$ rpki-client -vvf rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft File: bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft (raw, json) Hash identifier: PuKAXftT39NRdcOZALDgLEEAAxnnJ/4mG/GWXAhfAQ4= Subject key identifier: 5C:C6:15:80:CC:A9:33:09:3E:9D:AE:F0:6A:BF:68:75:AB:9A:21:B8 Authority key identifier: 6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87 Certificate issuer: /CN=A91B933A/serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87 Certificate serial: 253E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft Manifest number: 2524 Signing time: Sun 20 Jul 2025 15:46:38 +0000 Manifest this update: Sun 20 Jul 2025 15:46:38 +0000 Manifest next update: Sun 27 Jul 2025 15:46:38 +0000 Files and hashes: 1: bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl (hash: fnCOlb/mWNQ9gSGtb8/4s3hrefcgWaoCqyMc/p++fu8=) 2: C61B734AB0AA11E580DBF725C4F9AE02.roa (hash: Z754LG6nGQ06ZpUuHnHm6+5+zZq4bCVd8VqoVX/cCxs=) 3: AFB65238AFDC11EAB3910C71C4F9AE02.roa (hash: fuh0LlQyz61TwsZ3SUhqE5lyOndp84sYnyIIyPcvMCo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 15:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9534 (0x253e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B933A, serialNumber=6E8EA1E3240C0BB3D13B4D275C6C0326A568EC87 Validity Not Before: Jul 20 15:46:38 2025 GMT Not After : Jul 27 15:46:38 2025 GMT Subject: CN=687d0f5e-48ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f3:43:46:22:92:60:3c:11:e0:14:c4:f2:de: a5:cd:a2:bf:0c:a0:90:2e:a7:86:e4:06:c9:2d:20: 2c:f0:3c:a9:b0:ca:2b:4b:78:bb:4e:96:39:d0:64: ca:91:99:86:0e:d3:17:2b:a6:51:75:63:e3:bf:9e: 23:84:fc:6a:61:9e:f8:39:da:09:24:cc:74:7e:24: d3:75:8b:39:bf:d1:73:16:65:48:aa:7e:38:41:3d: df:ee:d9:93:c5:2b:9d:31:8f:da:89:ae:f0:9c:55: 16:fa:e9:57:ff:5e:73:ec:ef:94:47:fa:1a:7d:d9: 66:01:ac:1b:a2:d5:c6:f3:e8:95:b1:45:e1:58:ac: 47:0d:72:ad:f6:a3:70:4d:95:91:50:d5:f3:4a:25: c2:87:43:97:2f:c1:fc:1e:8a:0f:a5:f7:8e:90:51: d8:f1:6f:58:e5:10:5d:15:d6:b8:61:d3:30:42:9b: 8b:44:b2:cb:dc:d1:99:52:c7:ab:f9:ae:1b:2c:c3: c3:4a:eb:fd:a0:ab:b5:7e:2a:fc:58:32:ef:10:0c: fb:79:b3:f8:be:98:07:ba:fc:2f:89:e3:40:43:79: bd:4a:1c:a4:a0:eb:a2:6f:56:55:0f:59:8b:c0:58: b0:fa:c0:55:49:e5:e9:20:4f:5d:0a:1f:1f:14:48: ea:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C6:15:80:CC:A9:33:09:3E:9D:AE:F0:6A:BF:68:75:AB:9A:21:B8 X509v3 Authority Key Identifier: keyid:6E:8E:A1:E3:24:0C:0B:B3:D1:3B:4D:27:5C:6C:03:26:A5:68:EC:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bo6h4yQMC7PRO00nXGwDJqVo7Ic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B933A/53FE1EFA2B6411E58A2F0754C4F9AE02/bo6h4yQMC7PRO00nXGwDJqVo7Ic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:a8:e3:7c:b2:d6:be:e9:be:3f:47:c5:65:55:10:69:af:3d: f9:96:d6:7f:13:ed:fe:7d:99:04:d6:bd:23:b0:96:4a:72:29: 22:88:32:33:cc:b6:be:de:2d:b5:12:98:ac:b1:af:68:e6:c2: 59:7a:0b:7f:cf:df:e8:4e:79:59:65:0e:92:f4:a9:36:ec:97: 17:d7:cd:38:9b:b5:bc:89:32:40:95:bc:07:aa:36:6d:54:e0: 85:94:50:95:1b:a5:fb:91:64:3b:21:6c:cf:27:db:2c:ad:e0: 99:b8:d6:11:e9:f7:9a:62:fe:bc:1b:e7:43:8a:25:a9:2e:63: 24:fe:86:a6:b8:27:d9:e1:10:22:2f:bf:b4:6e:fe:f1:37:e5: 1b:cb:74:33:73:8f:d5:3a:3e:92:32:c1:27:e8:52:ab:08:f1: 52:52:3d:89:09:8f:a1:d8:68:e4:8d:9f:e1:29:46:bd:34:1b: 96:65:4f:27:56:47:38:ad:4b:89:8f:50:8a:b5:58:a8:05:7e: a3:16:97:76:1d:73:8b:dc:ff:92:92:50:1d:3b:be:c7:21:4e: 59:ad:cc:3f:a9:89:ed:86:b9:0c:d0:27:64:6c:ce:02:db:bb: cc:67:2b:e5:e0:d3:2a:5d:03:91:d6:b6:0c:e5:20:a6:11:91: 8a:ff:92:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjkzM0ExMTAvBgNVBAUTKDZFOEVBMUUzMjQwQzBCQjNEMTNCNEQyNzVDNkMwMzI2 QTU2OEVDODcwHhcNMjUwNzIwMTU0NjM4WhcNMjUwNzI3MTU0NjM4WjAYMRYwFAYD VQQDEw02ODdkMGY1ZS00OGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/NDRiKSYDwR4BTE8t6lzaK/DKCQLqeG5AbJLSAs8DypsMorS3i7TpY50GTK kZmGDtMXK6ZRdWPjv54jhPxqYZ74OdoJJMx0fiTTdYs5v9FzFmVIqn44QT3f7tmT xSudMY/aia7wnFUW+ulX/15z7O+UR/oafdlmAawbotXG8+iVsUXhWKxHDXKt9qNw TZWRUNXzSiXCh0OXL8H8HooPpfeOkFHY8W9Y5RBdFda4YdMwQpuLRLLL3NGZUser +a4bLMPDSuv9oKu1fir8WDLvEAz7ebP4vpgHuvwvieNAQ3m9ShykoOuib1ZVD1mL wFiw+sBVSeXpIE9dCh8fFEjqowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFzGFYDM qTMJPp2u8Gq/aHWrmiG4MB8GA1UdIwQYMBaAFG6OoeMkDAuz0TtNJ1xsAyalaOyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTMzQS81M0ZFMUVGQTJC NjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3UFJPMDBuWEd3REpxVm83 SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JvNmg0eVFNQzdQUk8wMG5YR3dESnFWbzdJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTMzQS81M0ZFMUVGQTJCNjQxMUU1OEEyRjA3NTRDNEY5QUUwMi9ibzZoNHlRTUM3 UFJPMDBuWEd3REpxVm83SWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCTqON8sta+6b4/R8VlVRBprz35ltZ/E+3+fZkE1r0jsJZKcikiiDIz zLa+3i21Epissa9o5sJZegt/z9/oTnlZZQ6S9Kk27JcX1804m7W8iTJAlbwHqjZt VOCFlFCVG6X7kWQ7IWzPJ9ssreCZuNYR6feaYv68G+dDiiWpLmMk/oamuCfZ4RAi L7+0bv7xN+Uby3Qzc4/VOj6SMsEn6FKrCPFSUj2JCY+h2GjkjZ/hKUa9NBuWZU8n Vkc4rUuJj1CKtVioBX6jFpd2HXOL3P+SklAdO77HIU5Zrcw/qYnthrkM0CdkbM4C 27vMZyvl4NMqXQOR1rYM5SCmEZGK/5LB -----END CERTIFICATE-----Generated at Mon Jul 21 12:24:25 2025 by rpki-client