$ rpki-client -vvf rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft File: BYQh3nB4BzBHPlzFRboK5dubTAo.mft (raw, json) Hash identifier: YdlFMGcAt7+yJ5QmChwGXNuG5RPPxGSBk5v6AihrrGk= Subject key identifier: B6:1B:E2:0E:81:7A:5D:B1:94:CE:A0:5B:B0:AC:1A:52:F3:B1:E6:25 Authority key identifier: 05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A Certificate issuer: /CN=A91862F7/serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Certificate serial: 09BE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft Manifest number: 09B2 Signing time: Sun 24 Aug 2025 17:16:47 +0000 Manifest this update: Sun 24 Aug 2025 17:16:46 +0000 Manifest next update: Sun 31 Aug 2025 17:16:46 +0000 Files and hashes: 1: BYQh3nB4BzBHPlzFRboK5dubTAo.crl (hash: 6yMoJ596FMTnzA9ojj8eIyaJCpJFrEGBDM8VlZ1Mzr0=) 2: 0619825C2F2A11ED9F62040DC4F9AE02.roa (hash: kL+XFv+JIBMzJ5k9XXPNiC6YLDiIMa15JQqj4/UV838=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 17:16:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2494 (0x9be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91862F7, serialNumber=058421DE70780730473E5CC545BA0AE5DB9B4C0A Validity Not Before: Aug 24 17:16:46 2025 GMT Not After : Aug 31 17:16:46 2025 GMT Subject: CN=68ab48fe-9845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b0:58:ba:ca:18:3c:d6:e7:5e:c7:12:cd:f1: a8:77:f3:86:55:09:55:4e:a6:76:5f:16:f1:51:3b: d2:a0:ae:a9:a7:ec:08:8c:1d:b9:56:09:18:34:a5: af:6f:0a:e3:aa:a7:c9:0b:90:3e:92:46:9d:b5:37: 44:c6:73:e8:3f:7e:b3:35:25:29:49:d9:fd:99:9d: 0d:e5:5e:4f:5a:8b:c0:fb:16:1d:e5:b2:79:cd:07: 3b:65:38:c9:b7:9c:69:7d:d3:c9:ba:6e:ab:6d:80: c3:26:c0:4c:62:df:c1:0e:35:c5:d7:7d:de:35:1b: 9c:2b:22:1f:ac:7a:45:08:b3:1d:3d:2e:35:a9:09: 09:fb:ef:4f:1b:4d:e9:24:f6:a3:db:0a:bd:ca:75: 74:83:be:e2:30:13:69:da:53:08:7a:fe:d9:07:eb: 7b:39:47:a3:12:3c:e3:c7:65:93:10:3e:b9:77:12: 05:cb:c8:6c:06:c2:8a:6e:b9:8f:f1:63:59:ae:ae: c6:b9:af:0f:9b:24:f5:4d:3e:80:3a:db:0d:83:c2: 5b:1c:e9:c9:75:5d:cc:77:3e:be:47:58:9b:e3:b4: 5e:c9:5b:a0:55:34:df:51:c5:5d:b9:d3:21:27:24: e7:eb:7c:3d:bd:f4:7e:08:38:df:12:2d:8a:3e:26: 78:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1B:E2:0E:81:7A:5D:B1:94:CE:A0:5B:B0:AC:1A:52:F3:B1:E6:25 X509v3 Authority Key Identifier: keyid:05:84:21:DE:70:78:07:30:47:3E:5C:C5:45:BA:0A:E5:DB:9B:4C:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BYQh3nB4BzBHPlzFRboK5dubTAo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91862F7/5EAC61448FA611EA9ACB7E7FC4F9AE02/BYQh3nB4BzBHPlzFRboK5dubTAo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:fd:37:2a:2e:5e:e0:da:ef:4d:1e:b6:bd:ad:5e:4b:73:69: ba:80:ff:3a:5a:d3:60:af:43:5f:17:9e:91:1a:9c:9f:56:10: ee:c7:15:b5:dd:75:8a:bc:a3:22:6b:fe:a0:2e:68:33:d7:4b: 81:0e:34:84:3d:24:c2:77:49:81:34:5f:eb:41:89:c0:fe:00: f1:59:3d:6d:5b:18:e0:09:63:ed:5f:e0:cb:2d:d6:3a:64:26: ea:35:45:0e:78:0b:78:df:08:31:54:ac:11:86:a0:34:47:e5: b2:7b:53:e7:fc:35:60:87:10:73:02:3a:95:14:72:26:bb:29: 12:35:f0:80:32:74:95:36:05:fe:b6:f2:41:33:06:1d:ac:64: 3a:d0:0f:dd:19:33:ef:00:82:6d:99:98:d4:c4:b6:20:f0:ba: a4:e7:b0:97:41:2c:0b:4a:4c:53:69:23:65:a8:4d:d6:4d:a0: 35:6a:ca:a1:47:0b:50:a1:a7:a9:96:5f:ff:73:69:ff:8c:63: b6:4c:6d:73:93:d6:d6:aa:19:bb:d4:73:78:f4:2e:50:c6:4b: ca:8f:47:cb:b2:c1:82:ec:0e:78:ee:6b:48:d5:34:7c:ef:93: 4e:c1:e5:b6:80:78:00:f1:ea:49:86:0c:31:5d:ca:af:b5:d3: 24:62:5a:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyRjcxMTAvBgNVBAUTKDA1ODQyMURFNzA3ODA3MzA0NzNFNUNDNTQ1QkEwQUU1 REI5QjRDMEEwHhcNMjUwODI0MTcxNjQ2WhcNMjUwODMxMTcxNjQ2WjAYMRYwFAYD VQQDEw02OGFiNDhmZS05ODQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbBYusoYPNbnXscSzfGod/OGVQlVTqZ2XxbxUTvSoK6pp+wIjB25VgkYNKWv bwrjqqfJC5A+kkadtTdExnPoP36zNSUpSdn9mZ0N5V5PWovA+xYd5bJ5zQc7ZTjJ t5xpfdPJum6rbYDDJsBMYt/BDjXF133eNRucKyIfrHpFCLMdPS41qQkJ++9PG03p JPaj2wq9ynV0g77iMBNp2lMIev7ZB+t7OUejEjzjx2WTED65dxIFy8hsBsKKbrmP 8WNZrq7Gua8PmyT1TT6AOtsNg8JbHOnJdV3Mdz6+R1ib47ReyVugVTTfUcVdudMh JyTn63w9vfR+CDjfEi2KPiZ4mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLYb4g6B el2xlM6gW7CsGlLzseYlMB8GA1UdIwQYMBaAFAWEId5weAcwRz5cxUW6CuXbm0wK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjJGNy81RUFDNjE0NDhG QTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6QkhQbHpGUmJvSzVkdWJU QW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JZUWgzbkI0QnpCSFBsekZSYm9LNWR1YlRBby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjJGNy81RUFDNjE0NDhGQTYxMUVBOUFDQjdFN0ZDNEY5QUUwMi9CWVFoM25CNEJ6 QkhQbHpGUmJvSzVkdWJUQW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo/TcqLl7g2u9NHra9rV5Lc2m6gP86WtNgr0NfF56RGpyfVhDuxxW1 3XWKvKMia/6gLmgz10uBDjSEPSTCd0mBNF/rQYnA/gDxWT1tWxjgCWPtX+DLLdY6 ZCbqNUUOeAt43wgxVKwRhqA0R+Wye1Pn/DVghxBzAjqVFHImuykSNfCAMnSVNgX+ tvJBMwYdrGQ60A/dGTPvAIJtmZjUxLYg8Lqk57CXQSwLSkxTaSNlqE3WTaA1asqh RwtQoaepll//c2n/jGO2TG1zk9bWqhm71HN49C5QxkvKj0fLssGC7A547mtI1TR8 75NOweW2gHgA8epJhgwxXcqvtdMkYlp7 -----END CERTIFICATE-----Generated at Sun Aug 24 22:00:31 2025 by rpki-client