$ rpki-client -vvf rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft File: bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft (raw, json) Hash identifier: UC/+BP0OrIzlod1hh4TmwTIcAhrb7Da5BufshUHyDVA= Subject key identifier: 9F:44:55:CD:F9:E9:89:6B:33:AC:75:7B:45:31:39:45:AB:FD:BB:55 Authority key identifier: 6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 Certificate issuer: /CN=A91A546E/serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Certificate serial: 0930 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft Manifest number: 08FB Signing time: Fri 18 Jul 2025 20:41:29 +0000 Manifest this update: Fri 18 Jul 2025 20:41:29 +0000 Manifest next update: Fri 25 Jul 2025 20:41:29 +0000 Files and hashes: 1: bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl (hash: Gv1ihnYXcQmHCnjeN7UHOwgITRAcn0mFnQRU90VmuNk=) 2: 46948AC87B8511EDB9E3E055C4F9AE02.roa (hash: ZxtXXsjPmgBn3QuaEolbOSfh14MSz6fJKNljAALoKTY=) 3: A69F92BE090911F084AAF925C4F9AE02.roa (hash: JAD+Foc1J+GOz5pKNPlHnr3Zrw5SjVxBWNoZZgDQ44M=) 4: 88252000B55C11ECA9565039C4F9AE02.roa (hash: ROM2aBA2uOLvGraWZ2OMfhtRxZ5DusfnSKSNI9N61E8=) 5: CCBF0CF6B55911EC9256FE19C4F9AE02.roa (hash: J9pnyjCXshJdQFSggqWmHXW0nySYEfDGHTCaX/EZOYk=) 6: CC3B5938B55911EC9256FE19C4F9AE02.roa (hash: Ejx3yVkwMIGPx4PH4VpagQp/pASvV9ahz0Vqhx7EKZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:41:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2352 (0x930) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A546E, serialNumber=6C5A589F924CE9BED1FD89F5AFF630C927574420 Validity Not Before: Jul 18 20:41:29 2025 GMT Not After : Jul 25 20:41:29 2025 GMT Subject: CN=687ab179-daee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:09:f4:2b:b7:53:53:95:5c:0e:56:a2:96:06: de:00:2e:f0:10:c0:d0:aa:11:e0:99:84:e1:d6:d2: 63:11:2c:d1:2d:82:19:28:35:c8:24:0a:ee:95:e5: b2:3e:90:a1:f3:83:ec:59:ef:56:4e:36:b3:85:84: 1c:f9:af:31:34:16:63:13:7a:77:e7:6f:75:1d:4d: 45:5e:67:6a:91:7b:f7:a4:67:eb:0a:2c:0e:3f:e4: dd:38:fe:e2:1a:0c:5f:cb:6b:c5:3b:63:4d:fe:66: 3d:3c:ec:da:de:49:6f:13:23:cc:27:e5:3f:b2:41: 38:0e:f1:13:f4:25:e0:0d:a6:b3:2b:4e:c9:b3:46: 01:7f:50:13:b3:94:f3:73:a2:a0:d3:83:ab:3b:df: bf:32:77:ac:97:48:a1:ad:c7:b7:13:65:5a:85:15: 63:6a:cf:1c:62:e3:14:04:53:9b:b7:01:df:e8:3a: ff:ea:f8:d1:87:8b:b8:3b:15:60:08:e7:9a:2f:5e: a6:87:fc:83:75:51:d3:45:da:44:20:62:ec:4d:dc: 55:81:a1:67:cc:31:98:9d:af:85:c3:de:0c:38:cd: 97:ec:88:0b:1e:2d:bd:dd:fb:44:c2:1e:cc:44:98: f8:b7:6b:d2:61:25:56:99:66:35:c2:e3:ac:b9:28: 5f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:44:55:CD:F9:E9:89:6B:33:AC:75:7B:45:31:39:45:AB:FD:BB:55 X509v3 Authority Key Identifier: keyid:6C:5A:58:9F:92:4C:E9:BE:D1:FD:89:F5:AF:F6:30:C9:27:57:44:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bFpYn5JM6b7R_Yn1r_YwySdXRCA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A546E/0CD41DA8B76A11EA814F5084C4F9AE02/bFpYn5JM6b7R_Yn1r_YwySdXRCA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:64:61:aa:19:0e:fe:d6:6d:b6:e1:d4:1e:77:7f:9c:d8:13: e3:3c:1e:b1:41:77:ee:28:10:9b:76:04:49:d5:d1:70:58:d8: 26:7d:10:69:cc:3e:fc:c2:1c:45:a1:f2:40:89:88:a4:14:cb: 3f:10:e5:00:ed:68:1e:f8:fa:50:25:9a:30:81:35:cb:e9:c7: d7:1c:4b:77:9e:bb:da:4b:c9:f0:b5:47:ed:af:29:be:24:1b: 3f:f7:c2:f2:9e:85:ea:cc:9d:0e:78:04:d3:ec:5f:51:1d:36: 0f:c9:03:f4:e0:27:49:18:11:e9:ff:00:7b:6a:bb:be:1a:0a: 52:c5:ff:25:f9:3f:50:ff:75:ed:01:1d:46:3c:81:dd:02:06: 34:03:c8:66:04:bc:f4:5b:95:87:2c:5e:0c:b4:2c:78:80:f6: c4:b0:03:9b:d5:7d:19:f2:f8:27:24:f0:a7:21:b9:d0:42:ac: a1:4b:fa:69:70:e1:c8:0e:96:0a:ec:5f:40:7d:62:fb:2c:2d: 55:6d:02:b8:a4:9b:6f:af:ed:77:8f:77:13:3d:f2:76:49:e5: ac:99:5b:e8:ac:e9:bb:c8:bb:03:1e:b4:f8:43:f1:fc:0c:91: 9f:78:92:17:e2:3b:80:d1:74:e9:f4:e3:8f:4a:6a:88:a8:7d: ce:06:ab:58 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0NkUxMTAvBgNVBAUTKDZDNUE1ODlGOTI0Q0U5QkVEMUZEODlGNUFGRjYzMEM5 Mjc1NzQ0MjAwHhcNMjUwNzE4MjA0MTI5WhcNMjUwNzI1MjA0MTI5WjAYMRYwFAYD VQQDEw02ODdhYjE3OS1kYWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoAn0K7dTU5VcDlailgbeAC7wEMDQqhHgmYTh1tJjESzRLYIZKDXIJAruleWy PpCh84PsWe9WTjazhYQc+a8xNBZjE3p35291HU1FXmdqkXv3pGfrCiwOP+TdOP7i Ggxfy2vFO2NN/mY9POza3klvEyPMJ+U/skE4DvET9CXgDaazK07Js0YBf1ATs5Tz c6Kg04OrO9+/Mnesl0ihrce3E2VahRVjas8cYuMUBFObtwHf6Dr/6vjRh4u4OxVg COeaL16mh/yDdVHTRdpEIGLsTdxVgaFnzDGYna+Fw94MOM2X7IgLHi293ftEwh7M RJj4t2vSYSVWmWY1wuOsuShf7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ9EVc35 6YlrM6x1e0UxOUWr/btVMB8GA1UdIwQYMBaAFGxaWJ+STOm+0f2J9a/2MMknV0Qg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTQ2RS8wQ0Q0MURBOEI3 NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZiN1JfWW4xcl9Zd3lTZFhS Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JGcFluNUpNNmI3Ul9ZbjFyX1l3eVNkWFJDQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTQ2RS8wQ0Q0MURBOEI3NkExMUVBODE0RjUwODRDNEY5QUUwMi9iRnBZbjVKTTZi N1JfWW4xcl9Zd3lTZFhSQ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhZGGqGQ7+1m224dQed3+c2BPjPB6xQXfuKBCbdgRJ1dFwWNgmfRBp zD78whxFofJAiYikFMs/EOUA7Wge+PpQJZowgTXL6cfXHEt3nrvaS8nwtUftrym+ JBs/98LynoXqzJ0OeATT7F9RHTYPyQP04CdJGBHp/wB7aru+GgpSxf8l+T9Q/3Xt AR1GPIHdAgY0A8hmBLz0W5WHLF4MtCx4gPbEsAOb1X0Z8vgnJPCnIbnQQqyhS/pp cOHIDpYK7F9AfWL7LC1VbQK4pJtvr+13j3cTPfJ2SeWsmVvorOm7yLsDHrT4Q/H8 DJGfeJIX4juA0XTp9OOPSmqIqH3OBqtY -----END CERTIFICATE-----Generated at Sun Jul 20 07:39:36 2025 by rpki-client