$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: uCoFROr6kZwjug+3K22buG7MJd3nR+eNpzYzmNyJW9Y= Subject key identifier: E8:F8:01:CD:EE:77:FA:41:22:73:E1:43:0E:DF:76:14:4C:E2:D2:37 Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: E6 Signing time: Mon 11 Aug 2025 05:41:12 +0000 Manifest this update: Mon 11 Aug 2025 05:41:11 +0000 Manifest next update: Mon 18 Aug 2025 05:41:11 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: B2pxA6hr/5U6ENrSlaVTXuR8cZ2RUD6pliHP6ulXSeo=) 2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: vY7AsZ08Pw1TlHVY7hGbU3NQuV3eecatAeSNrTUiOFk=) 3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: c1fiRMTzx+sKc+PUXDGG2MhU2IceNjiS5ZTGcmsSFDc=) 4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: Zeo9E1pvK7pqXxcoNJpNgvy4k5rrUkurswNhSqNf24s=) 5: A074721624CA11EF93486579C4F9AE02.roa (hash: EAuwmClXGMo+6npZ19N/RRkMj4x/6MUGDRCOhMDeS9A=) 6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: NR/+YgQkm7A4mmhSV+xz9O4OYp+ZS9oT3gP6zL7oedM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 05:41:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Aug 11 05:41:11 2025 GMT Not After : Aug 18 05:41:11 2025 GMT Subject: CN=68998278-f945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:e6:c2:9c:4e:a5:b7:ff:39:32:cc:58:df:09: 1e:9d:de:fd:af:9e:43:97:06:29:46:fe:9f:11:ba: 0a:f0:9b:4b:b7:28:b0:e1:01:c6:44:04:1d:e4:22: e7:a8:47:b1:68:2e:8c:10:39:36:7d:f1:2c:b7:84: a9:0a:69:21:18:0b:ce:d2:14:03:11:62:9f:07:c3: b4:9e:4f:1d:e0:9c:15:8a:99:38:3d:29:9f:26:e0: bd:4a:0c:d4:a9:bd:00:a2:82:ee:4a:c0:31:94:4f: c0:2b:19:58:ea:1e:6a:40:6c:fb:dd:65:b6:28:eb: fd:4a:43:0b:d4:6c:61:e8:b8:32:ad:8f:5e:2b:8b: 1d:aa:90:1c:92:f9:4e:a6:b9:10:17:4a:5d:03:f6: cb:6f:0a:21:c4:85:24:57:66:84:5f:f9:b7:33:af: 0f:31:1f:51:0b:38:6e:0b:16:45:dd:d4:45:19:dd: 2e:53:db:74:29:4a:9a:16:84:e9:5e:8c:81:db:2f: 3a:40:39:26:7c:00:64:2b:7d:b7:ba:44:b2:72:a4: 50:5f:3b:cf:42:4f:36:ae:f7:ad:0b:7b:69:c2:e0: 55:e7:44:5b:bb:de:ee:dd:95:59:b2:c8:7e:f2:6b: a0:17:f7:f8:23:b8:65:03:bf:b8:eb:93:3f:15:90: 91:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:F8:01:CD:EE:77:FA:41:22:73:E1:43:0E:DF:76:14:4C:E2:D2:37 X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:8c:af:ae:cb:e1:6e:4d:5e:c9:84:f9:5f:b4:84:22:f6:5a: ef:09:cf:8b:8a:b4:fd:bf:34:60:30:8d:1a:a9:02:98:05:77: 11:7b:a8:c7:b0:6c:dc:7f:c7:e9:ac:e0:d8:77:f5:7e:0b:fa: 75:0b:22:a2:d0:03:db:e7:1e:71:9c:bc:ee:94:9e:40:83:68: 9e:80:18:e6:b5:ea:43:6c:99:ed:86:f3:84:01:30:ab:2d:64: 6a:e7:de:e2:03:43:07:54:2a:0b:fd:a4:e5:72:61:10:af:b3: 6c:4e:3e:a1:72:e9:19:9e:55:21:f6:95:1b:d0:54:3a:0c:72: 1e:25:7d:e0:ab:08:f3:a3:30:bb:e6:34:2c:12:ec:3c:02:9b: 5d:57:4f:89:a9:c0:6b:9e:32:13:4a:89:72:aa:97:07:f1:da: 04:6c:bb:5e:22:b3:f7:d4:f6:61:d2:07:25:10:7f:d8:12:53: 29:30:fc:9f:f5:35:35:57:13:2c:2a:22:3f:fc:9d:37:b1:fc: 1e:59:bc:ed:ce:bc:27:ff:c3:cc:05:1d:ad:8d:c3:af:59:fb: f5:a7:04:04:c3:8b:1f:15:46:b2:8d:01:7a:df:67:83:cb:a0: a2:79:2c:51:c2:0d:18:ad:9a:84:5f:5a:8b:ef:7a:07:3a:39: 84:34:23:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjUwODExMDU0MTExWhcNMjUwODE4MDU0MTExWjAYMRYwFAYD VQQDEw02ODk5ODI3OC1mOTQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+bCnE6lt/85MsxY3wkend79r55DlwYpRv6fEboK8JtLtyiw4QHGRAQd5CLn qEexaC6MEDk2ffEst4SpCmkhGAvO0hQDEWKfB8O0nk8d4JwVipk4PSmfJuC9SgzU qb0AooLuSsAxlE/AKxlY6h5qQGz73WW2KOv9SkML1Gxh6LgyrY9eK4sdqpAckvlO prkQF0pdA/bLbwohxIUkV2aEX/m3M68PMR9RCzhuCxZF3dRFGd0uU9t0KUqaFoTp XoyB2y86QDkmfABkK323ukSycqRQXzvPQk82rvetC3tpwuBV50Rbu97u3ZVZssh+ 8mugF/f4I7hlA7+465M/FZCR+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOj4Ac3u d/pBInPhQw7fdhRM4tI3MB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADjK+uy+FuTV7JhPlftIQi9lrvCc+LirT9vzRgMI0aqQKYBXcRe6jH sGzcf8fprODYd/V+C/p1CyKi0APb5x5xnLzulJ5Ag2iegBjmtepDbJnthvOEATCr LWRq597iA0MHVCoL/aTlcmEQr7NsTj6hcukZnlUh9pUb0FQ6DHIeJX3gqwjzozC7 5jQsEuw8AptdV0+JqcBrnjITSolyqpcH8doEbLteIrP31PZh0gclEH/YElMpMPyf 9TU1VxMsKiI//J03sfweWbztzrwn/8PMBR2tjcOvWfv1pwQEw4sfFUayjQF632eD y6CieSxRwg0YrZqEX1qL73oHOjmENCNX -----END CERTIFICATE-----Generated at Tue Aug 12 13:51:16 2025 by rpki-client