$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft File: BdNlUA2kssABifPGyllQ4AdMfEo.mft (raw, json) Hash identifier: ++K8aPpG9v1Q9KcazEZ6a5eh2J6Bxe6yUT1VV4I3tZ8= Subject key identifier: 1F:4D:0C:1D:99:C1:35:AD:90:16:4F:6F:05:95:11:2A:64:47:86:17 Authority key identifier: 05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A Certificate issuer: /CN=A91C8EDF/serialNumber=05D365500DA4B2C00189F3C6CA5950E0074C7C4A Certificate serial: 020B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft Manifest number: 01FE Signing time: Thu 07 Aug 2025 02:58:48 +0000 Manifest this update: Thu 07 Aug 2025 02:58:47 +0000 Manifest next update: Thu 14 Aug 2025 02:58:47 +0000 Files and hashes: 1: BdNlUA2kssABifPGyllQ4AdMfEo.crl (hash: g+AoEPzasSQWB/aTPNaV1ZTbhQe3HJxLQKKXYUEsI8o=) 2: 999FA66011C711EF80B27457C4F9AE02.roa (hash: O9DoSIXGoRGfPB1leReaXjE3LSp6RO52qLUkhTkRojY=) 3: AD0CC70C122411EF8BEED51AC4F9AE02.roa (hash: sLDSVMLU6jI3BpmMuSVMPzt56rvnKddxBYgL4QmGgG0=) 4: A6524550C4E411EEAFF83C50C4F9AE02.roa (hash: d4lk9eKDk4hQ5jM/CM/7dtQ4pw21vQcp7xDVqjydE4E=) 5: C44A1D987E0511EDBA2BAF7FC4F9AE02.roa (hash: UGxKabSt5VefJdKh3JQwjTM53St2aD5lvYeCqBjnhKg=) 6: 99D4FC3212DC11EFB2470B7FC4F9AE02.roa (hash: E6NCI4JuiZoY4K+zXIld9/zlqD6qc3HulCUWdCEuTgY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.crl rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:58:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 523 (0x20b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8EDF, serialNumber=05D365500DA4B2C00189F3C6CA5950E0074C7C4A Validity Not Before: Aug 7 02:58:47 2025 GMT Not After : Aug 14 02:58:47 2025 GMT Subject: CN=68941668-b471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:71:5b:40:75:f0:4b:0c:ed:96:87:e7:cb:16: 6e:54:47:ee:d3:1d:aa:fc:e3:3f:29:57:57:3d:b7: 09:2c:42:46:86:37:d2:9a:4a:35:f2:25:58:25:75: 20:90:6d:85:5e:a3:1c:32:da:77:86:ef:79:6a:85: d1:ac:be:36:da:95:80:d0:28:36:4e:d9:e3:f1:d2: cf:f8:2e:a9:49:b9:e7:ae:cf:e4:47:5f:c2:d0:c8: 9d:01:c8:0c:a4:74:d8:31:13:2b:9b:9e:56:33:32: a9:4a:a8:15:93:f2:9a:0c:0f:38:fa:1f:3b:fb:1f: df:ac:30:7f:93:91:2e:30:e2:0a:78:20:50:91:ff: 9f:40:b3:95:1c:ee:db:e0:d2:71:28:71:62:4e:c0: 27:21:f8:96:50:32:cd:7b:78:6b:de:07:05:75:d1: 2e:75:f0:1c:68:25:23:25:83:f5:9e:1e:54:5a:ad: 47:bd:6b:ac:d0:89:dc:6d:10:b9:54:56:3d:6f:62: ff:fa:b6:6e:bf:16:a9:78:4d:78:aa:a7:f4:6e:c6: d7:47:eb:c3:78:17:2a:bd:df:e3:81:eb:e5:4f:55: 6f:b5:cf:65:db:fc:b3:ef:aa:ef:42:59:c3:67:dd: b6:34:8c:0f:9b:9a:be:46:e7:d8:60:f7:ce:29:be: 18:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4D:0C:1D:99:C1:35:AD:90:16:4F:6F:05:95:11:2A:64:47:86:17 X509v3 Authority Key Identifier: keyid:05:D3:65:50:0D:A4:B2:C0:01:89:F3:C6:CA:59:50:E0:07:4C:7C:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BdNlUA2kssABifPGyllQ4AdMfEo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/EA67A98C7C5711EDBF213767C4F9AE02/BdNlUA2kssABifPGyllQ4AdMfEo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:86:d6:fc:dd:4e:33:29:0f:aa:f6:4f:b3:11:06:d6:fb:25: 0b:ec:85:59:4e:f1:ea:4d:6e:68:07:2c:3d:5d:29:f1:79:33: df:47:07:2c:39:7d:de:af:93:22:82:24:98:b6:22:a6:ca:c3: 8e:a2:8a:c3:e9:d6:bd:03:c3:f5:6a:ff:83:b7:af:1e:97:e7: c4:fb:27:ce:0b:1a:e9:4c:24:48:6b:4b:5c:2a:68:96:fb:1e: c4:56:ad:a2:73:7d:b2:0b:cc:dc:40:10:a6:d3:a4:2d:27:8f: 53:b0:37:3a:89:33:db:f6:0e:9a:ea:11:c6:50:cb:fa:de:ff: b7:03:ed:a4:35:bc:9f:0d:86:fb:d0:1c:e2:b7:ac:80:19:ab: dd:6c:a1:de:14:a9:a2:28:45:b2:a0:71:6b:5e:87:07:6a:53: f5:b2:a5:89:b9:09:62:ca:a8:9e:d2:9c:e1:23:a9:60:9d:d0: b1:bb:d9:ff:33:e0:23:4a:f2:f6:eb:b0:ca:43:e8:00:4f:c5: 00:11:5c:b2:ec:f7:3e:b5:40:41:71:67:a3:34:f8:6f:76:68: 1c:ad:55:e6:25:4a:2d:ac:0e:97:25:25:59:76:b1:58:8d:36: ce:33:6d:6a:c4:05:5d:69:78:ee:9b:5a:d3:d2:b5:2e:35:b1: 76:70:76:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhFREYxMTAvBgNVBAUTKDA1RDM2NTUwMERBNEIyQzAwMTg5RjNDNkNBNTk1MEUw MDc0QzdDNEEwHhcNMjUwODA3MDI1ODQ3WhcNMjUwODE0MDI1ODQ3WjAYMRYwFAYD VQQDEw02ODk0MTY2OC1iNDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn3FbQHXwSwztlofnyxZuVEfu0x2q/OM/KVdXPbcJLEJGhjfSmko18iVYJXUg kG2FXqMcMtp3hu95aoXRrL422pWA0Cg2Ttnj8dLP+C6pSbnnrs/kR1/C0MidAcgM pHTYMRMrm55WMzKpSqgVk/KaDA84+h87+x/frDB/k5EuMOIKeCBQkf+fQLOVHO7b 4NJxKHFiTsAnIfiWUDLNe3hr3gcFddEudfAcaCUjJYP1nh5UWq1HvWus0IncbRC5 VFY9b2L/+rZuvxapeE14qqf0bsbXR+vDeBcqvd/jgevlT1Vvtc9l2/yz76rvQlnD Z922NIwPm5q+RufYYPfOKb4YTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9NDB2Z wTWtkBZPbwWVESpkR4YXMB8GA1UdIwQYMBaAFAXTZVANpLLAAYnzxspZUOAHTHxK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEVERi9FQTY3QTk4QzdD NTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9CZE5sVUEya3NzQUJpZlBHeWxsUTRBZE1m RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JkTmxVQTJrc3NBQmlmUEd5bGxRNEFkTWZFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEVERi9FQTY3QTk4QzdDNTcxMUVEQkYyMTM3NjdDNEY5QUUwMi9CZE5sVUEya3Nz QUJpZlBHeWxsUTRBZE1mRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAfhtb83U4zKQ+q9k+zEQbW+yUL7IVZTvHqTW5oByw9XSnxeTPfRwcs OX3er5MigiSYtiKmysOOoorD6da9A8P1av+Dt68el+fE+yfOCxrpTCRIa0tcKmiW +x7EVq2ic32yC8zcQBCm06QtJ49TsDc6iTPb9g6a6hHGUMv63v+3A+2kNbyfDYb7 0Bzit6yAGavdbKHeFKmiKEWyoHFrXocHalP1sqWJuQliyqie0pzhI6lgndCxu9n/ M+AjSvL267DKQ+gAT8UAEVyy7Pc+tUBBcWejNPhvdmgcrVXmJUotrA6XJSVZdrFY jTbOM21qxAVdaXjum1rT0rUuNbF2cHaP -----END CERTIFICATE-----Generated at Sat Aug 9 02:52:12 2025 by rpki-client