$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft File: bODpSXEbID5KyyK2gPP_9H7RbGE.mft (raw, json) Hash identifier: HMVV3DYWex4aEtV5nBdPehoFkPDxuj3D6Pkzab9AfG4= Subject key identifier: 17:B7:41:8D:E0:27:95:09:62:91:8C:7B:02:B9:E9:41:61:2D:96:79 Authority key identifier: 6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61 Certificate issuer: /CN=A91BDC3F/serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft Manifest number: F6 Signing time: Sat 09 Aug 2025 05:45:18 +0000 Manifest this update: Sat 09 Aug 2025 05:45:17 +0000 Manifest next update: Sat 16 Aug 2025 05:45:17 +0000 Files and hashes: 1: bODpSXEbID5KyyK2gPP_9H7RbGE.crl (hash: zuYKmfMtCkjMPicAtMcf6KoWjR9qKBAB6qJRzedxQXg=) 2: 7980C32AA71B11EFA8320136C4F9AE02.roa (hash: svWCFcB6b/XkbZIPeHevXUk9kvL6MAqPQu9nAp05skM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC3F, serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61 Validity Not Before: Aug 9 05:45:17 2025 GMT Not After : Aug 16 05:45:17 2025 GMT Subject: CN=6896e06d-57b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7d:30:1d:9f:c6:f2:58:75:65:eb:01:96:b3: 55:a3:44:24:80:af:d8:9d:15:e0:ac:6d:fa:84:92: ec:a5:d2:da:a5:35:ca:98:b0:ce:87:fa:94:24:5e: e7:bd:e9:d5:ae:2b:11:0d:64:20:ae:09:7a:fd:4b: e7:d8:f3:1c:4d:49:2b:12:7f:ed:e0:4c:58:80:43: b0:58:58:80:19:e4:0b:e5:70:0b:fe:b9:b2:54:ab: f1:e7:70:57:07:4c:9e:2a:69:cd:06:a0:86:7a:f2: 5e:53:14:47:65:f5:0a:05:ba:42:11:d4:88:0f:bc: 71:1a:3b:a8:a1:b9:45:62:80:e4:e8:bc:e3:24:c2: a2:91:b2:10:c1:a2:ff:72:de:f5:de:d6:55:6b:4e: a1:e3:9f:4f:5c:9c:f4:31:ce:d0:4a:3e:8b:a1:a8: 06:58:51:26:c8:81:92:03:6d:04:f3:96:59:87:96: b4:2e:87:ce:ee:1c:15:3f:65:6b:36:dd:d7:f7:7d: 82:df:90:dc:4a:3d:61:75:3f:56:86:f4:cf:48:93: bf:bb:58:72:c4:bb:5f:66:e8:f8:c2:4d:08:32:49: c1:dc:f6:94:9b:0f:ed:48:5d:d3:ec:52:69:4b:9c: 8e:3b:e1:9d:d1:81:e9:87:21:cf:84:55:c0:5a:88: 9d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B7:41:8D:E0:27:95:09:62:91:8C:7B:02:B9:E9:41:61:2D:96:79 X509v3 Authority Key Identifier: keyid:6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7d:fe:21:4e:e0:fb:5c:86:78:42:86:0f:91:40:d9:34:31: 8d:8c:bc:e0:6d:f9:2d:0b:f9:7b:71:84:c0:85:c2:b9:7b:82: db:d9:c2:b3:90:f6:3b:c9:30:9b:da:df:a1:eb:2c:26:d0:cf: 47:11:22:3e:55:c5:e6:e0:b6:68:1d:fa:5f:9e:08:3c:d1:c0: c3:f0:04:66:0c:95:f3:93:a6:b8:87:40:35:d9:ad:3a:cf:bb: cb:84:1a:1b:a4:4d:87:e9:1b:a3:ca:e2:2b:2c:c8:ea:4a:1c: bb:07:f3:3f:b1:cc:a4:ac:a0:3c:a3:47:d8:e8:aa:f0:49:ed: b8:8a:ac:3e:40:bc:92:e5:6c:0c:3c:0a:4d:3d:04:9d:36:c6: 36:8a:f5:15:61:2e:6b:f5:f1:57:85:01:ed:59:ef:9b:64:83: 4c:0d:62:ca:e0:b1:60:ad:78:4a:7c:6c:da:4f:32:86:9d:53: b5:ac:15:d7:24:b4:f8:61:7d:82:c3:c0:5d:26:26:2a:24:d9: ca:3b:79:a8:78:5a:33:01:76:ed:55:32:fa:47:5e:26:72:27: 13:dd:fa:c5:0d:c9:0f:94:87:57:ee:ee:69:fe:9a:c8:51:10: 65:69:0a:7e:23:eb:1c:a7:ae:0f:88:19:ac:bb:06:1e:50:3a: d8:62:71:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDM0YxMTAvBgNVBAUTKDZDRTBFOTQ5NzExQjIwM0U0QUNCMjJCNjgwRjNGRkY0 N0VEMTZDNjEwHhcNMjUwODA5MDU0NTE3WhcNMjUwODE2MDU0NTE3WjAYMRYwFAYD VQQDEw02ODk2ZTA2ZC01N2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxX0wHZ/G8lh1ZesBlrNVo0QkgK/YnRXgrG36hJLspdLapTXKmLDOh/qUJF7n venVrisRDWQgrgl6/Uvn2PMcTUkrEn/t4ExYgEOwWFiAGeQL5XAL/rmyVKvx53BX B0yeKmnNBqCGevJeUxRHZfUKBbpCEdSID7xxGjuooblFYoDk6LzjJMKikbIQwaL/ ct713tZVa06h459PXJz0Mc7QSj6LoagGWFEmyIGSA20E85ZZh5a0LofO7hwVP2Vr Nt3X932C35DcSj1hdT9WhvTPSJO/u1hyxLtfZuj4wk0IMknB3PaUmw/tSF3T7FJp S5yOO+Gd0YHphyHPhFXAWoidAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBe3QY3g J5UJYpGMewK56UFhLZZ5MB8GA1UdIwQYMBaAFGzg6UlxGyA+SssitoDz//R+0Wxh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREMzRi81Q0U4MTA0NjBF QjAxMUVGODcyRTgxMjdDNEY5QUUwMi9iT0RwU1hFYklENUt5eUsyZ1BQXzlIN1Ji R0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPRHBTWEViSUQ1S3l5SzJnUFBfOUg3UmJHRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REMzRi81Q0U4MTA0NjBFQjAxMUVGODcyRTgxMjdDNEY5QUUwMi9iT0RwU1hFYklE NUt5eUsyZ1BQXzlIN1JiR0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdff4hTuD7XIZ4QoYPkUDZNDGNjLzgbfktC/l7cYTAhcK5e4Lb2cKz kPY7yTCb2t+h6ywm0M9HESI+VcXm4LZoHfpfngg80cDD8ARmDJXzk6a4h0A12a06 z7vLhBobpE2H6RujyuIrLMjqShy7B/M/scykrKA8o0fY6KrwSe24iqw+QLyS5WwM PApNPQSdNsY2ivUVYS5r9fFXhQHtWe+bZINMDWLK4LFgrXhKfGzaTzKGnVO1rBXX JLT4YX2Cw8BdJiYqJNnKO3moeFozAXbtVTL6R14mcicT3frFDckPlIdX7u5p/prI URBlaQp+I+scp64PiBmsuwYeUDrYYnEz -----END CERTIFICATE-----Generated at Sat Aug 9 15:18:56 2025 by rpki-client