$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft File: 1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json) Hash identifier: cUUC1czBV+CMareL6ds8bODxwCUrxPvHIXs+yzCTYEg= Subject key identifier: B9:37:D6:BE:55:A4:BA:5B:F2:77:6B:BE:6D:67:ED:64:10:14:0A:B8 Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 Certificate issuer: /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Certificate serial: 07BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft Manifest number: 07B6 Signing time: Fri 22 Aug 2025 21:23:36 +0000 Manifest this update: Fri 22 Aug 2025 21:23:36 +0000 Manifest next update: Fri 29 Aug 2025 21:23:36 +0000 Files and hashes: 1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: fz+dsgCOYJa4FCtcqP8lAyEZMjb1MegpJWo+3t3Lj/Q=) 2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: IYriA7iqlPrIGEwVZWLwnn3g/0OVL8pkTIBJVf9/TyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1980 (0x7bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3 Validity Not Before: Aug 22 21:23:36 2025 GMT Not After : Aug 29 21:23:36 2025 GMT Subject: CN=68a8dfd8-8eda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:10:74:e3:96:0f:e6:a6:1f:6e:36:b1:e4:d8: b4:c4:ed:d7:6f:5b:27:e4:b9:c3:74:07:ff:46:49: 02:af:14:a7:ea:91:1e:b5:c8:a3:6a:5b:93:1e:39: 06:d4:ee:93:7c:fc:2a:94:ae:77:29:4d:85:a2:e6: 58:0c:96:f0:91:f5:c3:f2:11:b9:82:b1:47:b6:30: 16:50:f5:07:21:92:e7:1e:18:09:56:28:d5:f5:76: 83:1d:db:6c:eb:99:ec:6b:40:a5:b6:69:17:11:ad: 9d:cf:da:57:21:ef:53:3c:b7:0f:f7:5d:01:13:ae: 26:d3:3d:54:45:e1:b9:75:39:3b:22:2e:45:46:00: e0:3a:54:59:7f:e9:a8:94:09:19:ac:a5:0f:eb:de: ae:2d:77:1a:6e:12:72:cd:82:65:99:60:f5:07:e8: d8:a8:ce:f5:46:9d:2a:95:7f:bf:4c:0e:73:30:be: b3:77:9e:84:7d:87:6a:76:c8:fd:bc:06:69:e7:1e: 1b:81:27:fc:8a:d9:cc:aa:db:8b:51:f6:be:d7:16: a5:3b:88:63:47:b3:34:f1:f5:fc:9c:8e:f0:48:c0: ed:d8:f5:d6:fb:8f:69:21:36:de:1a:a2:d1:47:2d: b3:d8:44:f5:2d:bc:bd:56:4b:44:5f:8b:5b:f2:a8: 1e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:37:D6:BE:55:A4:BA:5B:F2:77:6B:BE:6D:67:ED:64:10:14:0A:B8 X509v3 Authority Key Identifier: keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:19:19:bc:26:00:d8:25:e6:4e:70:2e:98:9e:10:69:8d:35: 1b:16:cf:a6:f5:8c:6a:08:1f:ae:45:5b:09:a7:cb:a5:71:c2: c3:2d:0b:38:cd:40:33:3d:01:f5:fa:1f:05:be:82:08:da:bb: 6f:ae:38:a4:7e:bd:56:1b:47:30:af:5c:06:29:65:0a:c7:3f: b0:91:c3:b9:ba:09:90:9f:06:b4:13:77:2c:8b:59:1b:89:0d: 16:a7:d6:cd:e1:20:05:74:e9:db:c6:f6:8d:00:be:fa:a5:f3: 85:13:01:e4:29:cd:fc:aa:ff:3d:83:4a:c0:40:d0:db:96:10: ca:51:19:46:34:0b:08:77:de:98:91:72:e7:22:41:20:9b:03: ea:a7:93:ac:52:3d:25:d1:45:47:8f:c3:3f:03:2e:75:8d:5e: f9:79:fa:f5:f2:60:18:9d:34:06:bc:cb:04:38:46:bf:c1:b4: 3b:b7:88:20:78:5b:3f:2b:02:3d:94:99:5f:74:46:c9:e4:5e: af:34:71:ab:3a:4d:82:20:a2:13:2c:ab:f2:80:37:4c:32:ec: f4:ff:4d:97:98:2b:1f:2b:48:bc:24:49:26:0d:d0:03:b5:0b: a7:ce:52:73:80:d0:b9:d9:95:1d:f5:9f:1d:aa:0e:36:55:13: 5d:a0:43:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJFNzYxMTAvBgNVBAUTKEQ0MTM3OEVGQ0NDRENBOEU2NTM3RTk1RjI3QUEzQjM1 Mzc1ODBBRjMwHhcNMjUwODIyMjEyMzM2WhcNMjUwODI5MjEyMzM2WjAYMRYwFAYD VQQDEw02OGE4ZGZkOC04ZWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1xB045YP5qYfbjax5Ni0xO3Xb1sn5LnDdAf/RkkCrxSn6pEetcijaluTHjkG 1O6TfPwqlK53KU2FouZYDJbwkfXD8hG5grFHtjAWUPUHIZLnHhgJVijV9XaDHdts 65nsa0CltmkXEa2dz9pXIe9TPLcP910BE64m0z1UReG5dTk7Ii5FRgDgOlRZf+mo lAkZrKUP696uLXcabhJyzYJlmWD1B+jYqM71Rp0qlX+/TA5zML6zd56EfYdqdsj9 vAZp5x4bgSf8itnMqtuLUfa+1xalO4hjR7M08fX8nI7wSMDt2PXW+49pITbeGqLR Ry2z2ET1Lby9VktEX4tb8qgetQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLk31r5V pLpb8ndrvm1n7WQQFAq4MB8GA1UdIwQYMBaAFNQTeO/MzcqOZTfpXyeqOzU3WArz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkU3Ni84RjNDOUU2QTBE NzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6TnlvNWxOLWxmSjZvN05UZFlD dk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFCTjQ3OHpOeW81bE4tbGZKNm83TlRkWUN2TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MkU3Ni84RjNDOUU2QTBENzcxMUVCQkJBRTM0NDBDNEY5QUUwMi8xQk40Nzh6Tnlv NWxOLWxmSjZvN05UZFlDdk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIGRm8JgDYJeZOcC6YnhBpjTUbFs+m9YxqCB+uRVsJp8ulccLDLQs4 zUAzPQH1+h8FvoII2rtvrjikfr1WG0cwr1wGKWUKxz+wkcO5ugmQnwa0E3csi1kb iQ0Wp9bN4SAFdOnbxvaNAL76pfOFEwHkKc38qv89g0rAQNDblhDKURlGNAsId96Y kXLnIkEgmwPqp5OsUj0l0UVHj8M/Ay51jV75efr18mAYnTQGvMsEOEa/wbQ7t4gg eFs/KwI9lJlfdEbJ5F6vNHGrOk2CIKITLKvygDdMMuz0/02XmCsfK0i8JEkmDdAD tQunzlJzgNC52ZUd9Z8dqg42VRNdoEOO -----END CERTIFICATE-----Generated at Sun Aug 24 01:01:16 2025 by rpki-client