$ rpki-client -vvf rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft File: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft (raw, json) Hash identifier: 0bSxqu89xzTtvUau4PPBvcml0vqZ9+rDCtVrbOpoDqE= Subject key identifier: E8:59:2A:D5:A0:23:73:51:0A:85:96:E5:66:DD:AC:51:DD:95:46:28 Authority key identifier: 07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 Certificate issuer: /CN=A9129162/serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Certificate serial: 94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft Manifest number: 90 Signing time: Sat 23 Aug 2025 06:48:29 +0000 Manifest this update: Sat 23 Aug 2025 06:48:28 +0000 Manifest next update: Sat 30 Aug 2025 06:48:28 +0000 Files and hashes: 1: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl (hash: qz0PsRf8EBoTiUHeOww0MhYdxG4NJ2taOeNcDVYZpug=) 2: A5CE322CAD4311EF8552641BC4F9AE02.roa (hash: oXiSJMCySt2dFDYGEcN3qaUXeVsh5lk+krDNaZUgJ2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129162, serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Validity Not Before: Aug 23 06:48:28 2025 GMT Not After : Aug 30 06:48:28 2025 GMT Subject: CN=68a9643c-bb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f6:6a:cb:f0:6b:40:49:3a:98:36:9d:c0:1b: a1:c5:f9:af:2c:4d:f9:1c:9a:47:fd:85:ee:2d:20: d0:8f:00:e9:48:4c:dc:89:c6:f2:f0:04:1b:e4:78: 31:85:a8:3a:24:6e:a6:b5:68:d7:16:21:4d:62:9c: 75:79:27:4e:3b:6e:ae:9c:c8:a4:c2:29:1f:04:da: 64:c7:13:22:1d:3b:76:f1:c4:35:bf:3a:08:d1:0c: 21:9a:1b:e9:0e:b3:23:de:1b:20:fc:2e:e0:da:97: 5f:a2:96:89:79:d8:2f:86:d1:f4:f8:dd:eb:f7:d1: fc:c1:1a:85:8d:da:6d:65:08:b5:3d:f1:f4:ae:a7: a9:30:ad:d5:9d:65:9d:08:3d:bc:14:bf:99:d6:c8: 3e:e9:60:38:89:29:b0:91:1f:6d:97:96:23:d1:e0: d3:0c:bc:83:03:a3:d9:ad:dc:7d:9a:6c:5e:18:49: b3:43:1d:2d:27:13:94:f9:53:d2:68:bc:85:ba:84: a6:5f:9d:65:64:7d:cb:6a:4c:b7:32:29:f3:40:32: 5c:59:5d:41:eb:c1:4a:49:fd:72:0a:35:85:25:07: 7d:87:5d:d9:cd:0f:5c:8e:00:71:8d:bf:6c:0e:eb: 09:ae:2b:0f:6c:45:90:d0:66:2f:48:3a:a2:c9:c8: fd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:59:2A:D5:A0:23:73:51:0A:85:96:E5:66:DD:AC:51:DD:95:46:28 X509v3 Authority Key Identifier: keyid:07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:b1:ad:44:a6:3b:2d:a1:6e:bf:6c:da:d9:21:b0:2c:34:e8: 27:5b:1b:82:fa:cf:8c:9a:0a:71:0e:8e:a9:6e:05:dd:96:b3: 0e:37:4e:d9:59:10:77:ab:59:7b:61:61:20:20:e6:26:29:7a: 8f:cf:b6:ca:b2:11:df:95:63:68:20:06:a6:c5:97:08:0f:41: 3a:18:c6:4b:ed:38:47:bc:30:57:84:a8:f6:8c:91:78:6f:af: 31:78:23:c4:02:79:ad:b4:a3:10:4a:8f:43:38:d0:8a:cb:30: db:ec:c0:af:9a:6b:43:0b:1d:bb:51:17:6f:26:2f:10:2e:9c: 81:1b:7f:c9:b1:5c:d5:bf:27:28:ec:07:12:d5:47:fc:b5:3d: e3:06:69:2d:be:f0:c8:2d:54:ae:a7:95:6f:69:50:b5:b4:3d: 9a:bd:3f:ef:85:a1:bc:37:9d:f6:47:65:bc:fd:82:24:3d:1e: 31:f7:2e:00:a9:4d:be:eb:df:0b:2b:cc:ac:34:84:fe:f8:81: 26:48:a0:b4:6c:d9:e2:79:06:97:b6:72:f9:83:de:04:d8:11: 80:63:ed:d5:55:fc:2a:5b:ee:a3:cf:ef:73:2c:d4:40:ab:e0: 47:eb:9f:02:b4:fa:af:da:80:36:85:fa:8e:66:e3:6b:f8:a0: 52:46:dc:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkxNjIxMTAvBgNVBAUTKDA3QTY4MUM5MUMzRTA1MTJEMzY4OUU5OUJDRTVCQzY2 NDA5MTY3MzQwHhcNMjUwODIzMDY0ODI4WhcNMjUwODMwMDY0ODI4WjAYMRYwFAYD VQQDEw02OGE5NjQzYy1iYjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/Zqy/BrQEk6mDadwBuhxfmvLE35HJpH/YXuLSDQjwDpSEzcicby8AQb5Hgx hag6JG6mtWjXFiFNYpx1eSdOO26unMikwikfBNpkxxMiHTt28cQ1vzoI0Qwhmhvp DrMj3hsg/C7g2pdfopaJedgvhtH0+N3r99H8wRqFjdptZQi1PfH0rqepMK3VnWWd CD28FL+Z1sg+6WA4iSmwkR9tl5Yj0eDTDLyDA6PZrdx9mmxeGEmzQx0tJxOU+VPS aLyFuoSmX51lZH3Laky3MinzQDJcWV1B68FKSf1yCjWFJQd9h13ZzQ9cjgBxjb9s DusJrisPbEWQ0GYvSDqiycj9yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOhZKtWg I3NRCoWW5WbdrFHdlUYoMB8GA1UdIwQYMBaAFAemgckcPgUS02iembzlvGZAkWc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTE2Mi81QTM4MEQ2QUFE NDMxMUVGQUE4NkMzMUFDNEY5QUUwMi9CNmFCeVJ3LUJSTFRhSjZadk9XOFprQ1Ja elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2YUJ5UnctQlJMVGFKNlp2T1c4WmtDUlp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTE2Mi81QTM4MEQ2QUFENDMxMUVGQUE4NkMzMUFDNEY5QUUwMi9CNmFCeVJ3LUJS TFRhSjZadk9XOFprQ1JaelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnsa1EpjstoW6/bNrZIbAsNOgnWxuC+s+MmgpxDo6pbgXdlrMON07Z WRB3q1l7YWEgIOYmKXqPz7bKshHflWNoIAamxZcID0E6GMZL7ThHvDBXhKj2jJF4 b68xeCPEAnmttKMQSo9DONCKyzDb7MCvmmtDCx27URdvJi8QLpyBG3/JsVzVvyco 7AcS1Uf8tT3jBmktvvDILVSup5VvaVC1tD2avT/vhaG8N532R2W8/YIkPR4x9y4A qU2+698LK8ysNIT++IEmSKC0bNnieQaXtnL5g94E2BGAY+3VVfwqW+6jz+9zLNRA q+BH658CtPqv2oA2hfqOZuNr+KBSRtw5 -----END CERTIFICATE-----Generated at Sat Aug 23 20:43:34 2025 by rpki-client