$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft File: Bjfls4xh34PrszAgk7tXbLMdmxA.mft (raw, json) Hash identifier: bi6C0QsseU/EtcCO88fPrAiCca7mD7TbkDJRmqhyCoU= Subject key identifier: BF:83:7F:DE:40:B9:79:92:65:68:7D:56:02:E8:82:28:95:81:B3:4D Authority key identifier: 06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 Certificate issuer: /CN=A91CE821/serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Certificate serial: 049D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft Manifest number: 1962 Signing time: Tue 12 Aug 2025 16:57:33 +0000 Manifest this update: Tue 12 Aug 2025 16:57:32 +0000 Manifest next update: Tue 19 Aug 2025 16:57:32 +0000 Files and hashes: 1: Bjfls4xh34PrszAgk7tXbLMdmxA.crl (hash: G7xQi817Cih5M+Nw+R6k2RtAHbqMXHnuZGK4uyTNTs8=) 2: 2A53DA54332011EF89CABD61C4F9AE02.roa (hash: 3E5KCTYO2qXRZGwimFw21kbH1Dhwm76ZCbT4bcDlI8Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1181 (0x49d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE821, serialNumber=0637E5B38C61DF83EBB3302093BB576CB31D9B10 Validity Not Before: Aug 12 16:57:32 2025 GMT Not After : Aug 19 16:57:32 2025 GMT Subject: CN=689b727c-7101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:94:19:40:ea:11:b8:bb:b2:96:17:ae:d8:c7: a1:46:f7:02:6c:fd:92:db:80:be:41:72:cf:0f:79: 20:79:c4:f8:77:a9:28:8e:f2:ad:89:d1:2c:59:fc: 55:30:a9:d3:9e:69:5c:67:bc:2d:94:56:da:6a:8f: ce:a4:9d:bb:65:76:47:25:b4:dd:3d:46:26:c1:90: 44:b8:6e:bc:b3:58:58:75:9d:aa:e6:e8:ec:6c:61: 49:26:cb:5c:25:85:df:05:b3:e3:d1:f1:13:b4:55: fe:5d:6e:8e:06:c2:29:db:db:79:25:8c:6d:73:ea: a9:b1:12:7a:c6:fb:1f:2a:89:2a:31:87:df:ff:35: 99:46:a6:02:43:25:f8:9b:91:ef:8a:01:03:3e:cd: 94:13:c6:39:9a:35:b3:1c:8d:3b:e2:4b:e8:a1:2d: 18:b7:bb:a4:92:e8:1f:be:92:32:5e:3b:bd:dc:cd: 67:15:ea:1c:c9:22:90:df:6c:66:b0:ce:8b:28:db: 6b:9b:4d:ff:f8:82:22:c4:15:e3:9c:fe:26:18:b4: 69:3f:b8:4f:58:8f:58:0c:c6:4b:ff:b4:75:e2:44: 8e:a9:4e:57:50:d5:7e:03:25:71:28:31:12:36:8e: eb:be:0e:8a:40:37:4b:31:c8:b1:8a:f9:81:c1:a7: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:83:7F:DE:40:B9:79:92:65:68:7D:56:02:E8:82:28:95:81:B3:4D X509v3 Authority Key Identifier: keyid:06:37:E5:B3:8C:61:DF:83:EB:B3:30:20:93:BB:57:6C:B3:1D:9B:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bjfls4xh34PrszAgk7tXbLMdmxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE821/811FB590605111E88CD8EC47C4F9AE02/Bjfls4xh34PrszAgk7tXbLMdmxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:3a:45:36:d2:ed:cd:79:31:e7:e4:7e:9b:3b:ef:3f:f7:51: 44:fc:f6:e6:b2:d2:c0:ca:24:f4:9e:dc:4b:22:12:fa:d0:ed: 84:74:4a:e6:59:8a:3d:27:07:3b:9a:54:4b:b1:c9:40:1b:12: c6:2e:6e:89:29:e6:17:d6:99:87:63:86:2f:6f:3e:6c:aa:89: 04:c5:32:05:9a:63:0f:48:a8:a6:9c:e5:9d:ec:ce:c6:43:ff: 1c:6d:71:24:55:0d:dc:ce:5f:da:38:91:0d:f1:d3:fc:4b:84: b7:2d:e9:cc:c0:09:62:d7:4b:d6:32:a2:fc:99:69:ec:da:7e: 52:21:e1:bb:e7:7a:f5:33:15:d1:1b:b6:d8:cf:07:c0:df:c9: 47:5d:6a:cb:28:9d:64:6f:37:0f:3d:d2:8f:cf:59:01:0a:2b: f1:00:34:af:f2:40:1c:02:02:1f:55:52:65:96:50:76:2b:c9: 6e:6d:82:3e:9d:e1:c1:03:84:20:ad:63:ee:25:50:d6:8c:b4: e4:e1:84:59:cf:af:95:99:f2:72:3f:b0:39:67:d0:50:14:a8: 61:56:d0:3d:30:e8:20:41:9f:f9:a4:2d:25:c6:90:c1:c5:c8: 88:ae:15:3a:ab:2f:8e:96:50:ee:97:e5:3f:65:8d:5c:17:e2: ac:2c:6b:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U4MjExMTAvBgNVBAUTKDA2MzdFNUIzOEM2MURGODNFQkIzMzAyMDkzQkI1NzZD QjMxRDlCMTAwHhcNMjUwODEyMTY1NzMyWhcNMjUwODE5MTY1NzMyWjAYMRYwFAYD VQQDEw02ODliNzI3Yy03MTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoZQZQOoRuLuylheu2MehRvcCbP2S24C+QXLPD3kgecT4d6kojvKtidEsWfxV MKnTnmlcZ7wtlFbaao/OpJ27ZXZHJbTdPUYmwZBEuG68s1hYdZ2q5ujsbGFJJstc JYXfBbPj0fETtFX+XW6OBsIp29t5JYxtc+qpsRJ6xvsfKokqMYff/zWZRqYCQyX4 m5HvigEDPs2UE8Y5mjWzHI074kvooS0Yt7ukkugfvpIyXju93M1nFeocySKQ32xm sM6LKNtrm03/+IIixBXjnP4mGLRpP7hPWI9YDMZL/7R14kSOqU5XUNV+AyVxKDES No7rvg6KQDdLMcixivmBwaevjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL+Df95A uXmSZWh9VgLogiiVgbNNMB8GA1UdIwQYMBaAFAY35bOMYd+D67MwIJO7V2yzHZsQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTgyMS84MTFGQjU5MDYw NTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0UHJzekFnazd0WGJMTWRt eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JqZmxzNHhoMzRQcnN6QWdrN3RYYkxNZG14QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTgyMS84MTFGQjU5MDYwNTExMUU4OENEOEVDNDdDNEY5QUUwMi9CamZsczR4aDM0 UHJzekFnazd0WGJMTWRteEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAaOkU20u3NeTHn5H6bO+8/91FE/PbmstLAyiT0ntxLIhL60O2EdErm WYo9Jwc7mlRLsclAGxLGLm6JKeYX1pmHY4Yvbz5sqokExTIFmmMPSKimnOWd7M7G Q/8cbXEkVQ3czl/aOJEN8dP8S4S3LenMwAli10vWMqL8mWns2n5SIeG753r1MxXR G7bYzwfA38lHXWrLKJ1kbzcPPdKPz1kBCivxADSv8kAcAgIfVVJlllB2K8lubYI+ neHBA4QgrWPuJVDWjLTk4YRZz6+VmfJyP7A5Z9BQFKhhVtA9MOggQZ/5pC0lxpDB xciIrhU6qy+OllDul+U/ZY1cF+KsLGsJ -----END CERTIFICATE-----Generated at Wed Aug 13 02:14:58 2025 by rpki-client