$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft File: Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft (raw, json) Hash identifier: paUXft6lvGnYpDpKFQt3XtGpqc3OotjxFcXnj5OxmA4= Subject key identifier: 2B:C1:B6:05:4B:51:DE:99:F1:14:C8:AF:F7:0A:44:8E:C8:DA:4F:7B Authority key identifier: 06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7 Certificate issuer: /CN=A91F6E7D/serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7 Certificate serial: 09CF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft Manifest number: 09C8 Signing time: Fri 04 Jul 2025 20:19:48 +0000 Manifest this update: Fri 04 Jul 2025 20:19:47 +0000 Manifest next update: Fri 11 Jul 2025 20:19:47 +0000 Files and hashes: 1: Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl (hash: ihLwWavgR5etoqAoRGudTnYhuZ1aF5QMhV3qkoV9ODU=) 2: 401EA996B5B511EABB640052C4F9AE02.roa (hash: rjAdNfdV9AdfawHfPlvLtufzt08XjVklPQmY9MfBrEE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2511 (0x9cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E7D, serialNumber=06DF52D291503D0E2B1172D385C2B187794C79C7 Validity Not Before: Jul 4 20:19:47 2025 GMT Not After : Jul 11 20:19:47 2025 GMT Subject: CN=68683764-ab53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:69:9b:ae:1e:e0:56:a9:80:20:fa:7e:e6:78: 7c:6a:7a:77:05:70:fa:cc:a1:e4:bb:3c:c1:90:41: 45:0b:e3:ae:37:36:3e:89:9d:da:f1:17:a2:da:2a: 1a:8f:f7:c2:dc:06:6f:86:6c:3b:7a:b8:b3:fe:3c: 10:73:fc:ab:ea:93:a5:81:32:6e:cb:13:fc:64:3b: b8:26:d1:82:8d:3b:83:ad:c7:78:86:c3:20:f3:de: ef:20:0d:27:d0:62:81:0a:70:10:35:a6:84:a6:b8: 98:3e:42:2c:eb:25:63:b9:b2:5f:40:5b:aa:c2:34: 89:b8:53:5d:5c:b3:0b:ff:96:f1:c6:75:aa:65:b6: ae:df:32:c7:07:6d:80:60:66:47:b3:9b:19:a3:27: e9:a2:1e:cd:cd:77:d0:e8:d7:b9:78:93:b4:b4:ef: ca:46:bc:9f:3b:04:ae:bf:4e:f2:16:10:d8:56:13: a5:84:42:50:9c:06:31:a8:5d:12:57:b0:5e:78:bf: 23:66:3b:f0:51:1a:fb:7a:37:d0:f8:76:46:e7:d1: 06:ac:2c:c4:60:43:bb:72:d0:33:40:f2:dc:fb:6f: ef:11:20:70:c8:db:31:32:28:a6:0a:08:f1:28:fe: 8a:58:c2:1a:c2:2b:20:8b:1f:ba:af:06:f7:71:2c: 38:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C1:B6:05:4B:51:DE:99:F1:14:C8:AF:F7:0A:44:8E:C8:DA:4F:7B X509v3 Authority Key Identifier: keyid:06:DF:52:D2:91:50:3D:0E:2B:11:72:D3:85:C2:B1:87:79:4C:79:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Bt9S0pFQPQ4rEXLThcKxh3lMecc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E7D/1759E4C8838111EAACB9BC30C4F9AE02/Bt9S0pFQPQ4rEXLThcKxh3lMecc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7f:be:b3:48:5c:01:99:da:48:10:f5:bd:02:20:29:db:cd:84: 98:77:71:93:20:fe:57:f5:e6:9f:22:73:a3:fc:8d:70:c2:69: 45:ca:1d:bc:20:07:0e:98:49:c4:b9:ca:28:22:b3:70:9f:0e: 8a:6d:b0:75:34:44:4f:f1:a8:81:42:50:31:b7:7d:3d:87:0c: 28:55:b3:59:be:04:7e:3f:2f:f8:bc:8a:d4:0f:1e:3a:86:82: f6:c0:9d:c6:e6:11:80:a9:2c:02:63:28:d7:31:6d:a0:e0:cd: 2a:77:7d:86:98:d0:b8:e5:38:1d:1e:f9:fa:c3:47:2c:8b:e4: 9f:6a:e7:7b:31:0a:5d:b4:f5:63:50:fd:d0:1c:5b:f0:0f:a8: 12:d8:a3:0e:5c:fc:7f:8c:30:9b:ab:ee:4a:12:8c:c0:0c:5a: 71:cc:a3:da:9b:55:5b:9c:ad:51:1b:06:3a:64:59:e4:d7:8c: cf:94:cb:08:46:f6:21:d2:8e:ea:27:bf:2a:00:d3:7c:1e:61: 1e:43:17:d8:4d:3c:8d:0c:75:d6:c4:5d:f8:79:7f:15:77:39: 90:9c:33:96:82:45:6a:2c:1b:de:f2:9f:a2:76:95:61:0a:18: d4:c3:7c:1a:24:2d:04:bc:5b:71:a2:ae:f8:0a:f2:79:9a:af: 44:2e:a8:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFN0QxMTAvBgNVBAUTKDA2REY1MkQyOTE1MDNEMEUyQjExNzJEMzg1QzJCMTg3 Nzk0Qzc5QzcwHhcNMjUwNzA0MjAxOTQ3WhcNMjUwNzExMjAxOTQ3WjAYMRYwFAYD VQQDEw02ODY4Mzc2NC1hYjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwGmbrh7gVqmAIPp+5nh8anp3BXD6zKHkuzzBkEFFC+OuNzY+iZ3a8Rei2ioa j/fC3AZvhmw7eriz/jwQc/yr6pOlgTJuyxP8ZDu4JtGCjTuDrcd4hsMg897vIA0n 0GKBCnAQNaaEpriYPkIs6yVjubJfQFuqwjSJuFNdXLML/5bxxnWqZbau3zLHB22A YGZHs5sZoyfpoh7NzXfQ6Ne5eJO0tO/KRryfOwSuv07yFhDYVhOlhEJQnAYxqF0S V7BeeL8jZjvwURr7ejfQ+HZG59EGrCzEYEO7ctAzQPLc+2/vESBwyNsxMiimCgjx KP6KWMIawisgix+6rwb3cSw4lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvBtgVL Ud6Z8RTIr/cKRI7I2k97MB8GA1UdIwQYMBaAFAbfUtKRUD0OKxFy04XCsYd5THnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU3RC8xNzU5RTRDODgz ODExMUVBQUNCOUJDMzBDNEY5QUUwMi9CdDlTMHBGUVBRNHJFWExUaGNLeGgzbE1l Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J0OVMwcEZRUFE0ckVYTFRoY0t4aDNsTWVjYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU3RC8xNzU5RTRDODgzODExMUVBQUNCOUJDMzBDNEY5QUUwMi9CdDlTMHBGUVBR NHJFWExUaGNLeGgzbE1lY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB/vrNIXAGZ2kgQ9b0CICnbzYSYd3GTIP5X9eafInOj/I1wwmlFyh28 IAcOmEnEucooIrNwnw6KbbB1NERP8aiBQlAxt309hwwoVbNZvgR+Py/4vIrUDx46 hoL2wJ3G5hGAqSwCYyjXMW2g4M0qd32GmNC45TgdHvn6w0csi+Sfaud7MQpdtPVj UP3QHFvwD6gS2KMOXPx/jDCbq+5KEozADFpxzKPam1VbnK1RGwY6ZFnk14zPlMsI RvYh0o7qJ78qANN8HmEeQxfYTTyNDHXWxF34eX8VdzmQnDOWgkVqLBve8p+idpVh ChjUw3waJC0EvFtxoq74CvJ5mq9ELqib -----END CERTIFICATE-----Generated at Sat Jul 5 02:46:30 2025 by rpki-client