$ rpki-client -vvf rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft File: BgI9tGNNXG41YYCoL7vPgLlHir4.mft (raw, json) Hash identifier: VqokjPhPDZUmjXNngdpY4sxn7stqG8zyjowfPWL1SEU= Subject key identifier: DB:BA:C0:39:2A:C2:72:EB:10:7D:25:F5:2A:75:E5:38:C0:2E:70:FB Authority key identifier: 06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE Certificate issuer: /CN=A91490F7/serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE Certificate serial: 017F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft Manifest number: 017F Signing time: Thu 21 Aug 2025 03:47:29 +0000 Manifest this update: Thu 21 Aug 2025 03:47:29 +0000 Manifest next update: Thu 28 Aug 2025 03:47:29 +0000 Files and hashes: 1: BgI9tGNNXG41YYCoL7vPgLlHir4.crl (hash: nv6VsRAN7nyLmHxIR11wXqsOGkaimJwAo6SdSWO29a0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 03:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 383 (0x17f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91490F7, serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE Validity Not Before: Aug 21 03:47:29 2025 GMT Not After : Aug 28 03:47:29 2025 GMT Subject: CN=68a696d1-a21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:13:9e:96:95:60:30:23:06:90:be:b9:0d:d8: f7:7b:75:14:f3:61:e2:0a:ea:ac:27:c1:7a:22:0e: 0e:29:50:65:98:b9:70:72:8d:7c:b2:a8:5d:17:b5: 8b:37:8e:a2:b3:03:ac:8d:5f:3a:63:9b:45:3a:64: ac:ca:5d:a0:13:0d:a4:ad:d5:2e:c5:1e:55:96:bf: 0b:18:1f:98:55:bf:70:3e:92:cf:7b:06:66:58:86: 28:01:43:12:9d:81:8f:07:ad:e7:df:fe:f4:3b:d0: e9:0e:75:98:f5:dc:26:6c:ad:5a:0c:17:91:b2:1c: 9d:40:9b:d5:97:47:7a:da:f5:a6:1d:9f:0e:85:1b: 1a:66:1a:4e:1e:37:bf:b7:2e:10:df:37:00:73:48: b4:29:a5:9e:4f:f2:e2:4a:c6:2d:e5:df:b7:8f:0d: b4:9b:31:83:5d:15:d3:22:63:e6:53:fb:67:56:e9: b7:27:65:58:ce:04:80:d6:fc:0b:18:8a:9b:87:64: 7e:ff:82:64:c6:45:b2:ad:c3:51:fc:85:35:a3:40: ec:cc:38:7a:2f:be:7d:8c:61:74:0c:56:22:e2:75: 7a:0b:e2:6e:66:eb:fa:a6:c4:95:c0:2b:ac:e5:44: 9d:0d:b0:e2:ea:e8:09:15:69:c9:82:19:cb:bf:a7: ba:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BA:C0:39:2A:C2:72:EB:10:7D:25:F5:2A:75:E5:38:C0:2E:70:FB X509v3 Authority Key Identifier: keyid:06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:f2:80:2d:7e:e8:ab:f8:92:68:27:f4:b1:df:7f:7d:67:6d: 8a:4c:1d:78:fb:ba:d4:4a:21:5d:56:76:8b:c2:8d:40:0b:90: 4d:b9:4e:f1:7e:ea:43:c6:18:50:b3:69:b6:f9:bc:b3:6b:21: 69:41:16:8b:c7:90:93:bf:0f:13:5f:06:86:c9:63:c7:e7:92: a9:47:0c:ca:19:fa:79:53:0e:e6:49:aa:89:af:71:25:8a:b9: 8f:18:b0:3e:1a:2c:7c:1a:e1:70:bb:c9:63:42:db:53:7f:ec: 63:7b:04:e4:6b:59:a1:29:07:c6:0c:86:03:98:4c:3e:0b:16: bf:dd:15:a2:05:05:6e:96:fe:21:f2:d9:9f:16:14:4e:b8:6b: 1a:5a:20:0d:8d:7d:f1:39:2e:e2:36:8d:41:d0:0f:a8:4e:b8: 2a:0e:24:97:f9:b6:9c:db:47:70:51:56:a0:b9:91:ff:e9:84: d8:0a:0f:b2:05:39:fb:df:bb:5d:96:9b:45:a6:b1:7a:b6:a0: 6d:fe:d4:0a:c2:50:99:79:47:20:36:22:4e:fd:90:83:9c:90: b1:13:c1:34:2b:de:92:79:69:d2:36:c7:31:f6:70:25:c7:71: 7b:60:62:20:c7:f2:49:5b:19:5d:56:e7:ba:f7:b0:92:69:13: 86:07:25:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwRjcxMTAvBgNVBAUTKDA2MDIzREI0NjM0RDVDNkUzNTYxODBBODJGQkJDRjgw Qjk0NzhBQkUwHhcNMjUwODIxMDM0NzI5WhcNMjUwODI4MDM0NzI5WjAYMRYwFAYD VQQDEw02OGE2OTZkMS1hMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3BOelpVgMCMGkL65Ddj3e3UU82HiCuqsJ8F6Ig4OKVBlmLlwco18sqhdF7WL N46iswOsjV86Y5tFOmSsyl2gEw2krdUuxR5Vlr8LGB+YVb9wPpLPewZmWIYoAUMS nYGPB63n3/70O9DpDnWY9dwmbK1aDBeRshydQJvVl0d62vWmHZ8OhRsaZhpOHje/ ty4Q3zcAc0i0KaWeT/LiSsYt5d+3jw20mzGDXRXTImPmU/tnVum3J2VYzgSA1vwL GIqbh2R+/4JkxkWyrcNR/IU1o0DszDh6L759jGF0DFYi4nV6C+JuZuv6psSVwCus 5USdDbDi6ugJFWnJghnLv6e6GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNu6wDkq wnLrEH0l9Sp15TjALnD7MB8GA1UdIwQYMBaAFAYCPbRjTVxuNWGAqC+7z4C5R4q+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTBGNy9EOEQzQjRGMjM1 QTkxMUVFOTRCNDhENTdDNEY5QUUwMi9CZ0k5dEdOTlhHNDFZWUNvTDd2UGdMbEhp cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnSTl0R05OWEc0MVlZQ29MN3ZQZ0xsSGlyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTBGNy9EOEQzQjRGMjM1QTkxMUVFOTRCNDhENTdDNEY5QUUwMi9CZ0k5dEdOTlhH NDFZWUNvTDd2UGdMbEhpcjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJ8oAtfuir+JJoJ/Sx3399Z22KTB14+7rUSiFdVnaLwo1AC5BNuU7x fupDxhhQs2m2+byzayFpQRaLx5CTvw8TXwaGyWPH55KpRwzKGfp5Uw7mSaqJr3El irmPGLA+Gix8GuFwu8ljQttTf+xjewTka1mhKQfGDIYDmEw+Cxa/3RWiBQVulv4h 8tmfFhROuGsaWiANjX3xOS7iNo1B0A+oTrgqDiSX+bac20dwUVaguZH/6YTYCg+y BTn737tdlptFprF6tqBt/tQKwlCZeUcgNiJO/ZCDnJCxE8E0K96SeWnSNscx9nAl x3F7YGIgx/JJWxldVue697CSaROGByXT -----END CERTIFICATE-----Generated at Fri Aug 22 16:19:31 2025 by rpki-client