$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft File: BYQh3nB4BzBHPlzFRboK5dubTAo.mft (raw, json) Hash identifier: /P9KPAWyVzCpmU+FYjUviO43hkczI6l4JVUEGLCTwsw= Subject key identifier: 6F:02:D4:A9:32:C8:DC:66:55:00:94:D1:D9:1F:2B:1A:19:FA:CB:B4 Authority key identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A Certificate issuer: /CN=A91862F7/serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Certificate serial: 09B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft Manifest number: 09AA Signing time: Fri 08 Aug 2025 17:30:35 +0000 Manifest this update: Fri 08 Aug 2025 17:30:35 +0000 Manifest next update: Fri 15 Aug 2025 17:30:35 +0000 Files and hashes: 1: BYQh3nB4BzBHPlzFRboK5dubTAo.crl (hash: lG4VwUgqD4C8efbVkaC/mfkoLTZ3IyrX6SYQM8TsNPY=) 2: 0619825C2F2A11ED9F62040DC4F9AE02.roa (hash: kL+XFv+JIBMzJ5k9XXPNiC6YLDiIMa15JQqj4/UV838=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2486 (0x9b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F7, serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Validity Not Before: Aug 8 17:30:35 2025 GMT Not After : Aug 15 17:30:35 2025 GMT Subject: CN=6896343b-5abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:67:28:0c:c9:6e:17:11:56:2b:11:92:16:e3: 9c:0f:70:fc:b2:e5:d5:93:b5:5d:c6:91:09:79:ba: ea:5b:f8:c5:96:48:96:ea:12:1f:09:86:cd:87:2c: 55:81:3a:85:d5:fe:f2:2a:2a:56:76:fb:85:1a:41: 82:88:10:68:9f:aa:00:58:62:51:35:0b:99:27:28: b4:1c:39:69:df:a2:54:ab:15:69:26:c0:91:f2:44: 33:f4:04:49:11:d0:e1:2f:d3:1e:6f:cd:6a:bc:ef: 36:78:de:1c:5f:02:5c:df:6d:cc:ea:b4:da:f1:7d: 2f:80:01:30:54:8b:83:d9:b8:a7:cf:bc:01:7b:50: 75:51:51:8f:4b:09:4a:9c:03:70:25:85:df:da:e7: f1:ba:f0:64:23:a1:62:c1:4c:e0:a1:c2:50:ae:0f: 44:55:c8:3a:b5:99:58:2a:ea:f4:a1:a6:aa:1b:00: 4a:9b:ea:0e:f5:d1:d2:98:ef:09:6b:1b:e0:0c:c8: 7e:50:e7:14:02:02:83:14:c9:65:2b:a4:b6:91:d2: a8:44:fc:5f:09:e7:05:82:b6:91:f1:a7:57:28:0a: 19:f9:eb:e9:22:56:21:de:3f:c4:6d:da:08:6b:79: 46:3e:cc:a6:09:5b:85:96:ee:a3:97:cc:64:1c:0a: 9b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:02:D4:A9:32:C8:DC:66:55:00:94:D1:D9:1F:2B:1A:19:FA:CB:B4 X509v3 Authority Key Identifier: keyid:05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:68:90:2a:47:7c:15:8f:f4:65:7d:fd:e1:d7:b9:4c:fe:51: cb:af:d8:bd:2c:66:6d:a9:9a:cd:6b:d1:fa:57:fe:71:7d:45: 26:f4:df:cb:de:3c:9e:ec:c6:69:db:d2:68:85:93:d3:5a:a9: 80:b5:3d:0c:9e:ce:4c:81:f3:86:55:74:a9:4a:ac:52:98:f3: 70:6b:0c:73:2d:4a:f8:54:20:46:d9:a1:6f:a5:f7:80:8f:d3: 70:80:9d:3d:9c:35:26:9b:50:b7:19:e1:59:dd:b6:9d:e5:62: fb:b4:f9:f8:ee:db:15:d5:c6:63:e2:28:e6:f3:cf:d5:35:e1: 45:d2:d3:76:cf:c6:72:ad:71:c6:5d:0c:fd:1e:5a:a0:2c:c2: f3:15:d8:00:90:74:a2:fc:af:61:c2:59:c8:cd:7c:dd:c3:88: ea:0f:d8:8c:58:b5:9c:90:85:0e:d3:1d:46:36:7e:82:3f:87: 5a:ab:d2:7d:5b:2c:30:5c:cb:e2:da:39:06:e6:61:0c:c9:35: e6:68:96:24:0d:2c:3d:ef:f6:f3:a1:a7:3e:32:a0:34:d4:48: 4b:c4:82:71:30:db:c8:fb:95:fb:62:e8:b9:03:7d:72:60:e6: 28:dc:dc:34:1b:48:bb:7a:0c:b5:fb:21:c4:a1:88:33:f6:9f: 66:79:52:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCbYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjcxMTAvBgNVBAUTKDA1ODQyMURFNzA3ODA3MzA0NzNFNUNDNTQ1QkEwQUU1 REI5QjRDMEEwHhcNMjUwODA4MTczMDM1WhcNMjUwODE1MTczMDM1WjAYMRYwFAYD VQQDEw02ODk2MzQzYi01YWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsWcoDMluFxFWKxGSFuOcD3D8suXVk7VdxpEJebrqW/jFlkiW6hIfCYbNhyxV gTqF1f7yKipWdvuFGkGCiBBon6oAWGJRNQuZJyi0HDlp36JUqxVpJsCR8kQz9ARJ EdDhL9Meb81qvO82eN4cXwJc323M6rTa8X0vgAEwVIuD2binz7wBe1B1UVGPSwlK nANwJYXf2ufxuvBkI6FiwUzgocJQrg9EVcg6tZlYKur0oaaqGwBKm+oO9dHSmO8J axvgDMh+UOcUAgKDFMllK6S2kdKoRPxfCecFgraR8adXKAoZ+evpIlYh3j/EbdoI a3lGPsymCVuFlu6jl8xkHAqblwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8C1Kky yNxmVQCU0dkfKxoZ+su0MB8GA1UdIwQYMBaAFAWEId5weAcwRz5cxUW6CuXbm0wK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGNy81RUFDNjE0NDhG QTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6QkhQbHpGUmJvSzVkdWJU QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JZUWgzbkI0QnpCSFBsekZSYm9LNWR1YlRBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGNy81RUFDNjE0NDhGQTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6 QkhQbHpGUmJvSzVkdWJUQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASaJAqR3wVj/Rlff3h17lM/lHLr9i9LGZtqZrNa9H6V/5xfUUm9N/L 3jye7MZp29JohZPTWqmAtT0Mns5MgfOGVXSpSqxSmPNwawxzLUr4VCBG2aFvpfeA j9NwgJ09nDUmm1C3GeFZ3bad5WL7tPn47tsV1cZj4ijm88/VNeFF0tN2z8ZyrXHG XQz9HlqgLMLzFdgAkHSi/K9hwlnIzXzdw4jqD9iMWLWckIUO0x1GNn6CP4daq9J9 WywwXMvi2jkG5mEMyTXmaJYkDSw97/bzoac+MqA01EhLxIJxMNvI+5X7Yui5A31y YOYo3Nw0G0i7egy1+yHEoYgz9p9meVIA -----END CERTIFICATE-----Generated at Sun Aug 10 15:59:32 2025 by rpki-client