$ rpki-client -vvf rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft File: bXwian3LhfL0kha367ANXwOmBcM.mft (raw, json) Hash identifier: 4bBEooMe+AhC7pSCLVow7grGeC5SNDeadHS5p2EC9pw= Subject key identifier: DF:24:E3:1C:B3:88:24:A0:36:EE:29:1F:CD:75:17:81:F5:5A:F8:01 Authority key identifier: 6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 Certificate issuer: /CN=A91809AD/serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Certificate serial: 13B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft Manifest number: 1388 Signing time: Sun 10 Aug 2025 16:59:38 +0000 Manifest this update: Sun 10 Aug 2025 16:59:37 +0000 Manifest next update: Sun 17 Aug 2025 16:59:37 +0000 Files and hashes: 1: bXwian3LhfL0kha367ANXwOmBcM.crl (hash: /dC8BUB5LxR4nd92cQMEmI2lt9XJJahZr7kexdZrnHQ=) 2: 872698A8041B11F0A98AFA39C4F9AE02.roa (hash: UjuTxiRAP/X58Z72XiuqvHNz63YuSaMMCGvUPVkyPaA=) 3: 3DC8B712E14411EFBECFB90BC4F9AE02.roa (hash: DcZGy4PWZzTwOUNtpL1rLlMb1gqaFihjq3bAlb0Tfo4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5043 (0x13b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91809AD, serialNumber=6D7C226A7DCB85F2F49216B7EBB00D5F03A605C3 Validity Not Before: Aug 10 16:59:37 2025 GMT Not After : Aug 17 16:59:37 2025 GMT Subject: CN=6898cff9-3b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c6:60:18:be:e2:f8:d5:f3:d7:b1:d3:8f:02: b3:93:fb:6d:b6:12:89:e6:df:3e:a8:d8:66:b8:c9: f2:72:8e:43:e3:43:0c:00:77:17:eb:70:9b:4a:75: a3:b3:d6:2f:d8:62:7d:80:ad:9f:4c:02:fa:6d:e6: 50:a8:d1:52:ee:2c:11:f2:b2:58:62:fa:0b:fa:a2: a3:52:1e:e6:11:7b:15:7c:96:e5:1d:d8:6d:f4:74: 08:f8:2b:90:82:a7:a7:c3:46:e3:92:6e:9a:19:d7: f8:09:fb:0a:31:eb:8a:5f:84:39:91:20:76:f8:a7: 04:87:79:87:96:2e:b8:62:cc:03:a4:f7:41:68:a0: 45:c6:52:8a:94:f1:7f:c4:4f:76:94:9b:3a:07:05: 85:0d:42:a8:58:86:e0:13:aa:0b:3e:09:16:1c:44: 35:1a:b5:73:a8:67:6e:3f:e4:1f:87:3f:86:81:8e: 22:e9:87:92:36:86:9d:65:79:b9:36:ac:65:5f:04: ae:9c:4c:46:f2:35:fd:41:c4:fc:ac:cd:40:f3:50: f4:81:31:8b:b9:04:63:f7:fe:87:aa:af:d9:6b:95: 2a:b3:d8:45:7d:c8:6a:44:0c:ed:3a:23:09:d4:d7: 9e:f0:1f:4a:5b:7b:07:ee:cf:49:00:2f:91:79:6d: 23:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:24:E3:1C:B3:88:24:A0:36:EE:29:1F:CD:75:17:81:F5:5A:F8:01 X509v3 Authority Key Identifier: keyid:6D:7C:22:6A:7D:CB:85:F2:F4:92:16:B7:EB:B0:0D:5F:03:A6:05:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bXwian3LhfL0kha367ANXwOmBcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91809AD/656DD26AA76811E89333C725C4F9AE02/bXwian3LhfL0kha367ANXwOmBcM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:4f:e7:38:86:f0:a7:bd:7c:86:0f:1e:e8:43:ac:1b:20:d9: 7a:df:2b:8b:a4:22:28:1b:a7:2e:85:bd:f1:f4:6b:0b:10:91: 8d:0a:78:0b:c6:d4:2c:ef:24:11:e1:a5:ee:fb:58:2b:e5:db: d1:1e:57:c4:e2:ec:6b:cc:09:a1:13:58:48:1b:9a:3d:07:22: 79:e6:40:63:e0:76:87:30:dd:07:1a:3e:2a:a6:1d:19:65:89: fb:cf:e4:1a:57:0c:94:01:b8:7b:9e:d7:79:1e:06:4f:86:77: 29:e2:18:3c:ad:80:76:51:93:4b:38:fa:be:65:8c:96:2c:df: 20:6e:1f:83:66:9d:6a:3b:0c:9d:65:8d:87:98:f8:2f:8b:4b: 4c:05:9a:90:28:f2:72:09:93:57:18:31:f2:91:16:12:c3:f1: 97:a7:fd:ec:e1:a3:3c:79:df:7a:ad:4a:6f:db:ac:7d:3d:09: c1:ab:38:13:b2:cf:f7:c5:cc:97:d8:aa:70:3a:82:6a:7a:64: 22:6b:56:5e:54:df:78:21:c6:72:0b:d9:da:3c:61:63:02:18: 27:ac:a1:f2:28:0c:91:7e:b1:08:59:ac:9a:70:9b:b9:6d:4f: 7f:9b:6b:90:25:87:93:df:f5:b7:5d:94:45:e1:12:7b:29:a1: 3b:9c:98:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICE7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODA5QUQxMTAvBgNVBAUTKDZEN0MyMjZBN0RDQjg1RjJGNDkyMTZCN0VCQjAwRDVG MDNBNjA1QzMwHhcNMjUwODEwMTY1OTM3WhcNMjUwODE3MTY1OTM3WjAYMRYwFAYD VQQDEw02ODk4Y2ZmOS0zYjk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3cZgGL7i+NXz17HTjwKzk/ttthKJ5t8+qNhmuMnyco5D40MMAHcX63CbSnWj s9Yv2GJ9gK2fTAL6beZQqNFS7iwR8rJYYvoL+qKjUh7mEXsVfJblHdht9HQI+CuQ gqenw0bjkm6aGdf4CfsKMeuKX4Q5kSB2+KcEh3mHli64YswDpPdBaKBFxlKKlPF/ xE92lJs6BwWFDUKoWIbgE6oLPgkWHEQ1GrVzqGduP+Qfhz+GgY4i6YeSNoadZXm5 NqxlXwSunExG8jX9QcT8rM1A81D0gTGLuQRj9/6Hqq/Za5Uqs9hFfchqRAztOiMJ 1Nee8B9KW3sH7s9JAC+ReW0j5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8k4xyz iCSgNu4pH811F4H1WvgBMB8GA1UdIwQYMBaAFG18Imp9y4Xy9JIWt+uwDV8DpgXD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDlBRC82NTZERDI2QUE3 NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhmTDBraGEzNjdBTlh3T21C Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JYd2lhbjNMaGZMMGtoYTM2N0FOWHdPbUJjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDlBRC82NTZERDI2QUE3NjgxMUU4OTMzM0M3MjVDNEY5QUUwMi9iWHdpYW4zTGhm TDBraGEzNjdBTlh3T21CY00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpT+c4hvCnvXyGDx7oQ6wbINl63yuLpCIoG6cuhb3x9GsLEJGNCngL xtQs7yQR4aXu+1gr5dvRHlfE4uxrzAmhE1hIG5o9ByJ55kBj4HaHMN0HGj4qph0Z ZYn7z+QaVwyUAbh7ntd5HgZPhncp4hg8rYB2UZNLOPq+ZYyWLN8gbh+DZp1qOwyd ZY2HmPgvi0tMBZqQKPJyCZNXGDHykRYSw/GXp/3s4aM8ed96rUpv26x9PQnBqzgT ss/3xcyX2KpwOoJqemQia1ZeVN94IcZyC9naPGFjAhgnrKHyKAyRfrEIWayacJu5 bU9/m2uQJYeT3/W3XZRF4RJ7KaE7nJgr -----END CERTIFICATE-----Generated at Mon Aug 11 04:24:05 2025 by rpki-client