$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft File: Bst2YhlvZE7eydz72HmbjHPjlwk.mft (raw, json) Hash identifier: +cffAdGoCTSLThwAQH9e1uKm4aNjt+zRLGAoFdzCg9M= Subject key identifier: EA:D6:3D:74:8B:B6:91:EE:44:18:8F:C9:3C:44:D4:16:A5:16:E4:CB Authority key identifier: 06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 Certificate issuer: /CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Certificate serial: 0215 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft Manifest number: 020F Signing time: Sat 23 Aug 2025 02:20:09 +0000 Manifest this update: Sat 23 Aug 2025 02:20:09 +0000 Manifest next update: Sat 30 Aug 2025 02:20:09 +0000 Files and hashes: 1: Bst2YhlvZE7eydz72HmbjHPjlwk.crl (hash: 3eJktVdMxz+PS+PmuCAauz5zUqD9is6ovw0eijO4/ZM=) 2: 2965791E5F4011ED9361C246C4F9AE02.roa (hash: giH1vIhIIPvv5hJDOK02Raj/lgCr3oz3hTTRlbexHIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C93, serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Validity Not Before: Aug 23 02:20:09 2025 GMT Not After : Aug 30 02:20:09 2025 GMT Subject: CN=68a92559-5877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:af:bb:46:45:b7:ba:36:d1:1d:e6:46:82: b7:4c:c3:78:41:58:42:5f:2a:bc:4f:58:f0:c7:7a: 8f:7b:24:f3:ff:c4:51:2a:15:14:3a:f7:ed:47:b3: 3f:fa:a8:68:ae:1e:68:e8:02:57:dd:44:45:ef:ab: b4:7c:e1:aa:88:82:d4:bd:e5:7f:e5:bf:d1:47:bb: e9:02:7f:35:1e:2e:49:dc:cf:1d:b8:55:7d:69:49: a1:bc:86:07:8d:bc:e0:4f:1e:af:30:94:d7:39:8d: 3f:23:47:83:b0:c5:37:ff:b0:43:6f:53:f1:60:78: 9b:f4:ad:0a:77:6f:2b:70:74:4a:b0:2e:e0:94:ac: 85:4a:54:f5:66:dc:aa:6c:7d:96:77:a7:ac:9f:b5: 46:f8:34:61:6d:07:c9:3c:6e:6f:93:90:a8:a9:21: 46:10:17:73:ad:00:2c:9f:55:e6:d9:e7:76:b7:14: 39:f1:40:7a:6c:b3:a8:7c:30:83:e9:34:3b:6d:c7: 3e:e9:47:62:7c:90:5c:f6:e6:0a:61:54:db:23:57: b2:70:ac:f7:d4:17:a3:df:d4:fe:f8:10:72:e8:2f: 83:21:4a:e1:62:28:25:5c:66:be:34:55:87:0d:90: c4:2e:13:a7:53:85:3e:58:fb:7f:e2:43:af:6b:d2: 4a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:D6:3D:74:8B:B6:91:EE:44:18:8F:C9:3C:44:D4:16:A5:16:E4:CB X509v3 Authority Key Identifier: keyid:06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:b7:9f:17:70:fa:50:b6:36:d9:0b:12:07:8d:20:59:5d:53: ee:eb:d7:5b:d3:f5:65:5e:c2:43:41:ba:ba:32:11:66:86:6e: ad:69:aa:19:63:4a:2b:4d:29:f2:56:57:2f:66:54:8e:dc:08: 79:1f:7f:88:1f:1e:32:52:75:39:53:ce:d6:14:4f:20:0c:40: 91:0f:67:e0:39:e1:02:ed:d1:52:c8:07:77:d9:b0:2b:37:db: 01:ef:70:83:55:2d:70:91:22:0b:16:9a:90:d4:b1:d3:7b:ab: d5:52:49:5b:46:77:9b:22:6a:bb:bf:1d:ed:fe:6c:65:c0:6a: 3f:2a:77:19:7a:6e:c0:8e:c8:a7:ee:4b:92:7c:b7:92:81:f7: ae:d4:5f:6c:a2:76:d2:25:1e:52:07:3c:49:d0:33:84:1a:6d: 11:78:64:d8:e2:af:ee:9b:6e:a8:52:15:a9:0b:25:fc:ed:e5: c6:d8:bc:85:f9:4c:53:d0:4a:19:52:f6:4c:32:9b:34:f2:36: 42:af:d2:b5:ff:7d:98:5e:37:cc:e0:e6:3a:26:12:67:e0:72: ea:b6:a1:11:88:04:6d:09:a7:6b:59:61:6f:ce:46:e6:4d:84: 6d:4b:98:c2:2f:b9:74:c0:3f:86:8f:cd:b7:3f:60:95:79:d3: da:48:83:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDOTMxMTAvBgNVBAUTKDA2Q0I3NjYyMTk2RjY0NEVERUM5RENGQkQ4Nzk5QjhD NzNFMzk3MDkwHhcNMjUwODIzMDIyMDA5WhcNMjUwODMwMDIyMDA5WjAYMRYwFAYD VQQDEw02OGE5MjU1OS01ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBCvu0ZFt7o20R3mRoK3TMN4QVhCXyq8T1jwx3qPeyTz/8RRKhUUOvftR7M/ +qhorh5o6AJX3URF76u0fOGqiILUveV/5b/RR7vpAn81Hi5J3M8duFV9aUmhvIYH jbzgTx6vMJTXOY0/I0eDsMU3/7BDb1PxYHib9K0Kd28rcHRKsC7glKyFSlT1Ztyq bH2Wd6esn7VG+DRhbQfJPG5vk5CoqSFGEBdzrQAsn1Xm2ed2txQ58UB6bLOofDCD 6TQ7bcc+6UdifJBc9uYKYVTbI1eycKz31Bej39T++BBy6C+DIUrhYiglXGa+NFWH DZDELhOnU4U+WPt/4kOva9JKtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrWPXSL tpHuRBiPyTxE1BalFuTLMB8GA1UdIwQYMBaAFAbLdmIZb2RO3snc+9h5m4xz45cJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0M5My80MDIxQTRFNjVG MjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpFN2V5ZHo3MkhtYmpIUGps d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzdDJZaGx2WkU3ZXlkejcySG1iakhQamx3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0M5My80MDIxQTRFNjVGMjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpF N2V5ZHo3MkhtYmpIUGpsd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFt58XcPpQtjbZCxIHjSBZXVPu69db0/VlXsJDQbq6MhFmhm6taaoZ Y0orTSnyVlcvZlSO3Ah5H3+IHx4yUnU5U87WFE8gDECRD2fgOeEC7dFSyAd32bAr N9sB73CDVS1wkSILFpqQ1LHTe6vVUklbRnebImq7vx3t/mxlwGo/KncZem7Ajsin 7kuSfLeSgfeu1F9sonbSJR5SBzxJ0DOEGm0ReGTY4q/um26oUhWpCyX87eXG2LyF +UxT0EoZUvZMMps08jZCr9K1/32YXjfM4OY6JhJn4HLqtqERiARtCadrWWFvzkbm TYRtS5jCL7l0wD+Gj823P2CVedPaSIND -----END CERTIFICATE-----Generated at Sat Aug 23 21:36:50 2025 by rpki-client