$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft File: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft (raw, json) Hash identifier: 374F47swFfmy7YKdldBJEtTDhcA3XDB7MskvDfmNZZ8= Subject key identifier: AF:5B:FC:4B:48:A7:70:E3:1B:6D:94:14:9E:FC:7B:D7:B9:1C:35:1C Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 Certificate issuer: /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Certificate serial: E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft Manifest number: DA Signing time: Sat 19 Jul 2025 05:50:27 +0000 Manifest this update: Sat 19 Jul 2025 05:50:26 +0000 Manifest next update: Sat 26 Jul 2025 05:50:26 +0000 Files and hashes: 1: bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl (hash: 26Rby0vzXjr/3lX90/wxHe9q/LpJXI6KY8WO1LF4zqE=) 2: AA97516E24CA11EFB59A9379C4F9AE02.roa (hash: vY7AsZ08Pw1TlHVY7hGbU3NQuV3eecatAeSNrTUiOFk=) 3: A1732A0E24CA11EF93486579C4F9AE02.roa (hash: c1fiRMTzx+sKc+PUXDGG2MhU2IceNjiS5ZTGcmsSFDc=) 4: 41A8950C272F11EF9D0A0C5CC4F9AE02.roa (hash: Zeo9E1pvK7pqXxcoNJpNgvy4k5rrUkurswNhSqNf24s=) 5: A074721624CA11EF93486579C4F9AE02.roa (hash: EAuwmClXGMo+6npZ19N/RRkMj4x/6MUGDRCOhMDeS9A=) 6: 0E49D1E024CC11EFB113A27BC4F9AE02.roa (hash: NR/+YgQkm7A4mmhSV+xz9O4OYp+ZS9oT3gP6zL7oedM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:50:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325 Validity Not Before: Jul 19 05:50:26 2025 GMT Not After : Jul 26 05:50:26 2025 GMT Subject: CN=687b3222-cd97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:a1:ce:c5:d3:6f:d7:3d:d5:8d:19:4d:fa: 14:d1:4a:46:dd:c6:8d:5c:b3:80:35:3f:c0:4e:43: 1c:6d:6f:3b:f4:30:34:a0:86:97:f1:9e:56:ce:2e: f3:32:f6:58:9b:01:25:e1:b3:8c:83:cd:a5:72:c1: 90:5a:0d:9f:ec:a3:8c:d8:f5:86:17:dd:a6:0f:b4: 71:72:15:34:1c:0e:06:ed:78:97:ce:2d:f8:f0:96: 7c:a1:3d:69:cf:f2:d3:ee:70:e6:5a:69:7c:81:b0: 05:66:86:ae:0d:41:20:d3:de:42:23:7c:45:31:d0: c6:4b:cd:97:2c:0a:12:ba:9e:3a:cc:bc:77:02:59: 3a:e5:2d:a3:be:95:9b:ab:f9:48:b2:e0:8d:6d:62: 50:51:29:1c:1f:e7:2f:17:3d:c6:f3:58:5e:24:d4: 5b:4b:84:ac:4c:6c:92:80:1f:ad:0f:83:ad:26:ab: 87:79:66:65:12:a3:a3:34:6e:c8:47:95:32:9f:38: 28:5f:15:86:a6:ff:9d:5d:6e:2a:de:fd:55:8f:18: fe:58:18:b2:c3:08:e0:af:51:88:02:58:3d:85:80: b6:71:40:0e:59:59:ce:ca:23:73:3c:28:da:0a:1a: 4f:02:b3:09:18:b0:75:5c:3e:72:43:08:dd:ca:3f: 67:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5B:FC:4B:48:A7:70:E3:1B:6D:94:14:9E:FC:7B:D7:B9:1C:35:1C X509v3 Authority Key Identifier: keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:e2:23:8f:b6:bc:a3:fe:a2:53:8f:71:72:39:20:e7:93:49: 55:6f:71:6c:17:38:ea:b9:21:29:d6:5f:8a:50:f7:71:66:70: 07:c9:f7:4a:b8:f2:84:13:d7:ad:9d:b1:6b:2d:03:19:d7:4d: b8:ea:c8:83:7d:40:51:fb:d6:f7:db:87:ec:37:1f:9f:af:89: dc:f9:01:a0:ec:fa:2f:70:81:a8:33:c7:f8:c4:28:fe:95:a9: 4e:5d:7b:b7:74:e7:f5:96:82:52:5d:91:e1:70:91:f7:49:26: 9e:1b:c2:77:88:51:24:bf:f0:a0:9f:fb:2f:6f:84:00:b5:a9: 1e:89:92:a3:3e:d2:33:49:4f:5f:10:c9:af:1d:af:77:b9:f0: 34:06:49:cd:37:28:d2:eb:59:21:c0:35:eb:c0:1f:a0:cc:dd: fb:03:73:74:1c:27:20:bd:05:dd:07:55:6f:a1:b4:ea:f8:e6: c1:d1:8c:8b:1f:e4:c1:bf:75:98:92:c7:ef:03:80:4b:04:a3: e4:be:6c:28:8c:62:50:4b:d0:6c:dd:1c:18:53:c1:c0:df:da: 36:8f:c9:89:eb:a7:10:d0:29:d2:74:bb:18:7d:33:75:c0:87: 20:2c:9e:1a:4f:6e:44:cc:cf:a7:48:49:02:6e:52:70:56:65: bf:a5:ba:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDOEExMTAvBgNVBAUTKDZDRTdCNTc1MEU2RTE3RDNEMzlFQjVCMDg3RkQzRkFE NTk1OUYzMjUwHhcNMjUwNzE5MDU1MDI2WhcNMjUwNzI2MDU1MDI2WjAYMRYwFAYD VQQDEw02ODdiMzIyMi1jZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqHyhzsXTb9c91Y0ZTfoU0UpG3caNXLOANT/ATkMcbW879DA0oIaX8Z5Wzi7z MvZYmwEl4bOMg82lcsGQWg2f7KOM2PWGF92mD7RxchU0HA4G7XiXzi348JZ8oT1p z/LT7nDmWml8gbAFZoauDUEg095CI3xFMdDGS82XLAoSup46zLx3Alk65S2jvpWb q/lIsuCNbWJQUSkcH+cvFz3G81heJNRbS4SsTGySgB+tD4OtJquHeWZlEqOjNG7I R5UynzgoXxWGpv+dXW4q3v1Vjxj+WBiywwjgr1GIAlg9hYC2cUAOWVnOyiNzPCja ChpPArMJGLB1XD5yQwjdyj9nyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9b/EtI p3DjG22UFJ78e9e5HDUcMB8GA1UdIwQYMBaAFGzntXUObhfT0561sIf9P61ZWfMl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkM4QS82MUVDNDkxNjI0 QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5UFRucld3aF8wX3JWbFo4 eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPZTFkUTV1RjlQVG5yV3doXzBfclZsWjh5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MkM4QS82MUVDNDkxNjI0QzkxMUVGOUM4QzYyNTlDNEY5QUUwMi9iT2UxZFE1dUY5 UFRucld3aF8wX3JWbFo4eVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy4iOPtryj/qJTj3FyOSDnk0lVb3FsFzjquSEp1l+KUPdxZnAHyfdK uPKEE9etnbFrLQMZ10246siDfUBR+9b324fsNx+fr4nc+QGg7PovcIGoM8f4xCj+ lalOXXu3dOf1loJSXZHhcJH3SSaeG8J3iFEkv/Cgn/svb4QAtakeiZKjPtIzSU9f EMmvHa93ufA0BknNNyjS61khwDXrwB+gzN37A3N0HCcgvQXdB1VvobTq+ObB0YyL H+TBv3WYksfvA4BLBKPkvmwojGJQS9Bs3RwYU8HA39o2j8mJ66cQ0CnSdLsYfTN1 wIcgLJ4aT25EzM+nSEkCblJwVmW/pbpi -----END CERTIFICATE-----Generated at Sun Jul 20 14:33:21 2025 by rpki-client