$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft File: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft (raw, json) Hash identifier: UkGTVdqzVcUcrK7BR/ALLrjOnFZXWPr1YQjBzTpM+zQ= Subject key identifier: E3:0C:1F:FA:3B:3F:13:27:17:DD:02:39:49:65:E2:36:EE:56:54:D7 Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD Certificate issuer: /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Certificate serial: 0A51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft Manifest number: 0A32 Signing time: Thu 31 Jul 2025 20:38:24 +0000 Manifest this update: Thu 31 Jul 2025 20:38:23 +0000 Manifest next update: Thu 07 Aug 2025 20:38:23 +0000 Files and hashes: 1: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl (hash: FTsXkPGbMLi3i/M+fNeyDDFEMxhsTIa87J06djrD8sk=) 2: 59E4B0A81B9211F0A5D50649C4F9AE02.roa (hash: 4uAphyYn6AbiifiDtaxCom6jwozyhzmoBVY1cw2irI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 20:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2641 (0xa51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0F3F, serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Validity Not Before: Jul 31 20:38:23 2025 GMT Not After : Aug 7 20:38:23 2025 GMT Subject: CN=688bd43f-a32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ab:46:a0:c5:a5:1d:74:f2:1e:16:55:a9:44: 60:a2:44:40:bf:19:b2:af:7b:43:ef:5d:a4:d6:76: b7:16:f4:27:d7:b6:b2:1f:51:39:a9:8d:74:bb:44: 59:47:af:dc:9d:4f:27:52:46:2c:60:da:92:3f:c9: b9:69:c5:fb:fd:15:e0:be:74:80:cb:e0:f7:7c:2e: 1c:c1:f9:05:3d:da:92:e3:ba:bf:8d:e7:ab:9b:fc: d9:38:b4:1d:33:8d:73:29:8e:25:67:e9:fc:28:cf: 3b:c9:c9:ff:5e:a5:9d:1e:35:ed:ad:cf:8c:c7:e2: b4:fd:86:6c:54:58:26:d2:a0:a7:f1:bf:85:af:0d: bf:79:7d:75:76:9e:ec:8a:b2:90:fd:ad:d5:12:88: 24:cb:24:a6:eb:16:b0:43:60:2e:4a:a1:c0:15:63: 95:df:2c:0f:ea:79:a2:a2:11:56:62:85:31:f3:45: 2d:96:56:5d:6d:d0:de:21:42:8f:35:dc:94:3f:9f: 72:99:38:66:fc:a9:bb:6b:e4:2a:56:63:e7:ab:99: 84:ea:8e:d9:5a:ff:b7:e5:ac:e8:7a:cc:52:af:23: e5:32:7e:4e:c6:e9:4c:32:3d:89:fa:6a:a4:c3:be: 69:59:20:a7:0c:ec:91:a4:49:75:47:9f:bf:44:28: c8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0C:1F:FA:3B:3F:13:27:17:DD:02:39:49:65:E2:36:EE:56:54:D7 X509v3 Authority Key Identifier: keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:79:51:9f:34:45:93:21:6e:1e:30:9b:86:7f:b6:62:42:ca: aa:ab:96:87:1b:8c:ca:e1:a6:1e:76:b4:f5:18:64:43:a1:72: ab:f1:93:bc:ef:8b:69:ea:7a:9d:6c:19:45:be:19:13:0d:ab: 65:6a:c1:57:45:2a:d9:d8:20:34:5a:f5:50:31:5d:23:a9:16: 92:85:42:9d:5a:0d:bf:16:38:03:69:43:d3:44:3d:9d:18:4e: 42:3d:0a:dd:24:a6:43:40:ab:4b:d9:e8:ad:3c:a5:de:85:0c: 7b:be:96:98:6e:4f:f9:07:5e:de:bd:81:77:4b:f1:75:54:60: ed:e3:dc:59:25:08:b4:b9:18:5b:51:99:29:e2:1e:0f:45:75: e9:d3:2b:29:f7:64:0d:32:5d:f2:3e:75:fc:72:8f:e8:a0:8a: 83:fb:92:47:76:22:79:99:dd:34:16:f9:cf:a1:7d:bc:c7:ee: a9:22:7e:e8:81:f4:be:0d:9d:d8:75:00:05:f9:36:9b:a1:41: d1:6b:f8:6a:a4:39:c5:24:c1:99:01:5d:fc:33:ba:3a:4e:24: cf:cb:5d:11:1b:f6:28:e7:97:4b:27:22:a1:9b:32:92:53:c0: ce:73:06:49:74:30:11:d9:77:d4:1f:60:3f:dc:39:8d:3a:39: af:38:21:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBGM0YxMTAvBgNVBAUTKEY4MThGQzk4OEVDNzAzMkMzRTJDNkE0OEE1NTQ5OEFC N0NENTY1RkQwHhcNMjUwNzMxMjAzODIzWhcNMjUwODA3MjAzODIzWjAYMRYwFAYD VQQDEw02ODhiZDQzZi1hMzJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6tGoMWlHXTyHhZVqURgokRAvxmyr3tD712k1na3FvQn17ayH1E5qY10u0RZ R6/cnU8nUkYsYNqSP8m5acX7/RXgvnSAy+D3fC4cwfkFPdqS47q/jeerm/zZOLQd M41zKY4lZ+n8KM87ycn/XqWdHjXtrc+Mx+K0/YZsVFgm0qCn8b+Frw2/eX11dp7s irKQ/a3VEogkyySm6xawQ2AuSqHAFWOV3ywP6nmiohFWYoUx80UtllZdbdDeIUKP NdyUP59ymThm/Km7a+QqVmPnq5mE6o7ZWv+35azoesxSryPlMn5OxulMMj2J+mqk w75pWSCnDOyRpEl1R5+/RCjIKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOMMH/o7 PxMnF90COUll4jbuVlTXMB8GA1UdIwQYMBaAFPgY/JiOxwMsPixqSKVUmKt81WX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEYzRi8wOTM3M0FENjc4 QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5dy1MR3BJcFZTWXEzelZa ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CajhtSTdIQXl3LUxHcElwVlNZcTN6VlpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEYzRi8wOTM3M0FENjc4QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5 dy1MR3BJcFZTWXEzelZaZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFeVGfNEWTIW4eMJuGf7ZiQsqqq5aHG4zK4aYedrT1GGRDoXKr8ZO8 74tp6nqdbBlFvhkTDatlasFXRSrZ2CA0WvVQMV0jqRaShUKdWg2/FjgDaUPTRD2d GE5CPQrdJKZDQKtL2eitPKXehQx7vpaYbk/5B17evYF3S/F1VGDt49xZJQi0uRhb UZkp4h4PRXXp0ysp92QNMl3yPnX8co/ooIqD+5JHdiJ5md00FvnPoX28x+6pIn7o gfS+DZ3YdQAF+TaboUHRa/hqpDnFJMGZAV38M7o6TiTPy10RG/Yo55dLJyKhmzKS U8DOcwZJdDAR2XfUH2A/3DmNOjmvOCHx -----END CERTIFICATE-----Generated at Thu Jul 31 23:28:05 2025 by rpki-client