$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft File: vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json) Hash identifier: WftoZUa/5W12mZaXglykSU6KgCZdxOzTYPyVCuM2rdE= Subject key identifier: 75:93:9F:7B:50:0B:DF:28:27:28:3C:4E:0C:BA:77:D6:FD:11:4F:F0 Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B Certificate issuer: /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Certificate serial: 06AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft Manifest number: 06AA Signing time: Sun 20 Jul 2025 22:17:18 +0000 Manifest this update: Sun 20 Jul 2025 22:17:17 +0000 Manifest next update: Sun 27 Jul 2025 22:17:17 +0000 Files and hashes: 1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: iWMEMc5jN2e8cCr9iJ4ySEU76HRz5+C4eHoXSOeIp1w=) 2: 6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (hash: I+eEa2BCG1ocgDoHBOIM7GqSJBtmqFy6z+9Rb7P5WKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 22:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1711 (0x6af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C73A7, serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Validity Not Before: Jul 20 22:17:17 2025 GMT Not After : Jul 27 22:17:17 2025 GMT Subject: CN=687d6aee-be9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:53:0d:3f:a4:b0:f5:59:5c:c8:ea:d3:3f: 13:d1:9e:5a:01:11:18:e8:c5:49:61:51:2b:cd:e1: 30:8c:86:30:f2:81:83:12:9e:73:8b:e8:79:27:9b: 61:53:c4:85:0c:7e:3a:6b:b7:51:c4:ea:16:5a:7a: c8:2a:76:51:8f:7a:03:a1:8e:f9:8f:ab:2f:46:44: 88:6d:a6:32:6d:22:c7:4b:01:75:4a:45:43:9c:d8: 75:c7:68:23:f8:59:c5:88:8d:a0:e1:d9:d8:1a:ff: db:c7:0e:cb:bd:dc:af:1e:9b:85:81:af:b7:9d:c4: 3f:14:b3:99:e5:64:e0:b1:25:4e:29:ef:b5:a6:c3: 93:fe:81:83:fe:a5:19:13:8f:0b:69:2c:06:40:f7: 09:eb:5d:57:80:58:91:c5:60:8f:d1:1d:9d:32:8e: 3d:56:f6:5e:ec:fa:05:d5:79:ca:ae:76:80:c7:7f: 6e:aa:42:b9:4c:25:04:19:b8:76:e7:05:07:f6:fc: 4e:35:7e:96:a8:d4:dc:6f:c1:34:64:fa:0a:8c:1d: 4e:f9:52:82:ef:8e:5d:e3:31:b7:e4:ca:27:14:d3: a4:bb:a0:c3:d5:df:a4:c5:5c:46:6f:a8:fa:11:1e: 45:55:a0:fa:c0:70:df:b3:db:f9:c7:4b:89:0a:d2: 22:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:93:9F:7B:50:0B:DF:28:27:28:3C:4E:0C:BA:77:D6:FD:11:4F:F0 X509v3 Authority Key Identifier: keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:98:de:2a:8c:c1:04:26:8f:f2:62:32:4d:12:63:2b:32:4f: 02:bf:08:95:1e:00:eb:dd:aa:51:c8:71:93:85:b0:45:78:f6: 79:ec:81:e1:7d:11:45:11:ff:e8:43:e8:cb:26:00:b0:85:ee: dd:1d:ae:e8:53:55:f0:12:ea:25:53:73:34:0d:41:c4:b6:c6: f1:d3:00:50:07:01:f8:b5:86:eb:bd:b0:72:47:34:ea:98:30: 86:07:8e:91:89:08:c0:0b:42:62:fb:5a:83:f9:0e:07:2c:87: 4a:9c:e6:4b:2f:61:ce:7b:dd:20:21:b6:10:3f:22:bd:73:30: 5b:5d:c3:7d:7b:e7:5a:29:38:0f:a4:99:60:e8:09:94:26:8a: 18:c6:bd:ba:1c:f3:a7:9d:d0:1d:81:0a:36:a9:e0:ad:5f:12: d6:a4:bf:14:ca:dd:99:ab:54:08:d5:79:e7:1f:28:62:1f:00: 5c:df:3a:89:05:4e:4e:d2:13:6d:0a:2e:05:f5:2b:bc:8b:36: 37:1c:07:5b:21:e1:4c:c5:d6:ef:b4:c2:cf:c6:77:53:1e:c5: 86:4c:a8:9c:85:34:0d:97:95:7b:bf:f0:7b:34:3b:10:b9:f1: e7:72:66:8a:0a:56:3b:2c:90:d3:d9:b9:41:b9:31:70:3b:fe: 4e:e7:66:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBq8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczQTcxMTAvBgNVBAUTKEJDMUI0NDZFOTczN0U0OTY0QzA3QUI4Q0I2REMxODA2 RDZFQkZGOUIwHhcNMjUwNzIwMjIxNzE3WhcNMjUwNzI3MjIxNzE3WjAYMRYwFAYD VQQDEw02ODdkNmFlZS1iZTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtClTDT+ksPVZXMjq0z8T0Z5aAREY6MVJYVErzeEwjIYw8oGDEp5zi+h5J5th U8SFDH46a7dRxOoWWnrIKnZRj3oDoY75j6svRkSIbaYybSLHSwF1SkVDnNh1x2gj +FnFiI2g4dnYGv/bxw7LvdyvHpuFga+3ncQ/FLOZ5WTgsSVOKe+1psOT/oGD/qUZ E48LaSwGQPcJ611XgFiRxWCP0R2dMo49VvZe7PoF1XnKrnaAx39uqkK5TCUEGbh2 5wUH9vxONX6WqNTcb8E0ZPoKjB1O+VKC745d4zG35MonFNOku6DD1d+kxVxGb6j6 ER5FVaD6wHDfs9v5x0uJCtIi3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHWTn3tQ C98oJyg8Tgy6d9b9EU/wMB8GA1UdIwQYMBaAFLwbRG6XN+SWTAerjLbcGAbW6/+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzNBNy8yRDJDQjM0MDZG N0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVKWk1CNnVNdHR3WUJ0YnJf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZCdEVicGMzNUpaTUI2dU10dHdZQnRicl81cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzNBNy8yRDJDQjM0MDZGN0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVK Wk1CNnVNdHR3WUJ0YnJfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJmN4qjMEEJo/yYjJNEmMrMk8CvwiVHgDr3apRyHGThbBFePZ57IHh fRFFEf/oQ+jLJgCwhe7dHa7oU1XwEuolU3M0DUHEtsbx0wBQBwH4tYbrvbByRzTq mDCGB46RiQjAC0Ji+1qD+Q4HLIdKnOZLL2HOe90gIbYQPyK9czBbXcN9e+daKTgP pJlg6AmUJooYxr26HPOnndAdgQo2qeCtXxLWpL8Uyt2Zq1QI1XnnHyhiHwBc3zqJ BU5O0hNtCi4F9Su8izY3HAdbIeFMxdbvtMLPxndTHsWGTKichTQNl5V7v/B7NDsQ ufHncmaKClY7LJDT2blBuTFwO/5O52Yr -----END CERTIFICATE-----Generated at Mon Jul 21 23:48:54 2025 by rpki-client