$ rpki-client -vvf rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft File: --bA8ysvL8RXYKA0LkO79VK03oU.mft (raw, json) Hash identifier: aCiMUIGDGXIWbKqIycyYcuHvkRES1fw1nlzOcHU+Bqg= Subject key identifier: E4:97:B4:4F:36:EB:02:C3:DA:49:EE:82:5D:2B:16:EF:2E:18:67:5A Authority key identifier: FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 Certificate issuer: /CN=A9124BD3/serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Certificate serial: 0DCC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft Manifest number: 0DB7 Signing time: Fri 22 Aug 2025 18:01:39 +0000 Manifest this update: Fri 22 Aug 2025 18:01:39 +0000 Manifest next update: Fri 29 Aug 2025 18:01:39 +0000 Files and hashes: 1: --bA8ysvL8RXYKA0LkO79VK03oU.crl (hash: gYgbhPeP9S1uylITxmWqxtCyfc5ArZIeLro+eqk5Wx0=) 2: 4C67EC06C68E11E983395515C4F9AE02.roa (hash: tP21nihbHvOPN0o7Q7ZnYvoB4lWQWRK3//ALxViNCn4=) 3: CA761A36760A11EC8FB55C23C4F9AE02.roa (hash: XcKMqxWrgr72X1rDOMRNGWOhRv7K/Bosj9SE1/JpnIk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3532 (0xdcc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9124BD3, serialNumber=FBE6C0F32B2F2FC45760A0342E43BBF552B4DE85 Validity Not Before: Aug 22 18:01:39 2025 GMT Not After : Aug 29 18:01:39 2025 GMT Subject: CN=68a8b083-9b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ce:40:62:de:a2:c0:4a:7a:37:2f:8d:b7:ed: ce:04:03:37:f0:c8:e8:7f:27:88:ac:6d:1f:51:36: 3e:d9:6c:37:96:d2:3c:ae:0e:97:3a:05:da:ca:3f: 78:79:9b:b1:32:f9:de:5a:0b:8f:83:21:f0:71:12: f6:33:5a:14:1a:4d:f6:73:ac:e2:19:10:c4:b7:eb: b6:82:58:11:61:e7:08:eb:44:eb:fc:a9:9d:13:32: 59:c9:b9:7c:6c:4c:68:63:a0:44:56:52:0c:24:cd: 2e:16:0a:39:f9:c5:b7:fa:13:8c:60:f3:fa:b0:8c: 47:89:f7:b5:72:e4:67:0a:15:b1:de:85:f2:9e:37: 09:8d:8e:29:e2:66:35:68:ae:c9:4f:f6:66:db:90: 84:c8:d1:82:52:12:2d:79:b3:1d:cd:b9:91:fc:30: cf:aa:bd:9d:85:f5:07:49:59:d7:e6:02:1c:db:6a: b9:28:95:b2:3b:bc:1a:fd:5c:1e:b1:1c:8e:69:9a: 52:44:02:16:2a:3e:1f:c5:7e:5a:93:43:51:af:e9: 0c:19:d6:57:62:23:fa:5d:b7:6a:d9:a1:71:f1:f2: 77:3d:00:ae:66:d8:71:08:7b:f3:e5:35:f3:a7:fa: 8c:81:01:8e:b0:cb:27:45:dc:ae:f3:fc:89:97:c2: bb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:97:B4:4F:36:EB:02:C3:DA:49:EE:82:5D:2B:16:EF:2E:18:67:5A X509v3 Authority Key Identifier: keyid:FB:E6:C0:F3:2B:2F:2F:C4:57:60:A0:34:2E:43:BB:F5:52:B4:DE:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--bA8ysvL8RXYKA0LkO79VK03oU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124BD3/0E4D867AC68D11E99B452D13C4F9AE02/--bA8ysvL8RXYKA0LkO79VK03oU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:b6:92:f9:d0:0b:a2:b7:c7:d1:25:b7:7c:be:94:6a:f8:18: 83:a5:03:fc:36:0f:0c:40:f4:f1:59:35:e2:0e:5c:55:50:15: 9a:18:39:29:f8:d8:6f:55:f4:c8:1a:1d:99:e8:06:3a:11:9f: 87:76:69:47:01:b2:fc:77:12:13:48:ea:4f:13:43:31:f8:e4: 79:22:4e:21:11:19:54:61:f8:96:e6:dc:1e:ad:91:42:a4:7f: 37:b2:a4:19:db:9a:b7:f9:9b:6a:56:14:97:5d:9f:c7:a1:6f: 17:11:7d:49:7c:bb:cb:25:af:64:09:93:a1:fe:90:31:b3:47: 21:28:74:e1:0e:12:13:2e:cd:f0:e4:c9:e5:71:70:20:3e:9b: 1b:76:a9:1c:ad:6f:4b:6f:a8:e9:12:17:67:be:21:71:4f:80: 52:60:fd:fd:09:8b:91:8a:26:e3:d1:c3:c3:18:b2:c6:5b:88: f2:d5:b7:71:52:fb:e6:a2:49:ce:ca:1a:33:cd:3b:90:ee:80: 8b:56:a4:10:d5:fe:b7:18:f1:a1:4e:65:04:8d:7b:d2:d9:a6: 43:31:c5:c6:45:e8:30:18:66:8f:47:c8:da:c5:39:63:ec:db: be:0f:c1:88:4a:cb:57:81:d5:92:c2:57:ce:72:e8:02:23:b1: fd:c5:ed:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjRCRDMxMTAvBgNVBAUTKEZCRTZDMEYzMkIyRjJGQzQ1NzYwQTAzNDJFNDNCQkY1 NTJCNERFODUwHhcNMjUwODIyMTgwMTM5WhcNMjUwODI5MTgwMTM5WjAYMRYwFAYD VQQDEw02OGE4YjA4My05YjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2M5AYt6iwEp6Ny+Nt+3OBAM38MjofyeIrG0fUTY+2Ww3ltI8rg6XOgXayj94 eZuxMvneWguPgyHwcRL2M1oUGk32c6ziGRDEt+u2glgRYecI60Tr/KmdEzJZybl8 bExoY6BEVlIMJM0uFgo5+cW3+hOMYPP6sIxHife1cuRnChWx3oXynjcJjY4p4mY1 aK7JT/Zm25CEyNGCUhItebMdzbmR/DDPqr2dhfUHSVnX5gIc22q5KJWyO7wa/Vwe sRyOaZpSRAIWKj4fxX5ak0NRr+kMGdZXYiP6Xbdq2aFx8fJ3PQCuZthxCHvz5TXz p/qMgQGOsMsnRdyu8/yJl8K70wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOSXtE82 6wLD2knugl0rFu8uGGdaMB8GA1UdIwQYMBaAFPvmwPMrLy/EV2CgNC5Du/VStN6F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEJEMy8wRTREODY3QUM2 OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4UlhZS0EwTGtPNzlWSzAz b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy0tYkE4eXN2TDhSWFlLQTBMa083OVZLMDNvVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NEJEMy8wRTREODY3QUM2OEQxMUU5OUI0NTJEMTNDNEY5QUUwMi8tLWJBOHlzdkw4 UlhZS0EwTGtPNzlWSzAzb1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACtpL50Auit8fRJbd8vpRq+BiDpQP8Ng8MQPTxWTXiDlxVUBWaGDkp +NhvVfTIGh2Z6AY6EZ+HdmlHAbL8dxITSOpPE0Mx+OR5Ik4hERlUYfiW5twerZFC pH83sqQZ25q3+ZtqVhSXXZ/HoW8XEX1JfLvLJa9kCZOh/pAxs0chKHThDhITLs3w 5MnlcXAgPpsbdqkcrW9Lb6jpEhdnviFxT4BSYP39CYuRiibj0cPDGLLGW4jy1bdx UvvmoknOyhozzTuQ7oCLVqQQ1f63GPGhTmUEjXvS2aZDMcXGRegwGGaPR8jaxTlj 7Nu+D8GISstXgdWSwlfOcugCI7H9xe3y -----END CERTIFICATE-----Generated at Sat Aug 23 17:10:41 2025 by rpki-client