$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft File: bBH4O5qMvdIVMt3w6mHek4jRPGs.mft (raw, json) Hash identifier: ALb2CL3Oc4yoHDzW3ABt4OwGElv6frgD2tfuBFgopXA= Subject key identifier: 77:EF:38:F5:0E:30:37:3E:65:5C:AD:47:05:90:30:88:E0:80:D1:09 Authority key identifier: 6C:11:F8:3B:9A:8C:BD:D2:15:32:DD:F0:EA:61:DE:93:88:D1:3C:6B Certificate issuer: /CN=A917D958/serialNumber=6C11F83B9A8CBDD21532DDF0EA61DE9388D13C6B Certificate serial: 74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft Manifest number: 74 Signing time: Sat 19 Jul 2025 07:05:17 +0000 Manifest this update: Sat 19 Jul 2025 07:05:16 +0000 Manifest next update: Sat 26 Jul 2025 07:05:16 +0000 Files and hashes: 1: bBH4O5qMvdIVMt3w6mHek4jRPGs.crl (hash: VrFz6f9FO/V3rQAToqOnuTa/IJbD4x4JC2Uhbpc85Eg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.crl rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=6C11F83B9A8CBDD21532DDF0EA61DE9388D13C6B Validity Not Before: Jul 19 07:05:16 2025 GMT Not After : Jul 26 07:05:16 2025 GMT Subject: CN=687b43ac-fde9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:d9:8a:f1:e3:56:e9:c5:ff:62:50:33:08: b1:aa:73:8d:a8:5f:77:a6:d6:c5:5e:48:6d:c2:ef: 76:70:d7:b0:ef:52:12:50:b0:c6:18:2d:7d:a7:c0: b2:39:04:74:9c:86:a2:5b:c3:2b:ca:7c:bd:8e:a3: e4:17:80:84:a2:47:8a:73:76:5d:8f:60:83:6a:fb: 18:c9:21:ed:11:92:9c:05:f0:3c:61:e6:09:1d:8f: 9a:2a:5c:09:64:ef:04:86:19:7a:08:02:23:59:10: 9d:41:f9:f8:e4:7d:0c:75:ec:bb:f6:d1:44:09:d2: 92:09:91:e6:8e:e3:95:d3:ab:7e:b5:89:1e:e9:fb: d1:e5:34:b3:80:f3:39:27:c6:f8:5c:e2:b6:3c:3e: cb:a9:38:aa:3b:1a:4a:ae:ba:dc:e4:d7:7d:71:b4: 8e:95:9b:06:09:90:31:21:1a:21:b7:9e:ac:57:2a: 05:e4:b3:fc:bb:74:81:f4:8e:47:10:42:e4:ed:c8: 82:2c:d7:0f:01:4d:14:16:5c:94:b8:26:82:20:35: f3:a8:0f:11:ea:53:18:de:a4:36:f6:d0:31:9e:0c: bf:b6:58:ed:05:70:53:59:df:64:f6:61:9f:f4:ad: 35:30:da:72:0b:d7:0b:08:34:20:2a:bf:f0:d4:ca: 4c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EF:38:F5:0E:30:37:3E:65:5C:AD:47:05:90:30:88:E0:80:D1:09 X509v3 Authority Key Identifier: keyid:6C:11:F8:3B:9A:8C:BD:D2:15:32:DD:F0:EA:61:DE:93:88:D1:3C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:9b:e6:34:3f:d0:3d:d7:b8:0e:ac:c3:1b:c5:ab:80:e0:63: 89:1d:b0:f5:d1:70:3c:f8:98:0a:87:1b:d2:db:e5:c5:46:fe: 75:1e:c8:9e:48:7a:47:93:3e:1b:31:c1:cb:c5:f8:cb:4d:9e: 15:58:b3:dd:89:e0:75:a1:57:9d:fe:d8:84:3e:e7:59:3d:c7: 2e:55:4f:08:10:74:2d:c8:33:f1:4c:bd:fa:54:e9:19:5a:ae: 7e:aa:72:b7:c3:2c:59:65:8c:ef:e7:09:10:ba:53:28:e7:18: 61:2e:89:40:d0:e7:16:92:1b:bb:9f:bc:49:80:64:7d:85:92: 1d:f8:de:d4:1d:4e:d0:b1:27:9f:e8:b0:ce:5c:43:9c:4f:59: b2:2c:05:4c:f9:ac:31:65:59:b3:2a:5a:69:af:16:1e:b0:7a: 0d:b8:ed:a2:8b:dd:fc:09:76:5a:7a:a0:34:5c:a1:d9:1b:11: 93:39:54:6b:5d:92:a9:9a:69:29:da:8f:ac:8d:6e:8e:bb:ea: a8:92:38:6e:35:12:fc:a7:ce:24:45:3e:84:1d:f3:83:97:1f: 2a:1b:5a:b5:5a:28:ab:6a:b4:35:cf:6b:94:56:cc:53:3d:aa: 07:de:d2:c3:17:d2:e8:d7:41:48:03:ba:d3:db:4d:0c:d4:ce: 3d:43:21:51 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RDk1ODExMC8GA1UEBRMoNkMxMUY4M0I5QThDQkREMjE1MzJEREYwRUE2MURFOTM4 OEQxM0M2QjAeFw0yNTA3MTkwNzA1MTZaFw0yNTA3MjYwNzA1MTZaMBgxFjAUBgNV BAMTDTY4N2I0M2FjLWZkZTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMENmK8eNW6cX/YlAzCLGqc42oX3em1sVeSG3C73Zw17DvUhJQsMYYLX2nwLI5 BHSchqJbwyvKfL2Oo+QXgISiR4pzdl2PYINq+xjJIe0RkpwF8Dxh5gkdj5oqXAlk 7wSGGXoIAiNZEJ1B+fjkfQx17Lv20UQJ0pIJkeaO45XTq361iR7p+9HlNLOA8zkn xvhc4rY8PsupOKo7Gkquutzk131xtI6VmwYJkDEhGiG3nqxXKgXks/y7dIH0jkcQ QuTtyIIs1w8BTRQWXJS4JoIgNfOoDxHqUxjepDb20DGeDL+2WO0FcFNZ32T2YZ/0 rTUw2nIL1wsINCAqv/DUyky3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd+849Q4w Nz5lXK1HBZAwiOCA0QkwHwYDVR0jBBgwFoAUbBH4O5qMvdIVMt3w6mHek4jRPGsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdEOTU4LzZGNjI4Mzg4QjM5 QjExRUY4MEY2NDM1RUM0RjlBRTAyL2JCSDRPNXFNdmRJVk10M3c2bUhlazRqUlBH cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkJINE81cU12ZElWTXQzdzZtSGVrNGpSUEdzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE OTU4LzZGNjI4Mzg4QjM5QjExRUY4MEY2NDM1RUM0RjlBRTAyL2JCSDRPNXFNdmRJ Vk10M3c2bUhlazRqUlBHcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAISb5jQ/0D3XuA6swxvFq4DgY4kdsPXRcDz4mAqHG9Lb5cVG/nUeyJ5I ekeTPhsxwcvF+MtNnhVYs92J4HWhV53+2IQ+51k9xy5VTwgQdC3IM/FMvfpU6Rla rn6qcrfDLFlljO/nCRC6UyjnGGEuiUDQ5xaSG7ufvEmAZH2Fkh343tQdTtCxJ5/o sM5cQ5xPWbIsBUz5rDFlWbMqWmmvFh6weg247aKL3fwJdlp6oDRcodkbEZM5VGtd kqmaaSnaj6yNbo676qiSOG41EvynziRFPoQd84OXHyobWrVaKKtqtDXPa5RWzFM9 qgfe0sMX0ujXQUgDutPbTQzUzj1DIVE= -----END CERTIFICATE-----Generated at Sun Jul 20 10:48:34 2025 by rpki-client