$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft File: BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft (raw, json) Hash identifier: 4f0i2UQl/i0aefbvvhQR1O9hI6gJt54foQUewseyBGw= Subject key identifier: 27:D7:C1:60:EB:ED:3E:5A:3F:7B:99:33:C2:D6:5F:57:79:B7:A0:D9 Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93 Certificate issuer: /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft Manifest number: 9B Signing time: Sat 23 Aug 2025 06:41:13 +0000 Manifest this update: Sat 23 Aug 2025 06:41:13 +0000 Manifest next update: Sat 30 Aug 2025 06:41:13 +0000 Files and hashes: 1: BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl (hash: TAcCF15xKHWDsn4UbES3L/ITRcPm3GIkWeHx3B6ZORc=) 2: 536B22D258CF11F0A4B0BC1DC4F9AE02.roa (hash: mvmD2bVYuP9FLTuo/zDCa9iFem+gd8N8t195wsX0F4g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:41:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293 Validity Not Before: Aug 23 06:41:13 2025 GMT Not After : Aug 30 06:41:13 2025 GMT Subject: CN=68a96289-67a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ee:b1:72:c4:bf:9a:d2:5f:40:f6:a1:c8:74: 87:48:8d:2c:f7:57:46:99:d9:29:ef:e2:98:14:86: 44:af:16:62:4d:70:06:75:a2:f2:fc:31:b6:5e:aa: 19:ca:30:11:73:5c:d4:56:fd:14:d3:72:a3:b3:0a: ef:83:6b:89:83:c4:95:c2:6a:a0:13:cf:d6:d0:e6: bc:b5:c3:9b:7f:71:eb:f0:0b:2a:1b:76:d4:5c:75: 6e:b2:55:3a:33:fa:be:4d:d6:ca:02:e3:05:b7:c7: 39:a9:71:9b:73:87:ea:59:12:55:08:70:c8:f4:f5: 80:96:04:7d:6e:57:78:ca:d0:9c:4b:47:63:84:6c: 26:0d:e9:57:f7:ad:d9:d8:62:41:aa:40:16:c5:b6: d0:5b:d1:11:89:9b:bd:95:c8:ad:55:99:9f:f6:3c: 43:50:25:31:95:e9:98:1d:3b:95:be:ec:05:26:83: 92:d6:b0:fd:d8:7b:21:24:e7:89:6f:71:08:db:8c: 66:49:94:6c:55:3f:12:3a:5f:1b:8d:48:fa:9f:52: a0:02:5d:31:4b:fb:7e:f9:c1:56:2a:c8:45:d6:af: 42:59:f3:2e:2a:16:44:21:68:47:25:bd:e2:d8:36: f2:53:ca:51:43:37:ad:f7:dd:74:29:68:ab:c8:69: af:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D7:C1:60:EB:ED:3E:5A:3F:7B:99:33:C2:D6:5F:57:79:B7:A0:D9 X509v3 Authority Key Identifier: keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:64:bd:ad:42:20:58:8d:10:78:43:99:3d:05:90:59:29:78: 5a:b3:aa:72:6f:fe:8d:33:47:db:27:3a:1e:2c:5b:a7:b7:41: 09:fb:2c:6d:4c:db:10:a5:96:1b:5b:f1:a7:4a:f3:78:e5:a6: aa:ef:c9:6e:e3:a0:69:94:95:01:47:c4:28:94:76:ea:8e:bc: 2b:05:2b:21:7f:0e:25:a9:d0:fb:e2:93:7e:bb:73:91:f0:40: 01:5d:0f:bc:c0:29:d6:66:65:c1:a5:98:79:00:fc:1c:a8:6d: b4:81:4b:15:9f:6c:c1:6a:20:06:09:d2:27:9a:17:09:09:f6: fb:df:ff:3e:f5:c6:d9:24:13:9c:0d:8e:92:2a:f7:e9:ef:3d: 79:34:97:7b:1b:ef:6f:67:42:ab:33:f1:7e:7c:51:d1:97:87: e7:53:c3:97:5c:2e:34:84:19:f9:ff:ac:99:90:53:7c:80:a8: eb:ff:86:2e:9b:5b:ad:1b:af:8e:ef:65:85:2d:28:d8:72:f0: dc:f0:08:8f:fb:30:a9:a1:ba:6e:6e:0a:04:0b:27:01:6c:9c: b7:fa:0d:33:f0:06:50:04:ad:36:17:60:9f:3f:92:d7:7d:c2: c4:ed:83:30:48:2a:13:e6:eb:87:47:ad:cc:91:e3:52:6c:19: 68:2b:3b:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKDA0Qzc5QTRERDI0RkZBMDNGQThGOTI5Njc2NkY4MkEw Mzg1Q0UyOTMwHhcNMjUwODIzMDY0MTEzWhcNMjUwODMwMDY0MTEzWjAYMRYwFAYD VQQDEw02OGE5NjI4OS02N2ExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlu6xcsS/mtJfQPahyHSHSI0s91dGmdkp7+KYFIZErxZiTXAGdaLy/DG2XqoZ yjARc1zUVv0U03Kjswrvg2uJg8SVwmqgE8/W0Oa8tcObf3Hr8AsqG3bUXHVuslU6 M/q+TdbKAuMFt8c5qXGbc4fqWRJVCHDI9PWAlgR9bld4ytCcS0djhGwmDelX963Z 2GJBqkAWxbbQW9ERiZu9lcitVZmf9jxDUCUxlemYHTuVvuwFJoOS1rD92HshJOeJ b3EI24xmSZRsVT8SOl8bjUj6n1KgAl0xS/t++cFWKshF1q9CWfMuKhZEIWhHJb3i 2DbyU8pRQzet9910KWiryGmvYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCfXwWDr 7T5aP3uZM8LWX1d5t6DZMB8GA1UdIwQYMBaAFATHmk3ST/oD+o+SlnZvgqA4XOKT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS83QzZFREE4Q0Ex Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi9CTWVhVGRKUC1nUDZqNUtXZG0tQ29EaGM0 cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JNZWFUZEpQLWdQNmo1S1dkbS1Db0RoYzRwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS83QzZFREE4Q0ExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi9CTWVhVGRKUC1n UDZqNUtXZG0tQ29EaGM0cE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpZL2tQiBYjRB4Q5k9BZBZKXhas6pyb/6NM0fbJzoeLFunt0EJ+yxt TNsQpZYbW/GnSvN45aaq78lu46BplJUBR8QolHbqjrwrBSshfw4lqdD74pN+u3OR 8EABXQ+8wCnWZmXBpZh5APwcqG20gUsVn2zBaiAGCdInmhcJCfb73/8+9cbZJBOc DY6SKvfp7z15NJd7G+9vZ0KrM/F+fFHRl4fnU8OXXC40hBn5/6yZkFN8gKjr/4Yu m1utG6+O72WFLSjYcvDc8AiP+zCpobpubgoECycBbJy3+g0z8AZQBK02F2CfP5LX fcLE7YMwSCoT5uuHR63MkeNSbBloKzup -----END CERTIFICATE-----Generated at Sat Aug 23 12:44:16 2025 by rpki-client