$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft File: bG1HsRFPLVgaghKAXxLDdH80r4M.mft (raw, json) Hash identifier: JSP8EJhqOFi4gbm9flo0kHCpJqAIXebYCNztLfgT/0M= Subject key identifier: 2C:9B:31:B7:9E:5A:9D:8D:92:BF:35:C6:84:67:88:7C:15:EB:21:B5 Authority key identifier: 6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 Certificate issuer: /CN=A91C7672/serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft Manifest number: 1C6B Signing time: Mon 08 Sep 2025 16:13:05 +0000 Manifest this update: Mon 08 Sep 2025 16:13:05 +0000 Manifest next update: Mon 15 Sep 2025 16:13:05 +0000 Files and hashes: 1: bG1HsRFPLVgaghKAXxLDdH80r4M.crl (hash: jslbH5ofwKg/oyQWD7JYfmQI6y0lv4eAXXyIhyEJBBM=) 2: 08F61730538311F0860B155FC4F9AE02.roa (hash: 5tUhujimGcuYk2iCXVJH6UfqyUCQhG2eSFGvMuoYcGw=) 3: 18BDABD2537F11F0A9531C09C4F9AE02.roa (hash: jBvkqb6jI6ollOqdN8B9OtpQXSI083YHITbt77mXBK8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 16:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7672, serialNumber=6C6D47B1114F2D581A8212805F12C3747F34AF83 Validity Not Before: Sep 8 16:13:05 2025 GMT Not After : Sep 15 16:13:05 2025 GMT Subject: CN=68bf0091-c82d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:63:2e:74:04:f1:fb:37:1b:88:ee:1d:10:97: 87:d1:2e:4a:d9:00:40:bb:99:74:9d:53:74:57:60: ab:81:5f:78:ab:6a:ff:9a:ca:28:40:b3:c6:8c:36: dd:2b:53:c7:f9:6d:78:56:d9:f1:f3:26:7c:2d:ff: 4d:f8:b6:e8:26:3d:77:a0:68:0a:53:05:42:ae:3f: b4:5c:05:80:9a:5d:90:61:9a:07:af:bc:64:10:a6: 24:c5:ab:36:ac:bf:65:8b:3a:8e:eb:e1:67:81:85: 0e:b8:bb:76:f0:34:93:e8:b6:ba:f7:12:9c:9c:f9: 6d:cf:d3:36:9f:7b:3a:63:2f:0c:54:08:36:b6:63: 51:0f:7e:7a:56:b8:50:a7:d8:30:52:c9:1b:08:ba: 35:2a:75:a7:7e:12:a3:bd:81:f1:cc:31:75:69:2c: d2:a6:8a:c5:3c:c3:1b:a5:a9:d7:58:54:ef:c0:c4: 31:2d:e3:45:2f:70:17:9b:b3:84:8c:04:c1:24:a5: 80:cd:f1:c0:00:02:5e:2f:e1:88:da:c1:6f:de:5c: 82:46:94:1f:e0:42:8a:f9:87:a0:f1:c2:2a:2e:9d: c3:ae:76:ab:71:f6:4f:60:a9:20:24:a7:c2:c1:77: c8:e5:29:c2:50:eb:dc:f8:b9:58:f7:5f:5b:30:58: 57:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9B:31:B7:9E:5A:9D:8D:92:BF:35:C6:84:67:88:7C:15:EB:21:B5 X509v3 Authority Key Identifier: keyid:6C:6D:47:B1:11:4F:2D:58:1A:82:12:80:5F:12:C3:74:7F:34:AF:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bG1HsRFPLVgaghKAXxLDdH80r4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7672/43764BECF72411E6ABF02B3CC4F9AE02/bG1HsRFPLVgaghKAXxLDdH80r4M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:68:69:69:2b:c1:7c:2f:d7:77:81:56:c8:3e:06:62:04:93: 43:76:cf:02:db:3e:f7:60:95:51:3d:75:bc:a2:65:20:d2:dc: ec:81:b1:28:a9:cd:4f:ee:b4:b9:90:3a:40:66:61:f1:98:be: db:c2:f7:8e:45:5d:07:8d:72:e4:fe:76:4b:65:9b:6e:2d:ad: b3:b9:b1:71:2b:97:89:1e:18:a1:c0:81:a4:ac:74:78:77:36: 52:8b:e8:8e:a2:7e:1e:3d:e2:d1:53:b6:c9:f6:89:19:d9:8e: b8:dc:68:54:07:97:43:be:2c:b0:52:93:a5:41:a8:c4:51:de: e6:e5:d8:7b:45:e1:09:fe:3a:6f:80:d6:60:2a:fd:21:54:07: 43:a8:44:c1:17:70:1c:1b:19:69:ba:62:f7:8e:63:fa:b3:50: 85:b5:f8:ce:ff:cf:6a:2e:f6:18:3b:6c:53:b6:42:56:c9:0b: 5d:35:b4:b6:a0:8b:c7:be:68:c7:1e:66:94:7d:cf:0d:17:78: 4e:03:40:24:9f:13:a8:15:c2:e7:00:58:38:c8:11:e0:d8:51: 4a:3c:8e:90:0a:5b:81:7f:a4:32:9b:bc:bd:66:8c:cd:58:0d: 95:e9:99:d2:3e:3e:d6:34:1f:e1:af:17:3f:bc:6a:81:22:02: 02:a3:78:f6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NzY3MjExMC8GA1UEBRMoNkM2RDQ3QjExMTRGMkQ1ODFBODIxMjgwNUYxMkMzNzQ3 RjM0QUY4MzAeFw0yNTA5MDgxNjEzMDVaFw0yNTA5MTUxNjEzMDVaMBgxFjAUBgNV BAMTDTY4YmYwMDkxLWM4MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoYy50BPH7NxuI7h0Ql4fRLkrZAEC7mXSdU3RXYKuBX3irav+ayihAs8aMNt0r U8f5bXhW2fHzJnwt/034tugmPXegaApTBUKuP7RcBYCaXZBhmgevvGQQpiTFqzas v2WLOo7r4WeBhQ64u3bwNJPotrr3Epyc+W3P0zafezpjLwxUCDa2Y1EPfnpWuFCn 2DBSyRsIujUqdad+EqO9gfHMMXVpLNKmisU8wxulqddYVO/AxDEt40UvcBebs4SM BMEkpYDN8cAAAl4v4YjawW/eXIJGlB/gQor5h6DxwiouncOudqtx9k9gqSAkp8LB d8jlKcJQ69z4uVj3X1swWFdpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULJsxt55a nY2SvzXGhGeIfBXrIbUwHwYDVR0jBBgwFoAUbG1HsRFPLVgaghKAXxLDdH80r4Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3NjcyLzQzNzY0QkVDRjcy NDExRTZBQkYwMkIzQ0M0RjlBRTAyL2JHMUhzUkZQTFZnYWdoS0FYeExEZEg4MHI0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYkcxSHNSRlBMVmdhZ2hLQVh4TERkSDgwcjRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3 NjcyLzQzNzY0QkVDRjcyNDExRTZBQkYwMkIzQ0M0RjlBRTAyL2JHMUhzUkZQTFZn YWdoS0FYeExEZEg4MHI0TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALZoaWkrwXwv13eBVsg+BmIEk0N2zwLbPvdglVE9dbyiZSDS3OyBsSip zU/utLmQOkBmYfGYvtvC945FXQeNcuT+dktlm24trbO5sXErl4keGKHAgaSsdHh3 NlKL6I6ifh494tFTtsn2iRnZjrjcaFQHl0O+LLBSk6VBqMRR3ubl2HtF4Qn+Om+A 1mAq/SFUB0OoRMEXcBwbGWm6YveOY/qzUIW1+M7/z2ou9hg7bFO2QlbJC101tLag i8e+aMceZpR9zw0XeE4DQCSfE6gVwucAWDjIEeDYUUo8jpAKW4F/pDKbvL1mjM1Y DZXpmdI+PtY0H+GvFz+8aoEiAgKjePY= -----END CERTIFICATE-----Generated at Wed Sep 10 07:04:35 2025 by rpki-client