$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft File: BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft (raw, json) Hash identifier: WPdnvhokxv3PiXRffwCqWNkoLgN7TYaP4x1or5/lvew= Subject key identifier: C4:E5:74:D8:72:4E:B0:1F:51:C6:3A:AC:B2:C8:07:07:88:75:A9:27 Authority key identifier: 06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1 Certificate issuer: /CN=A91C8DD1/serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft Manifest number: 0104 Signing time: Mon 21 Jul 2025 05:16:25 +0000 Manifest this update: Mon 21 Jul 2025 05:16:24 +0000 Manifest next update: Mon 28 Jul 2025 05:16:24 +0000 Files and hashes: 1: BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl (hash: gdBNfAWw2J/fXPONvoxY4nhoD4zVQNQplYnyzg4yfQ8=) 2: 81D7045C0F5511EFA55FC44EC4F9AE02.roa (hash: /wi8tgvE4O56j6aStHMPLW1czedgDux+3mSXV2uL2Wc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:16:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8DD1, serialNumber=06D62C7A84076E1C64940406258919D67D15ABE1 Validity Not Before: Jul 21 05:16:24 2025 GMT Not After : Jul 28 05:16:24 2025 GMT Subject: CN=687dcd29-f3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ac:8d:ef:5c:7f:50:93:74:6a:0b:33:7c:e8: 70:cb:d9:95:79:b1:c8:3b:11:e8:fc:e9:b5:6c:e6: 48:61:db:da:c9:62:24:4e:0a:6b:20:e5:17:ff:64: 82:71:da:a0:68:12:00:6a:f2:b8:01:30:bc:65:04: 39:c6:96:32:cc:ac:14:12:61:07:89:b6:b1:0a:72: 2c:25:52:af:84:ff:93:e8:6a:82:da:36:32:7d:7d: a4:25:24:0b:48:04:fa:4d:b2:8f:6a:d7:de:16:8d: d6:95:ce:54:30:5f:12:b1:7b:6b:48:09:42:99:91: 59:e9:f8:83:80:36:7e:95:0a:90:d0:d6:07:42:23: 67:df:20:6e:f4:26:b4:b6:6f:db:0f:37:d6:49:4f: 1a:f3:58:1f:93:31:f8:56:02:9b:d5:8e:a3:24:ea: 99:d2:b7:ba:55:9f:e4:ac:2a:61:64:38:58:15:9b: dd:b7:f8:37:bb:f5:40:30:7c:54:2d:37:14:e9:84: 82:e0:1d:e3:7b:82:d1:76:c2:6b:d3:2a:11:1d:91: 3e:5e:b4:fa:41:94:e4:58:ef:69:50:a3:54:ff:34: f1:56:47:8c:29:fe:fc:cd:88:ec:38:89:8c:f4:2c: 82:0a:09:21:ca:b3:f8:a4:a1:84:a8:3b:d7:a1:0a: 8d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E5:74:D8:72:4E:B0:1F:51:C6:3A:AC:B2:C8:07:07:88:75:A9:27 X509v3 Authority Key Identifier: keyid:06:D6:2C:7A:84:07:6E:1C:64:94:04:06:25:89:19:D6:7D:15:AB:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtYseoQHbhxklAQGJYkZ1n0Vq-E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8DD1/25DD59F8E1C911EEBE1F5068C4F9AE02/BtYseoQHbhxklAQGJYkZ1n0Vq-E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 57:b5:27:aa:88:6d:50:a8:b4:b2:cd:4d:f1:5b:29:11:5c:ab: bc:13:f8:55:17:c5:b5:70:97:bb:44:8b:98:83:b9:03:51:a4: ad:b4:a8:7c:13:6f:df:9c:96:5f:d0:51:e4:cc:5f:d0:e7:14: df:bb:77:a3:a8:dd:08:83:ab:1f:f0:35:0e:5f:bd:3d:f8:15: 76:ac:5e:ec:df:c7:26:4e:69:3f:59:ce:a5:99:49:83:de:55: 2f:c4:05:d5:96:12:de:72:70:d6:3e:1a:d8:e1:9f:8c:6b:80: 2b:be:7e:f7:5b:a4:43:a3:0a:5b:1c:cf:40:fa:ab:58:81:f4: 61:d6:06:44:af:89:3a:a6:6d:b9:82:f8:b2:f8:2b:d5:5e:b1: 79:da:a1:45:e9:85:9a:56:84:ee:52:22:eb:e0:ca:59:79:f6: ad:07:04:51:68:6c:b3:53:d0:2e:7b:ec:75:41:0e:03:d8:33: 0a:41:c9:f2:d5:88:ca:ea:c0:14:f6:99:bf:fb:a0:50:94:b7: 13:2c:3a:6d:25:e3:90:5c:46:5b:c8:be:e4:6e:6c:d3:86:bf: 92:ea:53:ba:87:08:73:ce:c2:84:19:fc:5a:d1:65:e3:0a:ad: c1:8d:52:e6:bc:93:33:cf:0d:81:4e:1f:9a:35:26:0d:04:15: 31:2d:ef:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhERDExMTAvBgNVBAUTKDA2RDYyQzdBODQwNzZFMUM2NDk0MDQwNjI1ODkxOUQ2 N0QxNUFCRTEwHhcNMjUwNzIxMDUxNjI0WhcNMjUwNzI4MDUxNjI0WjAYMRYwFAYD VQQDEw02ODdkY2QyOS1mM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKyN71x/UJN0agszfOhwy9mVebHIOxHo/Om1bOZIYdvayWIkTgprIOUX/2SC cdqgaBIAavK4ATC8ZQQ5xpYyzKwUEmEHibaxCnIsJVKvhP+T6GqC2jYyfX2kJSQL SAT6TbKPatfeFo3Wlc5UMF8SsXtrSAlCmZFZ6fiDgDZ+lQqQ0NYHQiNn3yBu9Ca0 tm/bDzfWSU8a81gfkzH4VgKb1Y6jJOqZ0re6VZ/krCphZDhYFZvdt/g3u/VAMHxU LTcU6YSC4B3je4LRdsJr0yoRHZE+XrT6QZTkWO9pUKNU/zTxVkeMKf78zYjsOImM 9CyCCgkhyrP4pKGEqDvXoQqNOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTldNhy TrAfUcY6rLLIBweIdaknMB8GA1UdIwQYMBaAFAbWLHqEB24cZJQEBiWJGdZ9Favh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEREMS8yNURENTlGOEUx QzkxMUVFQkUxRjUwNjhDNEY5QUUwMi9CdFlzZW9RSGJoeGtsQVFHSllrWjFuMFZx LUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0WXNlb1FIYmh4a2xBUUdKWWtaMW4wVnEtRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEREMS8yNURENTlGOEUxQzkxMUVFQkUxRjUwNjhDNEY5QUUwMi9CdFlzZW9RSGJo eGtsQVFHSllrWjFuMFZxLUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBXtSeqiG1QqLSyzU3xWykRXKu8E/hVF8W1cJe7RIuYg7kDUaSttKh8 E2/fnJZf0FHkzF/Q5xTfu3ejqN0Ig6sf8DUOX709+BV2rF7s38cmTmk/Wc6lmUmD 3lUvxAXVlhLecnDWPhrY4Z+Ma4Arvn73W6RDowpbHM9A+qtYgfRh1gZEr4k6pm25 gviy+CvVXrF52qFF6YWaVoTuUiLr4MpZefatBwRRaGyzU9Aue+x1QQ4D2DMKQcny 1YjK6sAU9pm/+6BQlLcTLDptJeOQXEZbyL7kbmzThr+S6lO6hwhzzsKEGfxa0WXj Cq3BjVLmvJMzzw2BTh+aNSYNBBUxLe/q -----END CERTIFICATE-----Generated at Mon Jul 21 07:22:36 2025 by rpki-client