$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft File: 1bScAI9ih18VJth200lAoJsOnW0.mft (raw, json) Hash identifier: 0XjY4DEG4TV0qwOys2Mg41N+Pdgc1ITBijQVuIR11E4= Subject key identifier: 5F:FD:2A:B3:F0:EA:28:36:71:DA:C5:31:B8:74:10:33:22:B0:C7:88 Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D Certificate issuer: /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D Certificate serial: 1570 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft Manifest number: 155E Signing time: Fri 08 Aug 2025 16:57:15 +0000 Manifest this update: Fri 08 Aug 2025 16:57:14 +0000 Manifest next update: Fri 15 Aug 2025 16:57:14 +0000 Files and hashes: 1: 1bScAI9ih18VJth200lAoJsOnW0.crl (hash: gjzHFcVRAiH3pPJEtCPknQln15AbB5KMaTr5ZiTRN0o=) 2: EC796D6C42D411E88EC29742C4F9AE02.roa (hash: fttFYbQ36BNhaDw4KkKJxxNjWTmLtF2Lj6rIn6jBjOw=) 3: EB843B92329A11EE89CD8544C4F9AE02.roa (hash: 1pX1xgZiUndMELmZkTsenLOVPD7ayPzn9r1F8xRSN8U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5488 (0x1570) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D Validity Not Before: Aug 8 16:57:14 2025 GMT Not After : Aug 15 16:57:14 2025 GMT Subject: CN=68962c6a-527d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ec:b9:5a:cb:ec:32:a5:10:0e:33:75:eb:7a: a6:30:17:56:33:0b:45:d5:f9:84:05:fa:c2:96:17: 86:c2:5e:f6:fc:e2:14:e8:c9:90:06:ef:06:67:b7: b5:62:93:51:85:2e:20:36:28:f8:a0:0f:be:19:9b: c4:41:7e:4d:ae:88:50:31:5a:db:6a:6d:fc:73:81: 89:45:06:e7:39:16:2e:b0:18:09:f6:ed:9e:28:98: fe:6c:c8:cb:11:bd:07:77:14:3e:84:a1:ad:82:2f: 98:7b:2a:22:7b:8c:74:bf:ca:7b:03:e8:46:55:56: 13:a8:34:b7:e2:39:0e:19:8e:98:4d:29:b4:b6:2a: fa:30:7d:4a:c5:b8:41:10:ed:10:13:4c:d9:58:1c: 6d:2f:14:4f:de:24:17:00:3e:12:8b:2b:d0:8a:16: f6:bd:fd:a5:5c:3b:f9:63:36:44:a6:38:d3:7a:d9: d6:5d:86:e3:d3:4e:96:26:16:a9:2e:7d:4a:5b:c9: 5a:3c:f4:00:7b:6e:0d:d6:93:89:4a:83:dc:e6:1a: f6:dd:28:32:5d:23:86:30:d9:9b:05:01:f9:ce:78: 79:3c:64:d1:6d:8f:72:24:3c:e2:29:47:58:6a:16: 8a:21:3c:63:75:fb:02:62:28:e9:f0:f5:e9:58:f2: 34:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FD:2A:B3:F0:EA:28:36:71:DA:C5:31:B8:74:10:33:22:B0:C7:88 X509v3 Authority Key Identifier: keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:87:c9:ca:2a:f7:9e:88:bc:41:6d:83:09:57:08:ff:da:00: 2d:77:80:04:31:4a:b4:8a:19:75:62:f6:c9:42:70:47:c5:bf: b9:7d:5c:ea:fc:2f:34:11:75:f1:29:48:a9:d8:16:a6:63:53: be:32:9a:f3:56:3d:ec:8d:1e:47:01:f4:b1:e7:c3:fa:8b:f4: 36:f0:e6:8a:21:17:b0:db:a8:0f:da:d7:f4:15:20:dd:ba:e8: 1d:02:6a:6e:b8:b9:03:17:26:fb:ab:1f:3c:e6:ab:44:2e:1a: 48:e2:ee:bc:91:90:04:e5:fb:45:d7:c9:36:bf:96:fd:96:94: 61:a9:0f:49:7c:8e:6b:89:7e:77:35:e1:83:48:02:c1:7e:fe: 0b:99:cd:e7:14:08:b3:9c:e5:a3:8b:99:5a:a9:72:53:6b:ca: c2:2d:3e:3e:a6:e1:cd:fe:ca:ff:8e:e7:fe:c3:83:33:c2:7e: f5:85:97:f9:f3:0a:d4:d2:6f:7f:d6:d5:6d:0a:1a:37:38:24: b4:e8:25:0d:fd:b1:5c:a7:70:28:0e:56:c1:60:d0:3d:b3:24: 0d:9a:99:f6:ec:5d:0b:02:b9:ca:8e:5f:48:da:25:2d:65:64: fc:3a:87:12:3f:b1:a8:90:83:71:b5:0c:80:e3:7c:b7:e5:9f: 40:8b:c3:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkI0MzQxMTAvBgNVBAUTKEQ1QjQ5QzAwOEY2Mjg3NUYxNTI2RDg3NkQzNDk0MEEw OUIwRTlENkQwHhcNMjUwODA4MTY1NzE0WhcNMjUwODE1MTY1NzE0WjAYMRYwFAYD VQQDEw02ODk2MmM2YS01MjdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0uy5WsvsMqUQDjN163qmMBdWMwtF1fmEBfrClheGwl72/OIU6MmQBu8GZ7e1 YpNRhS4gNij4oA++GZvEQX5NrohQMVrbam38c4GJRQbnORYusBgJ9u2eKJj+bMjL Eb0HdxQ+hKGtgi+Yeyoie4x0v8p7A+hGVVYTqDS34jkOGY6YTSm0tir6MH1KxbhB EO0QE0zZWBxtLxRP3iQXAD4SiyvQihb2vf2lXDv5YzZEpjjTetnWXYbj006WJhap Ln1KW8laPPQAe24N1pOJSoPc5hr23SgyXSOGMNmbBQH5znh5PGTRbY9yJDziKUdY ahaKITxjdfsCYijp8PXpWPI0kQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF/9KrPw 6ig2cdrFMbh0EDMisMeIMB8GA1UdIwQYMBaAFNW0nACPYodfFSbYdtNJQKCbDp1t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjQzNC9FMkM2MjY3NjQy RDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgxOFZKdGgyMDBsQW9Kc09u VzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFiU2NBSTlpaDE4Vkp0aDIwMGxBb0pzT25XMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjQzNC9FMkM2MjY3NjQyRDMxMUU4QkJEQzA5NDFDNEY5QUUwMi8xYlNjQUk5aWgx OFZKdGgyMDBsQW9Kc09uVzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPh8nKKveeiLxBbYMJVwj/2gAtd4AEMUq0ihl1YvbJQnBHxb+5fVzq /C80EXXxKUip2BamY1O+MprzVj3sjR5HAfSx58P6i/Q28OaKIRew26gP2tf0FSDd uugdAmpuuLkDFyb7qx885qtELhpI4u68kZAE5ftF18k2v5b9lpRhqQ9JfI5riX53 NeGDSALBfv4Lmc3nFAiznOWji5laqXJTa8rCLT4+puHN/sr/juf+w4Mzwn71hZf5 8wrU0m9/1tVtCho3OCS06CUN/bFcp3AoDlbBYNA9syQNmpn27F0LArnKjl9I2iUt ZWT8OocSP7GokINxtQyA43y35Z9Ai8Ne -----END CERTIFICATE-----Generated at Fri Aug 8 19:39:15 2025 by rpki-client