$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft File: bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json) Hash identifier: T61FXMwTU0vADBEa+DYu2uFud0+p7IMI0nGpchRI574= Subject key identifier: 45:6A:74:90:5D:26:48:27:0A:F2:D6:C7:62:32:47:DF:E3:34:72:DE Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 0372 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft Manifest number: 0346 Signing time: Sat 09 Aug 2025 01:42:23 +0000 Manifest this update: Sat 09 Aug 2025 01:42:23 +0000 Manifest next update: Sat 16 Aug 2025 01:42:23 +0000 Files and hashes: 1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: P41UkYPvkb3C0LhvpQ++rVg9Ae83i4w1wlRFdegJeUo=) 2: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: PsC0/VUJuwAMkmEBhdJkaydKW8CflQBB5EZOYU0cJtQ=) 3: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: /TyJbdztz4Y61/Gz2zhowON+Tt9+b5wqgCKpbZ339lw=) 4: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: SwY/Crs5L/QLrOTdNtWGBh9zEFcoCIW07axxQKOSACI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 882 (0x372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: Aug 9 01:42:23 2025 GMT Not After : Aug 16 01:42:23 2025 GMT Subject: CN=6896a77f-9e32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a4:88:b1:98:ae:97:9f:ed:6c:2b:d5:6c:1e: ae:c9:0a:b6:0f:1a:73:b0:0a:dc:47:1f:90:52:e9: cc:49:be:b6:c3:c4:91:98:33:07:56:38:80:72:8d: ca:80:90:90:c2:c4:92:1d:b4:f6:cb:80:33:db:c8: 08:ad:f2:51:a9:1b:3e:3a:f7:bf:94:8f:72:93:07: ef:6e:b9:52:81:d4:7c:5b:1c:c8:8d:27:14:4d:6f: 39:40:24:39:e0:f1:d2:fa:e7:d2:9b:e1:56:73:5a: 99:17:76:b9:f9:80:2d:10:81:0d:22:69:42:91:7c: 03:20:9d:a9:7e:b2:f3:8d:b0:85:f0:6e:e3:7d:45: bc:03:bb:4c:29:08:00:a3:db:bb:6e:19:a5:21:95: 23:a0:22:6a:17:fe:ad:ae:e7:a9:a2:3a:23:35:a0: 11:72:01:6b:4d:ec:34:b4:93:45:a0:69:e3:04:4c: b9:fd:9b:9e:b2:0a:61:18:f0:85:ef:cb:61:5c:b2: 00:cf:9c:28:54:50:a3:e3:d8:e0:a7:9d:27:d4:6c: 82:13:a2:ec:01:c7:18:a5:86:5b:fb:34:ca:8e:fe: dc:52:2f:ad:bd:4f:f0:27:8f:30:f4:15:79:10:f7: 08:47:ab:79:b4:00:3e:2a:a1:d8:45:2d:0f:6e:3f: 1a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6A:74:90:5D:26:48:27:0A:F2:D6:C7:62:32:47:DF:E3:34:72:DE X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:0e:7b:54:a7:6d:2d:9d:09:c7:50:05:62:85:6a:6a:14:2a: f4:b1:39:46:c6:40:ab:12:e2:75:3c:e2:79:e5:03:9c:6a:dc: 9d:d2:91:c3:2f:12:01:fa:df:a1:bb:5e:ea:f0:5b:ed:4f:02: ca:37:47:c1:b2:ad:73:88:a3:95:b5:ee:40:72:20:a5:46:5c: 52:48:01:ac:38:6c:ec:c7:fb:f8:45:d9:84:47:0a:9a:84:eb: 0d:81:75:59:2c:f9:47:17:b2:63:ea:a1:a2:09:c7:37:d9:93: 5c:c2:4c:6e:db:52:d2:c1:04:33:5e:c9:fd:df:d0:cd:9f:ff: 7d:48:cc:18:ef:3c:68:a8:85:f3:a8:d0:9d:7b:da:9a:b3:7d: 77:62:d3:9c:fa:07:16:ed:6c:7d:d3:88:46:20:df:ea:d1:20: 3c:bd:53:c7:99:e6:5e:94:b3:89:d6:7e:b0:b3:ab:e7:42:06: 01:9f:62:82:30:5a:60:9b:36:b8:bb:89:de:9d:ca:92:1a:2c: 68:25:aa:37:65:c9:97:d6:6b:cd:a3:48:a2:a5:9d:a0:e7:52: 64:a8:ee:bf:ff:dd:bd:90:08:48:b4:0a:34:e8:d4:fb:64:f4: 40:8b:9a:a5:05:e7:46:0b:fa:76:75:8a:c5:6f:d4:a9:6d:2e: 8e:bc:04:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjUwODA5MDE0MjIzWhcNMjUwODE2MDE0MjIzWjAYMRYwFAYD VQQDEw02ODk2YTc3Zi05ZTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKSIsZiul5/tbCvVbB6uyQq2DxpzsArcRx+QUunMSb62w8SRmDMHVjiAco3K gJCQwsSSHbT2y4Az28gIrfJRqRs+Ove/lI9ykwfvbrlSgdR8WxzIjScUTW85QCQ5 4PHS+ufSm+FWc1qZF3a5+YAtEIENImlCkXwDIJ2pfrLzjbCF8G7jfUW8A7tMKQgA o9u7bhmlIZUjoCJqF/6truepojojNaARcgFrTew0tJNFoGnjBEy5/ZuesgphGPCF 78thXLIAz5woVFCj49jgp50n1GyCE6LsAccYpYZb+zTKjv7cUi+tvU/wJ48w9BV5 EPcIR6t5tAA+KqHYRS0Pbj8a8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEVqdJBd JkgnCvLWx2IyR9/jNHLeMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTFCQy9BRTQ0RDI0QURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFpl aXYyaWpDenFZVkFTY0RoZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSDntUp20tnQnHUAVihWpqFCr0sTlGxkCrEuJ1POJ55QOcatyd0pHD LxIB+t+hu17q8FvtTwLKN0fBsq1ziKOVte5AciClRlxSSAGsOGzsx/v4RdmERwqa hOsNgXVZLPlHF7Jj6qGiCcc32ZNcwkxu21LSwQQzXsn939DNn/99SMwY7zxoqIXz qNCde9qas313YtOc+gcW7Wx904hGIN/q0SA8vVPHmeZelLOJ1n6ws6vnQgYBn2KC MFpgmza4u4nencqSGixoJao3ZcmX1mvNo0iipZ2g51JkqO6//929kAhItAo06NT7 ZPRAi5qlBedGC/p2dYrFb9SpbS6OvASn -----END CERTIFICATE-----Generated at Sun Aug 10 18:17:14 2025 by rpki-client