$ rpki-client -vvf rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft File: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft (raw, json) Hash identifier: cQTRFvyKMZv+WkfrZS69FywZItcxWgNJROldlXOFiwU= Subject key identifier: B8:2F:25:06:43:81:85:1E:7C:53:B9:E6:75:B3:FD:EE:65:52:41:89 Authority key identifier: BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 Certificate issuer: /CN=A91836DB/serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Certificate serial: 58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft Manifest number: 57 Signing time: Fri 25 Jul 2025 07:32:43 +0000 Manifest this update: Fri 25 Jul 2025 07:32:43 +0000 Manifest next update: Fri 01 Aug 2025 07:32:43 +0000 Files and hashes: 1: u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl (hash: AJXVERkDJoDhxYJ7Y4NYpZIiYhc6xc7IWY0qWb2X38M=) 2: C7001B70E45E11EFA2243E47C4F9AE02.roa (hash: wGQDHFlAfYrGUZehEya3kdO0mpkCJUDStwU2YZOiDKI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 01 Aug 2025 07:32:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91836DB, serialNumber=BB505DFF32ECD492BF1EFF7FE394F12890AA6734 Validity Not Before: Jul 25 07:32:43 2025 GMT Not After : Aug 1 07:32:43 2025 GMT Subject: CN=6883331b-66b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:12:f0:e1:a0:64:68:c0:74:70:28:cb:67:cb: 41:20:06:15:f5:78:ad:9b:23:98:eb:ef:3f:ea:14: c5:9e:ed:ff:65:24:bf:fc:c7:2c:b7:ee:d2:a4:49: fb:51:d4:d7:08:c2:a6:13:56:d1:b9:d3:b4:69:fa: 46:f3:53:40:6e:3a:36:bb:fc:f5:d4:5f:24:9d:39: ad:1a:83:0e:f8:58:e7:20:25:86:3a:4a:fa:54:92: 64:c9:6c:a9:12:7e:42:0d:33:f0:24:43:8d:2c:43: 48:5c:33:9d:a0:45:84:df:8b:f3:36:33:d1:b6:88: dc:90:80:65:e1:96:70:46:28:b8:da:d7:2c:44:7d: 38:a2:13:3a:e9:9c:5c:97:41:e8:12:35:94:b3:18: 11:24:e4:d6:be:7e:e1:c3:e7:de:3a:d9:fc:9d:6a: 66:96:a7:34:e4:99:85:06:af:d6:c1:80:52:fa:22: 0a:05:18:2d:05:38:7f:d6:18:da:24:97:e5:1b:0d: 4c:ca:7e:19:c4:54:1a:9c:b1:ba:a1:2e:b7:91:7d: fd:02:b4:ff:14:59:56:05:1d:7e:fd:37:b2:02:65: f4:f8:c3:9a:86:7f:94:85:34:dd:90:2b:28:be:d0: 98:77:e6:08:0d:cf:0a:c4:a1:9a:37:24:38:44:b8: 24:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2F:25:06:43:81:85:1E:7C:53:B9:E6:75:B3:FD:EE:65:52:41:89 X509v3 Authority Key Identifier: keyid:BB:50:5D:FF:32:EC:D4:92:BF:1E:FF:7F:E3:94:F1:28:90:AA:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91836DB/51BE0124E45E11EFA1562846C4F9AE02/u1Bd_zLs1JK_Hv9_45TxKJCqZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ec:34:82:32:a5:17:1f:8b:c4:9a:d5:4d:ae:47:3d:98:06: 8d:1b:74:af:fd:8a:73:36:4c:73:1e:26:87:75:2a:c0:31:df: 05:72:55:71:17:da:eb:c7:05:3f:6a:5a:0b:50:d3:b5:f2:84: 9d:99:4f:78:be:b8:6d:ac:93:03:cc:c5:47:b0:65:9f:85:71: 5b:93:f5:2b:2c:64:5b:d1:4f:7b:68:43:95:22:7b:06:28:57: b6:f6:35:53:4e:b7:a7:b1:83:d0:b6:d7:7a:7d:ef:12:eb:3a: ad:ef:69:2f:c1:46:92:40:33:fa:58:8a:78:6f:41:08:f9:27: 07:9a:5d:5e:d5:58:fd:e1:e0:23:b5:b3:e8:6f:2b:fc:46:78: c0:e7:9c:67:37:04:5d:83:3a:a9:72:1d:78:e5:f2:a7:a8:4c: 20:c6:26:26:8a:df:12:33:5e:9d:35:d5:5b:45:03:48:c1:98: cf:4e:d9:b9:6f:60:11:fc:04:22:fb:3a:e3:1d:85:63:2a:f8: c2:5e:a0:e7:dd:0a:d4:ac:3b:45:4a:dd:0c:0c:6f:64:ad:53: f1:46:59:9d:98:74:87:49:4e:d5:89:43:01:5e:69:58:4a:4d: fd:cd:dc:c0:30:6c:de:22:60:92:ba:03:4e:16:28:94:4d:c8: 7a:44:12:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 MzZEQjExMC8GA1UEBRMoQkI1MDVERkYzMkVDRDQ5MkJGMUVGRjdGRTM5NEYxMjg5 MEFBNjczNDAeFw0yNTA3MjUwNzMyNDNaFw0yNTA4MDEwNzMyNDNaMBgxFjAUBgNV BAMTDTY4ODMzMzFiLTY2YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGEvDhoGRowHRwKMtny0EgBhX1eK2bI5jr7z/qFMWe7f9lJL/8xyy37tKkSftR 1NcIwqYTVtG507Rp+kbzU0BuOja7/PXUXySdOa0agw74WOcgJYY6SvpUkmTJbKkS fkINM/AkQ40sQ0hcM52gRYTfi/M2M9G2iNyQgGXhlnBGKLja1yxEfTiiEzrpnFyX QegSNZSzGBEk5Na+fuHD59462fydamaWpzTkmYUGr9bBgFL6IgoFGC0FOH/WGNok l+UbDUzKfhnEVBqcsbqhLreRff0CtP8UWVYFHX79N7ICZfT4w5qGf5SFNN2QKyi+ 0Jh35ggNzwrEoZo3JDhEuCRNAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuC8lBkOB hR58U7nmdbP97mVSQYkwHwYDVR0jBBgwFoAUu1Bd/zLs1JK/Hv9/45TxKJCqZzQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgzNkRCLzUxQkUwMTI0RTQ1 RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpLX0h2OV80NVR4S0pDcVp6 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdTFCZF96THMxSktfSHY5XzQ1VHhLSkNxWnpRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgz NkRCLzUxQkUwMTI0RTQ1RTExRUZBMTU2Mjg0NkM0RjlBRTAyL3UxQmRfekxzMUpL X0h2OV80NVR4S0pDcVp6US5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAbsNIIypRcfi8Sa1U2uRz2YBo0bdK/9inM2THMeJod1KsAx3wVyVXEX 2uvHBT9qWgtQ07XyhJ2ZT3i+uG2skwPMxUewZZ+FcVuT9SssZFvRT3toQ5UiewYo V7b2NVNOt6exg9C213p97xLrOq3vaS/BRpJAM/pYinhvQQj5JweaXV7VWP3h4CO1 s+hvK/xGeMDnnGc3BF2DOqlyHXjl8qeoTCDGJiaK3xIzXp011VtFA0jBmM9O2blv YBH8BCL7OuMdhWMq+MJeoOfdCtSsO0VK3QwMb2StU/FGWZ2YdIdJTtWJQwFeaVhK Tf3N3MAwbN4iYJK6A04WKJRNyHpEEqg= -----END CERTIFICATE-----Generated at Sat Jul 26 02:00:43 2025 by rpki-client