$ rpki-client -vvf rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft File: vBtEbpc35JZMB6uMttwYBtbr_5s.mft (raw, json) Hash identifier: 4MVnaoLOtkF4I5ixxqBzjGqfqVCmut5ZJjGOQwUlvYQ= Subject key identifier: 1E:AD:A2:0C:8A:06:B2:ED:0F:DB:C2:09:80:AA:97:48:6D:D7:B8:81 Authority key identifier: BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B Certificate issuer: /CN=A91C73A7/serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Certificate serial: 06C8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft Manifest number: 06C3 Signing time: Sat 06 Sep 2025 22:21:38 +0000 Manifest this update: Sat 06 Sep 2025 22:21:37 +0000 Manifest next update: Sat 13 Sep 2025 22:21:37 +0000 Files and hashes: 1: vBtEbpc35JZMB6uMttwYBtbr_5s.crl (hash: uIdHLTvsrf2anOyKHtaML4fxyL+4hiBv7ew85qM1qu4=) 2: 6BD6CD146F7F11EBB1A2C853C4F9AE02.roa (hash: I+eEa2BCG1ocgDoHBOIM7GqSJBtmqFy6z+9Rb7P5WKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 22:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1736 (0x6c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C73A7, serialNumber=BC1B446E9737E4964C07AB8CB6DC1806D6EBFF9B Validity Not Before: Sep 6 22:21:37 2025 GMT Not After : Sep 13 22:21:37 2025 GMT Subject: CN=68bcb3f1-db83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:90:4d:46:3c:16:7d:3b:35:4f:05:84:d9:b4: 4c:a0:2a:25:83:5b:78:85:8a:3d:26:b7:9c:c4:16: b1:5c:bd:b0:4b:d1:e4:02:69:2e:60:c1:f8:1d:a7: de:25:6f:cd:c6:5c:74:06:0c:38:b8:a0:96:08:9b: f8:05:b8:7d:eb:5d:9d:05:5c:2f:b4:09:71:f9:9e: 8f:e9:1a:6f:44:b5:64:07:f7:6c:9b:b1:ef:02:54: 87:8b:f3:98:ee:8b:f9:18:80:35:e5:25:1a:c7:f7: 00:09:e8:14:ca:99:37:a0:20:ab:7b:0b:5d:cb:f7: 4e:04:80:f6:09:56:bb:6d:76:4f:a3:6f:fb:c8:42: 86:f6:09:25:e5:6f:0c:5b:64:59:84:54:d6:b1:af: f6:fb:30:bb:49:b1:b2:7d:9f:76:7b:e3:c5:9c:c6: 01:9e:d4:07:ce:9c:24:4f:2f:72:ef:fc:41:be:22: 69:c9:58:70:2b:55:b1:dc:f8:f2:0e:f0:b4:9b:d3: 90:3e:0f:d8:86:cd:45:15:d0:69:fc:90:ef:fb:fc: 41:3a:96:e4:87:b0:6d:d1:21:6f:9b:a9:b8:a4:fc: 18:ea:1d:ec:36:6d:35:cb:dd:b0:93:59:08:81:be: 89:e4:ab:60:fa:bd:61:a5:62:25:cb:2a:a2:71:b5: ea:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AD:A2:0C:8A:06:B2:ED:0F:DB:C2:09:80:AA:97:48:6D:D7:B8:81 X509v3 Authority Key Identifier: keyid:BC:1B:44:6E:97:37:E4:96:4C:07:AB:8C:B6:DC:18:06:D6:EB:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vBtEbpc35JZMB6uMttwYBtbr_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C73A7/2D2CB3406F7E11EB9E135253C4F9AE02/vBtEbpc35JZMB6uMttwYBtbr_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:a6:b6:ce:17:4e:05:94:57:ba:ab:6b:59:27:3a:ac:5c:97: f7:f9:1e:37:df:43:df:a1:40:70:68:11:81:60:62:e5:44:ee: 6d:dc:63:bb:62:8b:89:3a:76:6a:4a:d2:e7:94:0d:a5:6e:59: cb:1a:b9:c5:1a:f2:e4:1e:1b:01:04:8b:ab:ec:49:1e:5c:78: f9:6e:9d:14:b5:23:b1:1c:fb:f3:4d:a4:40:c4:52:82:96:42: 42:e8:96:6d:ab:3a:88:94:3a:2c:61:8e:ba:ed:10:17:3e:b1: 81:fa:3a:b6:64:66:ff:ae:51:3e:a5:4f:64:7f:0e:b5:0e:a0: 26:8c:c4:22:fa:2a:41:52:0b:a3:6a:30:2f:85:70:1d:f0:3f: 3b:a5:a1:ca:6a:0f:25:67:18:cb:c8:5a:c1:a3:d6:06:c3:6c: 94:49:1a:6c:54:b7:02:a2:67:ce:90:07:c4:39:63:eb:61:62: 48:18:40:80:6d:11:c8:e6:bf:2d:16:5b:09:96:99:f4:2e:da: 66:ad:d0:d6:30:d9:9a:08:18:57:bc:5d:9e:50:95:6d:9e:a3: 98:ee:06:4b:01:0c:74:71:bf:53:97:45:f5:ca:26:de:68:1c: 2e:b3:f5:0a:4c:a8:c7:fa:65:b7:75:6f:71:d5:56:d4:d4:9b: 5c:59:2b:c8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzczQTcxMTAvBgNVBAUTKEJDMUI0NDZFOTczN0U0OTY0QzA3QUI4Q0I2REMxODA2 RDZFQkZGOUIwHhcNMjUwOTA2MjIyMTM3WhcNMjUwOTEzMjIyMTM3WjAYMRYwFAYD VQQDEw02OGJjYjNmMS1kYjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3pBNRjwWfTs1TwWE2bRMoColg1t4hYo9JrecxBaxXL2wS9HkAmkuYMH4Hafe JW/Nxlx0Bgw4uKCWCJv4Bbh9612dBVwvtAlx+Z6P6RpvRLVkB/dsm7HvAlSHi/OY 7ov5GIA15SUax/cACegUypk3oCCrewtdy/dOBID2CVa7bXZPo2/7yEKG9gkl5W8M W2RZhFTWsa/2+zC7SbGyfZ92e+PFnMYBntQHzpwkTy9y7/xBviJpyVhwK1Wx3Pjy DvC0m9OQPg/Yhs1FFdBp/JDv+/xBOpbkh7Bt0SFvm6m4pPwY6h3sNm01y92wk1kI gb6J5Ktg+r1hpWIlyyqicbXq+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6togyK BrLtD9vCCYCql0ht17iBMB8GA1UdIwQYMBaAFLwbRG6XN+SWTAerjLbcGAbW6/+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzNBNy8yRDJDQjM0MDZG N0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVKWk1CNnVNdHR3WUJ0YnJf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZCdEVicGMzNUpaTUI2dU10dHdZQnRicl81cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzNBNy8yRDJDQjM0MDZGN0UxMUVCOUUxMzUyNTNDNEY5QUUwMi92QnRFYnBjMzVK Wk1CNnVNdHR3WUJ0YnJfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBprbOF04FlFe6q2tZJzqsXJf3+R4330PfoUBwaBGBYGLlRO5t3GO7 YouJOnZqStLnlA2lblnLGrnFGvLkHhsBBIur7EkeXHj5bp0UtSOxHPvzTaRAxFKC lkJC6JZtqzqIlDosYY667RAXPrGB+jq2ZGb/rlE+pU9kfw61DqAmjMQi+ipBUguj ajAvhXAd8D87paHKag8lZxjLyFrBo9YGw2yUSRpsVLcComfOkAfEOWPrYWJIGECA bRHI5r8tFlsJlpn0LtpmrdDWMNmaCBhXvF2eUJVtnqOY7gZLAQx0cb9Tl0X1yibe aBwus/UKTKjH+mW3dW9x1VbU1JtcWSvI -----END CERTIFICATE-----Generated at Mon Sep 8 03:59:44 2025 by rpki-client