$ rpki-client -vvf rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft File: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft (raw, json) Hash identifier: YzIlP3F0Jvvq/chJFZRupNlbjSLFQoObW+tuLjVKhOw= Subject key identifier: F2:6A:9F:44:63:61:FE:D5:FA:96:86:80:3E:67:38:7E:ED:E6:A4:2E Authority key identifier: 05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC Certificate issuer: /CN=A91941E9/serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Certificate serial: 07EC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft Manifest number: 07D5 Signing time: Sun 10 Aug 2025 21:14:01 +0000 Manifest this update: Sun 10 Aug 2025 21:14:00 +0000 Manifest next update: Sun 17 Aug 2025 21:14:00 +0000 Files and hashes: 1: Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl (hash: GS3y4kGqu3AspsKhPY+4S/hzpR13AcvUlbD7s8pXP3A=) 2: B0425744D7E211ECBD1D447FC4F9AE02.roa (hash: nI2mes5dRsY5gxAtJEqVpbIPBNFLYn8zfLGTNpoGo54=) 3: 308C5012BE4C11ED9598AC4EC4F9AE02.roa (hash: Rld7UCHehApO8xnOhY9eLWlDhIsOxbWWFUaZg8mOgWQ=) 4: 067B1AAA70C611EF8080566DC4F9AE02.roa (hash: lvr0OAzbavcL7ZcKfVmoFVXnJpXDxxz4atlqt/QjZh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2028 (0x7ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91941E9, serialNumber=05AD3E4AA1961BA7ECBE02935725C25CD26BD6BC Validity Not Before: Aug 10 21:14:00 2025 GMT Not After : Aug 17 21:14:00 2025 GMT Subject: CN=68990b99-57bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:34:30:ee:77:6c:0d:53:32:34:44:c4:38:40: 13:6f:f0:31:f6:70:e9:40:63:4f:52:a4:8b:f1:75: 78:e7:13:be:9d:97:01:d2:57:36:14:39:dc:34:16: ca:61:a5:a4:82:28:1a:d1:d7:c2:00:ce:b8:55:96: e2:4e:7d:30:89:d2:c3:e5:34:bc:ae:0a:af:4d:54: 82:d0:8f:cf:f8:de:2d:a7:18:19:d9:0b:ff:cf:d3: d2:bc:8e:95:5b:ca:b0:c7:f1:64:df:e2:f5:c2:75: 4b:18:ab:11:e5:d5:10:77:9c:65:35:b4:86:c1:2a: fa:33:20:99:cd:88:4a:a1:6a:02:30:cf:e0:b6:19: 8d:26:15:bc:b9:04:39:69:e5:ac:47:32:10:fc:94: 1e:74:67:a9:2f:27:07:47:a9:35:03:cf:c3:9e:53: 1d:2a:b5:f5:b6:97:e9:1f:77:92:68:bf:58:c8:b5: b9:dd:d1:c2:70:38:f2:0f:c7:5d:2b:d4:88:09:2c: f1:ea:13:58:dc:23:56:8c:c5:41:34:c7:1c:21:c0: 12:e7:7e:56:6e:96:2b:62:0d:46:46:43:49:6a:42: 05:fa:f2:5b:76:4b:54:b2:a5:f7:71:db:3d:10:64: ea:41:0d:58:06:d8:d8:f8:8e:80:9e:b0:b4:d9:bf: 5c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6A:9F:44:63:61:FE:D5:FA:96:86:80:3E:67:38:7E:ED:E6:A4:2E X509v3 Authority Key Identifier: keyid:05:AD:3E:4A:A1:96:1B:A7:EC:BE:02:93:57:25:C2:5C:D2:6B:D6:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91941E9/DAD8FB80079011EBBB98C076C4F9AE02/Ba0-SqGWG6fsvgKTVyXCXNJr1rw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:6c:ce:24:1a:86:24:eb:31:7b:25:39:57:f2:cb:1c:5e:ae: 1e:4a:2d:a7:bc:ce:ac:1a:55:57:1d:db:58:7d:84:94:1a:78: bb:51:6e:b3:54:8f:f5:a1:d6:3b:45:b1:e2:11:e2:f3:14:b7: ff:b7:d8:2f:07:05:ef:d5:5a:ca:c8:ce:9f:cb:f4:88:90:eb: a5:a1:98:1c:f1:fa:d0:92:45:fc:a8:6f:b4:17:52:cd:a9:e8: 38:f5:4b:cb:13:7f:53:d0:2f:0b:de:be:50:ce:c6:02:44:e8: c4:f7:09:82:7a:e7:df:58:ff:45:05:e9:a3:6d:4b:5e:c1:18: 6c:44:bb:69:2c:f4:a1:aa:dd:28:dc:65:86:d1:5e:7e:4b:07: 27:58:20:8c:45:c2:96:fd:97:f7:cc:6d:ee:22:4d:b9:ec:f5: 85:e3:f9:d3:0a:97:c8:1e:68:22:85:4a:4f:4d:00:10:89:c0: d7:97:4c:a4:00:1d:a8:88:98:43:3c:77:36:42:79:2e:d0:02: da:f0:8c:39:4c:88:18:9e:47:5a:19:e6:19:58:c7:b5:d1:c3: 47:c2:c9:03:81:72:d9:92:2e:7c:fa:86:5d:92:26:51:27:f3: a4:51:0a:77:f5:d7:eb:51:f2:39:f5:f0:70:e6:9b:31:56:d5: 90:f9:bb:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTQxRTkxMTAvBgNVBAUTKDA1QUQzRTRBQTE5NjFCQTdFQ0JFMDI5MzU3MjVDMjVD RDI2QkQ2QkMwHhcNMjUwODEwMjExNDAwWhcNMjUwODE3MjExNDAwWjAYMRYwFAYD VQQDEw02ODk5MGI5OS01N2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4jQw7ndsDVMyNETEOEATb/Ax9nDpQGNPUqSL8XV45xO+nZcB0lc2FDncNBbK YaWkgiga0dfCAM64VZbiTn0widLD5TS8rgqvTVSC0I/P+N4tpxgZ2Qv/z9PSvI6V W8qwx/Fk3+L1wnVLGKsR5dUQd5xlNbSGwSr6MyCZzYhKoWoCMM/gthmNJhW8uQQ5 aeWsRzIQ/JQedGepLycHR6k1A8/DnlMdKrX1tpfpH3eSaL9YyLW53dHCcDjyD8dd K9SICSzx6hNY3CNWjMVBNMccIcAS535WbpYrYg1GRkNJakIF+vJbdktUsqX3cds9 EGTqQQ1YBtjY+I6AnrC02b9cwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPJqn0Rj Yf7V+paGgD5nOH7t5qQuMB8GA1UdIwQYMBaAFAWtPkqhlhun7L4Ck1clwlzSa9a8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDFFOS9EQUQ4RkI4MDA3 OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2ZnN2Z0tUVnlYQ1hOSnIx cncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JhMC1TcUdXRzZmc3ZnS1RWeVhDWE5KcjFydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NDFFOS9EQUQ4RkI4MDA3OTAxMUVCQkI5OEMwNzZDNEY5QUUwMi9CYTAtU3FHV0c2 ZnN2Z0tUVnlYQ1hOSnIxcncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4bM4kGoYk6zF7JTlX8sscXq4eSi2nvM6sGlVXHdtYfYSUGni7UW6z VI/1odY7RbHiEeLzFLf/t9gvBwXv1VrKyM6fy/SIkOuloZgc8frQkkX8qG+0F1LN qeg49UvLE39T0C8L3r5QzsYCROjE9wmCeuffWP9FBemjbUtewRhsRLtpLPShqt0o 3GWG0V5+SwcnWCCMRcKW/Zf3zG3uIk257PWF4/nTCpfIHmgihUpPTQAQicDXl0yk AB2oiJhDPHc2Qnku0ALa8Iw5TIgYnkdaGeYZWMe10cNHwskDgXLZki58+oZdkiZR J/OkUQp39dfrUfI59fBw5psxVtWQ+bv0 -----END CERTIFICATE-----Generated at Mon Aug 11 07:46:19 2025 by rpki-client