$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft File: 1BPN69UikmPRj0A_RCF4UlVUbMQ.mft (raw, json) Hash identifier: OaDV1cK2uI/rmtxG4NHlrgHrRgUfswgpS+ja2f4P1QA= Subject key identifier: 9A:C4:61:78:0D:9C:7C:BE:19:C7:5A:FE:C8:4E:4B:48:A9:51:F1:A9 Authority key identifier: D4:13:CD:EB:D5:22:92:63:D1:8F:40:3F:44:21:78:52:55:54:6C:C4 Certificate issuer: /CN=A91A4F53/serialNumber=D413CDEBD5229263D18F403F4421785255546CC4 Certificate serial: 0407 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft Manifest number: 0402 Signing time: Sat 09 Aug 2025 00:57:14 +0000 Manifest this update: Sat 09 Aug 2025 00:57:13 +0000 Manifest next update: Sat 16 Aug 2025 00:57:13 +0000 Files and hashes: 1: 1BPN69UikmPRj0A_RCF4UlVUbMQ.crl (hash: ShoMyCQMlJ9bdMH0BnawBO759oyH8Nph6YeiVkqKbzU=) 2: 1ACED69481C311ECA399B842C4F9AE02.roa (hash: IKY7Nb0x1ujuZNuPt+3gHji4GgFtnx3tom+2NfDXEw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.crl rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1031 (0x407) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4F53, serialNumber=D413CDEBD5229263D18F403F4421785255546CC4 Validity Not Before: Aug 9 00:57:13 2025 GMT Not After : Aug 16 00:57:13 2025 GMT Subject: CN=68969ce9-7530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:4a:85:f3:ba:4a:b2:8c:b9:59:f9:5b:ab:68: 81:bb:0f:01:74:fe:70:18:9c:11:bc:f9:9f:20:b5: 3a:81:70:f0:08:b3:ee:25:ea:7a:07:20:f0:ef:4a: 85:c4:2c:33:31:0f:9f:39:56:ec:8c:4a:b2:7c:0a: 37:31:12:7a:7d:7f:81:35:da:31:89:02:a4:e2:37: 9b:b1:c9:69:19:ba:b3:04:f8:90:21:f2:ca:a0:9c: 6f:18:1b:35:ff:a3:1a:b1:b3:ca:25:ad:d4:0d:fa: bc:e2:31:b4:a1:12:13:60:9f:b9:54:ce:ff:de:30: 58:25:57:b1:f5:d3:36:f1:1e:e5:39:7b:82:e6:c0: b5:6b:78:08:e7:c5:da:db:7e:f7:b8:db:c2:5f:54: c6:11:c0:56:85:ef:db:96:fb:5e:d2:f4:59:77:0f: 84:0b:06:dc:c0:de:f2:1b:6b:67:c7:73:7d:f6:e8: d9:3c:6e:87:ab:49:07:32:59:f1:a1:28:0b:b7:b8: f0:e8:ca:f9:55:fa:0f:6e:ba:54:fb:d2:f6:5b:e3: 55:80:6a:41:59:fd:c1:1e:57:7d:99:0b:33:2f:b2: c5:b0:90:ca:6d:b3:3b:d1:9f:04:4a:db:64:0b:d7: 9c:dd:48:25:d4:f3:a2:7e:e8:01:83:b4:70:4b:16: bb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C4:61:78:0D:9C:7C:BE:19:C7:5A:FE:C8:4E:4B:48:A9:51:F1:A9 X509v3 Authority Key Identifier: keyid:D4:13:CD:EB:D5:22:92:63:D1:8F:40:3F:44:21:78:52:55:54:6C:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BPN69UikmPRj0A_RCF4UlVUbMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4F53/5B2BC7DA81C111ECAB7C9A42C4F9AE02/1BPN69UikmPRj0A_RCF4UlVUbMQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:93:53:df:d2:18:86:fb:50:61:79:6f:a4:55:c6:36:de:86: 5b:fe:f0:62:2f:26:38:a9:c1:e3:5d:21:0b:bb:94:64:fa:b7: 8e:25:ae:e7:c1:5c:31:1f:08:6c:1b:1d:7c:38:99:89:b6:18: a3:2b:75:4b:fe:7c:f3:a0:90:57:5a:34:e7:04:c3:70:0c:8c: 88:6f:62:78:21:a2:a8:e0:76:e0:de:94:a1:d3:e2:94:b6:59: 97:af:bc:f6:ba:a6:eb:06:df:bb:6b:66:ce:c7:35:62:ec:56: 84:d3:bf:0c:eb:3e:19:c1:c1:95:8b:cb:f8:3a:97:e1:2d:e1: 70:85:8e:08:39:10:bb:17:2c:21:a2:c0:2c:fd:bd:ee:6d:44: 47:60:24:72:f9:c8:8b:24:22:0c:8c:0b:fb:c1:87:40:cf:af: 0e:01:41:fa:84:f6:16:4c:c4:48:24:ee:e4:56:68:ea:11:8e: b1:11:0a:b1:cd:66:3f:82:e8:68:0b:be:ea:64:96:bb:0f:05: 1a:59:12:2b:02:e4:cd:15:c8:4b:63:58:34:b6:69:45:87:0f: 96:73:62:7b:a5:a3:87:62:9e:68:e5:8e:bc:3f:a0:71:d2:f7: f9:17:f2:e2:7f:9c:a8:60:5e:e6:67:fc:78:dc:8f:dc:e0:f1: 80:38:82:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBAcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRGNTMxMTAvBgNVBAUTKEQ0MTNDREVCRDUyMjkyNjNEMThGNDAzRjQ0MjE3ODUy NTU1NDZDQzQwHhcNMjUwODA5MDA1NzEzWhcNMjUwODE2MDA1NzEzWjAYMRYwFAYD VQQDEw02ODk2OWNlOS03NTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3EqF87pKsoy5Wflbq2iBuw8BdP5wGJwRvPmfILU6gXDwCLPuJep6ByDw70qF xCwzMQ+fOVbsjEqyfAo3MRJ6fX+BNdoxiQKk4jebsclpGbqzBPiQIfLKoJxvGBs1 /6MasbPKJa3UDfq84jG0oRITYJ+5VM7/3jBYJVex9dM28R7lOXuC5sC1a3gI58Xa 2373uNvCX1TGEcBWhe/blvte0vRZdw+ECwbcwN7yG2tnx3N99ujZPG6Hq0kHMlnx oSgLt7jw6Mr5VfoPbrpU+9L2W+NVgGpBWf3BHld9mQszL7LFsJDKbbM70Z8ESttk C9ec3Ugl1POifugBg7RwSxa7GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrEYXgN nHy+Gcda/shOS0ipUfGpMB8GA1UdIwQYMBaAFNQTzevVIpJj0Y9AP0QheFJVVGzE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEY1My81QjJCQzdEQTgx QzExMUVDQUI3QzlBNDJDNEY5QUUwMi8xQlBONjlVaWttUFJqMEFfUkNGNFVsVlVi TVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFCUE42OVVpa21QUmowQV9SQ0Y0VWxWVWJNUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NEY1My81QjJCQzdEQTgxQzExMUVDQUI3QzlBNDJDNEY5QUUwMi8xQlBONjlVaWtt UFJqMEFfUkNGNFVsVlViTVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwk1Pf0hiG+1BheW+kVcY23oZb/vBiLyY4qcHjXSELu5Rk+reOJa7n wVwxHwhsGx18OJmJthijK3VL/nzzoJBXWjTnBMNwDIyIb2J4IaKo4Hbg3pSh0+KU tlmXr7z2uqbrBt+7a2bOxzVi7FaE078M6z4ZwcGVi8v4OpfhLeFwhY4IORC7Fywh osAs/b3ubURHYCRy+ciLJCIMjAv7wYdAz68OAUH6hPYWTMRIJO7kVmjqEY6xEQqx zWY/guhoC77qZJa7DwUaWRIrAuTNFchLY1g0tmlFhw+Wc2J7paOHYp5o5Y68P6Bx 0vf5F/Lif5yoYF7mZ/x43I/c4PGAOIIp -----END CERTIFICATE-----Generated at Sun Aug 10 21:04:51 2025 by rpki-client