$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft File: 7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft (raw, json) Hash identifier: xBIIT2uZzVH086HBp+gAZkuhyTkc0YhsbKw/snhEhbs= Subject key identifier: BD:67:BB:0C:8D:6A:82:41:6F:6C:FE:5A:35:85:A9:6F:BB:61:15:98 Authority key identifier: ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87 Certificate issuer: /CN=A91DD468/serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687 Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft Manifest number: 01E4 Signing time: Sat 09 Aug 2025 02:59:21 +0000 Manifest this update: Sat 09 Aug 2025 02:59:20 +0000 Manifest next update: Sat 16 Aug 2025 02:59:20 +0000 Files and hashes: 1: 7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl (hash: ecNVxnkFbDcOQkI9Vn80NfXdbvYVBLe45RR5NmNcXs8=) 2: 3FF7C9468C9211ED8D052619C4F9AE02.roa (hash: 5zp05k5VVLn+h5FTDM7wh1ceYmuMlTAzc+yFX4p/lNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD468, serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687 Validity Not Before: Aug 9 02:59:20 2025 GMT Not After : Aug 16 02:59:20 2025 GMT Subject: CN=6896b988-f135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a1:d3:7d:de:0c:45:9b:fd:40:d1:f4:a6:71: ca:e6:b3:45:d9:4c:11:43:8d:7a:51:88:01:97:80: 4d:78:92:04:76:90:40:a6:69:89:01:20:e5:8f:c2: 1c:11:ce:f7:7c:b4:fc:66:c1:f8:c5:a1:4c:84:4b: bb:1c:2c:16:20:d2:6c:4b:9d:66:f2:3f:ad:8c:54: fd:12:4b:04:c7:16:7a:4d:ac:98:74:19:1f:16:df: 6d:83:65:d9:34:ac:f4:83:29:9d:dd:5a:39:97:08: d5:f1:f4:fa:43:14:50:83:ee:fa:29:b4:32:b6:9c: 73:5b:2e:35:63:1c:39:7b:52:b9:23:97:6e:84:93: 19:b9:f5:60:3f:4f:b7:9b:81:88:c7:03:5a:a5:2b: 75:86:be:c6:e3:f8:d9:84:91:b8:69:ac:62:d4:3c: e0:41:58:82:86:48:59:d6:d6:f2:49:f4:6b:bf:b9: 99:45:7e:bb:db:aa:70:d2:ea:bd:19:3d:6e:0f:b4: e3:bf:78:4a:e7:73:26:df:56:18:a1:35:97:6e:29: 52:fe:d4:90:73:68:ee:e4:76:a6:c9:ea:84:92:85: 1e:a7:be:19:ca:14:d0:92:8e:7a:ed:7e:22:57:2f: 12:c8:18:85:06:67:16:9b:19:99:78:f4:24:74:bf: c8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:67:BB:0C:8D:6A:82:41:6F:6C:FE:5A:35:85:A9:6F:BB:61:15:98 X509v3 Authority Key Identifier: keyid:ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:79:5e:5a:fb:5e:da:06:36:83:9e:42:81:4e:e7:3f:e4:ea: cd:04:ac:22:9a:2f:b7:c9:e1:2f:72:3d:32:2b:29:0e:a2:1b: 2a:cc:69:d3:d3:b7:77:fc:39:75:0c:9d:0a:a2:8c:33:ba:aa: 42:9f:0f:f4:cb:f0:42:4c:aa:b7:78:31:33:71:0a:79:7a:3c: 7b:21:2a:46:0b:7d:f3:ed:47:35:78:fc:bf:ff:d7:b3:2b:c2: 0a:c8:ef:bb:fe:a4:35:86:91:82:f0:ef:1d:59:04:92:ea:97: ed:61:fd:c0:51:a2:8a:5c:69:8e:e5:91:ab:88:c3:b2:3b:16: 72:1e:72:ce:99:a0:de:72:2c:62:bf:ce:b2:38:08:86:9c:97: 31:c7:92:d1:f9:9b:fe:50:2e:fa:3e:ad:4e:77:fb:b0:dd:24: 10:80:98:16:e3:c6:48:b7:ab:9b:db:3f:53:5c:f7:41:25:96: 3a:fc:30:3c:65:0d:18:0e:eb:7d:8b:be:38:37:6b:8e:82:09: 7a:47:bd:84:dd:73:6a:81:c2:bb:a7:de:34:f1:f8:92:a2:00: a0:3d:67:41:d7:6e:1c:69:11:05:3f:c2:9c:bf:fe:e1:66:dc: 7a:f9:b3:9e:a6:c0:e7:e1:a9:72:c0:98:57:21:f2:37:d6:00: f3:c6:98:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0NjgxMTAvBgNVBAUTKEVEMzk3ODFFN0NBMjYzMkM1NEI3RkFFMjI1NEUyMUYw MUJBMDc2ODcwHhcNMjUwODA5MDI1OTIwWhcNMjUwODE2MDI1OTIwWjAYMRYwFAYD VQQDEw02ODk2Yjk4OC1mMTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2KHTfd4MRZv9QNH0pnHK5rNF2UwRQ416UYgBl4BNeJIEdpBApmmJASDlj8Ic Ec73fLT8ZsH4xaFMhEu7HCwWINJsS51m8j+tjFT9EksExxZ6TayYdBkfFt9tg2XZ NKz0gymd3Vo5lwjV8fT6QxRQg+76KbQytpxzWy41Yxw5e1K5I5duhJMZufVgP0+3 m4GIxwNapSt1hr7G4/jZhJG4aaxi1DzgQViChkhZ1tbySfRrv7mZRX6726pw0uq9 GT1uD7Tjv3hK53Mm31YYoTWXbilS/tSQc2ju5HamyeqEkoUep74ZyhTQko567X4i Vy8SyBiFBmcWmxmZePQkdL/I3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1nuwyN aoJBb2z+WjWFqW+7YRWYMB8GA1UdIwQYMBaAFO05eB58omMsVLf64iVOIfAboHaH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDQ2OC81QjRBMzNDNjhD OEYxMUVEQkM4QTYxMTRDNEY5QUUwMi83VGw0SG55aVl5eFV0X3JpSlU0aDhCdWdk b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUbDRIbnlpWXl4VXRfcmlKVTRoOEJ1Z2RvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDQ2OC81QjRBMzNDNjhDOEYxMUVEQkM4QTYxMTRDNEY5QUUwMi83VGw0SG55aVl5 eFV0X3JpSlU0aDhCdWdkb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANeV5a+17aBjaDnkKBTuc/5OrNBKwimi+3yeEvcj0yKykOohsqzGnT 07d3/Dl1DJ0KoowzuqpCnw/0y/BCTKq3eDEzcQp5ejx7ISpGC33z7Uc1ePy//9ez K8IKyO+7/qQ1hpGC8O8dWQSS6pftYf3AUaKKXGmO5ZGriMOyOxZyHnLOmaDecixi v86yOAiGnJcxx5LR+Zv+UC76Pq1Od/uw3SQQgJgW48ZIt6ub2z9TXPdBJZY6/DA8 ZQ0YDut9i744N2uOggl6R72E3XNqgcK7p9408fiSogCgPWdB124caREFP8Kcv/7h Ztx6+bOepsDn4alywJhXIfI31gDzxpg1 -----END CERTIFICATE-----Generated at Sat Aug 9 15:14:43 2025 by rpki-client