$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json) Hash identifier: BsvxeDmzJoFVWogyfpcF2Ox53nXqLdHOR+1KLgBpijk= Subject key identifier: 79:66:26:62:21:75:A7:92:67:67:B4:4C:CB:45:10:48:46:57:D8:6C Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 Certificate issuer: /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Certificate serial: 0791 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft Manifest number: 0F14 Signing time: Mon 04 Aug 2025 21:47:22 +0000 Manifest this update: Mon 04 Aug 2025 21:47:22 +0000 Manifest next update: Mon 11 Aug 2025 21:47:22 +0000 Files and hashes: 1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: 8ivsZdvcppSVpmQV5gLJ9UfcLJjVuWSTnEE2dbi2tv0=) 2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: hkxmNGokisQG0mbBKypviapB/RNUZ9nsMjdRwBRak9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1937 (0x791) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Validity Not Before: Aug 4 21:47:22 2025 GMT Not After : Aug 11 21:47:22 2025 GMT Subject: CN=68912a6a-4856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:99:ec:4c:e8:e6:59:d2:53:3e:38:17:e8:fb: e1:18:df:91:7c:83:cb:ef:4f:22:8e:b3:ea:b4:b0: e7:b1:f2:1c:1b:f1:3d:92:0a:30:78:c1:8c:22:aa: e3:67:31:6d:d2:bb:1a:c0:9a:74:20:3c:83:cd:33: 07:79:23:1b:3f:f0:bd:3d:10:d5:cf:70:66:56:a0: 94:90:22:f8:c9:9c:f6:9e:86:51:53:70:5e:f5:67: f2:df:f7:b3:b6:00:fa:e8:c8:b4:b9:d0:5a:86:c5: 78:7a:7b:95:d5:bd:18:18:58:0e:43:09:9a:fd:fb: 07:0c:61:d5:12:b6:a5:56:23:d2:c0:e7:e3:70:c3: 50:6f:c6:84:fd:09:f2:6f:68:0c:8f:a9:9d:f9:56: 3f:c8:91:af:11:4b:9d:a8:ff:f5:49:f0:a4:62:8f: 07:fd:48:00:04:95:a8:23:10:ca:34:db:a6:90:1d: b3:88:a2:9e:31:1f:8a:7e:c2:76:67:0f:7a:49:f4: d1:cb:05:51:d0:64:73:70:50:17:78:02:32:d5:b5: 38:6e:52:8b:61:8c:fb:15:f4:ab:cf:34:bd:15:9b: c6:c9:c4:8a:fd:34:51:3b:ac:a5:f0:7b:2a:f9:7f: 61:ea:f1:4f:bf:4c:ab:0f:84:3b:c2:2c:1d:70:62: d7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:66:26:62:21:75:A7:92:67:67:B4:4C:CB:45:10:48:46:57:D8:6C X509v3 Authority Key Identifier: keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:f5:d7:a6:15:94:18:65:23:ba:de:78:6c:c0:d3:97:e4:7b: bd:b1:fd:14:b9:84:81:87:2b:e5:d9:6e:a1:35:22:08:0c:4c: 9a:3f:b3:bd:01:e3:8c:bf:d0:19:40:29:c3:c4:52:60:14:dc: f9:a1:e1:46:13:d0:d0:3a:87:7d:23:31:90:d0:b1:8e:43:79: fa:44:ef:d2:eb:7b:1f:f6:7c:90:f8:5d:e1:cc:b5:61:4d:99: 77:bf:7b:c7:82:90:1b:98:42:d6:f0:a3:e0:33:5d:ce:60:df: 2b:f9:3c:6d:db:8b:94:46:42:78:80:5e:a4:aa:35:d5:4e:46: 54:57:67:30:06:15:e7:3c:10:7f:71:90:41:64:7d:23:54:be: df:ea:63:1d:eb:cc:8f:0a:7a:e0:80:6b:f2:9d:11:db:5e:11: c5:b8:a9:b1:d2:47:c4:67:84:1d:e9:e9:f8:c5:02:3b:5e:2a: d3:7d:d4:9b:d4:f3:c6:94:50:19:ac:3a:fe:9a:f6:aa:3c:fe: 26:50:76:c7:2e:48:1c:d5:4e:1e:7b:b6:10:5b:ff:d8:84:6c: cd:82:6c:10:de:84:e2:f0:f2:65:32:b1:e6:10:1f:6a:30:99: 1b:37:6c:91:e3:88:e9:20:fe:5f:ef:15:f7:dd:ce:c4:52:8f: a9:40:9a:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKDQ0MTZFODk4NThEQTY3N0IwQ0RBMzNCODdCMkU4QzhB RkQxQzYwNzgwHhcNMjUwODA0MjE0NzIyWhcNMjUwODExMjE0NzIyWjAYMRYwFAYD VQQDEw02ODkxMmE2YS00ODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzpnsTOjmWdJTPjgX6PvhGN+RfIPL708ijrPqtLDnsfIcG/E9kgoweMGMIqrj ZzFt0rsawJp0IDyDzTMHeSMbP/C9PRDVz3BmVqCUkCL4yZz2noZRU3Be9Wfy3/ez tgD66Mi0udBahsV4enuV1b0YGFgOQwma/fsHDGHVEralViPSwOfjcMNQb8aE/Qny b2gMj6md+VY/yJGvEUudqP/1SfCkYo8H/UgABJWoIxDKNNumkB2ziKKeMR+KfsJ2 Zw96SfTRywVR0GRzcFAXeAIy1bU4blKLYYz7FfSrzzS9FZvGycSK/TRRO6yl8Hsq +X9h6vFPv0yrD4Q7wiwdcGLXlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHlmJmIh daeSZ2e0TMtFEEhGV9hsMB8GA1UdIwQYMBaAFEQW6JhY2md7DNozuHsujIr9HGB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVozc00yak80ZXk2TWl2MGNZ SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCYm9tRmphWjNzTTJqTzRleTZNaXYwY1lIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVoz c00yak80ZXk2TWl2MGNZSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBI9demFZQYZSO63nhswNOX5Hu9sf0UuYSBhyvl2W6hNSIIDEyaP7O9 AeOMv9AZQCnDxFJgFNz5oeFGE9DQOod9IzGQ0LGOQ3n6RO/S63sf9nyQ+F3hzLVh TZl3v3vHgpAbmELW8KPgM13OYN8r+Txt24uURkJ4gF6kqjXVTkZUV2cwBhXnPBB/ cZBBZH0jVL7f6mMd68yPCnrggGvynRHbXhHFuKmx0kfEZ4Qd6en4xQI7XirTfdSb 1PPGlFAZrDr+mvaqPP4mUHbHLkgc1U4ee7YQW//YhGzNgmwQ3oTi8PJlMrHmEB9q MJkbN2yR44jpIP5f7xX33c7EUo+pQJrv -----END CERTIFICATE-----Generated at Wed Aug 6 10:10:55 2025 by rpki-client