$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft File: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft (raw, json) Hash identifier: gf4vAfzSlIyEznirscaEWDtI0BpMcCZwNLX/Fa5sW74= Subject key identifier: AC:88:72:77:43:7F:29:A2:CE:FC:33:96:AC:6A:AD:8A:2F:63:10:40 Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 Certificate issuer: /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Certificate serial: BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft Manifest number: BD Signing time: Sat 19 Jul 2025 06:06:21 +0000 Manifest this update: Sat 19 Jul 2025 06:06:20 +0000 Manifest next update: Sat 26 Jul 2025 06:06:20 +0000 Files and hashes: 1: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl (hash: ecU3IZeUApoBxxCein5cWVBjdw+wFnb8DpuxZgxLwNU=) 2: C2838C8245B011EFAE60CC76C4F9AE02.roa (hash: dwidYpMLAJTM9jddkunL1qdnHKOnW/Pf1EZaeXyq6Fk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 191 (0xbf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Validity Not Before: Jul 19 06:06:20 2025 GMT Not After : Jul 26 06:06:20 2025 GMT Subject: CN=687b35dd-92dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:30:5d:b7:74:40:fc:47:74:0a:f3:6d:8c: f3:1a:60:7f:bf:ed:65:ec:06:f9:f1:b0:8f:21:52: f6:3a:4a:dd:97:21:48:79:9c:23:ab:08:d2:33:f4: 4a:25:7f:9f:cf:83:6c:2b:79:6e:76:2f:11:68:79: dd:9a:72:00:68:0d:d8:66:ad:8f:1c:61:4e:5d:60: d5:96:da:0e:c5:18:84:66:50:e2:a3:73:14:9f:c0: 84:46:e6:3d:e9:98:af:bf:68:86:0a:15:12:13:00: 15:33:93:8b:d2:71:06:97:17:89:69:aa:94:74:af: 36:d6:4f:fa:27:d7:02:0c:25:19:e5:89:1b:d3:eb: e0:fe:27:fd:a8:cb:a9:0c:41:61:3b:12:d1:58:25: 3e:5d:f2:52:5a:38:78:3d:f0:40:13:9f:ac:9d:1e: e1:d3:f7:2f:49:06:57:97:f1:87:16:f1:bd:db:77: f1:d4:47:30:05:07:ba:1e:57:91:37:52:10:d7:dd: 25:ed:93:4d:0c:03:66:d2:7a:49:6e:68:d6:0d:07: 2e:5a:3c:e3:2b:69:20:8a:3f:a1:ab:84:ef:b6:7c: 56:03:bf:44:b9:f1:9b:1c:14:3f:cd:c0:73:d9:64: 14:df:e6:f3:9d:c3:f7:45:25:ae:29:c2:bc:04:a5: 25:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:88:72:77:43:7F:29:A2:CE:FC:33:96:AC:6A:AD:8A:2F:63:10:40 X509v3 Authority Key Identifier: keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:22:0c:16:97:f0:da:a7:90:eb:8f:2d:0f:7f:4f:c8:8d:0f: ce:d9:88:c9:4f:0d:2b:56:c5:53:a9:b4:df:0a:39:88:56:15: c1:39:8e:08:f7:14:7a:98:e5:4b:e5:cd:22:2a:45:b8:60:c5: 5c:11:4a:d3:96:b8:4c:59:5e:a6:d3:3b:71:2f:f6:c8:af:4c: 81:97:ed:a7:97:9f:0e:86:3f:f1:fa:b4:eb:2f:b4:3d:53:84: 65:aa:c1:1c:4c:53:68:df:50:6a:2b:92:59:bf:46:f1:d6:48: 49:4a:b2:31:a3:e1:87:5f:ec:4f:f8:e8:3b:6f:47:b8:aa:ba: 68:71:f6:d2:1d:f6:68:06:b6:d7:1f:0a:90:bf:e1:d5:9c:a7: b3:af:70:80:59:b7:33:5a:f1:c3:cd:5c:82:87:83:45:c0:42: ea:e2:5c:90:1c:c5:3e:88:e1:eb:39:5a:2d:d6:45:82:29:58: 4c:d5:b1:c5:8f:4d:4e:8d:b8:55:d6:e2:05:fa:b7:8a:70:ec: 18:12:63:a9:74:b5:83:f7:3d:ea:60:16:d0:e0:7b:d2:dd:e8: bf:80:d4:17:8a:97:11:86:7a:04:9b:40:74:c1:d4:1e:f7:bd: 6e:40:b6:e6:cd:39:01:a7:3b:da:1b:95:6d:b7:c7:d7:75:cb: 7d:d9:9d:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKDA3MjQ0QTk5NENEQzRCOTM4MDc0NzExQzQyNDhENDlG OUQ1MEQ4MjcwHhcNMjUwNzE5MDYwNjIwWhcNMjUwNzI2MDYwNjIwWjAYMRYwFAYD VQQDEw02ODdiMzVkZC05MmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGEwXbd0QPxHdArzbYzzGmB/v+1l7Ab58bCPIVL2OkrdlyFIeZwjqwjSM/RK JX+fz4NsK3ludi8RaHndmnIAaA3YZq2PHGFOXWDVltoOxRiEZlDio3MUn8CERuY9 6Zivv2iGChUSEwAVM5OL0nEGlxeJaaqUdK821k/6J9cCDCUZ5Ykb0+vg/if9qMup DEFhOxLRWCU+XfJSWjh4PfBAE5+snR7h0/cvSQZXl/GHFvG923fx1EcwBQe6HleR N1IQ190l7ZNNDANm0npJbmjWDQcuWjzjK2kgij+hq4TvtnxWA79EufGbHBQ/zcBz 2WQU3+bzncP3RSWuKcK8BKUl1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKyIcndD fymizvwzlqxqrYovYxBAMB8GA1UdIwQYMBaAFAckSplM3EuTgHRxHEJI1J+dUNgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS9GQzY2RjVBRTQ1 QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1T0FkSEVjUWtqVW41MVEy Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J5UkttVXpjUzVPQWRIRWNRa2pVbjUxUTJDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUU4NS9GQzY2RjVBRTQ1QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1 T0FkSEVjUWtqVW41MVEyQ2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHIgwWl/Dap5Drjy0Pf0/IjQ/O2YjJTw0rVsVTqbTfCjmIVhXBOY4I 9xR6mOVL5c0iKkW4YMVcEUrTlrhMWV6m0ztxL/bIr0yBl+2nl58Ohj/x+rTrL7Q9 U4RlqsEcTFNo31BqK5JZv0bx1khJSrIxo+GHX+xP+Og7b0e4qrpocfbSHfZoBrbX HwqQv+HVnKezr3CAWbczWvHDzVyCh4NFwELq4lyQHMU+iOHrOVot1kWCKVhM1bHF j01OjbhV1uIF+reKcOwYEmOpdLWD9z3qYBbQ4HvS3ei/gNQXipcRhnoEm0B0wdQe 971uQLbmzTkBpzvaG5Vtt8fXdct92Z0x -----END CERTIFICATE-----Generated at Sun Jul 20 07:29:10 2025 by rpki-client