$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft File: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft (raw, json) Hash identifier: QfGjtfirg0vmsD5O868c/2ocnA8eGoNFSlPSc4sWlM0= Subject key identifier: E3:4B:75:83:0C:CE:A3:45:69:3E:E7:F7:D7:DC:A6:F2:02:2E:E3:A4 Authority key identifier: 6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 Certificate issuer: /CN=A91A91A2/serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Certificate serial: 0A16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft Manifest number: 0A0D Signing time: Mon 04 Aug 2025 20:06:23 +0000 Manifest this update: Mon 04 Aug 2025 20:06:22 +0000 Manifest next update: Mon 11 Aug 2025 20:06:22 +0000 Files and hashes: 1: bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl (hash: 8qH9kbUwBWsVEQEnDax1cD5t8UDbDaP6+Vbgde/8a8c=) 2: 10238C387B1411EA8C690465C4F9AE02.roa (hash: HX1z061ITJ/Mm5axSNQ3ySg9hGI3PSjhgq8jl6nzC3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:06:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2582 (0xa16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A91A2, serialNumber=6E926BCE619E4F500ABFA424FDB0764D258CAB53 Validity Not Before: Aug 4 20:06:22 2025 GMT Not After : Aug 11 20:06:22 2025 GMT Subject: CN=689112bf-353a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:1a:c5:bb:39:b3:0e:43:d9:08:83:a1:39: 53:e5:fc:43:04:f7:80:fa:df:47:5c:09:a1:51:7d: 7b:c3:dc:5a:ce:31:a3:90:2d:00:a4:45:bd:e5:bf: 98:69:15:3b:10:0b:32:9b:e4:66:40:13:a8:e6:58: 3c:6b:aa:da:88:4d:08:1a:d6:fd:9c:2d:9e:99:6a: 18:f3:6b:32:85:c5:6c:5a:22:2f:56:be:bb:15:24: 54:24:ee:d2:0e:d4:84:b4:9c:12:72:ad:91:ea:89: df:8f:83:22:9d:79:b7:34:9c:23:d7:da:2b:bb:e8: 51:ea:0e:54:19:24:a7:8a:90:a9:4c:b9:d6:ee:1a: 08:f4:1e:02:77:23:a6:3b:28:2a:48:d8:55:c9:9a: e5:dc:a6:5b:a6:06:d4:00:90:4b:9d:3c:e1:64:ea: 80:f3:99:8e:bc:60:1b:92:ae:c2:ef:ac:97:8f:94: 6e:b8:1b:b1:36:a9:ac:44:c8:6e:68:14:75:91:0f: 68:e1:19:58:dd:c3:3a:90:3c:62:1a:6e:77:21:cd: ec:4a:e7:e4:fb:60:a2:38:9a:2e:c8:e0:12:41:00: fc:dc:4d:33:19:02:a8:b1:4e:2a:4d:9a:9c:43:41: 9f:27:7b:40:69:95:5f:7a:4a:04:47:58:47:17:85: 80:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:4B:75:83:0C:CE:A3:45:69:3E:E7:F7:D7:DC:A6:F2:02:2E:E3:A4 X509v3 Authority Key Identifier: keyid:6E:92:6B:CE:61:9E:4F:50:0A:BF:A4:24:FD:B0:76:4D:25:8C:AB:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91A2/8971309C7B1211EAA9210F60C4F9AE02/bpJrzmGeT1AKv6Qk_bB2TSWMq1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:a0:3a:ef:7c:f4:bd:d1:42:e3:ac:e1:36:17:30:70:84:bf: 65:9d:9d:14:27:83:4e:d2:fa:69:e1:58:06:4b:a1:29:f4:21: 59:e9:21:77:82:fe:bf:92:d8:7f:7e:fe:e7:bb:37:47:57:5f: a5:39:71:e0:ba:fe:9b:b3:3e:6a:a1:b8:c5:18:b2:b6:e3:b9: 5c:bb:b4:9c:c9:49:d2:63:26:39:b1:da:3c:3b:84:a2:8e:26: 05:6b:3c:3c:b5:55:e4:98:80:2e:a2:35:09:86:33:2b:60:5b: cb:97:c4:26:28:2c:1a:72:85:16:21:ed:3e:23:4a:22:25:26: b4:29:a8:5a:8b:ef:23:be:0a:00:74:21:7e:48:e4:0a:fe:d6: 33:fc:fb:d7:ae:65:b3:6f:e4:18:dd:aa:53:25:ce:5a:94:69: 65:cd:cb:14:4c:1d:ff:cc:0b:61:86:bc:ec:e8:29:58:49:8d: 33:8e:36:37:e9:d7:66:65:02:29:27:28:e7:f6:45:65:a0:20: df:40:67:55:1a:bf:92:df:ba:7f:d8:fb:3a:40:59:c0:02:ec: a8:e0:90:1a:43:77:5e:e6:a9:48:92:2c:62:27:f0:0a:ee:b2: 4f:d7:d5:df:be:49:f7:22:ee:d5:9f:c9:68:f6:89:31:a5:21: a2:67:8a:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICChYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkxQTIxMTAvBgNVBAUTKDZFOTI2QkNFNjE5RTRGNTAwQUJGQTQyNEZEQjA3NjRE MjU4Q0FCNTMwHhcNMjUwODA0MjAwNjIyWhcNMjUwODExMjAwNjIyWjAYMRYwFAYD VQQDEw02ODkxMTJiZi0zNTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAygQaxbs5sw5D2QiDoTlT5fxDBPeA+t9HXAmhUX17w9xazjGjkC0ApEW95b+Y aRU7EAsym+RmQBOo5lg8a6raiE0IGtb9nC2emWoY82syhcVsWiIvVr67FSRUJO7S DtSEtJwScq2R6onfj4MinXm3NJwj19oru+hR6g5UGSSnipCpTLnW7hoI9B4CdyOm OygqSNhVyZrl3KZbpgbUAJBLnTzhZOqA85mOvGAbkq7C76yXj5RuuBuxNqmsRMhu aBR1kQ9o4RlY3cM6kDxiGm53Ic3sSufk+2CiOJouyOASQQD83E0zGQKosU4qTZqc Q0GfJ3tAaZVfekoER1hHF4WAJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFONLdYMM zqNFaT7n99fcpvICLuOkMB8GA1UdIwQYMBaAFG6Sa85hnk9QCr+kJP2wdk0ljKtT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTFBMi84OTcxMzA5QzdC MTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQxQUt2NlFrX2JCMlRTV01x MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwSnJ6bUdlVDFBS3Y2UWtfYkIyVFNXTXExTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTFBMi84OTcxMzA5QzdCMTIxMUVBQTkyMTBGNjBDNEY5QUUwMi9icEpyem1HZVQx QUt2NlFrX2JCMlRTV01xMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCoDrvfPS90ULjrOE2FzBwhL9lnZ0UJ4NO0vpp4VgGS6Ep9CFZ6SF3 gv6/kth/fv7nuzdHV1+lOXHguv6bsz5qobjFGLK247lcu7ScyUnSYyY5sdo8O4Si jiYFazw8tVXkmIAuojUJhjMrYFvLl8QmKCwacoUWIe0+I0oiJSa0Kahai+8jvgoA dCF+SOQK/tYz/PvXrmWzb+QY3apTJc5alGllzcsUTB3/zAthhrzs6ClYSY0zjjY3 6ddmZQIpJyjn9kVloCDfQGdVGr+S37p/2Ps6QFnAAuyo4JAaQ3de5qlIkixiJ/AK 7rJP19Xfvkn3Iu7Vn8lo9okxpSGiZ4pI -----END CERTIFICATE-----Generated at Wed Aug 6 12:38:03 2025 by rpki-client