$ rpki-client -vvf rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft File: bbZgfaaV3QngKYA6L_JiWtiDguM.mft (raw, json) Hash identifier: usnBEnq7cJDA/tkMU+/9YhHdQAkAw1kCMyaxXC3E+fI= Subject key identifier: 7F:F6:F2:F1:42:F1:FA:83:01:6C:77:01:52:D5:58:B7:21:1D:8C:E1 Authority key identifier: 6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3 Certificate issuer: /CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3 Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft Manifest number: B7 Signing time: Tue 09 Sep 2025 06:08:30 +0000 Manifest this update: Tue 09 Sep 2025 06:08:29 +0000 Manifest next update: Tue 16 Sep 2025 06:08:29 +0000 Files and hashes: 1: bbZgfaaV3QngKYA6L_JiWtiDguM.crl (hash: 8q5rrAa/oNDNpeO/pkyLA2MYBoErTc9z325qnc/Y7jo=) 2: F2F0E3FE882E11EFB58CD069C4F9AE02.roa (hash: LLMFfpd/hOZPtrpRcrn1k8tmtQOd8WCmuw0OVbODbIo=) 3: 50A6B6427C6B11EFAB9AB658C4F9AE02.roa (hash: BsH1QXXdR63B8qNDLxP6migCbs5bygzeNgwy6naNCOQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91643F8, serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3 Validity Not Before: Sep 9 06:08:29 2025 GMT Not After : Sep 16 06:08:29 2025 GMT Subject: CN=68bfc45d-12fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f5:5e:ee:4d:4a:75:f9:3b:88:1a:d9:bd:2c: 03:5b:55:e1:60:36:45:2e:cc:68:9e:4b:49:e1:4b: b9:17:09:23:d7:95:b3:a8:8e:44:69:fe:51:01:39: e4:6d:1d:f6:e4:bd:11:a2:eb:a8:24:57:ae:d3:b6: b4:3c:a8:d6:da:7f:de:8c:8e:7c:03:47:a2:6e:17: fc:ea:03:a0:ac:89:7b:32:34:c0:d9:ae:f2:94:16: f2:90:6d:b7:68:f9:5f:e6:b8:6f:29:b4:42:a7:05: d8:24:4e:84:e4:93:d6:74:e1:75:43:f6:3d:5d:f6: 70:8a:41:95:01:80:f4:a2:e8:65:2e:4e:2e:17:18: 9d:0a:1b:fe:06:ae:fe:ba:e3:e1:0a:d7:e5:6f:a6: 4f:19:f0:4d:91:43:f2:ae:82:c8:4d:62:3b:0e:7c: b3:1d:f2:79:0f:d0:9d:07:90:9c:b8:69:dc:62:9f: 08:48:4a:17:13:a0:8c:18:1f:3b:04:57:7c:07:40: 8d:cb:d3:11:5f:6c:87:66:9e:d5:53:7d:7f:30:3e: 1d:35:28:cf:92:03:fe:2c:22:7a:cf:89:71:a6:a9: 74:90:0b:f5:67:21:a1:24:c0:7b:e0:0e:79:b1:76: 3b:4c:d7:b3:6b:82:c4:e7:e9:52:c8:86:fa:51:70: 28:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F6:F2:F1:42:F1:FA:83:01:6C:77:01:52:D5:58:B7:21:1D:8C:E1 X509v3 Authority Key Identifier: keyid:6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:1e:1c:9b:de:1c:be:dc:55:01:ce:53:e4:91:3d:9c:32:06: 99:60:5d:e8:a9:da:32:0a:ad:01:d2:61:e7:86:7e:8b:ce:61: ad:f1:c8:23:de:9c:4f:ae:f2:e5:14:38:1d:18:11:49:c0:7c: 41:b6:eb:7f:71:cc:b6:55:a6:82:c2:86:78:b1:9d:ff:13:28: 59:52:5e:e0:49:c3:7d:16:24:67:78:80:7d:16:dd:d5:2f:a4: 35:db:80:09:c9:37:9c:44:da:7e:0a:ce:bf:d3:68:3a:e9:57: 97:12:bf:cf:64:15:f5:b9:39:bd:83:c3:c3:aa:8f:ee:5e:80: 76:8f:09:f6:18:8a:6b:07:af:cf:8d:9a:d5:8c:f7:c2:31:fc: 6f:fc:1a:eb:02:be:a8:f2:be:f0:5b:3e:66:95:67:17:55:fc: 87:93:e3:fe:d1:ee:0b:52:71:a4:0c:2c:86:7c:6d:d4:66:61: 79:34:72:67:c7:4d:81:b5:f7:35:8f:25:1f:87:31:e9:56:f0: dd:c6:d6:a6:36:d0:24:e6:ec:cd:1e:5d:73:c7:52:cf:3f:05: d7:df:c2:16:12:2a:19:4f:47:04:3d:19:7b:db:16:81:15:ab: 86:bb:4f:ae:9d:55:7c:ec:92:79:9b:81:d1:62:66:54:7f:5d: b5:c8:5a:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjQzRjgxMTAvBgNVBAUTKDZEQjY2MDdEQTY5NUREMDlFMDI5ODAzQTJGRjI2MjVB RDg4MzgyRTMwHhcNMjUwOTA5MDYwODI5WhcNMjUwOTE2MDYwODI5WjAYMRYwFAYD VQQDEw02OGJmYzQ1ZC0xMmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvVe7k1Kdfk7iBrZvSwDW1XhYDZFLsxonktJ4Uu5Fwkj15WzqI5Eaf5RATnk bR325L0RouuoJFeu07a0PKjW2n/ejI58A0eibhf86gOgrIl7MjTA2a7ylBbykG23 aPlf5rhvKbRCpwXYJE6E5JPWdOF1Q/Y9XfZwikGVAYD0ouhlLk4uFxidChv+Bq7+ uuPhCtflb6ZPGfBNkUPyroLITWI7DnyzHfJ5D9CdB5CcuGncYp8ISEoXE6CMGB87 BFd8B0CNy9MRX2yHZp7VU31/MD4dNSjPkgP+LCJ6z4lxpql0kAv1ZyGhJMB74A55 sXY7TNeza4LE5+lSyIb6UXAo3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH/28vFC 8fqDAWx3AVLVWLchHYzhMB8GA1UdIwQYMBaAFG22YH2mld0J4CmAOi/yYlrYg4Lj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NDNGOC9GNzkwQ0M1QTdD NkExMUVGOUE2ODg4NTdDNEY5QUUwMi9iYlpnZmFhVjNRbmdLWUE2TF9KaVd0aURn dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JiWmdmYWFWM1FuZ0tZQTZMX0ppV3RpRGd1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NDNGOC9GNzkwQ0M1QTdDNkExMUVGOUE2ODg4NTdDNEY5QUUwMi9iYlpnZmFhVjNR bmdLWUE2TF9KaVd0aURndU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOHhyb3hy+3FUBzlPkkT2cMgaZYF3oqdoyCq0B0mHnhn6LzmGt8cgj 3pxPrvLlFDgdGBFJwHxBtut/ccy2VaaCwoZ4sZ3/EyhZUl7gScN9FiRneIB9Ft3V L6Q124AJyTecRNp+Cs6/02g66VeXEr/PZBX1uTm9g8PDqo/uXoB2jwn2GIprB6/P jZrVjPfCMfxv/BrrAr6o8r7wWz5mlWcXVfyHk+P+0e4LUnGkDCyGfG3UZmF5NHJn x02Btfc1jyUfhzHpVvDdxtamNtAk5uzNHl1zx1LPPwXX38IWEioZT0cEPRl72xaB FauGu0+unVV87JJ5m4HRYmZUf121yFpd -----END CERTIFICATE-----Generated at Tue Sep 9 13:24:31 2025 by rpki-client