$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft File: Bmy1pxYud36-c45cu4Dn9JRwzCE.mft (raw, json) Hash identifier: NLYWSqAwMH8V0qALCFzNXR4OgWDWIdLzh3FZdIcvRCc= Subject key identifier: 34:C3:E7:5A:02:EA:D4:E0:B1:7E:BA:68:40:63:6F:CB:97:4E:B2:43 Authority key identifier: 06:6C:B5:A7:16:2E:77:7E:BE:73:8E:5C:BB:80:E7:F4:94:70:CC:21 Certificate issuer: /CN=A9134FAF/serialNumber=066CB5A7162E777EBE738E5CBB80E7F49470CC21 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft Manifest number: 28 Signing time: Sat 23 Aug 2025 07:59:41 +0000 Manifest this update: Sat 23 Aug 2025 07:59:41 +0000 Manifest next update: Sat 30 Aug 2025 07:59:41 +0000 Files and hashes: 1: Bmy1pxYud36-c45cu4Dn9JRwzCE.crl (hash: azB0GX2xhl711g5vlca40ziEuHCEfnlvp6DTL48hb7A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.crl rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:59:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134FAF, serialNumber=066CB5A7162E777EBE738E5CBB80E7F49470CC21 Validity Not Before: Aug 23 07:59:41 2025 GMT Not After : Aug 30 07:59:41 2025 GMT Subject: CN=68a974ed-e5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:44:13:06:40:07:b4:7b:0d:ef:47:93:7b: 23:b4:03:27:2c:44:39:05:1a:90:dd:3f:81:34:1f: 9d:39:b1:e2:14:76:6c:5a:14:ad:d1:ef:e3:87:7d: f4:d0:ed:16:63:ef:77:7c:bc:19:9c:c7:2e:f9:0d: c1:e9:d4:4d:a1:c6:15:3a:b1:e6:b5:c4:38:77:b0: 75:7b:59:df:b4:63:c4:db:b8:70:cb:ce:ce:67:ed: 8f:0c:49:56:79:64:f8:e0:c1:0d:3f:25:a8:a6:c4: 10:84:32:a2:31:c3:ec:21:64:92:e0:52:9b:1f:47: 48:74:ee:52:11:d1:4c:5b:c3:86:76:b0:6c:f2:95: 03:3d:84:22:bd:63:f5:f8:60:e2:7d:06:8b:82:09: 19:5e:3c:2b:3b:0a:e7:fe:43:12:b6:8a:00:08:04: b5:b2:3a:d2:0f:51:1d:66:bd:b6:7c:26:33:bc:9f: 9f:b2:dd:21:73:e0:45:32:ca:35:77:d7:66:f2:3f: 59:52:87:0f:b0:ab:ad:3a:49:aa:df:2d:5a:e8:71: 5d:e5:33:ae:18:58:42:2d:02:cb:74:8f:49:ad:2d: fc:59:03:d3:09:90:dd:3d:d9:cf:fb:fd:02:82:68: a1:a2:0b:97:0d:7a:b6:03:f2:15:50:f2:26:7f:ea: 4b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C3:E7:5A:02:EA:D4:E0:B1:7E:BA:68:40:63:6F:CB:97:4E:B2:43 X509v3 Authority Key Identifier: keyid:06:6C:B5:A7:16:2E:77:7E:BE:73:8E:5C:BB:80:E7:F4:94:70:CC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:2f:37:ed:40:54:aa:6e:51:4d:83:3f:20:3c:c6:36:b4:72: fd:5c:dc:d0:e0:08:bd:be:f0:2f:f6:f4:6a:d9:19:86:9c:2a: 9f:ed:5c:13:cb:9d:e6:0a:b1:b5:d0:c3:0a:c1:4c:95:72:91: 63:7b:80:49:82:de:08:65:25:60:b0:88:b4:09:1d:9d:50:00: c0:20:51:0d:dd:6e:84:42:6b:02:8f:c7:1c:b0:82:8a:96:30: 58:b9:dc:3a:4f:dd:76:9a:cf:de:a5:f5:eb:23:9b:da:5f:2b: fa:5f:93:4a:70:31:38:72:f7:3a:c8:f1:e5:96:c6:83:1b:c3: 16:16:6e:c6:7f:79:56:b8:99:29:80:0a:bd:ca:3a:92:14:1d: bd:9e:57:c5:f0:ea:fb:28:3c:d6:4f:af:cb:0c:8c:07:6f:a4: 28:f6:d7:5e:d1:c2:99:ac:53:99:ff:b1:57:51:e3:df:83:a4: 02:46:35:aa:31:6c:1a:a0:f0:df:44:9b:30:4a:b6:0a:c5:db: b1:e9:1b:a7:bf:c5:0e:16:c1:bc:c7:24:fa:40:a0:f1:86:ea: 62:89:19:c8:10:e6:34:34:13:8f:14:53:01:1e:a1:b5:de:58: c3:86:9f:de:c8:e2:df:3e:7b:f3:9b:3a:01:48:84:1a:75:7d: 1d:d3:b2:be -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEZBRjExMC8GA1UEBRMoMDY2Q0I1QTcxNjJFNzc3RUJFNzM4RTVDQkI4MEU3RjQ5 NDcwQ0MyMTAeFw0yNTA4MjMwNzU5NDFaFw0yNTA4MzAwNzU5NDFaMBgxFjAUBgNV BAMTDTY4YTk3NGVkLWU1ZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIyEQTBkAHtHsN70eTeyO0AycsRDkFGpDdP4E0H505seIUdmxaFK3R7+OHffTQ 7RZj73d8vBmcxy75DcHp1E2hxhU6sea1xDh3sHV7Wd+0Y8TbuHDLzs5n7Y8MSVZ5 ZPjgwQ0/JaimxBCEMqIxw+whZJLgUpsfR0h07lIR0Uxbw4Z2sGzylQM9hCK9Y/X4 YOJ9BouCCRlePCs7Cuf+QxK2igAIBLWyOtIPUR1mvbZ8JjO8n5+y3SFz4EUyyjV3 12byP1lShw+wq606SarfLVrocV3lM64YWEItAst0j0mtLfxZA9MJkN092c/7/QKC aKGiC5cNerYD8hVQ8iZ/6kt3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNMPnWgLq 1OCxfrpoQGNvy5dOskMwHwYDVR0jBBgwFoAUBmy1pxYud36+c45cu4Dn9JRwzCEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0RkFGLzhBQzQxNzk0NDQ5 NzExRjBBOTc1NzM2MkM0RjlBRTAyL0JteTFweFl1ZDM2LWM0NWN1NERuOUpSd3pD RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQm15MXB4WXVkMzYtYzQ1Y3U0RG45SlJ3ekNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 RkFGLzhBQzQxNzk0NDQ5NzExRjBBOTc1NzM2MkM0RjlBRTAyL0JteTFweFl1ZDM2 LWM0NWN1NERuOUpSd3pDRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGMvN+1AVKpuUU2DPyA8xja0cv1c3NDgCL2+8C/29GrZGYacKp/tXBPL neYKsbXQwwrBTJVykWN7gEmC3ghlJWCwiLQJHZ1QAMAgUQ3dboRCawKPxxywgoqW MFi53DpP3Xaaz96l9esjm9pfK/pfk0pwMThy9zrI8eWWxoMbwxYWbsZ/eVa4mSmA Cr3KOpIUHb2eV8Xw6vsoPNZPr8sMjAdvpCj2117RwpmsU5n/sVdR49+DpAJGNaox bBqg8N9EmzBKtgrF27HpG6e/xQ4WwbzHJPpAoPGG6mKJGcgQ5jQ0E48UUwEeobXe WMOGn97I4t8+e/ObOgFIhBp1fR3Tsr4= -----END CERTIFICATE-----Generated at Sun Aug 24 00:44:42 2025 by rpki-client