$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft File: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft (raw, json) Hash identifier: NtRwGE3TvlN4X/pkE+6DC0813+2UnmPpaFEHo8LmKqM= Subject key identifier: 33:61:E3:25:49:F5:7B:81:EE:F0:6F:C0:20:D9:CA:2C:E1:CF:98:FF Authority key identifier: 6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1 Certificate issuer: /CN=A91CCAF1/serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1 Certificate serial: 90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft Manifest number: 8F Signing time: Sat 19 Jul 2025 06:41:36 +0000 Manifest this update: Sat 19 Jul 2025 06:41:36 +0000 Manifest next update: Sat 26 Jul 2025 06:41:36 +0000 Files and hashes: 1: bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl (hash: +CGvLcBpHWitqLpwEsHrqmQczGQErsSh11E6f9Ob8Co=) 2: BF71D9D0F26811EFBC446868C4F9AE02.roa (hash: 7+qKEqRnu4TPJKKakjwpNT1iFIHMXPBmy/g9UJm3iJo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:41:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=6C194697816F9B130BA53CF4BEE67601594E8CB1 Validity Not Before: Jul 19 06:41:36 2025 GMT Not After : Jul 26 06:41:36 2025 GMT Subject: CN=687b3e20-9acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f1:62:27:35:06:71:5f:54:ac:d8:1b:be:a6: 9d:1e:23:c7:45:95:39:ab:36:a6:c7:34:48:42:ad: 2c:e7:72:87:19:3a:3d:8a:8f:c2:22:8c:da:e4:93: 8e:41:ad:d3:1e:c3:e4:5f:d3:75:73:7e:56:d8:2d: 4c:4a:39:0b:48:ea:58:de:6d:c2:f6:22:00:9c:1f: a8:81:c3:1f:9b:aa:70:af:86:75:3a:19:60:b0:f8: 6b:a4:5d:4f:92:e4:77:b4:02:b4:f7:57:52:6e:60: 6e:7b:02:ef:b5:a5:e1:21:7f:de:96:b3:ce:a9:87: 93:e3:46:5d:e9:32:16:63:6d:c8:45:a6:d0:99:59: ab:e8:84:b4:3d:fa:c2:19:b6:ab:63:20:d1:5f:5c: 57:7d:9b:12:57:bb:b4:a4:37:cc:bf:f4:bf:63:f8: 94:3b:a9:d9:c7:16:a5:c7:93:8d:c1:06:94:68:c0: 5a:33:14:d4:99:e7:c6:fd:e9:ca:cc:b6:8b:c3:de: ce:5b:75:16:6c:37:3e:63:4f:35:3a:d1:5b:2d:b2: cc:15:a4:71:6d:f3:66:f9:21:93:26:b4:47:1b:c8: a9:ac:f8:78:d5:b9:45:e6:b0:25:ac:0d:66:f5:ed: b2:6d:a3:3e:e6:46:18:23:11:84:81:b0:bc:2c:8e: c5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:61:E3:25:49:F5:7B:81:EE:F0:6F:C0:20:D9:CA:2C:E1:CF:98:FF X509v3 Authority Key Identifier: keyid:6C:19:46:97:81:6F:9B:13:0B:A5:3C:F4:BE:E6:76:01:59:4E:8C:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/09C0D3668AAD11EFBEF9166AC4F9AE02/bBlGl4FvmxMLpTz0vuZ2AVlOjLE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:a2:54:33:63:09:09:41:da:61:10:82:46:3d:1e:03:8b:f5: 1b:9b:e2:d6:b9:f7:88:9d:e9:17:7d:25:52:e1:97:75:cd:76: 97:0a:f5:33:ee:ce:d3:44:6e:b4:e1:26:33:be:86:f4:e3:b0: 80:4f:cb:95:ea:94:0a:c5:fd:20:7c:e2:fb:fa:65:bd:44:94: 5c:d1:16:7c:32:3e:30:1f:3b:bd:f2:78:ee:11:36:8e:fb:26: 85:3a:3f:25:e6:70:3d:4f:21:bb:31:ce:a9:9c:af:ad:b9:1a: 15:6c:c8:b3:77:a3:63:ba:10:b5:7f:02:ad:7c:06:88:89:c5: aa:d9:7e:a6:4f:b0:1a:b8:ec:bf:7f:3f:27:29:ea:dc:1b:90: 24:17:17:46:af:f3:f7:8f:ea:c2:72:f7:32:6a:6a:8e:17:e9: ae:bf:76:97:7f:7d:7e:26:74:00:f3:21:71:0b:5c:f7:13:45: 0e:c8:9e:49:75:95:c1:53:1f:f6:f0:97:fd:c8:30:18:10:c4: 98:4b:be:a8:cb:4f:6d:6e:78:ee:33:a7:6b:b9:d7:ee:a8:ee: 3f:58:53:33:07:d8:05:97:18:95:50:43:4d:ab:73:63:10:6f: f9:f9:b6:e1:c5:2a:1e:f9:5c:26:98:49:96:d9:82:d7:50:bc: af:a4:10:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDZDMTk0Njk3ODE2RjlCMTMwQkE1M0NGNEJFRTY3NjAx NTk0RThDQjEwHhcNMjUwNzE5MDY0MTM2WhcNMjUwNzI2MDY0MTM2WjAYMRYwFAYD VQQDEw02ODdiM2UyMC05YWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzvFiJzUGcV9UrNgbvqadHiPHRZU5qzamxzRIQq0s53KHGTo9io/CIoza5JOO Qa3THsPkX9N1c35W2C1MSjkLSOpY3m3C9iIAnB+ogcMfm6pwr4Z1OhlgsPhrpF1P kuR3tAK091dSbmBuewLvtaXhIX/elrPOqYeT40Zd6TIWY23IRabQmVmr6IS0PfrC GbarYyDRX1xXfZsSV7u0pDfMv/S/Y/iUO6nZxxalx5ONwQaUaMBaMxTUmefG/enK zLaLw97OW3UWbDc+Y081OtFbLbLMFaRxbfNm+SGTJrRHG8iprPh41blF5rAlrA1m 9e2ybaM+5kYYIxGEgbC8LI7FuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDNh4yVJ 9XuB7vBvwCDZyizhz5j/MB8GA1UdIwQYMBaAFGwZRpeBb5sTC6U89L7mdgFZToyx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wOUMwRDM2NjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9iQmxHbDRGdm14TUxwVHowdnVaMkFWbE9q TEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCbEdsNEZ2bXhNTHBUejB2dVoyQVZsT2pMRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Q0FGMS8wOUMwRDM2NjhBQUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9iQmxHbDRGdm14 TUxwVHowdnVaMkFWbE9qTEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjolQzYwkJQdphEIJGPR4Di/Ubm+LWufeInekXfSVS4Zd1zXaXCvUz 7s7TRG604SYzvob047CAT8uV6pQKxf0gfOL7+mW9RJRc0RZ8Mj4wHzu98njuETaO +yaFOj8l5nA9TyG7Mc6pnK+tuRoVbMizd6NjuhC1fwKtfAaIicWq2X6mT7AauOy/ fz8nKercG5AkFxdGr/P3j+rCcvcyamqOF+muv3aXf31+JnQA8yFxC1z3E0UOyJ5J dZXBUx/28Jf9yDAYEMSYS76oy09tbnjuM6drudfuqO4/WFMzB9gFlxiVUENNq3Nj EG/5+bbhxSoe+VwmmEmW2YLXULyvpBCf -----END CERTIFICATE-----Generated at Mon Jul 21 05:42:47 2025 by rpki-client