$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft File: bPYEPvYahE8I4lOhk9XZRlSWJ50.mft (raw, json) Hash identifier: Sx0w2gvIdRcAon5o9IkFvYDS+PMU+QNCuL1QkZUrcwA= Subject key identifier: B9:35:AC:CF:E6:A4:21:44:21:33:16:BA:48:FC:7C:00:1B:3D:EA:48 Authority key identifier: 6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D Certificate issuer: /CN=A91F3D37/serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft Manifest number: 01B8 Signing time: Sat 23 Aug 2025 03:10:55 +0000 Manifest this update: Sat 23 Aug 2025 03:10:55 +0000 Manifest next update: Sat 30 Aug 2025 03:10:54 +0000 Files and hashes: 1: bPYEPvYahE8I4lOhk9XZRlSWJ50.crl (hash: I5IGJszk7pKKOrLyDwyKXOymcLHysOpRrKfopEzrr1g=) 2: 6F67CF8CDCF111ED9828F232C4F9AE02.roa (hash: UUhAaQeYrl7H0iCSeqj7JAOZrw6JcIfsjlzbvaWf61k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3D37, serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Validity Not Before: Aug 23 03:10:55 2025 GMT Not After : Aug 30 03:10:54 2025 GMT Subject: CN=68a9313f-748f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:83:87:85:2e:1f:85:a0:29:26:7b:1a:7f:89: ad:23:14:e3:d5:4d:81:b4:8b:98:1a:f6:10:f9:65: e8:cb:51:4a:8e:b9:cc:34:76:26:bd:8f:ca:5c:c8: 56:5b:39:05:99:0d:cf:70:27:c1:64:3d:b6:19:cc: 9f:f9:aa:2f:f7:a8:bb:5d:64:ac:e1:de:31:25:3d: 2a:f5:db:88:28:6e:ae:db:e0:b3:00:d9:5f:52:59: 4a:23:03:ae:5d:9a:17:20:a9:ea:05:f8:c6:84:f4: 47:af:1e:35:1d:9c:e4:b5:01:e0:fe:af:e9:b4:79: 91:5a:93:e8:22:e6:92:a9:1b:6c:64:b4:84:dc:36: 68:ed:bd:c9:cb:e3:f6:86:4d:e8:a8:73:e5:d6:fb: 73:c9:f2:fd:6d:b0:97:83:9d:5d:47:b9:5a:72:84: cf:b6:aa:c4:6b:01:cf:56:2b:8b:53:6e:8a:d3:94: 3e:12:31:9b:98:ad:ed:78:9b:74:fe:a1:f0:48:8d: d1:01:d1:72:4e:4a:23:f2:49:68:33:65:8d:d0:56: 8a:bb:e3:fc:d7:71:7f:fb:26:eb:3c:f7:92:33:b3: 6a:ef:70:23:41:be:2f:1b:d5:5b:50:67:3c:5c:94: 6b:c2:48:36:be:16:5a:7b:0f:2a:05:9a:01:f5:5d: 51:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:35:AC:CF:E6:A4:21:44:21:33:16:BA:48:FC:7C:00:1B:3D:EA:48 X509v3 Authority Key Identifier: keyid:6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:cb:85:5c:e6:c7:c3:c3:84:09:4e:5d:46:58:d8:78:87:f2: 59:f0:4a:1c:31:cd:91:4d:3d:08:5f:5c:dc:44:97:68:3e:9b: c8:82:a7:36:d0:45:0f:02:05:50:bb:22:92:f4:6a:8f:47:2d: 43:0e:a4:26:1b:e5:38:54:63:c0:a4:b3:a3:1e:49:e9:d4:bf: 7f:c7:d7:21:8e:b2:94:ce:32:59:dc:68:b1:55:49:a1:74:4b: 6c:c7:77:8c:79:03:f3:11:5a:a4:50:87:f4:d0:bc:d6:04:aa: 66:37:5d:48:9c:7a:e4:18:4f:ef:27:89:e2:1b:93:ad:47:bb: 95:56:80:b3:35:d5:47:49:b4:75:d4:fa:b5:f3:64:a4:85:13: 40:f3:3b:40:65:b5:6f:f6:c0:15:5d:35:9f:76:1e:c8:09:20: 5a:29:46:ef:8d:34:64:37:14:85:8a:f3:2c:a5:c1:47:c1:bc: a5:ea:31:54:11:25:9c:8c:dd:77:4e:c3:f1:e3:3b:4b:8d:0d: d1:db:a7:0d:20:1b:11:c5:6c:6f:38:1f:9b:85:c2:38:cc:e5: f3:1b:7c:aa:bf:69:6d:fb:3e:5b:d3:1f:71:78:9d:79:bc:0b: 6b:49:c9:a3:8f:11:ba:f0:f2:23:4b:55:a8:a3:07:7d:9b:db: e3:6f:8f:4f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNEMzcxMTAvBgNVBAUTKDZDRjYwNDNFRjYxQTg0NEYwOEUyNTNBMTkzRDVEOTQ2 NTQ5NjI3OUQwHhcNMjUwODIzMDMxMDU1WhcNMjUwODMwMDMxMDU0WjAYMRYwFAYD VQQDEw02OGE5MzEzZi03NDhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7YOHhS4fhaApJnsaf4mtIxTj1U2BtIuYGvYQ+WXoy1FKjrnMNHYmvY/KXMhW WzkFmQ3PcCfBZD22Gcyf+aov96i7XWSs4d4xJT0q9duIKG6u2+CzANlfUllKIwOu XZoXIKnqBfjGhPRHrx41HZzktQHg/q/ptHmRWpPoIuaSqRtsZLSE3DZo7b3Jy+P2 hk3oqHPl1vtzyfL9bbCXg51dR7lacoTPtqrEawHPViuLU26K05Q+EjGbmK3teJt0 /qHwSI3RAdFyTkoj8kloM2WN0FaKu+P813F/+ybrPPeSM7Nq73AjQb4vG9VbUGc8 XJRrwkg2vhZaew8qBZoB9V1RjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLk1rM/m pCFEITMWukj8fAAbPepIMB8GA1UdIwQYMBaAFGz2BD72GoRPCOJToZPV2UZUlied MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0QzNy81RUU5NzgyQURD RUUxMUVEOEMzOEQwMzFDNEY5QUUwMi9iUFlFUHZZYWhFOEk0bE9oazlYWlJsU1dK NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JQWUVQdllhaEU4STRsT2hrOVhaUmxTV0o1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0QzNy81RUU5NzgyQURDRUUxMUVEOEMzOEQwMzFDNEY5QUUwMi9iUFlFUHZZYWhF OEk0bE9oazlYWlJsU1dKNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1y4Vc5sfDw4QJTl1GWNh4h/JZ8EocMc2RTT0IX1zcRJdoPpvIgqc2 0EUPAgVQuyKS9GqPRy1DDqQmG+U4VGPApLOjHknp1L9/x9chjrKUzjJZ3GixVUmh dEtsx3eMeQPzEVqkUIf00LzWBKpmN11InHrkGE/vJ4niG5OtR7uVVoCzNdVHSbR1 1Pq182SkhRNA8ztAZbVv9sAVXTWfdh7ICSBaKUbvjTRkNxSFivMspcFHwbyl6jFU ESWcjN13TsPx4ztLjQ3R26cNIBsRxWxvOB+bhcI4zOXzG3yqv2lt+z5b0x9xeJ15 vAtrScmjjxG68PIjS1Woowd9m9vjb49P -----END CERTIFICATE-----Generated at Sat Aug 23 15:49:51 2025 by rpki-client