$ rpki-client -vvf rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft File: BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft (raw, json) Hash identifier: 1SVUISUETJvjZx2OqdbSrTcuiVyWqputJWWdbN8PHBA= Subject key identifier: AB:30:85:AE:95:E9:3D:6A:67:6A:C2:0B:15:9E:64:7A:19:6C:10:70 Authority key identifier: 06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24 Certificate issuer: /CN=A9122905/serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324 Certificate serial: 0245 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft Manifest number: 0242 Signing time: Sat 23 Aug 2025 02:04:48 +0000 Manifest this update: Sat 23 Aug 2025 02:04:47 +0000 Manifest next update: Sat 30 Aug 2025 02:04:47 +0000 Files and hashes: 1: BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl (hash: iIBCI7bAMu0TFt5BE9jYxGCEtyuujykhoYF797cUHUE=) 2: 8BFE9EA6335911EDBC60AC44C4F9AE02.roa (hash: PkaRAOyxeuH2U7UkwpCaJHtr/yLJ/iuQhH7B44HKa84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 581 (0x245) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122905, serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324 Validity Not Before: Aug 23 02:04:47 2025 GMT Not After : Aug 30 02:04:47 2025 GMT Subject: CN=68a921c0-2e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:bb:35:95:a9:0a:9f:86:99:98:a6:21:b5:11: 8a:1d:df:98:f6:91:24:a5:e8:20:19:39:d5:95:3f: 4e:2b:84:fc:bc:d1:d5:68:89:3f:41:81:9c:e6:4d: 7b:03:32:79:c2:40:a6:c8:2c:78:4c:c2:81:56:63: ec:af:19:43:6d:2d:35:fe:e0:81:7d:f5:be:5a:50: 42:8b:67:0d:e5:13:36:b0:cf:39:b0:d1:5d:b3:72: 01:da:39:a5:ff:0f:83:53:83:fb:7f:6a:fc:2e:7f: 55:de:e9:0d:c6:6a:95:fd:3c:23:e3:20:63:8f:d0: ba:28:04:c2:af:f0:fa:a4:93:4d:eb:91:74:79:21: ff:fe:53:10:22:9f:d7:ed:53:53:2a:c2:60:f0:06: 01:7e:a3:78:fa:f8:fc:67:87:df:1f:83:d4:15:19: c8:90:15:a7:86:e1:38:a0:b5:fe:83:4f:b2:05:ba: bf:e6:7f:d6:be:83:88:c5:6d:c5:1f:c1:1f:09:75: b0:3d:ac:1b:fb:e2:20:02:19:54:38:31:7d:af:8b: 18:5d:53:57:5e:6c:e1:96:e0:3b:a9:ab:19:cb:16: 23:64:b2:9b:72:53:99:5f:e6:f4:87:55:03:37:92: 7c:7c:85:c7:d5:e4:d5:e9:58:f5:b6:24:4a:24:e6: 8b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:30:85:AE:95:E9:3D:6A:67:6A:C2:0B:15:9E:64:7A:19:6C:10:70 X509v3 Authority Key Identifier: keyid:06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ab:d3:4e:87:0c:19:dd:e4:e7:e8:6f:cd:0f:af:6c:27:3d: 53:f4:ba:44:21:e2:86:c5:57:5e:05:83:59:a7:b2:00:6a:d0: 9d:1b:45:1f:ca:45:28:b8:65:44:5d:b2:53:29:5c:ce:62:03: 1c:32:d4:52:b2:d3:70:bb:16:cf:e8:c1:f7:60:67:62:27:38: 3b:5f:3d:9f:86:e5:f9:40:5f:ea:1c:e1:6e:64:54:26:8e:48: 66:bb:e4:57:48:90:dc:51:13:eb:43:25:e4:9b:65:74:e3:f3: d6:bc:c2:5f:2a:e3:09:ce:5a:7e:e8:76:47:d6:e2:5d:fa:94: 2a:f9:a2:44:29:ac:15:b4:e3:32:73:b5:61:99:23:b3:3c:9c: af:3a:fb:fc:f2:ca:e0:70:c0:5f:5e:a0:8b:28:e3:de:31:aa: 02:79:42:59:2b:be:9b:10:c1:80:7e:26:09:ce:ba:e9:12:f5: b7:4a:22:88:0b:80:cc:09:ea:79:04:25:bc:64:cf:c0:5e:50: ce:02:a6:fe:7d:b7:3e:50:64:ae:09:ad:c7:22:b4:e4:c1:3d: 03:05:76:dc:3b:dd:1d:96:cf:23:4e:85:e0:1e:e4:e5:a0:7a: e6:bd:50:da:31:8f:02:e6:ac:89:9c:2e:fa:4d:37:5a:40:61: 96:f1:c7:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5MDUxMTAvBgNVBAUTKDA2NDZDNTIyOTFENUNENERGNEEwRkY3ODY3ODRGQ0Y1 MjgzNDYzMjQwHhcNMjUwODIzMDIwNDQ3WhcNMjUwODMwMDIwNDQ3WjAYMRYwFAYD VQQDEw02OGE5MjFjMC0yZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7rs1lakKn4aZmKYhtRGKHd+Y9pEkpeggGTnVlT9OK4T8vNHVaIk/QYGc5k17 AzJ5wkCmyCx4TMKBVmPsrxlDbS01/uCBffW+WlBCi2cN5RM2sM85sNFds3IB2jml /w+DU4P7f2r8Ln9V3ukNxmqV/Twj4yBjj9C6KATCr/D6pJNN65F0eSH//lMQIp/X 7VNTKsJg8AYBfqN4+vj8Z4ffH4PUFRnIkBWnhuE4oLX+g0+yBbq/5n/WvoOIxW3F H8EfCXWwPawb++IgAhlUODF9r4sYXVNXXmzhluA7qasZyxYjZLKbclOZX+b0h1UD N5J8fIXH1eTV6Vj1tiRKJOaLOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKswha6V 6T1qZ2rCCxWeZHoZbBBwMB8GA1UdIwQYMBaAFAZGxSKR1c1N9KD/eGeE/PUoNGMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjkwNS8xMUVCMDg2QTMz NTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpVMzBvUDk0WjRUODlTZzBZ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JrYkZJcEhWelUzMG9QOTRaNFQ4OVNnMFl5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjkwNS8xMUVCMDg2QTMzNTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpV MzBvUDk0WjRUODlTZzBZeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOq9NOhwwZ3eTn6G/ND69sJz1T9LpEIeKGxVdeBYNZp7IAatCdG0Uf ykUouGVEXbJTKVzOYgMcMtRSstNwuxbP6MH3YGdiJzg7Xz2fhuX5QF/qHOFuZFQm jkhmu+RXSJDcURPrQyXkm2V04/PWvMJfKuMJzlp+6HZH1uJd+pQq+aJEKawVtOMy c7VhmSOzPJyvOvv88srgcMBfXqCLKOPeMaoCeUJZK76bEMGAfiYJzrrpEvW3SiKI C4DMCep5BCW8ZM/AXlDOAqb+fbc+UGSuCa3HIrTkwT0DBXbcO90dls8jToXgHuTl oHrmvVDaMY8C5qyJnC76TTdaQGGW8ccO -----END CERTIFICATE-----Generated at Sun Aug 24 00:09:51 2025 by rpki-client