$ rpki-client -vvf rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft File: bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft (raw, json) Hash identifier: rj860X/xOVwHAXqk1BFHQVSNvvmJ6RzsUG0hBD9Hljk= Subject key identifier: B0:96:2B:F8:9D:F9:F4:6B:FC:39:BD:78:CD:06:71:FD:79:A7:A7:A2 Authority key identifier: 6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54 Certificate issuer: /CN=A91626D2/serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54 Certificate serial: EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft Manifest number: E9 Signing time: Wed 13 Aug 2025 05:58:15 +0000 Manifest this update: Wed 13 Aug 2025 05:58:15 +0000 Manifest next update: Wed 20 Aug 2025 05:58:15 +0000 Files and hashes: 1: bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl (hash: wNZ6d4kIQIeNBaeM4prMMMkUmvFwV3nikb0laYZIWnA=) 2: 8093CCBA13F611EF8ED7D71EC4F9AE02.roa (hash: J6cm0tDS7Sdy7/sJGsGgF8rSkOKz7v9OX913NFApE9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 04:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 235 (0xeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91626D2, serialNumber=6C3B7F1C133DA9C51D444DA85E602A968451FE54 Validity Not Before: Aug 13 05:58:15 2025 GMT Not After : Aug 20 05:58:15 2025 GMT Subject: CN=689c2977-e4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5f:e7:46:dd:dc:c8:f6:89:44:24:68:ad:b1: 8a:5e:29:0e:8f:94:cb:f5:1f:10:04:8f:f3:47:b0: 1b:29:51:38:01:39:e0:c2:e7:8b:dc:b1:34:ae:23: 09:35:96:97:d4:cc:30:b0:35:91:8f:c8:2f:d9:22: 58:0c:1e:b4:2b:1c:5a:bb:cf:c7:1e:62:9b:a0:85: 35:e1:4c:c7:c6:e7:a6:c6:04:f9:09:70:7a:d7:18: fa:16:4f:31:15:44:7b:31:4a:a9:83:71:55:e3:25: 71:e5:84:d9:4b:88:7c:47:57:75:f0:4c:80:3d:3c: 6f:e9:79:2c:96:82:7d:00:46:42:c6:e9:c4:16:a2: d0:61:87:80:dd:17:92:10:e2:43:4c:59:a8:74:f1: dc:78:72:a1:01:71:a5:7d:52:f1:7e:c8:9c:f0:e2: b9:56:10:3e:ca:bb:52:42:3a:71:20:db:94:61:dd: 08:e2:52:86:1f:bb:75:20:ce:0c:49:82:13:08:11: eb:4c:e0:0f:33:c7:ac:4a:09:b0:57:00:e1:a0:d6: 25:a1:71:19:69:58:de:04:86:4e:5b:da:ca:2e:7f: 81:82:09:2e:54:25:92:c0:97:3f:dc:57:cb:1e:8d: 7a:33:b6:59:49:01:6e:6f:4a:41:59:16:72:9f:00: 92:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:96:2B:F8:9D:F9:F4:6B:FC:39:BD:78:CD:06:71:FD:79:A7:A7:A2 X509v3 Authority Key Identifier: keyid:6C:3B:7F:1C:13:3D:A9:C5:1D:44:4D:A8:5E:60:2A:96:84:51:FE:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bDt_HBM9qcUdRE2oXmAqloRR_lQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91626D2/AF20834E13F511EFA09D321BC4F9AE02/bDt_HBM9qcUdRE2oXmAqloRR_lQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:01:60:95:12:ce:52:de:9b:1d:11:39:81:93:0d:ec:13:1b: 2c:8a:12:2b:4f:fd:b5:fe:13:b0:3b:fe:c4:61:5a:a2:57:ce: 78:60:10:da:c8:b5:56:64:fe:25:cd:00:01:01:56:a5:d2:ed: 97:8b:86:8f:6f:31:ad:b6:91:a8:af:3a:e7:7f:3b:6c:28:f1: 98:f4:0c:e5:2b:f0:9a:81:ee:af:ef:ec:2a:00:84:5a:55:09: e5:04:72:77:29:af:82:43:35:a2:dc:78:53:2d:5e:a9:ab:ac: 6e:c6:e2:ad:e2:4c:e1:33:42:cc:cd:69:9f:75:fd:09:23:79: cb:a4:ae:ec:9e:35:68:52:28:e3:39:61:c1:c1:e4:f2:ad:28: 28:fb:ce:93:57:ee:25:47:ce:ea:2e:dc:a3:53:24:b0:c0:39: cf:46:0a:82:05:1b:b2:24:78:ee:c0:c7:cc:7a:6b:8d:41:85: da:d0:93:0b:0a:bc:8b:f7:98:59:f7:fc:d1:92:0d:b9:61:d3: b6:a0:a5:4d:98:17:95:a7:f8:35:da:4b:53:59:48:5c:ce:3b: c3:e1:c6:d4:4b:ce:8a:04:24:a9:cc:b5:b3:b7:22:c2:ac:f0: 43:75:b6:94:ed:9d:02:e6:58:7b:e1:af:96:56:02:0e:44:65: fc:6a:ff:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI2RDIxMTAvBgNVBAUTKDZDM0I3RjFDMTMzREE5QzUxRDQ0NERBODVFNjAyQTk2 ODQ1MUZFNTQwHhcNMjUwODEzMDU1ODE1WhcNMjUwODIwMDU1ODE1WjAYMRYwFAYD VQQDEw02ODljMjk3Ny1lNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7l/nRt3cyPaJRCRorbGKXikOj5TL9R8QBI/zR7AbKVE4ATngwueL3LE0riMJ NZaX1MwwsDWRj8gv2SJYDB60Kxxau8/HHmKboIU14UzHxuemxgT5CXB61xj6Fk8x FUR7MUqpg3FV4yVx5YTZS4h8R1d18EyAPTxv6XksloJ9AEZCxunEFqLQYYeA3ReS EOJDTFmodPHceHKhAXGlfVLxfsic8OK5VhA+yrtSQjpxINuUYd0I4lKGH7t1IM4M SYITCBHrTOAPM8esSgmwVwDhoNYloXEZaVjeBIZOW9rKLn+BggkuVCWSwJc/3FfL Ho16M7ZZSQFub0pBWRZynwCSQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLCWK/id +fRr/Dm9eM0Gcf15p6eiMB8GA1UdIwQYMBaAFGw7fxwTPanFHURNqF5gKpaEUf5U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjZEMi9BRjIwODM0RTEz RjUxMUVGQTA5RDMyMUJDNEY5QUUwMi9iRHRfSEJNOXFjVWRSRTJvWG1BcWxvUlJf bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JEdF9IQk05cWNVZFJFMm9YbUFxbG9SUl9sUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjZEMi9BRjIwODM0RTEzRjUxMUVGQTA5RDMyMUJDNEY5QUUwMi9iRHRfSEJNOXFj VWRSRTJvWG1BcWxvUlJfbFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnAWCVEs5S3psdETmBkw3sExssihIrT/21/hOwO/7EYVqiV854YBDa yLVWZP4lzQABAVal0u2Xi4aPbzGttpGorzrnfztsKPGY9AzlK/Cage6v7+wqAIRa VQnlBHJ3Ka+CQzWi3HhTLV6pq6xuxuKt4kzhM0LMzWmfdf0JI3nLpK7snjVoUijj OWHBweTyrSgo+86TV+4lR87qLtyjUySwwDnPRgqCBRuyJHjuwMfMemuNQYXa0JML CryL95hZ9/zRkg25YdO2oKVNmBeVp/g12ktTWUhczjvD4cbUS86KBCSpzLWztyLC rPBDdbaU7Z0C5lh74a+WVgIORGX8av9D -----END CERTIFICATE-----Generated at Wed Aug 13 09:47:56 2025 by rpki-client