$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft File: bG1HsRFPLVgaghKAXxLDdH80r4M.mft (raw, json) Hash identifier: ipKzz4hr/R7l+tDgqMadLXBIG3j6d276/fhq0BHKIfY= Subject key identifier: F3:25:C5:88:7A:A3:5F:26:7F:73:8D:07:5F:4A:F0:BD:85:9F:4C:4F Authority key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 Certificate issuer: /CN=A91C7672/serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft Manifest number: 1C3B Signing time: Thu 24 Jul 2025 16:19:41 +0000 Manifest this update: Thu 24 Jul 2025 16:19:41 +0000 Manifest next update: Thu 31 Jul 2025 16:19:41 +0000 Files and hashes: 1: bG1HsRFPLVgaghKAXxLDdH80r4M.crl (hash: LY5KUCiiLC95hni1h3Hdm0Esiv6HO4zxdpdfh5RSoCM=) 2: 08F61730538311F0860B155FC4F9AE02.roa (hash: 5tUhujimGcuYk2iCXVJH6UfqyUCQhG2eSFGvMuoYcGw=) 3: 18BDABD2537F11F0A9531C09C4F9AE02.roa (hash: jBvkqb6jI6ollOqdN8B9OtpQXSI083YHITbt77mXBK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 31 Jul 2025 16:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Validity Not Before: Jul 24 16:19:41 2025 GMT Not After : Jul 31 16:19:41 2025 GMT Subject: CN=68825d1d-d093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:71:fc:b4:5b:c2:5a:76:6f:f6:a7:11:1f:55: dd:37:48:de:78:e4:3d:25:28:86:c5:de:8f:e8:c5: 2d:67:15:bb:f5:eb:de:ff:68:cc:06:c4:5e:6c:8c: 2b:2a:1a:71:4f:2c:38:b1:04:76:4d:49:3e:08:60: b1:2c:b8:98:f5:cf:67:e0:07:6b:ab:36:bc:2c:e1: 8e:fe:b5:43:d9:4c:b7:c8:a5:8e:07:10:82:af:0b: cc:20:0c:26:21:70:53:21:f4:3f:4c:cd:8a:00:03: 21:2d:da:66:21:67:b2:92:db:f9:06:e0:12:10:c6: 8d:3f:98:5d:ae:81:66:cd:8c:ab:f3:03:7b:fb:c9: 77:54:18:f9:47:35:f3:de:10:7b:ae:40:30:4b:e2: 79:0a:c0:88:12:5d:4e:30:6a:b7:9e:19:44:ec:08: 18:fb:68:61:85:d5:f3:c6:aa:aa:5a:2e:c2:08:0f: 2f:c0:ca:a8:1d:f6:f8:97:c0:2d:17:ad:99:00:c5: f2:60:6b:51:1a:98:a1:a8:3d:52:51:15:35:96:90: a0:7b:5e:02:63:5a:46:cc:4c:42:5c:e5:cb:d0:a6: 26:ec:11:18:28:74:01:f0:c6:05:7c:53:42:9a:48: 38:8d:84:a4:fb:12:80:6c:50:8d:f6:ef:30:88:31: 46:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:25:C5:88:7A:A3:5F:26:7F:73:8D:07:5F:4A:F0:BD:85:9F:4C:4F X509v3 Authority Key Identifier: keyid:6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:c2:37:2f:b2:e6:b9:4d:f0:eb:98:7a:56:96:8d:6d:75:2d: cb:af:db:ab:8d:b5:f3:99:66:e5:c1:8a:0c:a0:f7:b3:28:a1: 6f:3f:60:2e:32:92:7c:20:39:97:77:99:97:e2:8e:c3:d3:f2: e6:7a:12:a9:7f:68:20:d6:e5:88:8c:bc:63:6b:a6:4b:1f:70: 1d:4d:81:f1:df:2d:65:6d:2f:4c:59:f2:b9:91:92:62:df:56: ec:9b:7b:cb:60:3d:6f:26:60:69:e8:62:9d:ac:69:4a:b7:48: be:2e:b6:05:59:fc:9c:8d:de:68:68:cd:13:47:13:a2:e8:e1: cf:cb:89:93:12:5e:8f:67:98:27:58:18:d0:9d:86:86:91:04: e2:d9:f8:4b:d3:b4:ba:07:9e:1c:e9:48:a0:94:41:03:ed:49: 4a:8e:e1:31:24:d1:69:e3:00:ef:dd:27:50:56:81:a8:a9:85: 9f:ac:1b:c6:91:26:5c:07:19:fc:c7:86:33:88:4e:f3:3e:84: 18:2f:a4:3d:80:b3:6f:52:2c:be:aa:f5:8e:c7:15:86:45:08: d1:76:c8:c9:ab:3f:1f:6a:f4:69:9f:81:b7:d0:20:1d:37:91: 6f:95:b0:c8:15:93:b7:5f:36:a6:5d:42:5b:c3:b2:57:28:be: cb:86:5e:9f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzY3MjExMC8GA1UEBRMoNkM2RDQ3QjExMTRGMkQ1ODFBODIxMjgwNUYxMkMzNzQ3 RjM0QUY4MzAeFw0yNTA3MjQxNjE5NDFaFw0yNTA3MzExNjE5NDFaMBgxFjAUBgNV BAMTDTY4ODI1ZDFkLWQwOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzcfy0W8Jadm/2pxEfVd03SN545D0lKIbF3o/oxS1nFbv1697/aMwGxF5sjCsq GnFPLDixBHZNST4IYLEsuJj1z2fgB2urNrws4Y7+tUPZTLfIpY4HEIKvC8wgDCYh cFMh9D9MzYoAAyEt2mYhZ7KS2/kG4BIQxo0/mF2ugWbNjKvzA3v7yXdUGPlHNfPe EHuuQDBL4nkKwIgSXU4wareeGUTsCBj7aGGF1fPGqqpaLsIIDy/Ayqgd9viXwC0X rZkAxfJga1EamKGoPVJRFTWWkKB7XgJjWkbMTEJc5cvQpibsERgodAHwxgV8U0Ka SDiNhKT7EoBsUI327zCIMUabAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU8yXFiHqj XyZ/c40HX0rwvYWfTE8wHwYDVR0jBBgwFoAUbG1HsRFPLVgaghKAXxLDdH80r4Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NjcyLzQzNzY0QkVDRjcy NDExRTZBQkYwMkIzQ0M0RjlBRTAyL2JHMUhzUkZQTFZnYWdoS0FYeExEZEg4MHI0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkcxSHNSRlBMVmdhZ2hLQVh4TERkSDgwcjRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 NjcyLzQzNzY0QkVDRjcyNDExRTZBQkYwMkIzQ0M0RjlBRTAyL2JHMUhzUkZQTFZn YWdoS0FYeExEZEg4MHI0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK3CNy+y5rlN8OuYelaWjW11Lcuv26uNtfOZZuXBigyg97MooW8/YC4y knwgOZd3mZfijsPT8uZ6Eql/aCDW5YiMvGNrpksfcB1NgfHfLWVtL0xZ8rmRkmLf Vuybe8tgPW8mYGnoYp2saUq3SL4utgVZ/JyN3mhozRNHE6Lo4c/LiZMSXo9nmCdY GNCdhoaRBOLZ+EvTtLoHnhzpSKCUQQPtSUqO4TEk0WnjAO/dJ1BWgaiphZ+sG8aR JlwHGfzHhjOITvM+hBgvpD2As29SLL6q9Y7HFYZFCNF2yMmrPx9q9GmfgbfQIB03 kW+VsMgVk7dfNqZdQlvDslcovsuGXp8= -----END CERTIFICATE-----Generated at Thu Jul 24 20:17:34 2025 by rpki-client