$ rpki-client -vvf rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft File: BXtTd0A4JnigePW_KExyZ5S50TQ.mft (raw, json) Hash identifier: apIFgZnh296DSGWVPZl4L5iJGj9+jVE6HxcSGulQ1c8= Subject key identifier: 9C:42:07:0F:D2:E7:1F:15:70:71:1F:3B:C4:6E:53:72:6E:44:55:79 Authority key identifier: 05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34 Certificate issuer: /CN=A91992FA/serialNumber=057B537740382678A078F5BF284C726794B9D134 Certificate serial: 4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft Manifest number: 4E Signing time: Sat 19 Jul 2025 07:33:09 +0000 Manifest this update: Sat 19 Jul 2025 07:33:08 +0000 Manifest next update: Sat 26 Jul 2025 07:33:08 +0000 Files and hashes: 1: BXtTd0A4JnigePW_KExyZ5S50TQ.crl (hash: 2KVbvdfYGxB0kCfPrz8yuxDX2M0fnwr2Jg3iOk0L8ss=) 2: 44A28FACEFEC11EF80EC123DC4F9AE02.roa (hash: kIHtM5yk/7E77z9qFDfBUJpQm2RMukSPxAc1zKCnuxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79 (0x4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91992FA, serialNumber=057B537740382678A078F5BF284C726794B9D134 Validity Not Before: Jul 19 07:33:08 2025 GMT Not After : Jul 26 07:33:08 2025 GMT Subject: CN=687b4a35-6461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6f:ad:a6:b1:09:44:93:9a:05:c5:78:6b:ff: 9e:66:e6:57:e7:78:35:26:a7:5d:49:e0:ac:1b:23: 57:52:69:30:84:c2:56:d1:2b:62:6c:29:07:51:68: 1d:ef:3e:72:45:44:fd:c4:7d:0c:16:de:73:86:ad: 04:b0:00:53:42:c6:82:fd:9d:37:3d:e8:6f:b3:45: 07:d4:65:fc:75:8d:3c:6c:94:91:e5:ca:ed:5b:0f: fa:f3:50:7d:08:c4:09:56:a5:2b:16:db:66:cd:ad: 34:e3:c5:df:cc:86:d3:fd:0b:9a:b0:13:44:76:55: 8d:23:65:03:0b:75:29:df:e3:d9:d1:ca:6c:86:fe: e2:3a:d7:39:fe:39:df:7a:91:fc:7c:67:e6:98:03: e9:7e:ac:ec:14:71:01:0b:73:34:44:95:97:84:63: 8b:fa:68:ae:82:ed:e4:f9:83:2c:dc:8d:7b:2a:2e: 32:15:f1:ba:3d:87:a7:bb:29:21:2a:6f:b9:ef:c5: 88:dd:05:d9:fe:e5:a9:2d:3b:e4:cd:04:a1:3f:12: 5e:4d:1e:d4:46:b9:22:72:fb:a1:69:6c:6b:af:36: 43:6c:c6:30:b8:d1:f1:ad:5e:3d:c6:e2:a5:85:9d: 34:2f:f8:89:dd:44:0e:25:df:01:88:60:49:19:e2: 99:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:42:07:0F:D2:E7:1F:15:70:71:1F:3B:C4:6E:53:72:6E:44:55:79 X509v3 Authority Key Identifier: keyid:05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:7d:e1:4b:8f:72:1d:81:1c:73:3c:a6:d0:68:39:bb:81:06: d7:f9:7b:21:f0:c2:3f:8a:9f:89:0d:be:77:01:8c:65:74:68: 2a:76:e4:94:d6:e5:ef:cf:3a:75:f2:5a:4a:75:b0:c2:48:10: 4b:f0:e6:5c:b5:f0:c5:94:06:d8:ed:b7:dc:97:1e:d1:ae:c1: ec:c4:aa:23:28:29:7c:84:8f:63:5e:bd:12:0c:b4:cd:b2:8a: 53:f0:b7:41:c0:84:92:13:d2:fd:42:f2:66:d7:7e:fc:da:59: a2:69:dc:a9:75:01:34:dc:ea:81:0b:95:1b:3f:bf:a3:f9:f9: 6c:39:43:ad:dd:be:bf:c8:19:e5:9d:35:82:e2:c5:1e:d7:17: 87:7a:a6:e1:de:3e:6c:13:8e:79:30:a1:81:2e:55:17:18:db: 5a:f3:2b:35:fb:5a:d2:05:34:e4:16:55:30:06:e7:21:fa:fc: df:60:93:d1:1b:8f:14:7d:fe:fe:72:c2:5d:00:2d:5a:16:9a: 54:97:4d:97:3c:a1:7e:92:4b:df:50:f2:a9:ed:54:fa:13:0a: f9:15:0e:86:3a:66:29:ff:df:8a:47:56:cf:57:3b:b2:bf:eb: fe:4a:00:b3:67:14:6b:2c:0c:02:24:cd:5d:cf:8f:4a:5d:13: f1:18:cc:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTJGQTExMC8GA1UEBRMoMDU3QjUzNzc0MDM4MjY3OEEwNzhGNUJGMjg0QzcyNjc5 NEI5RDEzNDAeFw0yNTA3MTkwNzMzMDhaFw0yNTA3MjYwNzMzMDhaMBgxFjAUBgNV BAMTDTY4N2I0YTM1LTY0NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgb62msQlEk5oFxXhr/55m5lfneDUmp11J4KwbI1dSaTCEwlbRK2JsKQdRaB3v PnJFRP3EfQwW3nOGrQSwAFNCxoL9nTc96G+zRQfUZfx1jTxslJHlyu1bD/rzUH0I xAlWpSsW22bNrTTjxd/MhtP9C5qwE0R2VY0jZQMLdSnf49nRymyG/uI61zn+Od96 kfx8Z+aYA+l+rOwUcQELczRElZeEY4v6aK6C7eT5gyzcjXsqLjIV8bo9h6e7KSEq b7nvxYjdBdn+5aktO+TNBKE/El5NHtRGuSJy+6FpbGuvNkNsxjC40fGtXj3G4qWF nTQv+IndRA4l3wGIYEkZ4pl1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnEIHD9Ln HxVwcR87xG5Tcm5EVXkwHwYDVR0jBBgwFoAUBXtTd0A4JnigePW/KExyZ5S50TQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5MkZBL0ZBNDZFMEQyRUUw MzExRUY5QzJCOEE0OUM0RjlBRTAyL0JYdFRkMEE0Sm5pZ2VQV19LRXh5WjVTNTBU US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQlh0VGQwQTRKbmlnZVBXX0tFeHlaNVM1MFRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 MkZBL0ZBNDZFMEQyRUUwMzExRUY5QzJCOEE0OUM0RjlBRTAyL0JYdFRkMEE0Sm5p Z2VQV19LRXh5WjVTNTBUUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADF94UuPch2BHHM8ptBoObuBBtf5eyHwwj+Kn4kNvncBjGV0aCp25JTW 5e/POnXyWkp1sMJIEEvw5ly18MWUBtjtt9yXHtGuwezEqiMoKXyEj2NevRIMtM2y ilPwt0HAhJIT0v1C8mbXfvzaWaJp3Kl1ATTc6oELlRs/v6P5+Ww5Q63dvr/IGeWd NYLixR7XF4d6puHePmwTjnkwoYEuVRcY21rzKzX7WtIFNOQWVTAG5yH6/N9gk9Eb jxR9/v5ywl0ALVoWmlSXTZc8oX6SS99Q8qntVPoTCvkVDoY6Zin/34pHVs9XO7K/ 6/5KALNnFGssDAIkzV3Pj0pdE/EYzJ8= -----END CERTIFICATE-----Generated at Sun Jul 20 23:27:05 2025 by rpki-client