$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json) Hash identifier: yE44z669p9J4QkTsHmAG8hjn8XB42XwAaPdUZKsaPg8= Subject key identifier: FB:62:F6:2D:B8:15:9D:AA:D8:E2:89:BB:0E:28:C0:BC:C5:A2:6D:6E Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Certificate serial: 0B3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft Manifest number: 0B36 Signing time: Wed 20 Aug 2025 19:16:15 +0000 Manifest this update: Wed 20 Aug 2025 19:16:14 +0000 Manifest next update: Wed 27 Aug 2025 19:16:14 +0000 Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: 2XTsRP2jD0XWRCjiJNlhhWOo4/C5VrqjV9GnTXjMabo=) 2: 494B4070419C11EAAE836772C4F9AE02.roa (hash: Y3JTz6x7Gh76YU/+03lkuBO3MY94CeW1sP7iPG9gZfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 19:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2877 (0xb3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Validity Not Before: Aug 20 19:16:14 2025 GMT Not After : Aug 27 19:16:14 2025 GMT Subject: CN=68a61efe-0a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:db:be:5c:41:1a:40:cf:59:73:71:6a:d9:6d: 83:94:4d:0f:a3:4a:ba:3d:b6:dd:ae:49:10:24:47: d6:e6:04:ed:40:df:d2:be:75:dd:e7:19:45:2b:f2: 59:ba:96:54:c1:4a:6f:79:c2:45:4b:23:7b:dd:fe: ec:fb:83:d5:36:db:05:72:e8:14:0d:1b:34:1c:f5: 85:49:19:f6:c2:a4:47:98:2e:1e:7c:d0:10:81:f7: aa:90:f2:e7:40:08:57:de:bb:db:04:be:05:46:17: 14:8e:0b:14:eb:a8:2e:9f:cc:90:f1:bd:29:c2:8b: a6:6c:e7:44:0a:46:74:7b:3e:89:eb:4d:65:81:b8: 83:2c:07:a1:03:ba:6f:40:a0:b5:53:41:fd:32:ab: d9:d4:c7:07:b0:42:0f:f9:a4:3b:67:ab:c3:9b:01: 48:45:8e:8e:6b:05:16:13:fe:43:95:e7:91:44:6d: b6:83:dc:05:19:9f:d2:2f:09:4d:6b:75:f3:77:b4: 65:00:42:dd:28:be:a0:0b:14:07:4c:33:7a:93:9b: 8e:1b:c3:c9:a6:04:23:eb:76:47:a8:f5:b5:d7:4a: c3:22:96:6a:b2:8c:7e:f0:aa:c4:08:5f:6a:66:59: 54:19:48:bb:40:fb:ef:59:c2:e2:93:df:7f:42:ec: f4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:62:F6:2D:B8:15:9D:AA:D8:E2:89:BB:0E:28:C0:BC:C5:A2:6D:6E X509v3 Authority Key Identifier: keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:9b:75:1a:69:5b:fb:d8:e6:b6:58:0c:45:fe:82:14:48:55: 35:68:b2:41:6c:ce:84:db:39:40:e9:0f:90:49:0c:95:7a:29: cf:df:9b:12:de:0f:8f:d9:bc:cb:e6:46:fd:c5:ee:c7:2b:17: 01:c8:cd:d4:fb:0c:76:9c:86:56:c7:3c:6b:57:d8:3e:6b:a3: 96:3c:28:4d:7c:28:8f:84:5e:80:a7:c8:f7:99:3d:d7:0e:ff: 5b:1a:21:06:f4:86:d0:cc:93:ea:e8:07:47:40:69:ff:ac:7f: 12:6c:b3:ce:78:20:3b:01:8f:53:4c:59:f0:0b:b7:eb:8f:44: 94:64:1a:ef:32:e1:f7:3c:4f:1b:ca:53:89:b7:54:76:2b:9c: aa:7c:b4:af:c1:3c:4b:df:7c:74:f5:da:6e:0a:09:c2:bb:8f: cd:7d:3a:68:2a:7e:34:c8:38:54:9d:df:8c:60:68:66:ab:97: ab:b8:33:f0:b4:81:2c:8a:0a:0f:8a:b2:9e:36:45:85:6d:9e: 88:d9:10:90:32:86:36:a6:08:27:95:5e:1f:11:ff:85:2d:e5: 23:78:92:bd:e9:3f:d4:63:a3:35:e6:74:27:92:64:51:aa:f6: 08:80:d2:5c:1f:ba:df:9e:ad:b6:9b:1f:5e:f7:11:4e:d2:d5: 46:af:e4:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCz0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQyNUExMTAvBgNVBAUTKDA0OEFBOThGM0VDNTRBOTA2MEU1QkMzMDA1OUQ1QzQy MjBEN0MyRjcwHhcNMjUwODIwMTkxNjE0WhcNMjUwODI3MTkxNjE0WjAYMRYwFAYD VQQDEw02OGE2MWVmZS0wYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdu+XEEaQM9Zc3Fq2W2DlE0Po0q6PbbdrkkQJEfW5gTtQN/SvnXd5xlFK/JZ upZUwUpvecJFSyN73f7s+4PVNtsFcugUDRs0HPWFSRn2wqRHmC4efNAQgfeqkPLn QAhX3rvbBL4FRhcUjgsU66gun8yQ8b0pwoumbOdECkZ0ez6J601lgbiDLAehA7pv QKC1U0H9MqvZ1McHsEIP+aQ7Z6vDmwFIRY6OawUWE/5DleeRRG22g9wFGZ/SLwlN a3Xzd7RlAELdKL6gCxQHTDN6k5uOG8PJpgQj63ZHqPW110rDIpZqsox+8KrECF9q ZllUGUi7QPvvWcLik99/Quz0yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPti9i24 FZ2q2OKJuw4owLzFom1uMB8GA1UdIwQYMBaAFASKqY8+xUqQYOW8MAWdXEIg18L3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDI1QS8wMjRDMjRGODQx NkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNwQmc1Ynd3QloxY1FpRFh3 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJcXBqejdGU3BCZzVid3dCWjFjUWlEWHd2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDI1QS8wMjRDMjRGODQxNkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNw Qmc1Ynd3QloxY1FpRFh3dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMm3UaaVv72Oa2WAxF/oIUSFU1aLJBbM6E2zlA6Q+QSQyVeinP35sS 3g+P2bzL5kb9xe7HKxcByM3U+wx2nIZWxzxrV9g+a6OWPChNfCiPhF6Ap8j3mT3X Dv9bGiEG9IbQzJPq6AdHQGn/rH8SbLPOeCA7AY9TTFnwC7frj0SUZBrvMuH3PE8b ylOJt1R2K5yqfLSvwTxL33x09dpuCgnCu4/NfTpoKn40yDhUnd+MYGhmq5eruDPw tIEsigoPirKeNkWFbZ6I2RCQMoY2pggnlV4fEf+FLeUjeJK96T/UY6M15nQnkmRR qvYIgNJcH7rfnq22mx9e9xFO0tVGr+Qq -----END CERTIFICATE-----Generated at Thu Aug 21 07:22:38 2025 by rpki-client