$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json) Hash identifier: LUnGyJ84Nk+EshXQ0yDnzLm3zPJZfGslZDI3lFRavAc= Subject key identifier: 22:7E:BA:F4:C4:16:CD:B8:91:25:FA:7D:AE:07:CC:19:47:47:6D:DF Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 Certificate issuer: /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Certificate serial: 0788 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft Manifest number: 0F02 Signing time: Fri 18 Jul 2025 21:44:25 +0000 Manifest this update: Fri 18 Jul 2025 21:44:25 +0000 Manifest next update: Fri 25 Jul 2025 21:44:25 +0000 Files and hashes: 1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: 8tdnh/5mR5Wlk9KL2/sX9hKEzXA+/8dUleSZX8st+/U=) 2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: hkxmNGokisQG0mbBKypviapB/RNUZ9nsMjdRwBRak9A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 21:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1928 (0x788) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Validity Not Before: Jul 18 21:44:25 2025 GMT Not After : Jul 25 21:44:25 2025 GMT Subject: CN=687ac039-3e14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:e5:ae:9a:a0:57:df:b8:d8:5c:5a:e8:8b: 76:c5:7c:d9:e4:3c:92:e2:70:f2:c6:29:f4:e6:d7: ba:ed:43:85:26:04:79:65:19:11:ac:00:e0:bf:6e: b6:b0:6e:9c:b0:21:f5:84:a0:83:f1:f4:27:c9:e2: eb:86:fc:f9:c9:b7:cf:89:b9:f1:34:34:65:16:7e: 8d:bc:aa:a7:de:25:ac:9c:d4:9d:3a:88:31:ee:f4: 35:39:2e:da:7d:5e:4b:e8:cc:28:f7:79:ad:da:f4: d0:57:88:ef:90:40:1a:b3:85:be:dd:1e:f0:88:ff: fc:59:f2:46:48:e4:89:d2:60:13:2a:7d:d3:b6:09: 06:2b:47:63:48:00:5d:00:7f:e7:16:32:8c:bc:f4: a0:3b:1d:56:43:cd:ca:6b:75:c9:f1:6e:a6:59:84: 07:ef:6a:27:0d:6f:ee:c3:c0:d9:1f:5e:d2:77:c4: 02:17:ae:ee:3c:bc:bf:12:be:6f:e7:39:9f:50:7a: e3:66:1b:ba:b1:f0:17:9e:1d:18:fe:73:3e:a3:42: 0f:1b:db:a2:74:2a:a6:ad:a3:f5:a7:57:72:bf:d4: e4:96:1a:e9:35:8a:31:3f:b2:ff:5c:73:f0:87:32: d0:f4:d4:d5:07:d8:74:ff:c4:90:27:02:df:7c:7c: 62:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:7E:BA:F4:C4:16:CD:B8:91:25:FA:7D:AE:07:CC:19:47:47:6D:DF X509v3 Authority Key Identifier: keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:6f:04:51:4d:dc:66:48:02:54:71:34:47:3e:c7:55:54:61: 6f:37:9b:2e:66:e4:f8:58:b6:57:39:11:59:8e:94:bd:40:79: 3c:b0:a5:00:f4:77:99:85:88:e2:05:72:ba:46:92:ad:2b:fd: 1c:93:c7:f9:96:f8:b2:2e:1b:2d:e7:87:cd:50:8d:8b:b3:ff: 1c:97:01:3b:a3:21:63:95:47:4f:c4:c6:35:04:76:6e:4d:ec: 52:3a:c1:f3:c0:c5:63:63:b9:55:f5:1a:33:a9:9b:ef:71:5b: 85:f1:32:e7:e9:40:c9:79:d8:0d:9d:e8:4d:d1:f0:a1:67:ee: 7d:07:c6:5e:20:2f:96:55:fa:2a:bf:06:14:94:b9:fb:c7:c1: 07:3b:ca:b4:c7:04:3b:34:21:b4:a6:04:27:54:d8:28:8b:2d: 06:a3:9b:65:bf:68:fd:b8:30:44:7d:6a:b1:35:86:58:ec:bc: 22:6b:ce:05:8e:92:dd:04:ac:ff:8e:6d:d0:34:2a:eb:05:61: f3:dc:56:31:fe:ef:4a:16:28:c1:38:1f:a8:46:2c:18:9f:61: b4:86:87:e8:96:75:61:49:29:b1:a6:87:dd:f6:bc:f5:31:f5: 66:d1:01:2c:56:d3:10:94:3e:bc:76:9c:55:4c:f7:28:1d:ed: 20:73:95:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKDQ0MTZFODk4NThEQTY3N0IwQ0RBMzNCODdCMkU4QzhB RkQxQzYwNzgwHhcNMjUwNzE4MjE0NDI1WhcNMjUwNzI1MjE0NDI1WjAYMRYwFAYD VQQDEw02ODdhYzAzOS0zZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwQflrpqgV9+42Fxa6It2xXzZ5DyS4nDyxin05te67UOFJgR5ZRkRrADgv262 sG6csCH1hKCD8fQnyeLrhvz5ybfPibnxNDRlFn6NvKqn3iWsnNSdOogx7vQ1OS7a fV5L6Mwo93mt2vTQV4jvkEAas4W+3R7wiP/8WfJGSOSJ0mATKn3TtgkGK0djSABd AH/nFjKMvPSgOx1WQ83Ka3XJ8W6mWYQH72onDW/uw8DZH17Sd8QCF67uPLy/Er5v 5zmfUHrjZhu6sfAXnh0Y/nM+o0IPG9uidCqmraP1p1dyv9TklhrpNYoxP7L/XHPw hzLQ9NTVB9h0/8SQJwLffHxioQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJ+uvTE Fs24kSX6fa4HzBlHR23fMB8GA1UdIwQYMBaAFEQW6JhY2md7DNozuHsujIr9HGB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVozc00yak80ZXk2TWl2MGNZ SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCYm9tRmphWjNzTTJqTzRleTZNaXYwY1lIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVoz c00yak80ZXk2TWl2MGNZSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCbwRRTdxmSAJUcTRHPsdVVGFvN5suZuT4WLZXORFZjpS9QHk8sKUA 9HeZhYjiBXK6RpKtK/0ck8f5lviyLhst54fNUI2Ls/8clwE7oyFjlUdPxMY1BHZu TexSOsHzwMVjY7lV9RozqZvvcVuF8TLn6UDJedgNnehN0fChZ+59B8ZeIC+WVfoq vwYUlLn7x8EHO8q0xwQ7NCG0pgQnVNgoiy0Go5tlv2j9uDBEfWqxNYZY7Lwia84F jpLdBKz/jm3QNCrrBWHz3FYx/u9KFijBOB+oRiwYn2G0hofolnVhSSmxpofd9rz1 MfVm0QEsVtMQlD68dpxVTPcoHe0gc5UL -----END CERTIFICATE-----Generated at Sun Jul 20 03:15:59 2025 by rpki-client