$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft File: b9CIejkD49bhe7nP2O8mknC6ywc.mft (raw, json) Hash identifier: cym0vmUyB+1nBxylg49ucyEW6VwASw/+z9+EZYwI8fk= Subject key identifier: 43:A9:21:51:43:66:99:71:DD:0A:8C:50:4D:CE:8F:9D:21:B3:4F:66 Authority key identifier: 6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07 Certificate issuer: /CN=A91E8BE3/serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft Manifest number: 7B Signing time: Sun 03 Aug 2025 07:12:39 +0000 Manifest this update: Sun 03 Aug 2025 07:12:39 +0000 Manifest next update: Sun 10 Aug 2025 07:12:39 +0000 Files and hashes: 1: b9CIejkD49bhe7nP2O8mknC6ywc.crl (hash: 6DLkR/McVyZdVQpQz8vtFwN5CEyvFqY+0piEufzL8aM=) 2: 3139D35EBFA811EFA9B7DC2AC4F9AE02.roa (hash: gL/pv5Q4H259tRW/M/fWgTAynaK4mXLMVK09D4O3Mmw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 07:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8BE3, serialNumber=6FD0887A3903E3D6E17BB9CFD8EF269270BACB07 Validity Not Before: Aug 3 07:12:39 2025 GMT Not After : Aug 10 07:12:39 2025 GMT Subject: CN=688f0be7-79cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:98:9f:11:2c:e2:36:bf:50:d9:c5:bc:54:1e: 5f:43:a9:5e:fc:d9:a4:ea:95:bd:03:fb:c4:63:d6: c6:53:6c:80:d6:88:2c:5a:b7:0f:d0:75:42:65:d2: b3:83:20:e9:69:dd:c1:97:ff:ef:2b:45:ed:6e:e1: f1:2d:f7:a9:b5:55:13:8d:04:66:d4:2d:a1:7a:f8: 26:d1:87:88:8a:c7:03:6a:e2:3e:90:12:ae:20:0e: 46:45:6f:0e:b8:87:a3:fc:8e:94:b9:1f:31:03:62: fe:86:7f:cd:17:cc:4c:8a:97:d3:ec:8c:78:89:6c: 6b:95:01:c0:0a:dd:0d:67:a7:ea:2b:35:fe:af:e1: 4b:f2:7c:68:10:30:e3:28:01:50:5b:b4:24:3d:15: 30:c8:13:ca:87:42:71:a0:21:51:52:dc:29:8b:cc: 5d:be:d4:1a:f9:dd:ad:be:b6:f1:45:08:b7:01:db: a0:e5:8a:ca:3d:58:f6:0a:86:30:da:77:5c:79:d8: 7f:3c:ac:0b:82:f4:2f:e6:c2:9f:bf:67:cb:e9:5a: ef:09:d0:1a:ad:15:c4:4e:72:d3:f0:33:32:c7:8f: d6:c6:fd:8f:42:d6:11:0b:64:ae:ee:4f:b3:d0:94: 19:d5:e1:5f:0d:7c:24:41:54:53:0a:cf:24:1a:31: 0b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A9:21:51:43:66:99:71:DD:0A:8C:50:4D:CE:8F:9D:21:B3:4F:66 X509v3 Authority Key Identifier: keyid:6F:D0:88:7A:39:03:E3:D6:E1:7B:B9:CF:D8:EF:26:92:70:BA:CB:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b9CIejkD49bhe7nP2O8mknC6ywc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8BE3/E6E6BE44BF9C11EF9DA88282C4F9AE02/b9CIejkD49bhe7nP2O8mknC6ywc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:5d:d9:eb:78:9e:bc:c6:af:38:d2:78:63:97:9c:34:e9:90: 71:13:47:e0:f9:c9:9d:e5:48:2d:c4:d2:4a:35:c2:4d:86:e1: 4d:b1:b7:10:d5:22:58:40:3c:d1:ac:b7:d7:5d:c8:ed:11:2a: ba:57:0d:81:82:11:d4:c2:b9:d9:88:3c:ad:0f:e0:70:ef:5c: 37:96:51:20:4d:50:22:46:70:cf:0f:bc:9a:c3:bb:4d:fb:c5: 05:54:71:ce:e5:21:83:b9:d6:fa:4b:e0:27:a9:3f:09:60:12: 89:60:ba:74:f6:f4:34:e1:4a:7f:dc:05:10:73:75:36:a9:0f: 97:c6:dc:fd:af:94:e6:0d:25:21:a2:41:46:e5:ee:b4:71:0f: 3d:ef:c2:6d:92:e8:66:e8:23:c8:ff:b8:4e:e1:00:f6:22:66: 96:e8:37:4c:d0:74:d9:63:cd:68:0c:93:96:8f:d6:d9:36:d2: 73:f2:0e:29:f3:d5:d5:78:38:ec:b2:72:11:2d:f1:d6:dd:5f: c0:77:f2:d7:6d:2e:58:60:ae:2b:5a:f0:c7:61:cd:d1:40:a3: dc:a9:07:f2:75:c4:81:2d:3a:90:d4:f6:16:02:32:14:92:cf: 2c:f1:be:ae:0a:99:0b:d0:d2:eb:0c:18:24:5e:77:fd:4a:76: fe:78:b8:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThCRTMxMTAvBgNVBAUTKDZGRDA4ODdBMzkwM0UzRDZFMTdCQjlDRkQ4RUYyNjky NzBCQUNCMDcwHhcNMjUwODAzMDcxMjM5WhcNMjUwODEwMDcxMjM5WjAYMRYwFAYD VQQDEw02ODhmMGJlNy03OWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pifESziNr9Q2cW8VB5fQ6le/Nmk6pW9A/vEY9bGU2yA1ogsWrcP0HVCZdKz gyDpad3Bl//vK0XtbuHxLfeptVUTjQRm1C2hevgm0YeIiscDauI+kBKuIA5GRW8O uIej/I6UuR8xA2L+hn/NF8xMipfT7Ix4iWxrlQHACt0NZ6fqKzX+r+FL8nxoEDDj KAFQW7QkPRUwyBPKh0JxoCFRUtwpi8xdvtQa+d2tvrbxRQi3Adug5YrKPVj2CoYw 2ndcedh/PKwLgvQv5sKfv2fL6VrvCdAarRXETnLT8DMyx4/Wxv2PQtYRC2Su7k+z 0JQZ1eFfDXwkQVRTCs8kGjEL+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEOpIVFD Zplx3QqMUE3Oj50hs09mMB8GA1UdIwQYMBaAFG/QiHo5A+PW4Xu5z9jvJpJwussH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOEJFMy9FNkU2QkU0NEJG OUMxMUVGOURBODgyODJDNEY5QUUwMi9iOUNJZWprRDQ5YmhlN25QMk84bWtuQzZ5 d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2I5Q0llamtENDliaGU3blAyTzhta25DNnl3Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OEJFMy9FNkU2QkU0NEJGOUMxMUVGOURBODgyODJDNEY5QUUwMi9iOUNJZWprRDQ5 YmhlN25QMk84bWtuQzZ5d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoXdnreJ68xq840nhjl5w06ZBxE0fg+cmd5UgtxNJKNcJNhuFNsbcQ 1SJYQDzRrLfXXcjtESq6Vw2BghHUwrnZiDytD+Bw71w3llEgTVAiRnDPD7yaw7tN +8UFVHHO5SGDudb6S+AnqT8JYBKJYLp09vQ04Up/3AUQc3U2qQ+Xxtz9r5TmDSUh okFG5e60cQ8978Jtkuhm6CPI/7hO4QD2ImaW6DdM0HTZY81oDJOWj9bZNtJz8g4p 89XVeDjssnIRLfHW3V/Ad/LXbS5YYK4rWvDHYc3RQKPcqQfydcSBLTqQ1PYWAjIU ks8s8b6uCpkL0NLrDBgkXnf9Snb+eLip -----END CERTIFICATE-----Generated at Mon Aug 4 11:16:13 2025 by rpki-client