$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft File: bIAwUr-WwqtKuqntJqOptGOWBaM.mft (raw, json) Hash identifier: FX92014HgMb5S7rDiMsaiNQsKoR4Q5Pgcz2nwgqinVM= Subject key identifier: E8:22:57:83:3D:EA:BA:97:8D:24:84:F0:0E:79:0C:5D:52:B4:1F:A4 Authority key identifier: 6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3 Certificate issuer: /CN=A91F89A2/serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3 Certificate serial: 0114 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft Manifest number: 0112 Signing time: Mon 21 Jul 2025 05:02:23 +0000 Manifest this update: Mon 21 Jul 2025 05:02:22 +0000 Manifest next update: Mon 28 Jul 2025 05:02:22 +0000 Files and hashes: 1: bIAwUr-WwqtKuqntJqOptGOWBaM.crl (hash: +0FC8Ab+kyPU2imFu4Vmxblrc5vVyqPk+5sSPm0tKmU=) 2: 0FBF57D2F16611EEB75BE640C4F9AE02.roa (hash: pARn59mvC3EFmnc54zsYhH0vh0pFsHJXtSQmvirMetQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89A2, serialNumber=6C803052BF96C2AB4ABAA9ED26A3A9B4639605A3 Validity Not Before: Jul 21 05:02:22 2025 GMT Not After : Jul 28 05:02:22 2025 GMT Subject: CN=687dc9df-7c37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e1:13:02:10:5c:10:ed:2f:6c:87:8a:8c:23: 87:f1:4c:c7:41:44:01:cd:97:7f:a5:7d:b1:f3:ae: af:a8:69:37:e2:64:0f:f2:18:7b:77:88:0d:b8:d0: 3b:f9:45:7e:c1:fd:40:ba:63:6f:bf:44:12:d3:cf: e8:49:f6:4e:43:75:f5:59:52:cf:e0:62:32:22:38: 6a:ee:41:11:fa:1d:5f:9e:eb:64:0c:b0:ac:0e:b7: a6:a0:31:f0:ab:f1:76:02:30:34:c2:1d:d9:86:4a: 76:6d:fd:44:d9:f7:4c:b2:04:81:ac:4e:f3:06:da: 94:8e:51:17:87:ac:f1:ea:93:c5:c0:16:62:9f:9b: 8b:02:4b:dd:b8:10:6f:66:e3:e5:a0:73:95:b3:6b: 6f:3d:e8:b6:1b:37:24:84:21:a7:7a:15:14:72:24: 56:f5:0b:0a:4d:13:a8:e9:ad:2a:eb:16:1c:27:c0: 81:cb:52:ab:22:e3:d1:2a:13:48:4f:5a:63:1e:8f: b2:83:5e:fc:ce:48:10:49:c0:8b:ef:f9:d0:32:63: 3c:9d:52:15:7e:eb:bd:02:d6:ad:ef:35:8c:68:42: 5e:5c:64:c9:51:3c:81:1f:ae:91:e8:3e:1d:26:27: cc:f5:2a:41:a8:8c:80:94:0d:20:d2:a6:eb:cd:ab: 0b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:22:57:83:3D:EA:BA:97:8D:24:84:F0:0E:79:0C:5D:52:B4:1F:A4 X509v3 Authority Key Identifier: keyid:6C:80:30:52:BF:96:C2:AB:4A:BA:A9:ED:26:A3:A9:B4:63:96:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bIAwUr-WwqtKuqntJqOptGOWBaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89A2/BCBAE0CEC54111EEABC2C385C4F9AE02/bIAwUr-WwqtKuqntJqOptGOWBaM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:b6:8d:66:df:ac:a8:4c:12:15:de:98:e3:ee:17:f1:cf:1b: 42:c8:c5:f3:dc:03:29:e2:85:ac:91:b2:67:04:35:6b:62:1c: 4e:8e:b5:82:46:0b:43:3a:84:54:1a:21:14:2a:26:c9:82:fd: 50:8b:c4:fe:71:eb:2f:25:02:e1:c1:18:4c:6f:f7:b2:38:5f: 75:15:8c:77:bf:78:60:6b:0e:44:6a:34:78:c6:06:e8:c2:95: bc:6b:5d:ac:3f:ea:ce:6e:02:4b:94:61:04:e1:1d:ad:3e:db: eb:60:56:49:5a:98:72:4e:c7:03:4d:64:e1:d0:4e:95:fb:b2: 7f:69:9b:66:62:b4:61:6c:e3:10:11:5f:3b:d6:3b:9f:c9:22: 49:d2:85:76:d0:8f:e0:7f:1f:06:24:bf:92:64:ae:34:b0:45: ec:80:d7:7b:72:0f:12:cb:00:dd:68:aa:d6:0d:41:b4:26:63: 1e:3e:26:68:f2:da:03:4d:2b:2c:0b:63:ab:21:af:60:26:e9: d4:ae:17:76:e3:21:a4:b4:33:50:61:fc:00:e8:35:89:1a:e4: fc:84:b8:0a:3f:31:b3:ee:ee:cd:c4:5a:f5:73:c5:98:8a:20: 35:65:94:61:d6:e5:1b:c8:1d:1c:63:0e:fd:36:94:90:65:12: c6:55:65:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QTIxMTAvBgNVBAUTKDZDODAzMDUyQkY5NkMyQUI0QUJBQTlFRDI2QTNBOUI0 NjM5NjA1QTMwHhcNMjUwNzIxMDUwMjIyWhcNMjUwNzI4MDUwMjIyWjAYMRYwFAYD VQQDEw02ODdkYzlkZi03YzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzOETAhBcEO0vbIeKjCOH8UzHQUQBzZd/pX2x866vqGk34mQP8hh7d4gNuNA7 +UV+wf1AumNvv0QS08/oSfZOQ3X1WVLP4GIyIjhq7kER+h1fnutkDLCsDremoDHw q/F2AjA0wh3Zhkp2bf1E2fdMsgSBrE7zBtqUjlEXh6zx6pPFwBZin5uLAkvduBBv ZuPloHOVs2tvPei2GzckhCGnehUUciRW9QsKTROo6a0q6xYcJ8CBy1KrIuPRKhNI T1pjHo+yg178zkgQScCL7/nQMmM8nVIVfuu9Atat7zWMaEJeXGTJUTyBH66R6D4d JifM9SpBqIyAlA0g0qbrzasLZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOgiV4M9 6rqXjSSE8A55DF1StB+kMB8GA1UdIwQYMBaAFGyAMFK/lsKrSrqp7SajqbRjlgWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlBMi9CQ0JBRTBDRUM1 NDExMUVFQUJDMkMzODVDNEY5QUUwMi9iSUF3VXItV3dxdEt1cW50SnFPcHRHT1dC YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JJQXdVci1Xd3F0S3VxbnRKcU9wdEdPV0JhTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODlBMi9CQ0JBRTBDRUM1NDExMUVFQUJDMkMzODVDNEY5QUUwMi9iSUF3VXItV3dx dEt1cW50SnFPcHRHT1dCYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWto1m36yoTBIV3pjj7hfxzxtCyMXz3AMp4oWskbJnBDVrYhxOjrWC RgtDOoRUGiEUKibJgv1Qi8T+cesvJQLhwRhMb/eyOF91FYx3v3hgaw5EajR4xgbo wpW8a12sP+rObgJLlGEE4R2tPtvrYFZJWphyTscDTWTh0E6V+7J/aZtmYrRhbOMQ EV871jufySJJ0oV20I/gfx8GJL+SZK40sEXsgNd7cg8SywDdaKrWDUG0JmMePiZo 8toDTSssC2OrIa9gJunUrhd24yGktDNQYfwA6DWJGuT8hLgKPzGz7u7NxFr1c8WY iiA1ZZRh1uUbyB0cYw79NpSQZRLGVWWo -----END CERTIFICATE-----Generated at Mon Jul 21 06:59:35 2025 by rpki-client