$ rpki-client -vvf rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft File: bbZgfaaV3QngKYA6L_JiWtiDguM.mft (raw, json) Hash identifier: TwH6wNFqG5RwKN02ehggusfI0HNP8rPE4iAeTA6tmNk= Subject key identifier: 3E:CE:DC:4E:CF:56:DC:A5:0E:F0:F2:AB:93:77:19:0A:D8:E9:47:8E Authority key identifier: 6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3 Certificate issuer: /CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3 Certificate serial: A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft Manifest number: 9D Signing time: Mon 21 Jul 2025 06:42:48 +0000 Manifest this update: Mon 21 Jul 2025 06:42:48 +0000 Manifest next update: Mon 28 Jul 2025 06:42:48 +0000 Files and hashes: 1: bbZgfaaV3QngKYA6L_JiWtiDguM.crl (hash: xfwp+WnWflx57MWQNuuYOFO7GPaejBn2GscAn5n9x/g=) 2: F2F0E3FE882E11EFB58CD069C4F9AE02.roa (hash: LLMFfpd/hOZPtrpRcrn1k8tmtQOd8WCmuw0OVbODbIo=) 3: 50A6B6427C6B11EFAB9AB658C4F9AE02.roa (hash: BsH1QXXdR63B8qNDLxP6migCbs5bygzeNgwy6naNCOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:42:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 162 (0xa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91643F8, serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3 Validity Not Before: Jul 21 06:42:48 2025 GMT Not After : Jul 28 06:42:48 2025 GMT Subject: CN=687de168-3e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:2f:8d:65:62:95:3a:3c:3a:ad:0d:2d:bc: f9:2c:72:97:f1:3a:29:71:be:4b:35:fb:08:9d:34: 9b:71:56:2c:76:18:8b:10:fe:64:a1:86:8a:b3:ef: 84:2b:00:06:fb:15:63:b9:1f:d9:85:cd:5a:3d:4d: 35:b5:51:03:2c:a7:e6:d8:c4:89:ed:34:1d:d6:44: 84:94:45:d2:3b:98:7b:ab:9a:b3:99:5d:ce:4a:8e: 5e:e6:2b:54:76:0c:69:6e:09:3f:dd:f5:70:4b:b9: 1d:1e:e5:36:a4:63:02:3a:32:88:14:56:a5:d9:d5: 29:94:57:01:30:c8:50:34:f2:19:db:56:b9:17:cb: 0c:4a:cc:7c:b5:e6:3b:cf:63:86:ca:91:84:b0:2d: 4c:4e:a6:ae:39:b2:ef:89:ac:e4:7f:83:d5:08:92: 94:d0:23:f0:58:6a:79:b0:56:d6:c0:10:52:bc:56: cf:aa:66:3f:f9:50:ba:f5:ef:30:04:4d:ee:22:99: b7:82:4c:26:0e:84:35:8a:c8:8c:5a:9a:0c:0f:58: f2:7c:96:35:55:f4:1a:79:c2:fd:d2:8a:6d:bd:d1: 18:59:fb:3d:59:df:97:db:f1:d5:3c:f9:ad:8e:07: e6:bd:d9:25:ad:06:d3:f9:ea:f8:56:c9:0a:d6:cf: ac:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CE:DC:4E:CF:56:DC:A5:0E:F0:F2:AB:93:77:19:0A:D8:E9:47:8E X509v3 Authority Key Identifier: keyid:6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:7c:c2:41:0f:4a:86:99:f7:bb:70:08:8c:78:90:54:90:95: 38:35:b6:9a:3c:2a:60:ed:09:75:47:71:31:d6:25:1f:f3:e8: 1d:6b:84:ba:a2:56:82:fa:f2:19:6e:72:db:28:61:fe:67:86: 06:3e:4b:a5:37:08:b8:10:8d:4e:30:07:41:b6:50:65:ed:88: ba:71:d5:36:55:7f:6c:67:cc:8f:bc:0d:5a:20:9e:6b:4f:1c: 9a:bc:1b:32:4c:b8:53:20:e8:08:24:1c:37:02:ed:ae:1c:b3: 79:36:6d:04:b2:e1:65:0c:9c:1e:3f:24:75:a1:9d:b6:7c:c1: 51:2f:2e:53:7c:99:5b:b8:4a:a8:e2:c4:e9:2a:0b:57:1a:26: 50:ba:b6:c4:78:98:1b:76:b8:4e:5d:b3:f5:94:1a:d0:71:e5: 48:a5:05:88:25:f2:fd:1c:c6:3a:bf:0f:a8:b5:0b:59:41:73: a0:d6:bd:78:73:a7:fc:50:88:30:9e:ba:f0:f6:44:19:af:d3: c4:62:e6:37:52:da:52:12:46:6c:5d:bb:97:a4:f8:fd:de:8d: c7:62:74:16:52:8c:5c:79:74:c1:cc:33:5e:0a:99:b1:ec:4d: 8b:13:9e:e0:ee:71:55:a2:8e:e4:8e:35:ad:c1:ae:e8:68:30: c9:d3:43:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzRjgxMTAvBgNVBAUTKDZEQjY2MDdEQTY5NUREMDlFMDI5ODAzQTJGRjI2MjVB RDg4MzgyRTMwHhcNMjUwNzIxMDY0MjQ4WhcNMjUwNzI4MDY0MjQ4WjAYMRYwFAYD VQQDEw02ODdkZTE2OC0zZTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu/gvjWVilTo8Oq0NLbz5LHKX8Topcb5LNfsInTSbcVYsdhiLEP5koYaKs++E KwAG+xVjuR/Zhc1aPU01tVEDLKfm2MSJ7TQd1kSElEXSO5h7q5qzmV3OSo5e5itU dgxpbgk/3fVwS7kdHuU2pGMCOjKIFFal2dUplFcBMMhQNPIZ21a5F8sMSsx8teY7 z2OGypGEsC1MTqauObLviazkf4PVCJKU0CPwWGp5sFbWwBBSvFbPqmY/+VC69e8w BE3uIpm3gkwmDoQ1isiMWpoMD1jyfJY1VfQaecL90optvdEYWfs9Wd+X2/HVPPmt jgfmvdklrQbT+er4VskK1s+sxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7O3E7P VtylDvDyq5N3GQrY6UeOMB8GA1UdIwQYMBaAFG22YH2mld0J4CmAOi/yYlrYg4Lj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDNGOC9GNzkwQ0M1QTdD NkExMUVGOUE2ODg4NTdDNEY5QUUwMi9iYlpnZmFhVjNRbmdLWUE2TF9KaVd0aURn dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JiWmdmYWFWM1FuZ0tZQTZMX0ppV3RpRGd1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDNGOC9GNzkwQ0M1QTdDNkExMUVGOUE2ODg4NTdDNEY5QUUwMi9iYlpnZmFhVjNR bmdLWUE2TF9KaVd0aURndU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAfMJBD0qGmfe7cAiMeJBUkJU4NbaaPCpg7Ql1R3Ex1iUf8+gda4S6 olaC+vIZbnLbKGH+Z4YGPkulNwi4EI1OMAdBtlBl7Yi6cdU2VX9sZ8yPvA1aIJ5r TxyavBsyTLhTIOgIJBw3Au2uHLN5Nm0EsuFlDJwePyR1oZ22fMFRLy5TfJlbuEqo 4sTpKgtXGiZQurbEeJgbdrhOXbP1lBrQceVIpQWIJfL9HMY6vw+otQtZQXOg1r14 c6f8UIgwnrrw9kQZr9PEYuY3UtpSEkZsXbuXpPj93o3HYnQWUoxceXTBzDNeCpmx 7E2LE57g7nFVoo7kjjWtwa7oaDDJ00O1 -----END CERTIFICATE-----Generated at Mon Jul 21 08:57:18 2025 by rpki-client