$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft File: bPYEPvYahE8I4lOhk9XZRlSWJ50.mft (raw, json) Hash identifier: ZsvxTRQlRg2LgeqYJT+wmUkJQ92n2UP++qj+cJ++id4= Subject key identifier: D8:D3:42:D9:00:32:23:35:B9:BA:CF:C7:E3:E0:FA:51:66:C2:E6:1C Authority key identifier: 6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D Certificate issuer: /CN=A91F3D37/serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Certificate serial: 01A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft Manifest number: 01A6 Signing time: Sat 19 Jul 2025 03:27:01 +0000 Manifest this update: Sat 19 Jul 2025 03:27:00 +0000 Manifest next update: Sat 26 Jul 2025 03:27:00 +0000 Files and hashes: 1: bPYEPvYahE8I4lOhk9XZRlSWJ50.crl (hash: 08Gf6TTZOAZrO8hid7KnnL2JUfchiDnmr8zDXmojmto=) 2: 6F67CF8CDCF111ED9828F232C4F9AE02.roa (hash: UUhAaQeYrl7H0iCSeqj7JAOZrw6JcIfsjlzbvaWf61k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3D37, serialNumber=6CF6043EF61A844F08E253A193D5D9465496279D Validity Not Before: Jul 19 03:27:00 2025 GMT Not After : Jul 26 03:27:00 2025 GMT Subject: CN=687b1084-7079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7b:f4:90:96:aa:39:fd:d6:08:3e:a6:66:85: c6:46:7d:fe:41:a6:27:d4:d6:04:4a:0e:0c:55:e8: bc:3a:59:26:59:f9:2f:34:79:9e:c7:06:dc:79:52: 20:fd:92:0b:d0:28:62:86:b5:79:bc:67:98:09:ae: ce:22:b0:8a:45:45:6b:90:76:48:c5:7b:31:2d:d1: 17:97:33:aa:13:cc:b0:b5:e1:d8:56:ec:0a:d3:d2: 85:cb:5a:4b:f5:5b:27:47:c0:a7:50:54:aa:77:4d: d2:c6:10:4e:fb:20:d3:5b:59:2f:eb:22:21:3d:1f: ce:77:6f:79:b1:ca:9f:54:32:a5:5c:f0:0d:bc:41: 3a:f0:44:c0:1f:b8:ce:56:e4:7c:41:b2:65:04:11: a9:41:74:b9:2c:61:52:aa:a1:73:f6:1d:c1:20:78: 5e:95:e1:5d:7c:6a:18:a4:9a:ce:6f:40:9e:c8:8a: 91:93:56:cd:a2:10:02:96:4a:19:9f:69:29:70:1e: 89:9c:6d:5d:90:ad:52:51:02:01:07:c6:31:5e:19: 18:9f:da:f8:dd:a0:c2:59:2d:f1:15:e0:01:9d:20: 7a:79:cf:36:78:ae:72:71:73:a1:5c:a5:97:a3:92: a6:2f:33:97:d8:10:6d:4b:0e:5c:bb:eb:1e:70:d5: 0d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D3:42:D9:00:32:23:35:B9:BA:CF:C7:E3:E0:FA:51:66:C2:E6:1C X509v3 Authority Key Identifier: keyid:6C:F6:04:3E:F6:1A:84:4F:08:E2:53:A1:93:D5:D9:46:54:96:27:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bPYEPvYahE8I4lOhk9XZRlSWJ50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3D37/5EE9782ADCEE11ED8C38D031C4F9AE02/bPYEPvYahE8I4lOhk9XZRlSWJ50.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:68:6f:85:e4:cf:52:34:d1:8e:b2:83:48:8b:50:63:0b:75: 85:e5:94:df:f5:07:df:ef:4a:e4:62:75:33:22:56:ea:2e:9a: 20:bd:a9:78:50:79:75:eb:6f:eb:3d:91:94:ed:6d:e3:fa:2d: bf:b5:33:21:4d:c1:85:f7:24:16:ab:47:5e:dc:04:36:07:16: 04:ab:3a:cd:fc:55:86:88:3d:fe:63:77:d0:d5:ec:ab:45:f9: 0c:92:be:77:2f:4b:7f:f7:be:7f:08:ac:ff:6d:43:fd:7f:33: 02:d2:5e:ee:c6:7a:9a:d1:d9:40:7e:b2:5d:f8:26:93:5d:fd: ba:b4:31:a9:3e:39:26:43:0a:ad:a8:c7:c4:aa:05:26:13:c4: a3:db:96:be:fb:1a:a6:a4:3a:d7:55:ec:ae:e0:ef:77:5f:cd: aa:26:77:49:32:63:39:3c:b6:34:eb:36:b3:17:fa:e1:67:d7: d4:a8:be:2a:78:64:8f:96:f6:4c:55:db:fb:e6:01:d0:e3:4f: ba:87:67:93:b9:eb:e5:56:26:1c:2e:74:a2:8f:82:60:cf:ea: f3:61:ca:c5:26:ea:79:1d:f1:05:bb:47:35:87:33:15:d4:65: 9c:d0:29:7d:ba:d3:1c:19:90:ff:e6:3e:d1:4b:f7:26:e9:f4: c1:11:d5:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNEMzcxMTAvBgNVBAUTKDZDRjYwNDNFRjYxQTg0NEYwOEUyNTNBMTkzRDVEOTQ2 NTQ5NjI3OUQwHhcNMjUwNzE5MDMyNzAwWhcNMjUwNzI2MDMyNzAwWjAYMRYwFAYD VQQDEw02ODdiMTA4NC03MDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw3v0kJaqOf3WCD6mZoXGRn3+QaYn1NYESg4MVei8OlkmWfkvNHmexwbceVIg /ZIL0ChihrV5vGeYCa7OIrCKRUVrkHZIxXsxLdEXlzOqE8ywteHYVuwK09KFy1pL 9VsnR8CnUFSqd03SxhBO+yDTW1kv6yIhPR/Od295scqfVDKlXPANvEE68ETAH7jO VuR8QbJlBBGpQXS5LGFSqqFz9h3BIHheleFdfGoYpJrOb0CeyIqRk1bNohAClkoZ n2kpcB6JnG1dkK1SUQIBB8YxXhkYn9r43aDCWS3xFeABnSB6ec82eK5ycXOhXKWX o5KmLzOX2BBtSw5cu+secNUNMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjTQtkA MiM1ubrPx+Pg+lFmwuYcMB8GA1UdIwQYMBaAFGz2BD72GoRPCOJToZPV2UZUlied MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0QzNy81RUU5NzgyQURD RUUxMUVEOEMzOEQwMzFDNEY5QUUwMi9iUFlFUHZZYWhFOEk0bE9oazlYWlJsU1dK NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JQWUVQdllhaEU4STRsT2hrOVhaUmxTV0o1MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0QzNy81RUU5NzgyQURDRUUxMUVEOEMzOEQwMzFDNEY5QUUwMi9iUFlFUHZZYWhF OEk0bE9oazlYWlJsU1dKNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAiaG+F5M9SNNGOsoNIi1BjC3WF5ZTf9Qff70rkYnUzIlbqLpogval4 UHl162/rPZGU7W3j+i2/tTMhTcGF9yQWq0de3AQ2BxYEqzrN/FWGiD3+Y3fQ1eyr RfkMkr53L0t/975/CKz/bUP9fzMC0l7uxnqa0dlAfrJd+CaTXf26tDGpPjkmQwqt qMfEqgUmE8Sj25a++xqmpDrXVeyu4O93X82qJndJMmM5PLY06zazF/rhZ9fUqL4q eGSPlvZMVdv75gHQ40+6h2eTuevlViYcLnSij4Jgz+rzYcrFJup5HfEFu0c1hzMV 1GWc0Cl9utMcGZD/5j7RS/cm6fTBEdV5 -----END CERTIFICATE-----Generated at Sun Jul 20 06:45:35 2025 by rpki-client