$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft File: bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json) Hash identifier: y663jOTPSsggycqe+jPPWnk3FhRcMoNTshPZ6jNgF5k= Subject key identifier: A6:24:B8:4C:AC:44:87:DE:83:2E:72:25:49:B8:C7:63:FB:CE:79:1E Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 Certificate issuer: /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Certificate serial: 0380 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft Manifest number: 0354 Signing time: Fri 05 Sep 2025 01:27:24 +0000 Manifest this update: Fri 05 Sep 2025 01:27:24 +0000 Manifest next update: Fri 12 Sep 2025 01:27:24 +0000 Files and hashes: 1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: jRO/YgB+zhxAAgLrnzdIFqG52fZ/EsYAzXWFZCnQBA4=) 2: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: PsC0/VUJuwAMkmEBhdJkaydKW8CflQBB5EZOYU0cJtQ=) 3: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: /TyJbdztz4Y61/Gz2zhowON+Tt9+b5wqgCKpbZ339lw=) 4: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: SwY/Crs5L/QLrOTdNtWGBh9zEFcoCIW07axxQKOSACI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 896 (0x380) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608 Validity Not Before: Sep 5 01:27:24 2025 GMT Not After : Sep 12 01:27:24 2025 GMT Subject: CN=68ba3c7c-c3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:36:89:c9:3c:b3:cb:5d:6f:55:9f:1e:b2:fe: 5c:85:99:16:dd:c0:73:d6:82:12:7a:09:90:1d:8b: a9:ac:a5:00:2a:ac:65:23:ba:49:c8:4d:9f:1d:b0: 7c:90:e3:18:46:ed:08:a0:f4:af:aa:70:79:0a:fc: d1:13:2b:4a:97:31:96:37:bd:7d:4f:bf:8d:94:33: e4:b8:fb:e2:49:aa:4c:d3:1e:b6:6f:1d:35:08:b9: 7a:d3:ea:c9:99:e5:f1:bd:3b:b6:77:16:56:4a:59: 89:5d:4f:35:4c:25:58:50:b4:97:e9:03:f2:c2:fa: 29:ef:59:f7:15:09:e7:b0:da:1e:40:b3:11:11:4f: 78:b3:cd:07:5e:41:68:72:41:ca:50:c4:77:06:9a: 2c:4c:88:8c:78:b2:38:a1:57:34:65:1c:a3:0a:2a: e0:63:23:55:80:22:c4:ef:44:4f:24:01:f0:49:60: 44:b6:69:8f:9b:f3:16:0a:85:9f:17:0a:4a:4b:91: d5:88:61:a5:db:4c:10:52:03:ec:58:8c:af:56:e2: 0f:8c:c7:61:48:29:86:94:48:3c:9c:5e:1d:ff:e0: 97:c7:46:39:59:5f:65:5b:93:2d:1f:89:94:ee:c3: e6:de:14:2a:1b:54:bf:09:95:35:7b:39:ba:3f:36: 22:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:24:B8:4C:AC:44:87:DE:83:2E:72:25:49:B8:C7:63:FB:CE:79:1E X509v3 Authority Key Identifier: keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:07:6c:a0:22:29:0d:61:22:a7:a0:bf:7b:b2:6f:f4:89:f8: 99:e5:33:0f:2f:05:71:5d:59:64:22:94:81:54:86:6f:7a:55: 17:56:2e:3a:02:f9:0e:ea:ab:ec:88:ca:13:00:47:53:03:54: 19:75:0e:92:fd:4e:bc:71:9f:73:7c:25:60:34:cf:c9:52:01: 4b:4d:5f:87:e2:a3:b4:15:af:1f:d0:a8:84:b7:a5:4b:6e:ed: 7f:34:c9:95:46:1b:a2:00:17:95:e0:a7:d8:49:2b:68:20:5c: a5:18:d5:f6:55:da:2d:a3:b5:b2:e6:f1:71:fd:75:96:32:ed: e6:bf:1a:52:82:5b:91:68:ee:b0:b6:09:d4:3f:b8:a6:c2:af: 48:13:e8:d4:53:3d:75:00:6a:86:73:f3:f0:8a:c2:f5:56:a6: e2:95:d3:1a:06:0e:46:ef:f4:b6:3b:08:f2:6a:5c:83:d0:ce: 1f:ab:a6:25:14:f5:3c:00:e2:df:67:ec:3f:24:69:96:05:22: 0e:cf:26:41:8a:71:09:9c:a7:de:08:72:3b:b1:85:d2:d6:c5: dc:25:7d:fb:5f:c1:2a:c2:25:2a:a4:af:fd:82:1b:ea:bc:41: 9a:bc:2a:ee:06:14:6b:86:e4:2e:08:04:8a:2b:d3:46:fa:c9: 1c:4e:b0:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTkxQkMxMTAvBgNVBAUTKDZENUQ1MEU4OEI5RDY1RThBRkRBMjhDMkNFQTYxNTAx MjcwMzg2MDgwHhcNMjUwOTA1MDEyNzI0WhcNMjUwOTEyMDEyNzI0WjAYMRYwFAYD VQQDEw02OGJhM2M3Yy1jM2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTaJyTyzy11vVZ8esv5chZkW3cBz1oISegmQHYuprKUAKqxlI7pJyE2fHbB8 kOMYRu0IoPSvqnB5CvzREytKlzGWN719T7+NlDPkuPviSapM0x62bx01CLl60+rJ meXxvTu2dxZWSlmJXU81TCVYULSX6QPywvop71n3FQnnsNoeQLMREU94s80HXkFo ckHKUMR3BposTIiMeLI4oVc0ZRyjCirgYyNVgCLE70RPJAHwSWBEtmmPm/MWCoWf FwpKS5HViGGl20wQUgPsWIyvVuIPjMdhSCmGlEg8nF4d/+CXx0Y5WV9lW5MtH4mU 7sPm3hQqG1S/CZU1ezm6PzYiwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYkuEys RIfegy5yJUm4x2P7znkeMB8GA1UdIwQYMBaAFG1dUOiLnWXor9oows6mFQEnA4YI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTFCQy9BRTQ0RDI0QURC RTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFplaXYyaWpDenFZVkFTY0Ro Z2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JWMVE2SXVkWmVpdjJpakN6cVlWQVNjRGhnZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OTFCQy9BRTQ0RDI0QURCRTkxMUVDOTUxMTA1MTVDNEY5QUUwMi9iVjFRNkl1ZFpl aXYyaWpDenFZVkFTY0RoZ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOB2ygIikNYSKnoL97sm/0ifiZ5TMPLwVxXVlkIpSBVIZvelUXVi46 AvkO6qvsiMoTAEdTA1QZdQ6S/U68cZ9zfCVgNM/JUgFLTV+H4qO0Fa8f0KiEt6VL bu1/NMmVRhuiABeV4KfYSStoIFylGNX2Vdoto7Wy5vFx/XWWMu3mvxpSgluRaO6w tgnUP7imwq9IE+jUUz11AGqGc/PwisL1VqbildMaBg5G7/S2OwjyalyD0M4fq6Yl FPU8AOLfZ+w/JGmWBSIOzyZBinEJnKfeCHI7sYXS1sXcJX37X8EqwiUqpK/9ghvq vEGavCruBhRrhuQuCASKK9NG+skcTrCk -----END CERTIFICATE-----Generated at Sat Sep 6 11:49:59 2025 by rpki-client