$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft File: Bc1Un1RUvTKyKPavyN424Ej2SA0.mft (raw, json) Hash identifier: q78/Kj9tZCpI9KymzHKmkTkEbH/NkSRiN/NFQrBkW2E= Subject key identifier: 87:92:33:6C:27:BB:9A:26:4F:2A:74:AA:24:14:AC:88:05:81:C4:61 Authority key identifier: 05:CD:54:9F:54:54:BD:32:B2:28:F6:AF:C8:DE:36:E0:48:F6:48:0D Certificate issuer: /CN=A91E8881/serialNumber=05CD549F5454BD32B228F6AFC8DE36E048F6480D Certificate serial: 07D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bc1Un1RUvTKyKPavyN424Ej2SA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft Manifest number: 07D2 Signing time: Sun 10 Aug 2025 21:07:34 +0000 Manifest this update: Sun 10 Aug 2025 21:07:34 +0000 Manifest next update: Sun 17 Aug 2025 21:07:34 +0000 Files and hashes: 1: Bc1Un1RUvTKyKPavyN424Ej2SA0.crl (hash: Xyio5Qt54DS5n/poWPh0wtxtHUyac0ujDNUhgoTU1co=) 2: EAC9D46200F911EB8E61B84CC4F9AE02.roa (hash: Vn5biCjexx3cjiQ4QgNEGs4i33iiyVoqmR3L4tJPzNU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.crl rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bc1Un1RUvTKyKPavyN424Ej2SA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2009 (0x7d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8881, serialNumber=05CD549F5454BD32B228F6AFC8DE36E048F6480D Validity Not Before: Aug 10 21:07:34 2025 GMT Not After : Aug 17 21:07:34 2025 GMT Subject: CN=68990a16-c242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f4:e2:c4:fb:7d:90:03:6b:37:3d:43:48:97: f4:59:64:65:b3:f1:cf:9d:c7:c5:a5:3b:60:22:a1: c2:ff:08:2b:78:5e:b6:fe:0c:6b:f7:4a:96:19:a3: 62:98:cd:fb:66:64:47:3e:d8:d9:b9:33:88:d2:65: d0:55:f6:91:4f:17:2d:88:50:4e:78:04:81:41:df: 1b:96:72:d1:e0:fb:ec:8b:dd:a9:cb:4f:ae:6f:45: 2e:5f:cd:97:c5:f5:7e:f0:e3:f2:20:1d:47:5b:b0: 2f:a4:ce:04:de:39:2d:f6:88:71:a1:30:b1:df:13: d7:d0:74:2d:cf:bb:05:c9:79:4c:61:95:79:53:2f: a0:cf:b6:75:f1:d9:14:f9:3e:30:f4:4e:70:20:5f: b2:9d:06:25:dd:56:3f:bc:a5:55:02:87:07:c1:74: 51:fe:81:2e:09:cd:94:65:9b:f3:b6:42:ec:12:27: e1:0e:4b:1a:58:2e:33:f2:80:82:31:60:f1:80:b3: 72:8c:77:dc:3e:c5:e8:73:ff:7d:0c:49:d9:84:5d: 48:f6:30:46:50:0a:ee:46:60:91:e1:1d:34:78:01: a0:2a:ab:6c:49:47:1e:5a:71:f7:a1:f7:81:10:47: 8a:2b:3a:ce:f6:c7:2e:68:81:62:d5:50:1f:c7:85: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:92:33:6C:27:BB:9A:26:4F:2A:74:AA:24:14:AC:88:05:81:C4:61 X509v3 Authority Key Identifier: keyid:05:CD:54:9F:54:54:BD:32:B2:28:F6:AF:C8:DE:36:E0:48:F6:48:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bc1Un1RUvTKyKPavyN424Ej2SA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8881/089DE84000F811EBB217A449C4F9AE02/Bc1Un1RUvTKyKPavyN424Ej2SA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:cc:28:bb:38:f9:eb:a3:3b:33:fc:cc:ba:28:9e:3d:9e:58: fa:3a:c7:24:c0:57:38:5a:f6:8e:d6:18:48:4c:5b:45:5a:49: b8:25:15:51:f6:ff:40:d7:d1:24:b7:6f:a5:08:88:3f:50:c9: 48:6f:c5:6a:78:93:f0:7b:9d:5c:ff:1c:04:2e:ca:25:8f:97: 76:47:8e:a7:da:ef:81:fb:e2:58:48:1f:25:99:2b:37:d7:2f: 17:24:22:fa:4b:41:89:bc:1f:3f:8e:86:13:7f:bb:38:73:44: a1:14:a2:bc:2d:46:14:98:39:9c:46:32:51:4f:b6:0e:bf:5a: 3a:5b:c8:30:95:45:3a:f5:0a:6d:8a:de:8d:0b:72:5a:42:d1: 67:00:04:c0:03:1d:90:91:33:f5:47:6b:cf:b4:49:74:d1:12: 67:6d:13:69:fa:8c:88:26:ba:a9:e7:34:dd:b4:a0:4b:2e:ce: 23:78:0a:a4:56:b9:87:67:09:28:12:4d:75:00:47:0a:7b:66: 82:f1:e0:78:24:ff:ba:83:24:08:2d:05:c2:6b:29:aa:a6:43: 79:12:80:40:85:94:08:b1:8d:1b:89:4c:07:42:d8:7a:86:24: 83:13:5a:fc:6c:fb:65:27:97:79:76:a1:26:ae:86:f8:45:8e: 25:54:37:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg4ODExMTAvBgNVBAUTKDA1Q0Q1NDlGNTQ1NEJEMzJCMjI4RjZBRkM4REUzNkUw NDhGNjQ4MEQwHhcNMjUwODEwMjEwNzM0WhcNMjUwODE3MjEwNzM0WjAYMRYwFAYD VQQDEw02ODk5MGExNi1jMjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8/TixPt9kANrNz1DSJf0WWRls/HPncfFpTtgIqHC/wgreF62/gxr90qWGaNi mM37ZmRHPtjZuTOI0mXQVfaRTxctiFBOeASBQd8blnLR4Pvsi92py0+ub0UuX82X xfV+8OPyIB1HW7AvpM4E3jkt9ohxoTCx3xPX0HQtz7sFyXlMYZV5Uy+gz7Z18dkU +T4w9E5wIF+ynQYl3VY/vKVVAocHwXRR/oEuCc2UZZvztkLsEifhDksaWC4z8oCC MWDxgLNyjHfcPsXoc/99DEnZhF1I9jBGUAruRmCR4R00eAGgKqtsSUceWnH3ofeB EEeKKzrO9scuaIFi1VAfx4UZ/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeSM2wn u5omTyp0qiQUrIgFgcRhMB8GA1UdIwQYMBaAFAXNVJ9UVL0ysij2r8jeNuBI9kgN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODg4MS8wODlERTg0MDAw RjgxMUVCQjIxN0E0NDlDNEY5QUUwMi9CYzFVbjFSVXZUS3lLUGF2eU40MjRFajJT QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JjMVVuMVJVdlRLeUtQYXZ5TjQyNEVqMlNBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODg4MS8wODlERTg0MDAwRjgxMUVCQjIxN0E0NDlDNEY5QUUwMi9CYzFVbjFSVXZU S3lLUGF2eU40MjRFajJTQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdzCi7OPnrozsz/My6KJ49nlj6OsckwFc4WvaO1hhITFtFWkm4JRVR 9v9A19Ekt2+lCIg/UMlIb8VqeJPwe51c/xwELsolj5d2R46n2u+B++JYSB8lmSs3 1y8XJCL6S0GJvB8/joYTf7s4c0ShFKK8LUYUmDmcRjJRT7YOv1o6W8gwlUU69Qpt it6NC3JaQtFnAATAAx2QkTP1R2vPtEl00RJnbRNp+oyIJrqp5zTdtKBLLs4jeAqk VrmHZwkoEk11AEcKe2aC8eB4JP+6gyQILQXCaymqpkN5EoBAhZQIsY0biUwHQth6 hiSDE1r8bPtlJ5d5dqEmrob4RY4lVDdU -----END CERTIFICATE-----Generated at Mon Aug 11 04:24:14 2025 by rpki-client