwF8yi7LL5Ame+jtiEep+VDG7r06w+kYOK1xPgiIAtMBCJ8gm MZl9NhYiKHtYh1uFe52RWZQZ/g83rPqverCKB2tmpr9QT1teqLTf8mx+zS68Naw9 C9uG2mbQBEVOJPJFVY7Sx1sltzUyIESLahIDK2d0/AIDTtqbNX6MGZAy+79nD/Do vt/QZa1qLiO8yb0iQFtC16N1EiSJGvnk0LftYUEOFQEyfUq8VVMvY5V1mraHxdoJ srjcowa6Bz7CKYuebcEPbTGuEUNi0UOW5Tq+v16faYRmHIjFMO/5/h//i2EgjYp1 c2jc2twgyb5kGzNbc6BwMZwjiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD5PoZV6 bpRKTo/K1nzVdmk6Pv6vMB8GA1UdIwQYMBaAFGwZfaSSLP3cTpjIhG4Dp9fQ5Atx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjJFMS8zRjY5Q0M2NjdG MDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19keE9tTWlFYmdPbjE5RGtD M0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCbDlwSklzX2R4T21NaUViZ09uMTlEa0MzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjJFMS8zRjY5Q0M2NjdGMDMxMUVCQTA4MUEwMkJDNEY5QUUwMi9iQmw5cEpJc19k eE9tTWlFYmdPbjE5RGtDM0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmF9YObC/eMNlZ75j3PsaPlbbHp9O088CZ0BXzdX/6h/EGSZNAad7z XCik4ZRF+r5k9QRQ9nnzSCB8ideEy73M9XNE1x6aTUCJTSgA7rpceE+tO+K7v/au yX0aQrmkIqgCUfNijbgo0sqIs3r+4g0pl8zuuunjaFGCGu6Xk+pHHoL5C+Zi82K9 XHJxb7Y6eTK8zUIWcWSGA0CTZyDhhYLDBWlwiaho+Ub8IwNn62MmO+mMsHJ2+XMp EugSjCLNZGRm3TRAO6EGaEGQC3n2A4OZMuZbb8Oee94Xl5K19zaaI+bK1zGqSLQa aE2JQbzkCXOwyxLsVfex57LtJHIjFx9i -----END CERTIFICATE-----Generated at Sat Aug 23 18:55:43 2025 by rpki-client