$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft File: bicEPDr0D8Xll5OLFU9ci-D9_2w.mft (raw, json) Hash identifier: ClDbux+4ZvpTF1fToUqHVF7GYNGebuohPTxOceidBlM= Subject key identifier: 8A:D7:65:16:82:4F:21:97:08:76:56:D3:FC:97:BF:6E:B5:A2:BE:A5 Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C Certificate issuer: /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Certificate serial: 0774 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft Manifest number: 076E Signing time: Fri 22 Aug 2025 21:44:08 +0000 Manifest this update: Fri 22 Aug 2025 21:44:08 +0000 Manifest next update: Fri 29 Aug 2025 21:44:08 +0000 Files and hashes: 1: bicEPDr0D8Xll5OLFU9ci-D9_2w.crl (hash: kvwVR1ZAWCzXO4kZ3vRm5YJz6lvYTdvkA8Qt3hH8Y3I=) 2: C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (hash: sxwsat/jz73BmJhm+NJpdHINgb9WZYUhdohcJK8DuQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:44:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1908 (0x774) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E01F7, serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C Validity Not Before: Aug 22 21:44:08 2025 GMT Not After : Aug 29 21:44:08 2025 GMT Subject: CN=68a8e4a8-195d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:4e:31:d4:1c:3d:f2:b6:85:10:aa:79:96: d5:1b:1c:59:5e:62:48:86:10:05:62:f8:8b:fb:1a: 61:d1:65:f9:2d:d2:79:16:dd:6e:e7:8a:f1:cc:c7: b8:3c:9c:4e:6d:83:84:9a:26:37:59:4d:1a:1d:77: 1b:fa:09:ee:1d:4d:c0:5c:73:21:81:6f:c2:00:d3: 12:f5:41:6e:d9:9e:55:63:eb:90:eb:05:59:95:d5: 90:98:dc:cb:6c:d4:35:95:82:33:f2:72:58:fb:d4: 34:7c:ae:0f:8e:ba:4e:b3:e0:ad:11:4d:f9:b7:48: 67:d3:b9:13:ee:cf:f5:69:18:62:09:cb:05:68:26: 62:99:e8:f4:9b:ee:ba:fd:cc:2c:0a:da:c9:46:b4: 2f:b9:bd:f1:f3:6e:df:53:f6:ec:ce:60:6a:55:cc: 16:c1:67:97:d2:6b:2d:e2:cb:01:88:4c:18:32:af: 4b:37:e8:50:8c:d0:3a:70:74:7c:0f:5d:4d:5c:d9: 63:d4:ae:d1:1c:9a:fa:3e:94:5a:71:82:15:e1:a3: 40:da:19:59:e0:f5:bd:7a:b2:80:e9:f9:e0:ee:09: cf:a5:e2:01:f1:88:56:30:ba:10:70:01:75:c0:8c: 6d:fd:10:fa:cb:f8:08:94:dc:d2:85:7a:03:51:9b: 7e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D7:65:16:82:4F:21:97:08:76:56:D3:FC:97:BF:6E:B5:A2:BE:A5 X509v3 Authority Key Identifier: keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:ba:22:9b:e2:68:54:33:41:8e:35:de:de:38:04:92:4f:c3: a2:87:73:f3:64:c1:0e:2a:eb:6b:2c:30:ad:d7:b0:f0:85:1b: e7:9e:ab:67:1b:cc:8c:b7:c4:20:43:bc:9a:25:29:11:1b:d2: c1:5a:1b:15:10:7b:be:70:98:9e:fa:72:c9:78:16:1e:c5:5d: 0a:10:48:cb:bc:72:e2:c6:df:e8:85:30:68:b5:a9:1e:08:05: b8:0e:b5:2b:0c:4b:b6:4b:76:53:74:58:5f:69:71:d5:f3:ca: 96:cf:b6:15:10:59:0f:aa:c6:60:23:33:43:29:64:ce:09:2f: 4c:af:53:22:b9:8c:4c:b7:62:4b:cd:89:17:86:f2:15:87:c7: a1:60:46:6d:e6:70:1d:80:9e:bb:83:86:0e:c1:0c:30:d3:17: 44:7b:c5:35:8a:d6:90:65:4f:c5:ee:03:98:de:5b:93:13:5f: 52:d9:f8:9a:79:ef:2a:96:9a:87:2d:a0:a0:e8:52:6f:ae:b8: d9:10:a6:32:a2:d1:e8:d2:ff:65:bf:53:24:80:e1:ea:c4:69: b9:17:8c:d2:94:37:86:69:63:e3:80:9b:4f:e4:c1:59:98:c3: f3:c9:ac:7e:5e:53:1c:9b:03:80:33:91:7d:19:fb:ef:c5:69: 9f:f9:67:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxRjcxMTAvBgNVBAUTKDZFMjcwNDNDM0FGNDBGQzVFNTk3OTM4QjE1NEY1QzhC RTBGREZGNkMwHhcNMjUwODIyMjE0NDA4WhcNMjUwODI5MjE0NDA4WjAYMRYwFAYD VQQDEw02OGE4ZTRhOC0xOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtfdOMdQcPfK2hRCqeZbVGxxZXmJIhhAFYviL+xph0WX5LdJ5Ft1u54rxzMe4 PJxObYOEmiY3WU0aHXcb+gnuHU3AXHMhgW/CANMS9UFu2Z5VY+uQ6wVZldWQmNzL bNQ1lYIz8nJY+9Q0fK4PjrpOs+CtEU35t0hn07kT7s/1aRhiCcsFaCZimej0m+66 /cwsCtrJRrQvub3x827fU/bszmBqVcwWwWeX0mst4ssBiEwYMq9LN+hQjNA6cHR8 D11NXNlj1K7RHJr6PpRacYIV4aNA2hlZ4PW9erKA6fng7gnPpeIB8YhWMLoQcAF1 wIxt/RD6y/gIlNzShXoDUZt+IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrXZRaC TyGXCHZW0/yXv261or6lMB8GA1UdIwQYMBaAFG4nBDw69A/F5ZeTixVPXIvg/f9s MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFGNy9GOTFEMEQyODJB NUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4WGxsNU9MRlU5Y2ktRDlf MncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpY0VQRHIwRDhYbGw1T0xGVTljaS1EOV8ydy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MDFGNy9GOTFEMEQyODJBNUIxMUVCQjg5MjFDMzVDNEY5QUUwMi9iaWNFUERyMEQ4 WGxsNU9MRlU5Y2ktRDlfMncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQuiKb4mhUM0GONd7eOASST8Oih3PzZMEOKutrLDCt17DwhRvnnqtn G8yMt8QgQ7yaJSkRG9LBWhsVEHu+cJie+nLJeBYexV0KEEjLvHLixt/ohTBotake CAW4DrUrDEu2S3ZTdFhfaXHV88qWz7YVEFkPqsZgIzNDKWTOCS9Mr1MiuYxMt2JL zYkXhvIVh8ehYEZt5nAdgJ67g4YOwQww0xdEe8U1itaQZU/F7gOY3luTE19S2fia ee8qlpqHLaCg6FJvrrjZEKYyotHo0v9lv1MkgOHqxGm5F4zSlDeGaWPjgJtP5MFZ mMPzyax+XlMcmwOAM5F9GfvvxWmf+Weh -----END CERTIFICATE-----Generated at Sun Aug 24 22:23:14 2025 by rpki-client