$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json) Hash identifier: j4st1EuuBQB0GIoo0UnjGYRVqjT1W+5/bjaPQocMfS8= Subject key identifier: 66:14:88:24:AE:B8:7B:ED:01:D1:18:25:18:C8:C3:71:4D:DA:75:CE Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Certificate serial: E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft Manifest number: DC Signing time: Thu 07 Aug 2025 06:04:19 +0000 Manifest this update: Thu 07 Aug 2025 06:04:19 +0000 Manifest next update: Thu 14 Aug 2025 06:04:19 +0000 Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: E//94Qf+sWpQtjVXzQ98pQJGkK4rcyOCwxrnkBFOjDY=) 2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: 7PT1hzEu8yFfZFQXURAd4+p59Mps1ow7oAQ1a2yeyaI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Validity Not Before: Aug 7 06:04:19 2025 GMT Not After : Aug 14 06:04:19 2025 GMT Subject: CN=689441e3-68cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d6:14:f5:94:28:04:8d:ee:be:ab:71:09:fd: ac:c3:90:50:02:0e:d0:cf:93:bc:03:ef:c4:41:b1: 02:90:65:d1:9a:03:6e:ea:ed:9d:46:8e:67:60:7a: c3:6c:ed:dd:8b:ba:66:8e:b1:3b:14:69:1c:75:27: 72:12:a3:ae:ef:6f:71:81:c9:dd:34:d7:b4:f5:ae: ad:eb:bc:52:c9:c8:d2:03:1e:f3:91:42:95:67:0f: 30:fd:f1:96:58:74:fd:2b:71:8b:f4:81:68:16:11: 84:0b:f8:2f:8d:60:b5:f9:08:73:da:47:7b:01:38: d9:68:06:5b:0e:bf:33:ec:fe:b1:66:4a:76:71:15: 90:ea:98:64:6d:53:44:24:2a:a9:0c:d7:89:61:33: d4:12:dc:85:2a:96:6b:cd:4c:01:c8:ea:d0:cb:ec: 54:31:d1:36:77:7a:95:8c:b9:90:45:80:86:6f:e8: 12:f4:f9:5a:96:c0:35:65:40:08:77:89:60:0f:3b: be:b2:55:0b:3a:89:e4:21:82:83:77:28:b6:42:a9: 74:ae:04:1c:27:b2:5d:8c:f6:6d:46:39:0b:70:87: f9:b4:b9:9d:d8:ce:fc:85:db:31:cb:79:3a:2f:25: 4a:c9:87:3a:61:0a:c3:f5:af:8d:68:d0:fa:e7:24: 0a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:14:88:24:AE:B8:7B:ED:01:D1:18:25:18:C8:C3:71:4D:DA:75:CE X509v3 Authority Key Identifier: keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:cc:ad:0e:f1:c6:0b:ca:41:8d:10:59:99:27:da:0d:b5:ce: dd:d5:2b:51:18:b8:d1:2f:a0:27:71:67:a5:cc:ee:b5:23:76: 74:1e:50:5c:07:ad:f3:d1:82:75:3e:39:90:83:66:fd:cc:ba: 3f:84:47:91:4e:26:17:15:c7:4b:cc:3b:f3:ef:1c:56:70:de: 26:0d:aa:e9:83:60:b1:97:ea:69:55:67:7e:9d:aa:95:1f:ce: ce:c9:b6:18:32:ff:1d:da:84:f4:58:f9:51:1f:7e:65:90:d9: 78:ad:2d:ed:0d:47:03:01:d0:7d:96:04:79:67:bc:fb:fb:cf: cc:66:4f:9a:69:c2:7f:16:6e:88:2f:bd:57:d6:1d:70:85:4d: 59:7f:2d:89:02:94:90:7e:db:3d:2b:06:ac:b8:3d:1e:9f:21: 30:e9:ee:97:35:70:5f:0d:51:c5:cc:0f:9b:50:58:c2:7e:9e: 45:5a:f8:ef:b8:06:1a:66:18:fc:0f:77:39:88:c7:af:e9:c1: 78:ab:a1:90:74:f3:e1:51:59:ea:70:ad:77:79:f1:ac:7b:2c: 2d:bc:67:83:12:72:38:34:14:c0:67:21:68:5c:25:47:c2:6b: 96:6b:8d:53:86:7b:6d:7a:32:89:5a:bd:8b:f8:59:a3:18:9c: e5:a4:f5:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKDA0NzRGNDA2QTE3OEQyMkM1NEQ1RUY3MjRDNkIyQzJD OUEzQjZCOTgwHhcNMjUwODA3MDYwNDE5WhcNMjUwODE0MDYwNDE5WjAYMRYwFAYD VQQDEw02ODk0NDFlMy02OGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9YU9ZQoBI3uvqtxCf2sw5BQAg7Qz5O8A+/EQbECkGXRmgNu6u2dRo5nYHrD bO3di7pmjrE7FGkcdSdyEqOu729xgcndNNe09a6t67xSycjSAx7zkUKVZw8w/fGW WHT9K3GL9IFoFhGEC/gvjWC1+Qhz2kd7ATjZaAZbDr8z7P6xZkp2cRWQ6phkbVNE JCqpDNeJYTPUEtyFKpZrzUwByOrQy+xUMdE2d3qVjLmQRYCGb+gS9PlalsA1ZUAI d4lgDzu+slULOonkIYKDdyi2Qql0rgQcJ7JdjPZtRjkLcIf5tLmd2M78hdsxy3k6 LyVKyYc6YQrD9a+NaND65yQKoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYUiCSu uHvtAdEYJRjIw3FN2nXOMB8GA1UdIwQYMBaAFAR09AaheNIsVNXvckxrLCyaO2uY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FNTM2MDhGMDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBpeFUxZTl5VEdzc0xKbzdh NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FNTM2MDhGMDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBp eFUxZTl5VEdzc0xKbzdhNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdzK0O8cYLykGNEFmZJ9oNtc7d1StRGLjRL6AncWelzO61I3Z0HlBc B63z0YJ1PjmQg2b9zLo/hEeRTiYXFcdLzDvz7xxWcN4mDarpg2Cxl+ppVWd+naqV H87OybYYMv8d2oT0WPlRH35lkNl4rS3tDUcDAdB9lgR5Z7z7+8/MZk+aacJ/Fm6I L71X1h1whU1Zfy2JApSQfts9KwasuD0enyEw6e6XNXBfDVHFzA+bUFjCfp5FWvjv uAYaZhj8D3c5iMev6cF4q6GQdPPhUVnqcK13efGseywtvGeDEnI4NBTAZyFoXCVH wmuWa41ThnttejKJWr2L+FmjGJzlpPXK -----END CERTIFICATE-----Generated at Sat Aug 9 01:08:45 2025 by rpki-client