$ rpki-client -vvf rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft File: bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft (raw, json) Hash identifier: NzgQs+ANv0/Otd8+kWw9Q7kcp/0SD9twosD7D73daRE= Subject key identifier: A1:8E:7B:C4:CB:6C:7D:12:32:72:9D:14:10:2B:B1:45:79:D0:F4:F8 Authority key identifier: 6C:51:79:CB:0C:F8:18:9E:1E:20:81:D4:B6:95:94:84:A3:EB:36:A8 Certificate issuer: /CN=A919F554/serialNumber=6C5179CB0CF8189E1E2081D4B6959484A3EB36A8 Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft Manifest number: 2E Signing time: Tue 05 Aug 2025 08:23:08 +0000 Manifest this update: Tue 05 Aug 2025 08:23:07 +0000 Manifest next update: Tue 12 Aug 2025 08:23:07 +0000 Files and hashes: 1: bFF5ywz4GJ4eIIHUtpWUhKPrNqg.crl (hash: TbFJ0eeoQgx/zexdujNQRe0rN1/oKFrsQQ68a9bbL4A=) 2: C420C91231F311F0B07AC76AC4F9AE02.roa (hash: y0vlqXmSe17ZKCdVHqeghf1wdjj+SE0T6AlVqdNqzp0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.crl rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:23:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F554, serialNumber=6C5179CB0CF8189E1E2081D4B6959484A3EB36A8 Validity Not Before: Aug 5 08:23:07 2025 GMT Not After : Aug 12 08:23:07 2025 GMT Subject: CN=6891bf6c-e877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:86:99:2f:ff:f9:93:e2:30:db:e9:9b:f6: 2a:b7:b2:7e:05:c3:ef:b2:6c:89:ef:a1:da:d9:64: cc:3e:33:3c:6d:49:80:c2:12:b2:11:a6:39:71:d0: 51:7b:b6:e0:49:8d:ae:5b:bc:47:6f:c8:65:91:03: b9:d4:91:75:09:35:01:f1:56:e0:bc:a3:fb:46:85: 45:f6:8e:f5:01:2b:09:72:a2:fe:0a:d5:33:46:9b: cd:7a:16:c9:ca:88:45:d3:a1:74:c9:90:9e:a3:f3: c1:aa:42:35:d8:75:ba:97:68:6e:8a:07:35:c1:40: 11:db:6b:c3:06:ca:ea:f7:8a:e6:bd:e3:c3:cf:f5: 90:a5:16:c2:39:13:1c:aa:3d:9a:58:df:d3:f4:4a: 20:cb:ca:71:15:a8:52:47:92:d8:dd:19:a2:9d:70: 2a:a1:3a:05:87:ec:fd:db:c5:c4:5c:63:90:76:ef: 1d:60:a4:f0:a5:25:e0:c6:39:9a:45:94:3a:77:73: b1:b8:0a:ad:af:94:33:6a:7d:bd:c0:79:f1:b3:63: 27:80:9b:1e:5a:34:22:78:28:8d:ac:c8:2c:de:5a: cd:7e:fc:34:e8:79:5f:98:79:ba:5c:74:e7:a4:6f: 41:c1:19:fb:6e:84:ca:54:1a:ae:1f:0a:48:5a:cf: 53:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8E:7B:C4:CB:6C:7D:12:32:72:9D:14:10:2B:B1:45:79:D0:F4:F8 X509v3 Authority Key Identifier: keyid:6C:51:79:CB:0C:F8:18:9E:1E:20:81:D4:B6:95:94:84:A3:EB:36:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F554/3F95A85231F311F0ABBAE669C4F9AE02/bFF5ywz4GJ4eIIHUtpWUhKPrNqg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:1f:5f:f4:2b:83:96:ea:d1:c8:dd:e0:ba:ab:f9:a9:b9:b4: 22:1c:77:31:9a:b0:2b:98:c2:07:5a:89:bc:c7:19:43:30:9e: b0:19:3d:f6:35:32:77:e2:b8:19:b7:3e:ac:13:0b:55:87:1d: ca:35:9c:6a:3b:fc:e2:a9:92:b3:c5:67:b0:7f:a1:86:d2:c8: 37:72:bd:2e:f6:7f:b6:1c:37:18:61:84:9b:da:6b:ef:5b:8a: c6:5d:af:69:40:87:cb:ac:6c:7f:00:93:68:9b:32:2c:d3:8c: d0:76:20:27:f2:f4:b6:bd:b7:b8:66:ed:5e:82:ed:c5:04:0c: 5d:c2:53:4d:24:1a:f9:1c:7d:8e:ec:3f:57:70:ff:c6:d8:03: cc:fa:ba:a6:d3:c1:83:5c:ce:45:f0:3a:91:58:ab:e3:dd:a8: 80:6f:ce:a0:a1:b0:6a:f7:45:f5:d9:28:2e:51:8e:35:39:ab: 80:b9:de:ca:ee:d1:39:e9:06:27:29:40:eb:40:e5:53:07:fe: 39:b2:a6:66:cf:d9:48:d8:c0:3d:74:5b:9b:b4:30:7d:96:7f: bb:ab:01:7e:02:cd:16:80:83:60:5a:13:30:a6:3b:11:99:49: 86:d0:d4:e5:0b:a6:22:7c:ef:09:0d:a1:51:3d:e4:60:dc:de: 52:8d:3e:e6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RjU1NDExMC8GA1UEBRMoNkM1MTc5Q0IwQ0Y4MTg5RTFFMjA4MUQ0QjY5NTk0ODRB M0VCMzZBODAeFw0yNTA4MDUwODIzMDdaFw0yNTA4MTIwODIzMDdaMBgxFjAUBgNV BAMTDTY4OTFiZjZjLWU4NzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6K4aZL//5k+Iw2+mb9iq3sn4Fw++ybInvodrZZMw+MzxtSYDCErIRpjlx0FF7 tuBJja5bvEdvyGWRA7nUkXUJNQHxVuC8o/tGhUX2jvUBKwlyov4K1TNGm816FsnK iEXToXTJkJ6j88GqQjXYdbqXaG6KBzXBQBHba8MGyur3iua948PP9ZClFsI5Exyq PZpY39P0SiDLynEVqFJHktjdGaKdcCqhOgWH7P3bxcRcY5B27x1gpPClJeDGOZpF lDp3c7G4Cq2vlDNqfb3AefGzYyeAmx5aNCJ4KI2syCzeWs1+/DToeV+YebpcdOek b0HBGftuhMpUGq4fCkhaz1NRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoY57xMts fRIycp0UECuxRXnQ9PgwHwYDVR0jBBgwFoAUbFF5ywz4GJ4eIIHUtpWUhKPrNqgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlGNTU0LzNGOTVBODUyMzFG MzExRjBBQkJBRTY2OUM0RjlBRTAyL2JGRjV5d3o0R0o0ZUlJSFV0cFdVaEtQck5x Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkZGNXl3ejRHSjRlSUlIVXRwV1VoS1ByTnFnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlG NTU0LzNGOTVBODUyMzFGMzExRjBBQkJBRTY2OUM0RjlBRTAyL2JGRjV5d3o0R0o0 ZUlJSFV0cFdVaEtQck5xZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABQfX/Qrg5bq0cjd4Lqr+am5tCIcdzGasCuYwgdaibzHGUMwnrAZPfY1 MnfiuBm3PqwTC1WHHco1nGo7/OKpkrPFZ7B/oYbSyDdyvS72f7YcNxhhhJvaa+9b isZdr2lAh8usbH8Ak2ibMizTjNB2ICfy9La9t7hm7V6C7cUEDF3CU00kGvkcfY7s P1dw/8bYA8z6uqbTwYNczkXwOpFYq+PdqIBvzqChsGr3RfXZKC5RjjU5q4C53sru 0TnpBicpQOtA5VMH/jmypmbP2UjYwD10W5u0MH2Wf7urAX4CzRaAg2BaEzCmOxGZ SYbQ1OULpiJ87wkNoVE95GDc3lKNPuY= -----END CERTIFICATE-----Generated at Wed Aug 6 11:15:37 2025 by rpki-client