$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft File: BZ5vA652dqnQ8J1fbL25CGGFWlc.mft (raw, json) Hash identifier: i8wOsqxPMr7KHRUxvmAr5EB4oejl2zUJehsFdWeelHo= Subject key identifier: 20:87:DD:66:20:DB:F8:E0:95:FD:48:74:1E:2F:FA:C8:34:C6:C2:AD Authority key identifier: 05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57 Certificate issuer: /CN=A91FF74B/serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57 Certificate serial: 06F7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft Manifest number: 06DB Signing time: Fri 22 Aug 2025 21:48:28 +0000 Manifest this update: Fri 22 Aug 2025 21:48:28 +0000 Manifest next update: Fri 29 Aug 2025 21:48:28 +0000 Files and hashes: 1: BZ5vA652dqnQ8J1fbL25CGGFWlc.crl (hash: dLiy4R3jsek8yXHgHguDGm80A7jVZkGTBjuD565H0KE=) 2: 7E0AB01C782C11EBB0B71971C4F9AE02.roa (hash: k3Hyvnta3NTSihzOI6GhNOzxp4Li4ZxAgK0C//8NE4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1783 (0x6f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57 Validity Not Before: Aug 22 21:48:28 2025 GMT Not After : Aug 29 21:48:28 2025 GMT Subject: CN=68a8e5ac-e997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:d3:f5:e9:c1:b6:f4:fb:f0:72:42:ef:33: 92:f6:e2:17:c3:dc:d4:b0:fd:32:b1:d8:24:76:2b: 2e:4c:bc:11:c8:0f:7e:38:56:2d:35:d9:dc:6e:71: 2e:34:0a:fe:5e:fd:28:c2:fe:3b:ac:96:0c:70:cf: c9:a2:c2:49:0c:60:0c:85:e9:cd:4c:ae:2c:25:e6: 21:04:6d:1f:c4:b9:f7:2f:a5:a6:c3:37:48:ea:f9: f5:ff:7c:d3:05:da:f1:01:06:de:fd:87:24:01:91: 3c:1b:15:95:e6:aa:df:d5:92:66:f9:7a:62:d0:e5: 4e:f1:4f:0b:0b:fd:bf:e0:2c:05:01:32:68:ba:ac: 0d:ea:b7:17:00:65:4f:1f:6b:3d:cd:91:e0:31:25: f9:e5:b0:6f:d7:c6:33:3c:d2:c8:32:db:a3:c1:e6: 7a:ac:af:63:08:46:fe:17:0c:ff:4b:c3:3f:60:0c: 51:9b:e9:77:9a:d5:0f:7b:04:2a:07:68:e3:6d:bc: e8:71:aa:7d:dd:af:0b:ee:db:11:b6:ab:14:60:f8: 9b:9f:44:60:9b:f7:64:a3:8a:3b:a2:49:64:92:b4: 97:00:ab:6a:8f:89:99:5e:f0:c5:63:89:b2:d5:4b: e1:25:ba:aa:d6:f5:6d:df:b7:f7:23:77:0d:a4:a6: 52:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:87:DD:66:20:DB:F8:E0:95:FD:48:74:1E:2F:FA:C8:34:C6:C2:AD X509v3 Authority Key Identifier: keyid:05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:f8:e9:6a:4c:b0:70:f4:b6:d4:65:7a:8f:6a:2d:74:f4:39: 5f:a5:e1:29:82:1a:57:8c:48:42:3a:f9:42:1d:7c:9b:bf:51: 23:7d:f1:67:41:d0:3b:5a:31:c2:71:ec:e1:75:67:e7:d6:bc: cc:79:d0:19:cd:b6:d3:1b:22:df:be:42:a1:a5:04:23:81:55: cb:8d:48:63:39:6a:33:b5:ab:87:aa:6e:ee:12:12:40:4e:71: c3:e0:3c:1c:e9:c3:78:60:d7:0b:57:c4:1f:2d:72:8a:03:94: e5:3b:30:12:e6:3c:d7:c6:dd:67:23:19:6e:ba:de:5b:5b:1e: b4:14:db:f9:27:c2:56:f0:50:9b:98:b3:6e:b8:56:ea:d5:d9: 23:64:e8:f9:93:c4:f3:7b:4c:7a:25:88:37:a5:49:62:fd:26: ad:c9:20:d8:00:b2:7d:76:c4:4e:5f:d7:38:8a:a4:e3:ea:89: 75:8a:b5:97:fd:95:45:14:7d:20:f6:c1:39:36:aa:19:2a:08: c3:d1:4a:11:73:a1:d4:ae:14:cd:88:a3:1d:eb:21:92:d6:2f: 9c:f7:d8:fc:b3:43:d4:b2:6b:7e:bc:b4:b4:ba:0c:30:e6:27: 90:4c:32:43:0b:14:c0:02:fc:d0:a4:66:62:e5:d7:7f:06:ad: d1:f4:e5:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDA1OUU2RjAzQUU3Njc2QTlEMEYwOUQ1RjZDQkRCOTA4 NjE4NTVBNTcwHhcNMjUwODIyMjE0ODI4WhcNMjUwODI5MjE0ODI4WjAYMRYwFAYD VQQDEw02OGE4ZTVhYy1lOTk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzc7T9enBtvT78HJC7zOS9uIXw9zUsP0ysdgkdisuTLwRyA9+OFYtNdncbnEu NAr+Xv0owv47rJYMcM/JosJJDGAMhenNTK4sJeYhBG0fxLn3L6WmwzdI6vn1/3zT BdrxAQbe/YckAZE8GxWV5qrf1ZJm+Xpi0OVO8U8LC/2/4CwFATJouqwN6rcXAGVP H2s9zZHgMSX55bBv18YzPNLIMtujweZ6rK9jCEb+Fwz/S8M/YAxRm+l3mtUPewQq B2jjbbzocap93a8L7tsRtqsUYPibn0Rgm/dko4o7oklkkrSXAKtqj4mZXvDFY4my 1UvhJbqq1vVt37f3I3cNpKZSaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCCH3WYg 2/jglf1IdB4v+sg0xsKtMB8GA1UdIwQYMBaAFAWebwOudnap0PCdX2y9uQhhhVpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi82MUEzMzg0QTc4 MkMxMUVCQUMwNEY2NzJDNEY5QUUwMi9CWjV2QTY1MmRxblE4SjFmYkwyNUNHR0ZX bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JaNXZBNjUyZHFuUThKMWZiTDI1Q0dHRldsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi82MUEzMzg0QTc4MkMxMUVCQUMwNEY2NzJDNEY5QUUwMi9CWjV2QTY1MmRx blE4SjFmYkwyNUNHR0ZXbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAD+OlqTLBw9LbUZXqPai109DlfpeEpghpXjEhCOvlCHXybv1EjffFn QdA7WjHCcezhdWfn1rzMedAZzbbTGyLfvkKhpQQjgVXLjUhjOWoztauHqm7uEhJA TnHD4Dwc6cN4YNcLV8QfLXKKA5TlOzAS5jzXxt1nIxluut5bWx60FNv5J8JW8FCb mLNuuFbq1dkjZOj5k8Tze0x6JYg3pUli/SatySDYALJ9dsROX9c4iqTj6ol1irWX /ZVFFH0g9sE5NqoZKgjD0UoRc6HUrhTNiKMd6yGS1i+c99j8s0PUsmt+vLS0ugww 5ieQTDJDCxTAAvzQpGZi5dd/Bq3R9OXO -----END CERTIFICATE-----Generated at Sun Aug 24 00:48:17 2025 by rpki-client