$ rpki-client -vvf rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft File: bywgdVh2TqtQ74UGb3hZDOWxxWE.mft (raw, json) Hash identifier: f53ITkU5Z6nynA5hiIxndsiSCCzs9VXY5OvxE35j3sw= Subject key identifier: 37:5B:82:0A:13:4D:EA:04:50:AF:58:FF:40:36:A1:0A:65:68:47:38 Authority key identifier: 6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 Certificate issuer: /CN=A91995D5/serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Certificate serial: 10BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft Manifest number: 10B3 Signing time: Fri 18 Jul 2025 17:28:51 +0000 Manifest this update: Fri 18 Jul 2025 17:28:50 +0000 Manifest next update: Fri 25 Jul 2025 17:28:50 +0000 Files and hashes: 1: bywgdVh2TqtQ74UGb3hZDOWxxWE.crl (hash: gHSqqy2ZlLELeivpgjiNG2AGUCuvUewa9Suj9NKHviU=) 2: ADA9DA3C2AAE11E9BEFAEF4EC4F9AE02.roa (hash: NcGX1+0f22h9EnvK4Hf3V559zCSmDIlERyuyLCtuDE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4283 (0x10bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91995D5, serialNumber=6F2C207558764EAB50EF85066F78590CE5B1C561 Validity Not Before: Jul 18 17:28:50 2025 GMT Not After : Jul 25 17:28:50 2025 GMT Subject: CN=687a8452-f98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:58:d9:d2:d5:86:e4:35:1c:ce:ee:53:23:37: 65:fa:06:50:d0:a8:f2:b4:2e:81:c3:88:4a:53:24: ae:79:92:9c:28:f1:d2:84:0f:0e:32:c4:74:56:df: ab:d9:37:c4:04:b3:1c:34:ef:42:bd:49:a0:8d:f8: 0d:95:4e:10:ea:21:4c:d3:d3:6e:51:40:f5:e3:87: d7:3f:76:35:57:58:d9:5c:5e:c3:34:7e:1d:1f:22: e4:02:6b:8c:3e:29:c0:bc:88:11:71:a4:a2:f1:65: 14:cc:36:f5:fd:d5:3b:3b:5f:04:f1:c0:b1:b0:48: 96:36:8b:4d:78:f5:da:75:8b:bd:1f:02:78:89:c9: 38:d3:f1:d9:fc:5b:d7:c7:9d:e6:55:34:08:65:2c: c1:c2:52:67:78:cb:16:64:4d:a4:84:49:e9:57:19: 37:8f:61:6e:de:ef:ed:2c:c0:ff:7f:64:bc:8e:23: 0c:df:0c:c5:93:bf:a3:1f:c1:49:1c:f6:4f:c6:4e: 25:37:07:24:7a:64:10:08:eb:14:f7:e2:c7:87:4b: 37:78:9b:80:4c:d0:08:b8:1b:0f:f7:7e:fc:fc:19: c8:1d:5b:d5:aa:e1:6d:3e:1c:8c:db:3f:74:14:44: a5:dc:c0:0a:e5:24:bd:15:4a:16:1b:fb:a4:ff:34: be:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5B:82:0A:13:4D:EA:04:50:AF:58:FF:40:36:A1:0A:65:68:47:38 X509v3 Authority Key Identifier: keyid:6F:2C:20:75:58:76:4E:AB:50:EF:85:06:6F:78:59:0C:E5:B1:C5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bywgdVh2TqtQ74UGb3hZDOWxxWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91995D5/163B1E7C2AAE11E9AA574E4EC4F9AE02/bywgdVh2TqtQ74UGb3hZDOWxxWE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:cc:47:f7:a4:24:35:35:80:55:b6:39:34:01:94:70:6f:d0: 5d:6d:5e:fd:f8:12:58:8e:97:ed:43:55:2b:c5:70:7f:81:e1: a4:22:52:c2:0d:ba:e1:d3:dc:04:c7:38:bb:41:cb:a2:2a:73: cb:16:22:6c:17:1b:6b:67:fa:c6:83:4e:e0:71:51:b3:d0:e7: cf:7f:82:ab:26:c5:ef:32:5c:d7:9a:1a:93:a7:65:02:d1:91: 07:f4:aa:88:b3:01:34:26:9c:0a:1f:e9:2e:7b:86:53:fe:f1: 9f:5e:09:08:a0:92:67:d7:8f:fb:09:e7:ac:a5:43:a0:1b:4c: 3d:51:57:0e:13:73:1a:ee:b1:fe:85:30:57:46:de:aa:89:65: 31:e3:fc:97:eb:75:ef:6f:bd:10:7e:4c:01:8e:7c:29:9f:61: 41:bc:35:af:90:83:45:81:d9:5c:f0:fc:bd:f7:c5:0d:de:2e: 29:b4:36:ee:ac:b8:66:a8:25:85:99:ae:fd:ce:c5:4f:72:4a: 56:83:72:68:54:8c:cb:6d:8f:0c:ff:d8:f3:f1:38:0a:0a:84: 20:84:ea:22:1a:75:8c:09:fd:2a:64:21:5d:6e:c1:0c:4d:c0: b8:81:46:c5:4f:fe:c0:44:e2:08:e1:1d:e5:5e:ec:aa:6d:2a: 6e:18:46:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICELswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTk1RDUxMTAvBgNVBAUTKDZGMkMyMDc1NTg3NjRFQUI1MEVGODUwNjZGNzg1OTBD RTVCMUM1NjEwHhcNMjUwNzE4MTcyODUwWhcNMjUwNzI1MTcyODUwWjAYMRYwFAYD VQQDEw02ODdhODQ1Mi1mOThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVjZ0tWG5DUczu5TIzdl+gZQ0KjytC6Bw4hKUySueZKcKPHShA8OMsR0Vt+r 2TfEBLMcNO9CvUmgjfgNlU4Q6iFM09NuUUD144fXP3Y1V1jZXF7DNH4dHyLkAmuM PinAvIgRcaSi8WUUzDb1/dU7O18E8cCxsEiWNotNePXadYu9HwJ4ick40/HZ/FvX x53mVTQIZSzBwlJneMsWZE2khEnpVxk3j2Fu3u/tLMD/f2S8jiMM3wzFk7+jH8FJ HPZPxk4lNwckemQQCOsU9+LHh0s3eJuATNAIuBsP9378/BnIHVvVquFtPhyM2z90 FESl3MAK5SS9FUoWG/uk/zS+WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdbggoT TeoEUK9Y/0A2oQplaEc4MB8GA1UdIwQYMBaAFG8sIHVYdk6rUO+FBm94WQzlscVh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTVENS8xNjNCMUU3QzJB QUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRxdFE3NFVHYjNoWkRPV3h4 V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5d2dkVmgyVHF0UTc0VUdiM2haRE9XeHhXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OTVENS8xNjNCMUU3QzJBQUUxMUU5QUE1NzRFNEVDNEY5QUUwMi9ieXdnZFZoMlRx dFE3NFVHYjNoWkRPV3h4V0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgzEf3pCQ1NYBVtjk0AZRwb9BdbV79+BJYjpftQ1UrxXB/geGkIlLC Dbrh09wExzi7QcuiKnPLFiJsFxtrZ/rGg07gcVGz0OfPf4KrJsXvMlzXmhqTp2UC 0ZEH9KqIswE0JpwKH+kue4ZT/vGfXgkIoJJn14/7CeespUOgG0w9UVcOE3Ma7rH+ hTBXRt6qiWUx4/yX63Xvb70QfkwBjnwpn2FBvDWvkINFgdlc8Py998UN3i4ptDbu rLhmqCWFma79zsVPckpWg3JoVIzLbY8M/9jz8TgKCoQghOoiGnWMCf0qZCFdbsEM TcC4gUbFT/7AROII4R3lXuyqbSpuGEbh -----END CERTIFICATE-----Generated at Sun Jul 20 03:11:45 2025 by rpki-client