$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft File: B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json) Hash identifier: bl9tMDPQexo1k379xOOY6npDOWP5tBOJNMEpluM6UkQ= Subject key identifier: B8:38:9F:3E:4E:E0:20:B2:FF:53:7F:A3:31:49:B4:21:C6:0D:31:9C Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Certificate serial: 0BF3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft Manifest number: 0BCF Signing time: Fri 22 Aug 2025 19:02:47 +0000 Manifest this update: Fri 22 Aug 2025 19:02:47 +0000 Manifest next update: Fri 29 Aug 2025 19:02:47 +0000 Files and hashes: 1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: nBq7m6PJF+j211qqjavbIH0QuHOaqQN8mtaER7VGtuQ=) 2: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: PsugJWGM5ONkTT/QKBNZcGT+Fx1Ca8/gO0JC72FJj/U=) 3: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: DqyU+6nXvs6HOFMKI16Emo+flYs9ktEh2tA31OF4Cw4=) 4: DAFD055806F811EC9558C827C4F9AE02.roa (hash: re/IaJHi711uC7kt/qe355ZQkGdlvPCAcW6M1Vv6a/M=) 5: 4CC6B77C0A9111EEB13EAF44C4F9AE02.roa (hash: PDvCAZx5hVOPcyfQ4LwOi2hSUYUbvW/tgd4X2jQj+2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3059 (0xbf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Validity Not Before: Aug 22 19:02:47 2025 GMT Not After : Aug 29 19:02:47 2025 GMT Subject: CN=68a8bed7-04fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f6:67:86:44:bf:5f:ed:e0:9e:af:26:a6:9f: 53:44:f5:b3:11:fa:76:31:c9:78:d7:1d:06:71:ea: bb:d1:0f:c9:5b:e2:eb:ea:82:21:90:35:9e:47:a7: a3:c9:b1:60:8b:c9:f5:ce:84:08:a7:ef:3e:78:4d: 20:3e:af:7c:4f:ea:7b:6f:48:54:db:4a:5f:71:f5: dd:d8:c0:61:24:99:9a:b1:8c:42:59:ef:68:74:07: 95:3c:fb:0b:10:d4:24:35:37:67:dc:fb:86:f8:5f: ab:6b:d2:fa:34:7a:6f:af:aa:39:e6:be:97:a4:61: e2:2e:ab:b6:5d:3a:8a:93:07:f9:9b:25:19:bd:f6: 48:02:1c:d2:24:c7:24:e0:da:19:c6:ae:ee:87:93: 07:af:27:51:c2:67:b7:a7:ee:2b:ce:00:cc:3c:8a: 19:8a:02:56:48:0b:f8:a0:9c:f1:36:1c:04:f6:75: 72:73:73:e4:42:54:d8:4a:c2:7d:10:57:ef:81:75: 32:5e:73:7b:b1:fa:3e:e0:61:ca:33:97:f5:43:e1: 0f:f2:0f:db:f7:6a:a0:c2:95:a0:10:ee:d3:c8:5b: da:8d:89:ed:f5:5d:45:de:f9:c0:a1:c9:98:ef:60: d2:59:86:17:4c:22:8f:09:bc:2d:96:b6:46:9d:38: 09:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:38:9F:3E:4E:E0:20:B2:FF:53:7F:A3:31:49:B4:21:C6:0D:31:9C X509v3 Authority Key Identifier: keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e7:55:c2:39:b1:a3:d0:fd:03:af:90:d1:57:36:02:6b:6e: 07:e0:d1:52:c6:16:78:12:6a:9d:b9:fe:4d:a1:1d:30:ad:f1: 14:4f:31:9e:30:39:43:81:40:8a:97:43:ca:19:b9:62:dc:fe: 47:3e:3b:7f:93:82:78:3d:82:cb:6b:e8:b6:0c:9d:ef:28:6a: 02:81:d8:b6:24:81:0d:04:f2:e4:2c:24:97:e1:f1:21:b3:e0: 5e:6a:48:01:a3:c0:9c:e7:98:d8:67:7c:cf:f2:de:e0:2a:fe: 2b:d6:82:9a:42:0a:e8:e5:03:91:d8:34:06:85:ca:74:54:4b: 72:db:e8:da:8b:bd:b5:d7:90:7b:96:25:2b:8b:e9:70:6f:69: 3a:6c:c2:6b:24:96:d2:3b:a6:af:14:6e:1b:03:e5:1b:4e:12: 89:ec:8b:40:99:d6:8e:24:03:86:3e:95:a1:a2:26:37:07:e9: 6e:a3:f8:11:e9:ab:e6:a2:bb:b8:d8:c5:ff:33:bd:49:5f:a2: 24:bc:49:86:68:df:d5:a3:9b:8a:6d:5f:45:81:81:01:3b:98: a2:0d:ac:5a:0a:2c:f5:e2:32:63:a4:46:d1:98:09:00:62:c5: 40:f2:12:1f:b1:c6:a0:4f:5d:8c:2f:df:09:82:90:71:d8:5c: 39:d3:6c:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1N0IxMTAvBgNVBAUTKDA3Njk1NzYxMzM1ODZFNUFCNEY5QkY0REE1MkI2RDVD QTE2RDlDRDUwHhcNMjUwODIyMTkwMjQ3WhcNMjUwODI5MTkwMjQ3WjAYMRYwFAYD VQQDEw02OGE4YmVkNy0wNGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fZnhkS/X+3gnq8mpp9TRPWzEfp2Mcl41x0Gceq70Q/JW+Lr6oIhkDWeR6ej ybFgi8n1zoQIp+8+eE0gPq98T+p7b0hU20pfcfXd2MBhJJmasYxCWe9odAeVPPsL ENQkNTdn3PuG+F+ra9L6NHpvr6o55r6XpGHiLqu2XTqKkwf5myUZvfZIAhzSJMck 4NoZxq7uh5MHrydRwme3p+4rzgDMPIoZigJWSAv4oJzxNhwE9nVyc3PkQlTYSsJ9 EFfvgXUyXnN7sfo+4GHKM5f1Q+EP8g/b92qgwpWgEO7TyFvajYnt9V1F3vnAocmY 72DSWYYXTCKPCbwtlrZGnTgJpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLg4nz5O 4CCy/1N/ozFJtCHGDTGcMB8GA1UdIwQYMBaAFAdpV2EzWG5atPm/TaUrbVyhbZzV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU3Qi9BOTE3RTc1NDI2 MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJscTAtYjlOcFN0dFhLRnRu TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IybFhZVE5ZYmxxMC1iOU5wU3R0WEtGdG5OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDU3Qi9BOTE3RTc1NDI2MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJs cTAtYjlOcFN0dFhLRnRuTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAs51XCObGj0P0Dr5DRVzYCa24H4NFSxhZ4Emqduf5NoR0wrfEUTzGe MDlDgUCKl0PKGbli3P5HPjt/k4J4PYLLa+i2DJ3vKGoCgdi2JIENBPLkLCSX4fEh s+BeakgBo8Cc55jYZ3zP8t7gKv4r1oKaQgro5QOR2DQGhcp0VEty2+jai72115B7 liUri+lwb2k6bMJrJJbSO6avFG4bA+UbThKJ7ItAmdaOJAOGPpWhoiY3B+luo/gR 6avmoru42MX/M71JX6IkvEmGaN/Vo5uKbV9FgYEBO5iiDaxaCiz14jJjpEbRmAkA YsVA8hIfscagT12ML98JgpBx2Fw502xz -----END CERTIFICATE-----Generated at Sat Aug 23 19:38:23 2025 by rpki-client