$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft File: bPYEPvYahE8I4lOhk9XZRlSWJ50.mft (raw, json) Hash identifier: KLQpQaGuwrMKy1Q5HqDKNS5EdEQnSnRbRk05CddUXl4= Subject key identifier: 04:F4:E3:79:57:83:61:43:CF:89:E0:87:8C:7C:1F:CD:16:C5:F2:BA Authority key identifier: 6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D Certificate issuer: /CN=A91F3D37/serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Certificate serial: 019F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft Manifest number: 019C Signing time: Sun 29 Jun 2025 02:29:47 +0000 Manifest this update: Sun 29 Jun 2025 02:29:46 +0000 Manifest next update: Sun 06 Jul 2025 02:29:46 +0000 Files and hashes: 1: bPYEPvYahE8I4lOhk9XZRlSWJ50.crl (hash: lOv8An5nBcPkpFvnsLnhIj9ksReTD8T7k5IRiF0JrkM=) 2: 6F67CF8CDCF111ED9828F232C4F9AE02.roa (hash: UUhAaQeYrl7H0iCSeqj7JAOZrw6JcIfsjlzbvaWf61k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 02:29:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 415 (0x19f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3D37, serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Validity Not Before: Jun 29 02:29:46 2025 GMT Not After : Jul 6 02:29:46 2025 GMT Subject: CN=6860a51a-ebea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:26:bd:57:05:cf:c5:d1:eb:b4:41:6d:63:17: d1:72:a4:b1:ef:fa:e0:eb:e0:28:b1:c0:18:d9:e5: 34:86:6c:3c:f7:e3:1a:5e:d0:d0:f0:48:f3:fb:a9: bf:3e:b3:4b:b5:85:63:54:0c:48:7d:f3:86:10:49: 3c:84:e3:e1:54:5c:ca:78:bd:39:47:e2:d9:33:38: a9:f5:92:ee:24:d7:af:63:45:82:ae:05:6b:13:93: 49:f1:d5:15:9a:91:9c:13:ca:20:d9:f3:cb:70:fc: 98:3a:1a:77:67:1b:4a:55:d9:37:11:7b:01:67:ef: 77:bc:25:a9:a2:be:0f:60:05:b0:2b:24:24:aa:7c: 7c:f0:35:ff:7b:45:fb:71:62:07:e3:31:f9:d2:ff: a7:63:26:ff:2f:3b:9d:64:af:61:25:38:22:c7:3e: ac:b6:f8:c7:d5:b0:7f:fd:e9:2d:5a:1c:da:a2:d0: 12:6e:a6:3c:ab:11:5b:27:04:ce:cd:80:f5:20:bd: b3:dc:9d:8f:43:82:38:3b:31:17:be:7b:21:e6:fc: 97:20:90:2e:29:27:2c:0f:5d:9f:7a:b6:a3:c5:17: e1:59:e6:8f:6a:c3:1f:f6:21:5a:a1:85:50:2a:55: 3e:4c:ac:34:22:6a:31:4f:3d:ac:67:04:06:b1:0c: bc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F4:E3:79:57:83:61:43:CF:89:E0:87:8C:7C:1F:CD:16:C5:F2:BA X509v3 Authority Key Identifier: keyid:6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:8b:8b:4c:6e:1d:40:87:59:cf:f6:8a:bb:a0:14:57:88:25: 8a:ff:bd:c5:23:91:22:2a:3d:e6:dc:9b:37:c9:3f:9d:d9:4d: 7d:86:4b:00:fd:b8:3a:2b:58:f0:bb:91:e6:e0:43:b2:d3:ce: b8:ff:5e:b4:5c:82:a7:65:95:a0:c9:1a:c7:76:f5:62:d7:03: 83:48:3c:b3:3b:f8:0e:82:bd:6b:e8:93:14:81:12:ec:ec:72: 98:9a:16:7a:d4:ed:88:bb:a1:77:43:19:40:57:e9:b6:59:bb: 21:f2:a8:37:b8:85:8b:fe:d1:8b:65:91:82:ec:a0:07:2c:42: 25:0d:7d:30:ae:0b:f8:d0:71:26:de:67:d6:41:e4:d3:87:6c: 5f:bc:07:7e:84:bf:a0:51:d3:5f:e2:ac:34:d6:a5:a8:3f:c9: 9a:5f:be:b3:72:3e:09:ee:15:f7:d2:4d:ab:76:69:4a:c3:95: 85:10:68:fa:6c:5c:08:68:bf:9d:8a:f5:78:b6:f5:16:6c:b3: 72:8f:23:6c:b2:de:32:72:ee:4a:c4:ec:49:6b:d0:53:43:cc: 5d:74:e4:65:4c:ce:19:75:b9:61:f7:ed:9f:fa:33:f3:05:1f: 2b:da:55:9d:45:4a:fe:9d:a8:fe:56:32:0c:31:f7:62:3f:f8: c3:ba:1e:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNEMzcxMTAvBgNVBAUTKDZDRjYwNDNFRjYxQTg0NEYwOEUyNTNBMTkzRDVEOTQ2 NTQ5NjI3OUQwHhcNMjUwNjI5MDIyOTQ2WhcNMjUwNzA2MDIyOTQ2WjAYMRYwFAYD VQQDEw02ODYwYTUxYS1lYmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSa9VwXPxdHrtEFtYxfRcqSx7/rg6+AoscAY2eU0hmw89+MaXtDQ8Ejz+6m/ PrNLtYVjVAxIffOGEEk8hOPhVFzKeL05R+LZMzip9ZLuJNevY0WCrgVrE5NJ8dUV mpGcE8og2fPLcPyYOhp3ZxtKVdk3EXsBZ+93vCWpor4PYAWwKyQkqnx88DX/e0X7 cWIH4zH50v+nYyb/LzudZK9hJTgixz6stvjH1bB//ektWhzaotASbqY8qxFbJwTO zYD1IL2z3J2PQ4I4OzEXvnsh5vyXIJAuKScsD12ferajxRfhWeaPasMf9iFaoYVQ KlU+TKw0ImoxTz2sZwQGsQy8AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAT043lX g2FDz4ngh4x8H80WxfK6MB8GA1UdIwQYMBaAFGz2BD72GoRPCOJToZPV2UZUlied MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0QzNy81RUU5NzgyQURD RUUxMUVEOEMzOEQwMzFDNEY5QUUwMi9iUFlFUHZZYWhFOEk0bE9oazlYWlJsU1dK NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JQWUVQdllhaEU4STRsT2hrOVhaUmxTV0o1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0QzNy81RUU5NzgyQURDRUUxMUVEOEMzOEQwMzFDNEY5QUUwMi9iUFlFUHZZYWhF OEk0bE9oazlYWlJsU1dKNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGi4tMbh1Ah1nP9oq7oBRXiCWK/73FI5EiKj3m3Js3yT+d2U19hksA /bg6K1jwu5Hm4EOy0864/160XIKnZZWgyRrHdvVi1wODSDyzO/gOgr1r6JMUgRLs 7HKYmhZ61O2Iu6F3QxlAV+m2Wbsh8qg3uIWL/tGLZZGC7KAHLEIlDX0wrgv40HEm 3mfWQeTTh2xfvAd+hL+gUdNf4qw01qWoP8maX76zcj4J7hX30k2rdmlKw5WFEGj6 bFwIaL+divV4tvUWbLNyjyNsst4ycu5KxOxJa9BTQ8xddORlTM4Zdblh9+2f+jPz BR8r2lWdRUr+naj+VjIMMfdiP/jDuh5s -----END CERTIFICATE-----Generated at Sun Jun 29 14:19:57 2025 by rpki-client