$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft File: Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json) Hash identifier: bC35B7n/8pjzeU36cUKm8XYpxKZ/1zy4iiPKDld8rPY= Subject key identifier: BC:F8:15:27:D9:C0:DA:B2:53:D8:14:55:8A:3A:DB:D0:41:41:00:09 Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7 Certificate issuer: /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7 Certificate serial: 09E8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft Manifest number: 09E1 Signing time: Fri 22 Aug 2025 20:02:25 +0000 Manifest this update: Fri 22 Aug 2025 20:02:25 +0000 Manifest next update: Fri 29 Aug 2025 20:02:25 +0000 Files and hashes: 1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: oQ0O3uhvx8EMxOxXv8JVEcTFICTAMV3CL0EoZJrSyGE=) 2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: rjAdNfdV9AdfawHfPlvLtufzt08XjVklPQmY9MfBrEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2536 (0x9e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7 Validity Not Before: Aug 22 20:02:25 2025 GMT Not After : Aug 29 20:02:25 2025 GMT Subject: CN=68a8ccd1-ebd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7b:36:7c:a0:5e:6d:e9:09:bf:31:09:2c:16: 3b:c0:9c:2c:c8:43:26:3b:8c:5f:6b:89:1c:52:f9: 6f:43:2f:d8:d0:f0:6e:52:22:fb:fd:70:43:5b:f6: 1b:3f:df:96:fb:22:b4:61:04:f0:63:62:f6:19:e5: d6:37:72:30:8e:0a:1e:83:37:17:f2:01:b3:79:27: 71:12:a5:27:b3:bd:d2:6d:8e:9d:4c:83:69:64:1d: 5b:a6:33:2a:46:0d:5c:87:65:2a:ae:76:09:f5:5f: 9d:2e:eb:a3:76:5e:47:1d:cd:7e:2c:5e:c5:9e:e7: a0:c9:c3:0f:d3:d8:90:bf:66:2e:39:65:80:41:78: c0:99:a5:29:cf:fe:96:c9:f9:7a:bb:87:c9:0a:16: a3:7f:67:a0:0d:e3:f9:f7:9e:72:66:99:d4:33:be: 86:d4:11:ca:d7:df:9f:0a:e3:a4:83:f0:db:b4:d8: 37:f4:ef:23:9b:ce:1a:24:e4:ba:74:7b:27:68:c9: 7c:9c:1c:ce:e6:2c:28:e3:2b:85:f5:8f:a9:fd:de: 29:50:de:b2:0d:3d:22:69:18:3f:a7:cb:68:5c:7e: 7f:d1:2b:30:72:cb:51:79:1c:7f:ac:a0:dd:11:26: ed:f8:6b:36:3b:04:18:9d:cd:8d:6b:f3:ec:57:0e: 8e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F8:15:27:D9:C0:DA:B2:53:D8:14:55:8A:3A:DB:D0:41:41:00:09 X509v3 Authority Key Identifier: keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption dd:62:93:c7:6e:4d:e3:fd:1a:94:ab:b3:cb:06:22:60:1b:aa: 10:7b:36:1f:3c:54:7e:c6:b6:0c:2c:77:84:b6:82:40:e9:8e: be:37:02:25:4f:77:45:f0:42:d5:c6:9f:26:08:61:0a:15:7b: 26:b7:6e:18:df:5c:21:2f:e4:20:ad:61:56:2e:a4:81:0e:bb: 2f:90:05:7d:1e:97:1c:9e:a7:f6:3b:2a:e2:2d:22:dd:41:b2: 58:8e:45:d7:30:4b:10:3a:cf:6b:ed:59:a0:95:97:6a:5b:b1: 60:6a:52:07:2f:ec:48:bd:aa:7e:c3:b2:64:a4:ce:33:93:af: ba:7b:e4:81:43:31:8a:1e:3a:13:5f:98:03:2f:b2:0c:aa:8e: b4:74:fa:d2:58:34:4a:c8:06:40:c9:75:3a:c5:2f:81:03:70: 82:79:74:cf:d0:7d:41:86:1e:5a:eb:a3:38:0c:b2:b7:5a:9b: bf:6b:a0:cd:83:88:b4:56:22:0d:3f:0d:da:22:20:db:8c:40: 28:c3:d3:65:22:62:10:58:08:68:87:40:36:91:4f:60:bd:44: d7:35:ef:f4:77:9a:cd:42:a5:97:60:03:ad:67:f9:37:54:fe: 93:74:eb:0a:c3:e4:11:36:2a:d6:d3:38:6c:d2:b4:b4:a5:3c: 8a:6d:d2:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFN0QxMTAvBgNVBAUTKDA2REY1MkQyOTE1MDNEMEUyQjExNzJEMzg1QzJCMTg3 Nzk0Qzc5QzcwHhcNMjUwODIyMjAwMjI1WhcNMjUwODI5MjAwMjI1WjAYMRYwFAYD VQQDEw02OGE4Y2NkMS1lYmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzns2fKBebekJvzEJLBY7wJwsyEMmO4xfa4kcUvlvQy/Y0PBuUiL7/XBDW/Yb P9+W+yK0YQTwY2L2GeXWN3IwjgoegzcX8gGzeSdxEqUns73SbY6dTINpZB1bpjMq Rg1ch2UqrnYJ9V+dLuujdl5HHc1+LF7FnuegycMP09iQv2YuOWWAQXjAmaUpz/6W yfl6u4fJChajf2egDeP5955yZpnUM76G1BHK19+fCuOkg/DbtNg39O8jm84aJOS6 dHsnaMl8nBzO5iwo4yuF9Y+p/d4pUN6yDT0iaRg/p8toXH5/0SswcstReRx/rKDd ESbt+Gs2OwQYnc2Na/PsVw6O/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLz4FSfZ wNqyU9gUVYo629BBQQAJMB8GA1UdIwQYMBaAFAbfUtKRUD0OKxFy04XCsYd5THnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xNzU5RTRDODgz ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9CdDlTMHBGUVBRNHJFWExUaGNLeGgzbE1l Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J0OVMwcEZRUFE0ckVYTFRoY0t4aDNsTWVjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU3RC8xNzU5RTRDODgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9CdDlTMHBGUVBR NHJFWExUaGNLeGgzbE1lY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDdYpPHbk3j/RqUq7PLBiJgG6oQezYfPFR+xrYMLHeEtoJA6Y6+NwIl T3dF8ELVxp8mCGEKFXsmt24Y31whL+QgrWFWLqSBDrsvkAV9Hpccnqf2OyriLSLd QbJYjkXXMEsQOs9r7VmglZdqW7FgalIHL+xIvap+w7JkpM4zk6+6e+SBQzGKHjoT X5gDL7IMqo60dPrSWDRKyAZAyXU6xS+BA3CCeXTP0H1Bhh5a66M4DLK3Wpu/a6DN g4i0ViINPw3aIiDbjEAow9NlImIQWAhoh0A2kU9gvUTXNe/0d5rNQqWXYAOtZ/k3 VP6TdOsKw+QRNirW0zhs0rS0pTyKbdKC -----END CERTIFICATE-----Generated at Sat Aug 23 20:27:59 2025 by rpki-client