$ rpki-client -vvf rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft File: bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft (raw, json) Hash identifier: TJqqp12BgNfjTeGUqH//+x5BfaribGrggIkgp5LFWl4= Subject key identifier: 61:B8:0A:7D:78:AF:1B:24:F3:2A:66:6B:D0:2F:F5:16:14:25:B0:EB Authority key identifier: 6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D Certificate issuer: /CN=A9130A53/serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Certificate serial: 0925 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft Manifest number: 0919 Signing time: Fri 22 Aug 2025 20:24:57 +0000 Manifest this update: Fri 22 Aug 2025 20:24:57 +0000 Manifest next update: Fri 29 Aug 2025 20:24:57 +0000 Files and hashes: 1: bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl (hash: PStOBuxrbqqS735YgcCnGB8agEDzDMm46oX7y00wHDc=) 2: F36A0E2EAB4B11EAA2CA585BC4F9AE02.roa (hash: BidxYSVmBabzb42KTEQRZnYy7Sbks/SN1w8y9yUGtJQ=) 3: F2CD89AAAB4B11EAA2CA585BC4F9AE02.roa (hash: OlzMxXAfrSP6Nj86W0pq9Qh2aWjxJmFySgPE4i+83ow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2341 (0x925) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130A53, serialNumber=6E4E69BE13D613A70274C0CE77383923F156272D Validity Not Before: Aug 22 20:24:57 2025 GMT Not After : Aug 29 20:24:57 2025 GMT Subject: CN=68a8d219-97e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:61:4a:43:bb:7a:b0:b4:3c:46:af:c6:26:8c: 31:d9:2f:13:6a:d1:1e:34:63:27:90:4a:c7:01:bd: d7:e2:1f:15:fa:1f:61:d5:41:4e:57:f1:b2:30:df: bf:79:51:22:34:3c:55:a6:f7:2b:31:a9:df:44:7d: d8:42:33:85:9c:d6:4f:64:db:d7:d1:88:1f:85:3a: 75:bf:ad:8c:fb:65:69:9d:57:e3:03:bd:a3:16:21: f0:30:4b:d9:56:ea:53:59:52:fd:c8:8f:0e:de:02: 26:35:4a:37:b0:5c:99:c6:36:d9:f6:2d:37:00:51: 72:fc:16:94:2f:a7:21:5d:83:88:66:cc:35:cf:ba: f4:8d:4f:b1:27:43:62:ea:2a:43:9a:9f:1b:c0:d7: 16:0a:6f:b8:46:d9:4d:a1:cc:f2:28:f8:cf:44:db: 03:50:38:9d:14:ff:fa:0d:5c:d3:85:88:23:93:28: 61:64:84:59:9a:3e:fe:cf:47:16:cb:21:7b:fd:d6: 5a:52:2f:16:38:6b:7c:3f:9f:b6:ac:5d:c1:70:da: 52:ca:f6:b4:69:93:95:69:5d:e4:ea:fa:9e:82:12: f8:c8:3e:5a:3a:a3:a8:bb:7b:d4:87:4d:a5:46:b6: 13:b8:fd:5b:0b:89:93:d3:e6:7f:1d:d0:96:ca:a7: af:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B8:0A:7D:78:AF:1B:24:F3:2A:66:6B:D0:2F:F5:16:14:25:B0:EB X509v3 Authority Key Identifier: keyid:6E:4E:69:BE:13:D6:13:A7:02:74:C0:CE:77:38:39:23:F1:56:27:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bk5pvhPWE6cCdMDOdzg5I_FWJy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130A53/71B7D470AB4A11EA89D16359C4F9AE02/bk5pvhPWE6cCdMDOdzg5I_FWJy0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e7:8e:8b:d9:82:10:2e:03:67:2f:f5:9c:9b:ac:7e:32:e2: 58:28:33:c3:3a:82:c9:ad:20:a1:62:63:1c:e5:a3:7e:b6:5f: 55:5b:37:8b:c1:7e:a9:70:e2:72:d9:9b:d8:96:d5:ab:d5:c0: e8:2e:4f:2d:d6:7f:9a:15:5b:70:c0:e2:f6:46:43:ba:50:be: 04:71:38:ac:23:20:9f:b3:eb:20:8a:7d:66:9f:bd:c3:b2:29: a8:0a:0a:92:41:75:49:6b:bb:15:2e:2c:39:a0:87:0c:c8:02: 70:0b:ad:13:45:0f:9b:d8:8b:08:e0:c4:97:56:c1:af:03:d7: 50:1e:8a:f0:c3:e1:23:f7:f3:13:cc:bd:fc:ae:8e:10:4a:54: c7:f7:d5:e0:22:3b:2b:22:ab:27:e2:da:8f:08:01:8c:c6:06: d7:b0:d0:43:7a:cb:b2:7d:15:9a:0d:35:eb:25:bf:e9:56:3b: bd:00:06:f4:26:64:0e:b6:ce:c0:ff:97:20:76:57:89:3d:70: 06:9d:90:e4:45:51:69:24:e5:9c:ed:07:5a:35:53:28:f3:db: 56:c5:3b:54:ac:89:69:02:d3:75:9b:65:6e:8b:9d:75:26:92: 46:22:09:8f:80:27:a8:57:fa:48:36:1e:99:c5:90:00:0c:b5: fd:3c:f5:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzBBNTMxMTAvBgNVBAUTKDZFNEU2OUJFMTNENjEzQTcwMjc0QzBDRTc3MzgzOTIz RjE1NjI3MkQwHhcNMjUwODIyMjAyNDU3WhcNMjUwODI5MjAyNDU3WjAYMRYwFAYD VQQDEw02OGE4ZDIxOS05N2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuGFKQ7t6sLQ8Rq/GJowx2S8TatEeNGMnkErHAb3X4h8V+h9h1UFOV/GyMN+/ eVEiNDxVpvcrManfRH3YQjOFnNZPZNvX0YgfhTp1v62M+2VpnVfjA72jFiHwMEvZ VupTWVL9yI8O3gImNUo3sFyZxjbZ9i03AFFy/BaUL6chXYOIZsw1z7r0jU+xJ0Ni 6ipDmp8bwNcWCm+4RtlNoczyKPjPRNsDUDidFP/6DVzThYgjkyhhZIRZmj7+z0cW yyF7/dZaUi8WOGt8P5+2rF3BcNpSyva0aZOVaV3k6vqeghL4yD5aOqOou3vUh02l RrYTuP1bC4mT0+Z/HdCWyqevywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGG4Cn14 rxsk8ypma9Av9RYUJbDrMB8GA1UdIwQYMBaAFG5Oab4T1hOnAnTAznc4OSPxVict MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEE1My83MUI3RDQ3MEFC NEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2Y0NkTURPZHpnNUlfRldK eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrNXB2aFBXRTZjQ2RNRE9kemc1SV9GV0p5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MEE1My83MUI3RDQ3MEFCNEExMUVBODlEMTYzNTlDNEY5QUUwMi9iazVwdmhQV0U2 Y0NkTURPZHpnNUlfRldKeTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO546L2YIQLgNnL/Wcm6x+MuJYKDPDOoLJrSChYmMc5aN+tl9VWzeL wX6pcOJy2ZvYltWr1cDoLk8t1n+aFVtwwOL2RkO6UL4EcTisIyCfs+sgin1mn73D simoCgqSQXVJa7sVLiw5oIcMyAJwC60TRQ+b2IsI4MSXVsGvA9dQHorww+Ej9/MT zL38ro4QSlTH99XgIjsrIqsn4tqPCAGMxgbXsNBDesuyfRWaDTXrJb/pVju9AAb0 JmQOts7A/5cgdleJPXAGnZDkRVFpJOWc7QdaNVMo89tWxTtUrIlpAtN1m2Vui511 JpJGIgmPgCeoV/pINh6ZxZAADLX9PPWx -----END CERTIFICATE-----Generated at Sat Aug 23 22:16:25 2025 by rpki-client