$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json) Hash identifier: j4HOVX+6rDEv/dhbYmJS80MzWOGLp8yhd3xh1T8lmQ8= Subject key identifier: 85:FF:9F:47:CB:E0:98:C6:5B:3E:CC:4C:78:5F:0D:F3:38:CC:8A:C0 Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Certificate serial: 03E5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft Manifest number: 03DA Signing time: Thu 21 Aug 2025 00:44:54 +0000 Manifest this update: Thu 21 Aug 2025 00:44:54 +0000 Manifest next update: Thu 28 Aug 2025 00:44:54 +0000 Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: Rbl7KyisCg4XkrQWsdnefpwux+STmqFfwVRII+njpOE=) 2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: yEVRrXufQh+Qc/HqPk/jAvaqGmnT+PN1jZ/kXTfyo9A=) 3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: hYiudA2rwhN316Pb5lt+GNf53uhu2FFhMUzTaTRI2hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 997 (0x3e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Validity Not Before: Aug 21 00:44:54 2025 GMT Not After : Aug 28 00:44:54 2025 GMT Subject: CN=68a66c06-bbca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:87:e9:c3:6a:71:89:68:82:c1:f5:d7:03:ed: af:83:63:6a:3a:6b:d5:c9:60:74:d1:f4:94:f0:89: bb:d7:db:4d:be:41:81:da:41:7e:ee:92:8c:44:dd: db:66:ea:90:36:50:1b:e2:85:6f:a2:c5:3b:6d:32: 8a:27:bb:84:6b:ba:26:e9:cc:25:31:be:1c:b0:70: 47:b5:41:75:0e:d2:35:d7:51:13:6a:70:19:9b:35: df:34:2f:71:24:46:fc:f4:a6:23:36:76:ab:26:4c: e4:ab:94:3a:d7:87:49:1b:d0:d5:21:99:ce:fe:7c: 33:f2:53:b1:c6:f7:c7:15:e5:63:b0:e2:f0:04:90: fa:e4:23:37:1a:13:1b:f5:89:f7:c4:4f:1e:4a:29: 1f:0b:e3:4a:91:b0:37:35:17:df:ab:f1:1f:95:7f: 06:15:40:58:4f:17:c4:ae:9d:6e:88:bc:73:14:72: a4:fa:ae:ac:a3:f1:70:1f:66:ac:e7:78:92:2e:71: 80:1c:0c:cd:24:e2:67:97:c5:82:11:1c:f7:f4:94: bf:d9:73:42:c0:0f:7c:f2:eb:e3:e9:11:97:7d:f6: d6:12:36:72:54:bc:2d:1a:17:f8:c8:30:a4:57:20: 09:1a:f1:31:17:51:9a:08:8c:a8:34:1d:1b:66:94: 63:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:FF:9F:47:CB:E0:98:C6:5B:3E:CC:4C:78:5F:0D:F3:38:CC:8A:C0 X509v3 Authority Key Identifier: keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:ef:85:f9:e6:e7:20:dd:0d:b2:91:83:97:e2:0d:52:ea:0c: fa:e5:d8:f4:48:e1:70:e9:51:76:8c:38:92:7c:be:c0:fd:9e: d4:8e:e9:0a:72:ce:38:de:36:d2:db:dc:7e:b6:e0:79:94:12: 3b:3a:9d:93:c4:d7:7b:58:a4:c5:82:a1:25:d2:ce:79:4d:72: fa:87:4b:8e:2a:e8:4c:c4:19:71:f6:aa:e6:e4:e0:a7:c0:55: 20:85:0c:2e:46:4d:a9:c4:d2:b5:c0:ca:c2:8c:35:a9:72:43: 7d:5e:6f:9b:86:4a:5e:1f:b1:02:2d:b9:1c:89:9b:47:09:a0: eb:93:03:e8:8d:f2:78:2a:3d:7c:6d:ff:1b:ad:ce:eb:1e:4e: 7c:f6:36:53:3c:7d:fc:5f:a4:d0:09:79:9c:d1:09:55:58:92: 30:28:b2:16:75:8b:b6:2c:64:f6:77:c8:ae:ab:70:a3:bd:2c: 30:b0:a7:09:f9:46:86:8a:15:47:c7:b0:88:57:b9:cf:0e:60: 0c:f3:e5:4f:c8:43:1a:cb:f4:ec:94:04:b2:65:d8:01:74:99: 61:d7:73:fd:3d:96:e3:ba:63:69:3d:8c:d5:cb:4d:fd:b5:45: 5b:41:6c:57:33:34:ec:32:a8:d5:15:d6:ce:73:33:d4:a4:65: 07:86:87:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF OEU4NkQ4MEIwHhcNMjUwODIxMDA0NDU0WhcNMjUwODI4MDA0NDU0WjAYMRYwFAYD VQQDEw02OGE2NmMwNi1iYmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4fpw2pxiWiCwfXXA+2vg2NqOmvVyWB00fSU8Im719tNvkGB2kF+7pKMRN3b ZuqQNlAb4oVvosU7bTKKJ7uEa7om6cwlMb4csHBHtUF1DtI111ETanAZmzXfNC9x JEb89KYjNnarJkzkq5Q614dJG9DVIZnO/nwz8lOxxvfHFeVjsOLwBJD65CM3GhMb 9Yn3xE8eSikfC+NKkbA3NRffq/EflX8GFUBYTxfErp1uiLxzFHKk+q6so/FwH2as 53iSLnGAHAzNJOJnl8WCERz39JS/2XNCwA988uvj6RGXffbWEjZyVLwtGhf4yDCk VyAJGvExF1GaCIyoNB0bZpRjqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIX/n0fL 4JjGWz7MTHhfDfM4zIrAMB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80NEE1MTk0ODk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJ dzQtRHlNckNELURvNkcyQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDN74X55ucg3Q2ykYOX4g1S6gz65dj0SOFw6VF2jDiSfL7A/Z7UjukK cs443jbS29x+tuB5lBI7Op2TxNd7WKTFgqEl0s55TXL6h0uOKuhMxBlx9qrm5OCn wFUghQwuRk2pxNK1wMrCjDWpckN9Xm+bhkpeH7ECLbkciZtHCaDrkwPojfJ4Kj18 bf8brc7rHk589jZTPH38X6TQCXmc0QlVWJIwKLIWdYu2LGT2d8iuq3CjvSwwsKcJ +UaGihVHx7CIV7nPDmAM8+VPyEMay/TslASyZdgBdJlh13P9PZbjumNpPYzVy039 tUVbQWxXMzTsMqjVFdbOczPUpGUHhodq -----END CERTIFICATE-----Generated at Thu Aug 21 07:59:44 2025 by rpki-client