$ rpki-client -vvf rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft File: bu53G7POfpjbOWDE2C90Kiz36Ek.mft (raw, json) Hash identifier: wlw9BcSVrvzSkBeGvLI8ou9iCBPWEPz3OfFSMWw589I= Subject key identifier: 3C:1B:50:34:D1:72:7F:1D:62:F5:2C:18:A5:91:CE:A1:A5:FA:79:3B Authority key identifier: 6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49 Certificate issuer: /CN=A9118827/serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849 Certificate serial: 050B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft Manifest number: 0507 Signing time: Fri 22 Aug 2025 23:49:54 +0000 Manifest this update: Fri 22 Aug 2025 23:49:53 +0000 Manifest next update: Fri 29 Aug 2025 23:49:53 +0000 Files and hashes: 1: bu53G7POfpjbOWDE2C90Kiz36Ek.crl (hash: c/I7uPrFRuLsYuAqzq1PqgRQWKQjKNiiVGWp2L9sCoY=) 2: 95D9A9461BEC11EC97B39812C4F9AE02.roa (hash: O7MsLUw+gaoXTG9KiMvLQn/bjyCnjO8H09gMJ3FbG7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:49:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1291 (0x50b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118827, serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849 Validity Not Before: Aug 22 23:49:53 2025 GMT Not After : Aug 29 23:49:53 2025 GMT Subject: CN=68a90222-b8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:84:9b:f6:29:10:54:1d:d7:7f:6d:63:e4:cf: 20:e6:d1:e0:02:cc:b1:9a:0d:62:9b:ca:7b:c5:3b: cc:c4:8a:1f:5c:f5:8b:9e:76:a1:71:97:c6:66:c1: ef:bc:b0:a0:51:c7:2e:9e:cc:70:e4:18:0b:66:f5: ab:36:1a:c0:22:a7:d3:dd:fc:69:a9:c3:b7:a8:ce: 0c:00:02:a8:3a:52:77:eb:71:e0:0e:25:38:6c:5d: 20:c6:1b:65:e7:0e:3c:fb:e7:64:1f:02:08:c8:8a: ae:75:91:13:dd:47:9e:fb:e3:34:86:02:f0:28:cb: 09:db:86:ea:72:4e:50:15:7a:7d:0a:79:5f:a1:1b: cb:99:da:59:10:92:a3:34:58:9b:d5:a0:b2:b1:1d: 24:0e:09:1d:cd:17:c2:68:a0:61:04:65:9b:a5:87: 90:0d:0b:c4:29:70:d4:15:82:b7:1c:b6:c2:ba:f8: b8:28:9f:e6:3c:73:f2:78:8d:67:c5:11:81:c3:2c: 66:52:74:9d:31:85:d0:81:e9:e4:1c:9f:58:f0:7e: de:0a:0e:18:ef:6d:03:3d:91:b4:f3:03:29:2d:5e: 33:31:8e:0a:8f:3d:e7:d3:c4:2a:d6:15:75:d2:62: fa:e0:1b:62:7a:57:81:f3:60:3a:37:c1:93:ba:b0: 67:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:1B:50:34:D1:72:7F:1D:62:F5:2C:18:A5:91:CE:A1:A5:FA:79:3B X509v3 Authority Key Identifier: keyid:6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5b:7f:a1:8a:fb:e4:75:b3:fb:72:e4:62:22:96:36:76:de:ae: af:d8:20:af:fb:ce:f8:a7:17:40:95:f3:81:2f:64:0a:f6:ca: cf:de:8b:d2:f8:b2:fa:72:f4:1a:5b:72:19:4b:7a:7e:be:fd: bb:30:d4:44:6d:c7:d3:1c:3c:8b:d8:af:3f:e8:a6:44:c6:6c: 18:4c:12:aa:da:a6:b8:66:9b:e0:00:55:56:14:07:12:99:fa: 9c:03:7c:aa:ef:9c:72:05:cb:82:9f:1c:79:34:bb:99:50:93: f9:5d:98:62:68:1a:1d:0b:d8:27:11:94:2a:4e:06:09:56:c0: 47:ba:a0:06:b2:9f:a1:6a:d3:af:ad:7b:a2:1a:e3:f7:80:37: 1c:1a:61:3b:1e:43:c6:9d:d8:11:7b:e2:ce:0f:d5:a9:1c:0e: c7:a4:cf:df:2d:8a:fc:7e:b7:a2:dd:bc:c2:8d:99:6e:21:70: 0d:7e:a3:d5:54:a3:8f:f7:ea:45:05:6d:8e:3b:aa:31:4d:5a: c5:5b:92:2f:27:96:33:26:f9:79:0c:54:ce:9d:e7:80:1b:81: 4a:8b:9a:8a:04:5e:ea:b2:96:32:30:9f:af:d2:25:d2:8c:71: f5:ed:09:a2:d0:fc:18:a9:7e:8b:a5:a4:70:86:9d:a7:b5:84: f2:c9:7b:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4MjcxMTAvBgNVBAUTKDZFRUU3NzFCQjNDRTdFOThEQjM5NjBDNEQ4MkY3NDJB MkNGN0U4NDkwHhcNMjUwODIyMjM0OTUzWhcNMjUwODI5MjM0OTUzWjAYMRYwFAYD VQQDEw02OGE5MDIyMi1iOGY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzYSb9ikQVB3Xf21j5M8g5tHgAsyxmg1im8p7xTvMxIofXPWLnnahcZfGZsHv vLCgUccunsxw5BgLZvWrNhrAIqfT3fxpqcO3qM4MAAKoOlJ363HgDiU4bF0gxhtl 5w48++dkHwIIyIqudZET3Uee++M0hgLwKMsJ24bqck5QFXp9CnlfoRvLmdpZEJKj NFib1aCysR0kDgkdzRfCaKBhBGWbpYeQDQvEKXDUFYK3HLbCuvi4KJ/mPHPyeI1n xRGBwyxmUnSdMYXQgenkHJ9Y8H7eCg4Y720DPZG08wMpLV4zMY4Kjz3n08Qq1hV1 0mL64BtieleB82A6N8GTurBnAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDwbUDTR cn8dYvUsGKWRzqGl+nk7MB8GA1UdIwQYMBaAFG7udxuzzn6Y2zlgxNgvdCos9+hJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODgyNy8zQzdDQjQ1MDFC RTgxMUVDQkJBNjVCNTBDNEY5QUUwMi9idTUzRzdQT2ZwamJPV0RFMkM5MEtpejM2 RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1NTNHN1BPZnBqYk9XREUyQzkwS2l6MzZFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODgyNy8zQzdDQjQ1MDFCRTgxMUVDQkJBNjVCNTBDNEY5QUUwMi9idTUzRzdQT2Zw amJPV0RFMkM5MEtpejM2RWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBbf6GK++R1s/ty5GIiljZ23q6v2CCv+874pxdAlfOBL2QK9srP3ovS +LL6cvQaW3IZS3p+vv27MNREbcfTHDyL2K8/6KZExmwYTBKq2qa4ZpvgAFVWFAcS mfqcA3yq75xyBcuCnxx5NLuZUJP5XZhiaBodC9gnEZQqTgYJVsBHuqAGsp+hatOv rXuiGuP3gDccGmE7HkPGndgRe+LOD9WpHA7HpM/fLYr8frei3bzCjZluIXANfqPV VKOP9+pFBW2OO6oxTVrFW5IvJ5YzJvl5DFTOneeAG4FKi5qKBF7qspYyMJ+v0iXS jHH17Qmi0PwYqX6LpaRwhp2ntYTyyXuI -----END CERTIFICATE-----Generated at Sat Aug 23 16:58:04 2025 by rpki-client