$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft File: bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json) Hash identifier: 0qpXHHNZpcB/XQFRs70JDvu6DuM/ykkOtw+0A8wrcWw= Subject key identifier: C7:28:3B:B4:9F:28:07:09:6C:EE:83:DD:F7:6A:77:B6:53:6F:3C:CA Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C Certificate issuer: /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Certificate serial: 076E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft Manifest number: 0768 Signing time: Sun 10 Aug 2025 21:39:29 +0000 Manifest this update: Sun 10 Aug 2025 21:39:29 +0000 Manifest next update: Sun 17 Aug 2025 21:39:29 +0000 Files and hashes: 1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: yq/pnV3ct1PJLcLJIpeLwrMpJmzGV+0JZRH300Dd8ao=) 2: C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (hash: sxwsat/jz73BmJhm+NJpdHINgb9WZYUhdohcJK8DuQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1902 (0x76e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01F7, serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Validity Not Before: Aug 10 21:39:29 2025 GMT Not After : Aug 17 21:39:29 2025 GMT Subject: CN=68991191-18d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a3:bd:b1:ff:58:f9:d3:e2:09:3a:8f:b5:e6: 04:2e:f2:05:b4:07:f8:6c:43:a5:fb:0c:ea:52:03: df:37:87:41:ac:89:c1:bc:70:dd:35:92:6c:26:b7: 29:4e:99:cf:55:ec:25:87:54:21:8b:c9:90:14:bd: 6f:8c:6c:43:a7:6c:fe:cd:ea:ec:68:17:9a:7d:ba: 25:b9:98:36:86:ce:58:7f:02:93:f6:4a:10:04:a8: 04:dd:da:aa:6e:41:bd:bb:42:04:c1:3c:ae:e5:e4: 77:cb:c3:44:63:12:24:27:44:b0:bd:08:cf:06:38: ca:4a:8d:79:c7:52:8c:6b:2a:a9:ba:e2:f7:ef:95: 0f:f8:81:af:ea:fa:38:f5:7e:da:88:4e:a4:02:51: b2:7a:aa:3e:a7:0b:06:cd:4b:b4:ff:4f:2e:dc:bc: 63:75:81:ca:61:39:6c:06:0b:61:b3:85:76:23:ce: d0:88:f3:b3:71:fb:db:7d:78:66:d2:4c:fc:e6:88: f4:49:e5:25:0f:71:b9:e7:1a:67:a5:40:1e:55:31: 39:51:3b:cf:7c:19:db:fa:e8:15:6f:f0:ce:cc:3f: 80:9c:90:80:6c:38:1b:7a:7c:ad:a1:1f:b1:e9:ec: 19:f4:0f:42:9c:e5:4e:6d:23:2e:8e:fc:0b:fc:6a: e9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:28:3B:B4:9F:28:07:09:6C:EE:83:DD:F7:6A:77:B6:53:6F:3C:CA X509v3 Authority Key Identifier: keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:27:0d:cd:56:bf:f8:5f:ff:b7:c4:5e:00:d5:22:fb:af:43: a7:61:2f:1c:6b:a3:bb:b7:9f:29:ee:62:12:02:ff:a8:eb:7c: 61:79:e8:bb:95:8f:44:1a:c1:44:0d:00:02:7c:9d:52:fc:fa: 5e:17:c4:20:9f:55:1c:42:7b:04:cb:29:64:00:af:ed:46:1e: 7a:55:86:1c:b5:2a:e2:99:b3:ca:ae:1c:c2:89:fd:e4:9a:ee: 01:7e:6d:86:e3:db:9f:65:ce:7f:a2:ec:4d:11:54:0a:cc:f9: ff:89:22:b5:30:1c:a2:b2:93:ad:9b:85:97:52:cd:37:82:b2: d0:74:47:55:81:1f:8c:db:6d:40:6f:eb:80:61:21:e5:62:d7: 7e:a7:10:e1:af:43:04:e6:c9:bb:f2:fc:fd:86:da:dc:96:97: 07:b9:84:ad:ea:b9:60:20:b2:0c:07:66:64:4f:e8:a8:cc:8a: cd:40:c7:93:9c:7f:4c:aa:2c:6c:01:c0:68:b1:10:08:78:66: 8f:b3:8c:87:ed:bd:6a:20:79:2d:ca:52:c0:59:07:d8:fc:ad: 00:e3:f1:49:d9:5c:2d:d6:68:7d:62:2c:ec:26:01:df:0a:ba: a9:40:e4:35:39:71:c4:29:02:8a:d7:5e:8a:ce:6c:6a:b6:d0: c7:11:6c:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB24wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxRjcxMTAvBgNVBAUTKDZFMjcwNDNDM0FGNDBGQzVFNTk3OTM4QjE1NEY1QzhC RTBGREZGNkMwHhcNMjUwODEwMjEzOTI5WhcNMjUwODE3MjEzOTI5WjAYMRYwFAYD VQQDEw02ODk5MTE5MS0xOGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxKO9sf9Y+dPiCTqPteYELvIFtAf4bEOl+wzqUgPfN4dBrInBvHDdNZJsJrcp TpnPVewlh1Qhi8mQFL1vjGxDp2z+zersaBeafboluZg2hs5YfwKT9koQBKgE3dqq bkG9u0IEwTyu5eR3y8NEYxIkJ0SwvQjPBjjKSo15x1KMayqpuuL375UP+IGv6vo4 9X7aiE6kAlGyeqo+pwsGzUu0/08u3LxjdYHKYTlsBgths4V2I87QiPOzcfvbfXhm 0kz85oj0SeUlD3G55xpnpUAeVTE5UTvPfBnb+ugVb/DOzD+AnJCAbDgbenytoR+x 6ewZ9A9CnOVObSMujvwL/GrpnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcoO7Sf KAcJbO6D3fdqd7ZTbzzKMB8GA1UdIwQYMBaAFG4nBDw69A/F5ZeTixVPXIvg/f9s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFGNy9GOTFEMEQyODJB NUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4WGxsNU9MRlU5Y2ktRDlf MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpY0VQRHIwRDhYbGw1T0xGVTljaS1EOV8ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFGNy9GOTFEMEQyODJBNUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4 WGxsNU9MRlU5Y2ktRDlfMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArJw3NVr/4X/+3xF4A1SL7r0OnYS8ca6O7t58p7mISAv+o63xheei7 lY9EGsFEDQACfJ1S/PpeF8Qgn1UcQnsEyylkAK/tRh56VYYctSrimbPKrhzCif3k mu4Bfm2G49ufZc5/ouxNEVQKzPn/iSK1MByispOtm4WXUs03grLQdEdVgR+M221A b+uAYSHlYtd+pxDhr0ME5sm78vz9htrclpcHuYSt6rlgILIMB2ZkT+iozIrNQMeT nH9MqixsAcBosRAIeGaPs4yH7b1qIHktylLAWQfY/K0A4/FJ2Vwt1mh9YizsJgHf CrqpQOQ1OXHEKQKK116KzmxqttDHEWzg -----END CERTIFICATE-----Generated at Mon Aug 11 10:32:10 2025 by rpki-client