$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft File: BUM8OuqKSXAsmoLuyV0WtVA86mA.mft (raw, json) Hash identifier: DfCuZnsf9GPLy8BeE6de6/XtxPHvYDJW7QvNYO9qzIE= Subject key identifier: B8:BE:4B:49:5E:FC:7C:4C:D3:93:18:A8:B3:58:B0:59:8C:36:22:5E Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 Certificate issuer: /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Certificate serial: 0D6C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft Manifest number: 0D4A Signing time: Fri 18 Jul 2025 18:10:21 +0000 Manifest this update: Fri 18 Jul 2025 18:10:20 +0000 Manifest next update: Fri 25 Jul 2025 18:10:20 +0000 Files and hashes: 1: BUM8OuqKSXAsmoLuyV0WtVA86mA.crl (hash: 0ko44gl4M/q71tNih0T68Udrq9QF9H3U5XeRfkqLhsc=) 2: 83ECD7C40CCA11ED97820077C4F9AE02.roa (hash: tsWCAJh3hDUuF0jt3mDhnNo48pJ1cTxWnbkE+ZQXBxw=) 3: 0E3F36D8C43D11EBAB31777FC4F9AE02.roa (hash: BThAKf2icEZsZqpXgnFl9VpqvpRKYGs7e0515Blb0yw=) 4: 1F4E1CC014D311EA81309110C4F9AE02.roa (hash: zPumQuSa3V5Do5kU4HAy8QEzfyGrDVZPMvaKh+jhJxk=) 5: E6F0F39214CE11EA9E740182C4F9AE02.roa (hash: zpETj3vTU+4JGJFNH2bJangxDJpoV//my0UXRjaLeMk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3436 (0xd6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Validity Not Before: Jul 18 18:10:20 2025 GMT Not After : Jul 25 18:10:20 2025 GMT Subject: CN=687a8e0d-2268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5e:e0:92:ed:6d:36:0c:85:83:d0:d3:4d:e4: 57:51:35:35:65:0a:be:d8:79:7b:83:51:a1:1c:be: 19:17:30:e6:36:cd:08:8c:d8:ea:c1:c5:bb:c2:1f: 91:e7:49:7b:af:98:69:0d:4e:f0:a7:75:38:8c:7a: c4:59:f3:1b:09:4a:26:a8:f1:ca:31:0c:39:f0:c2: ce:20:74:60:49:7b:9e:d4:cc:e7:cd:e4:b4:7c:60: 14:3f:71:af:da:e1:34:61:f6:38:ff:fd:b2:93:12: a3:8f:16:ee:bb:2d:35:4c:b0:94:44:69:f1:47:82: bc:52:4c:90:7c:98:71:86:75:21:52:8f:d0:26:ec: e2:86:3e:ca:3e:ca:09:c5:65:15:1e:af:6a:37:38: f4:bc:a1:dc:46:5f:be:56:56:1b:8d:12:48:a5:6f: 00:d5:82:bf:c7:96:d0:7e:0f:bd:ff:32:44:c3:e5: 7f:63:ff:9b:db:45:94:6b:7a:b5:c7:df:76:3d:9c: 4d:e6:1a:95:b4:f7:fc:66:ed:41:2b:1f:81:6d:f5: 8e:ab:e1:f2:dc:78:c3:bf:38:43:17:78:29:4d:54: 98:6f:1f:8f:2e:7f:98:11:ec:0f:f5:bf:b7:22:b5: a3:56:44:ee:5c:6e:6c:93:b0:93:04:48:0b:1e:f4: d1:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BE:4B:49:5E:FC:7C:4C:D3:93:18:A8:B3:58:B0:59:8C:36:22:5E X509v3 Authority Key Identifier: keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:03:bd:23:25:34:0c:53:ac:46:7e:44:3f:80:60:f1:35:13: 5e:ae:c2:d0:a7:ac:9a:ab:78:42:cb:22:33:2a:09:a0:ce:73: f1:7f:67:b6:9f:cc:54:09:b6:10:b9:12:4f:16:72:34:29:eb: 82:ff:02:f5:bf:ff:c3:ea:ca:38:83:47:04:0d:12:cb:94:ec: 28:de:6d:15:5a:b6:c8:69:70:58:24:68:30:06:b9:ab:45:08: d3:02:f3:5c:a5:ec:e8:27:eb:a4:ad:95:f7:b6:16:16:d9:2c: 58:33:00:65:df:64:a8:04:74:62:ab:f2:e0:82:60:ac:0e:7f: f7:70:36:15:8b:e4:44:df:f8:58:96:75:85:2b:ad:fb:08:4f: 76:9e:d1:d0:ba:34:ab:8c:eb:6a:69:58:67:4b:e8:08:a8:6c: 28:fc:f3:d9:e9:53:c6:0d:01:f2:1f:f0:7e:1c:d2:9f:1c:5e: 2c:de:37:34:c7:cb:0f:02:a6:f2:d9:e1:e0:64:b6:f3:6c:c3: 8d:fc:b4:4a:ec:92:88:2b:15:0d:e3:ef:4f:14:ec:1f:2a:38: 3e:cd:48:11:9b:d0:07:09:32:62:06:44:6f:8e:f4:3a:15:77: e5:89:07:b0:7f:cc:25:ad:df:9b:e7:6c:fa:72:38:2b:ca:6a: 6f:44:c6:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKDA1NDMzQzNBRUE4QTQ5NzAyQzlBODJFRUM5NUQxNkI1 NTAzQ0VBNjAwHhcNMjUwNzE4MTgxMDIwWhcNMjUwNzI1MTgxMDIwWjAYMRYwFAYD VQQDEw02ODdhOGUwZC0yMjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA317gku1tNgyFg9DTTeRXUTU1ZQq+2Hl7g1GhHL4ZFzDmNs0IjNjqwcW7wh+R 50l7r5hpDU7wp3U4jHrEWfMbCUomqPHKMQw58MLOIHRgSXue1MznzeS0fGAUP3Gv 2uE0YfY4//2ykxKjjxbuuy01TLCURGnxR4K8UkyQfJhxhnUhUo/QJuzihj7KPsoJ xWUVHq9qNzj0vKHcRl++VlYbjRJIpW8A1YK/x5bQfg+9/zJEw+V/Y/+b20WUa3q1 x992PZxN5hqVtPf8Zu1BKx+BbfWOq+Hy3HjDvzhDF3gpTVSYbx+PLn+YEewP9b+3 IrWjVkTuXG5sk7CTBEgLHvTRNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLi+S0le /HxM05MYqLNYsFmMNiJeMB8GA1UdIwQYMBaAFAVDPDrqiklwLJqC7sldFrVQPOpg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xNTBCRjY5MEQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NYQXNtb0x1eVYwV3RWQTg2 bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JVTThPdXFLU1hBc21vTHV5VjBXdFZBODZtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZBMC8xNTBCRjY5MEQ4Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NY QXNtb0x1eVYwV3RWQTg2bUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZA70jJTQMU6xGfkQ/gGDxNRNersLQp6yaq3hCyyIzKgmgznPxf2e2 n8xUCbYQuRJPFnI0KeuC/wL1v//D6so4g0cEDRLLlOwo3m0VWrbIaXBYJGgwBrmr RQjTAvNcpezoJ+ukrZX3thYW2SxYMwBl32SoBHRiq/LggmCsDn/3cDYVi+RE3/hY lnWFK637CE92ntHQujSrjOtqaVhnS+gIqGwo/PPZ6VPGDQHyH/B+HNKfHF4s3jc0 x8sPAqby2eHgZLbzbMON/LRK7JKIKxUN4+9PFOwfKjg+zUgRm9AHCTJiBkRvjvQ6 FXfliQewf8wlrd+b52z6cjgrympvRMZN -----END CERTIFICATE-----Generated at Sun Jul 20 15:10:48 2025 by rpki-client