$ rpki-client -vvf rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft File: 1bTWxIC76WuryHIkhQJdTEX-x4o.mft (raw, json) Hash identifier: SIvRVLQ1KJcUo+wLszBkvTDvzlhqKiiUmSrQ7RzQZus= Subject key identifier: 6E:9B:7A:4D:64:1C:01:0B:9B:12:57:4E:17:66:BC:3B:29:79:4B:DF Authority key identifier: D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A Certificate issuer: /CN=A91907D3/serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft Manifest number: 0F Signing time: Mon 11 Aug 2025 08:27:17 +0000 Manifest this update: Mon 11 Aug 2025 08:27:16 +0000 Manifest next update: Mon 18 Aug 2025 08:27:16 +0000 Files and hashes: 1: 1bTWxIC76WuryHIkhQJdTEX-x4o.crl (hash: EnNt+38l7TMZ7g2Js0nVF6+mKXihbuu5TzxELf19YuU=) 2: 38361A086DD311F08BB89272C4F9AE02.roa (hash: jze8pXPb+Ih57A9PJ1kUit8+mteLPMOuLcigHYQRgfs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 08:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91907D3, serialNumber=D5B4D6C480BBE96BABC8722485025D4C45FEC78A Validity Not Before: Aug 11 08:27:16 2025 GMT Not After : Aug 18 08:27:16 2025 GMT Subject: CN=6899a965-02d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:25:56:e1:11:f9:e8:81:3a:94:91:6e:4d:72: 35:02:cf:99:94:3c:48:4b:7a:2a:a9:f9:b8:0a:16: e9:4a:96:a8:6a:5c:42:9c:fa:4e:f8:0a:55:8a:18: 39:b3:74:ff:53:2f:3f:18:50:0f:b0:45:ce:2f:c5: 08:a6:bd:9f:27:94:9f:0e:bf:d0:46:ea:b0:c0:25: 1a:b1:56:42:d8:7c:d7:e1:22:c7:2d:e7:e3:59:c2: 98:f8:a2:a4:f0:8b:65:fe:a1:27:0b:a1:61:b0:cf: bc:a3:96:43:67:40:a3:57:c6:44:c0:2c:3b:66:df: 71:17:88:f3:01:5f:58:d2:ee:6c:9a:b6:c8:69:2f: 58:68:65:45:19:d3:a0:6a:40:b9:31:50:fc:e2:96: 71:2b:e8:98:2f:f2:59:49:9c:b9:ea:ec:b9:17:33: 93:9d:9e:ca:45:96:c9:eb:25:53:c2:1b:98:e4:b6: d8:7b:69:78:89:09:06:48:61:1e:60:3d:a3:4f:38: 63:06:ca:5a:ba:16:17:f3:0d:ba:40:32:84:3b:74: 89:98:28:87:4b:8a:bb:6f:47:b3:c9:fd:a9:1c:7a: 4a:a3:9d:97:e1:68:a1:15:49:f1:73:c2:6d:24:69: 4d:00:1a:e0:1e:4d:80:3a:8d:91:1a:f3:90:ec:bb: 1f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9B:7A:4D:64:1C:01:0B:9B:12:57:4E:17:66:BC:3B:29:79:4B:DF X509v3 Authority Key Identifier: keyid:D5:B4:D6:C4:80:BB:E9:6B:AB:C8:72:24:85:02:5D:4C:45:FE:C7:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1bTWxIC76WuryHIkhQJdTEX-x4o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91907D3/38FB215C6C5911F0A3884E7AC4F9AE02/1bTWxIC76WuryHIkhQJdTEX-x4o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:68:65:14:f6:09:a9:81:21:91:21:14:c2:e5:72:9f:54:38: c1:ca:7a:3c:74:cd:31:43:0f:b1:b6:46:d2:99:e4:6b:f3:f3: 24:73:16:45:da:cd:61:53:2f:d9:4d:9b:aa:c9:71:df:22:ba: 25:58:06:97:d9:7e:a9:8b:4d:10:72:13:a5:03:1a:bb:d0:1f: 5f:b1:d6:67:86:f7:e8:83:ff:9b:53:30:69:2e:75:10:97:2e: ca:de:f4:19:d1:c3:c4:25:e1:3c:fb:44:d1:f0:eb:6c:5a:15: 3c:87:82:56:9b:b0:0f:ed:cb:30:e4:15:40:ef:26:87:af:37: c3:63:8b:8c:fe:7a:be:59:b2:a5:19:98:fd:89:7a:b8:83:c7: 77:7e:92:18:cf:66:3a:0a:88:5a:19:5a:44:d0:c0:26:6d:ec: 55:ff:81:30:b2:17:d2:a3:11:5e:35:dc:5c:7f:de:08:27:a0: 56:f0:9c:44:95:5b:c4:d3:8c:64:f6:7e:03:1c:4e:47:5c:ab: 7e:3b:6a:94:76:61:5a:96:e1:aa:7c:44:92:53:ed:29:db:7d: f5:1d:57:29:09:ef:93:3b:bc:59:91:8e:0e:3b:8c:d7:85:a7: ac:65:77:d9:41:4d:28:da:cd:7b:9b:ad:7f:8c:4e:10:f1:51: ee:d3:f8:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MDdEMzExMC8GA1UEBRMoRDVCNEQ2QzQ4MEJCRTk2QkFCQzg3MjI0ODUwMjVENEM0 NUZFQzc4QTAeFw0yNTA4MTEwODI3MTZaFw0yNTA4MTgwODI3MTZaMBgxFjAUBgNV BAMTDTY4OTlhOTY1LTAyZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDbJVbhEfnogTqUkW5NcjUCz5mUPEhLeiqp+bgKFulKlqhqXEKc+k74ClWKGDmz dP9TLz8YUA+wRc4vxQimvZ8nlJ8Ov9BG6rDAJRqxVkLYfNfhIsct5+NZwpj4oqTw i2X+oScLoWGwz7yjlkNnQKNXxkTALDtm33EXiPMBX1jS7myatshpL1hoZUUZ06Bq QLkxUPzilnEr6Jgv8llJnLnq7LkXM5OdnspFlsnrJVPCG5jktth7aXiJCQZIYR5g PaNPOGMGylq6FhfzDbpAMoQ7dImYKIdLirtvR7PJ/akcekqjnZfhaKEVSfFzwm0k aU0AGuAeTYA6jZEa85Dsux8lAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUbpt6TWQc AQubEldOF2a8Oyl5S98wHwYDVR0jBBgwFoAU1bTWxIC76WuryHIkhQJdTEX+x4ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwN0QzLzM4RkIyMTVDNkM1 OTExRjBBMzg4NEU3QUM0RjlBRTAyLzFiVFd4SUM3Nld1cnlISWtoUUpkVEVYLXg0 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMWJUV3hJQzc2V3VyeUhJa2hRSmRURVgteDRvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw N0QzLzM4RkIyMTVDNkM1OTExRjBBMzg4NEU3QUM0RjlBRTAyLzFiVFd4SUM3Nld1 cnlISWtoUUpkVEVYLXg0by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKhoZRT2CamBIZEhFMLlcp9UOMHKejx0zTFDD7G2RtKZ5Gvz8yRzFkXa zWFTL9lNm6rJcd8iuiVYBpfZfqmLTRByE6UDGrvQH1+x1meG9+iD/5tTMGkudRCX Lsre9BnRw8Ql4Tz7RNHw62xaFTyHglabsA/tyzDkFUDvJoevN8Nji4z+er5ZsqUZ mP2JeriDx3d+khjPZjoKiFoZWkTQwCZt7FX/gTCyF9KjEV413Fx/3ggnoFbwnESV W8TTjGT2fgMcTkdcq347apR2YVqW4ap8RJJT7SnbffUdVykJ75M7vFmRjg47jNeF p6xld9lBTSjazXubrX+MThDxUe7T+J0= -----END CERTIFICATE-----Generated at Wed Aug 13 08:55:06 2025 by rpki-client