$ rpki-client -vvf rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft File: bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft (raw, json) Hash identifier: t9Z8QaVi2/avbHCUkNb+73xUWiIPWRwcahgDtgqUafw= Subject key identifier: D2:D7:88:04:D1:B2:B0:95:1C:D8:CA:93:7A:69:30:B5:7F:BD:A5:3D Authority key identifier: 6C:8D:FA:04:3C:22:B8:A2:7E:AB:60:47:0A:F4:06:60:24:A6:84:40 Certificate issuer: /CN=A913DF8A/serialNumber=6C8DFA043C22B8A27EAB60470AF4066024A68440 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft Manifest number: 0103 Signing time: Sat 23 Aug 2025 05:14:12 +0000 Manifest this update: Sat 23 Aug 2025 05:14:12 +0000 Manifest next update: Sat 30 Aug 2025 05:14:12 +0000 Files and hashes: 1: bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl (hash: MRPTpuBpmy/6nVpSGqXuXzq7qaK5KlN/BNutpppDop0=) 2: EC873B66F37911EEA9FCAF6BC4F9AE02.roa (hash: R0DfmVDnEwGfUuvqVJCH+cmUjdIg5Xto6mNDm3yMbdg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913DF8A, serialNumber=6C8DFA043C22B8A27EAB60470AF4066024A68440 Validity Not Before: Aug 23 05:14:12 2025 GMT Not After : Aug 30 05:14:12 2025 GMT Subject: CN=68a94e24-c5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:27:1b:ed:54:1d:57:b4:96:99:3e:ca:6c:0d: 6b:3a:ce:9b:ba:8e:53:95:9e:8c:1f:a5:14:b3:76: 50:21:bd:c1:25:39:cc:4d:05:f2:92:85:e5:1a:02: d2:18:40:d8:d7:54:d4:56:70:19:80:d8:e1:5b:8e: 10:09:47:ce:b8:c7:d7:40:71:72:6e:8f:9c:8f:a8: bc:f9:21:7f:b9:90:0e:a1:99:dc:b9:96:4c:e6:4b: 16:3c:19:c6:50:a2:9e:14:a2:75:e4:a3:23:dd:21: 78:85:8f:26:99:e5:f0:40:80:7c:4e:e0:fd:b5:92: 62:6a:4d:fb:01:f0:d3:ef:94:62:4a:2b:d1:af:34: f3:2d:77:a4:2a:5b:84:16:67:5d:85:72:3d:78:1a: 24:cb:2b:11:15:cf:99:d3:96:53:c6:9f:14:63:16: 82:67:c8:e5:57:24:7f:ab:44:4b:4f:8a:d0:a2:64: 93:c6:50:69:71:53:30:e4:74:dd:3c:f8:92:37:86: 3d:3c:4b:d5:9d:62:91:a4:7e:b8:1e:32:f0:82:ca: c5:8c:59:97:f7:82:b4:4d:2f:07:97:da:20:75:8d: 6c:54:20:df:cb:7f:06:40:27:a7:28:3c:02:f5:73: 02:d7:94:0f:dd:60:f6:5e:b4:1c:d3:29:ac:b3:e9: 63:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D7:88:04:D1:B2:B0:95:1C:D8:CA:93:7A:69:30:B5:7F:BD:A5:3D X509v3 Authority Key Identifier: keyid:6C:8D:FA:04:3C:22:B8:A2:7E:AB:60:47:0A:F4:06:60:24:A6:84:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bI36BDwiuKJ-q2BHCvQGYCSmhEA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DF8A/8F011C6EF37911EEB7E9DC6AC4F9AE02/bI36BDwiuKJ-q2BHCvQGYCSmhEA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:bc:78:82:61:aa:e9:49:0c:bc:0b:0c:eb:aa:c6:92:1c:a9: 5a:1f:83:67:bf:44:ff:24:10:6c:0f:c9:cc:e6:b2:fa:ee:17: 06:c9:ef:2e:35:2d:86:47:c8:86:22:15:c9:f3:8d:84:f5:12: 05:9c:77:97:76:55:1c:5c:5d:24:55:b0:57:25:87:12:d2:b1: 16:fd:2c:a3:5a:48:1c:25:39:a9:54:2f:b0:a1:e4:fd:6d:c7: a2:8e:ad:33:0d:71:64:89:c8:af:b4:b5:f1:2e:cf:23:da:b9: c0:f1:98:71:e2:cd:67:a3:e5:1e:dc:72:53:29:e8:7c:54:7c: 6c:af:1e:13:c8:41:6f:b5:6f:3e:ed:ef:57:a0:52:ba:46:5e: 97:21:67:07:99:ad:7a:91:33:7e:9e:f5:f2:2c:64:05:c3:b3: c4:ef:91:dd:ed:6d:98:89:51:a2:2b:ba:4f:35:a7:d1:13:5d: e9:d7:a7:6b:f1:e8:c2:32:07:39:db:95:13:ea:aa:6b:e9:6b: e7:93:15:d6:e2:0f:a1:58:3b:14:b7:d1:d9:af:e1:74:d3:14: db:8b:8f:ea:4f:12:1c:3e:08:7b:92:8e:9b:5f:f4:60:d9:7a: 9c:c3:00:01:1a:3a:d4:c4:ac:da:02:fe:2e:39:61:2c:69:28: c5:8d:10:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0RGOEExMTAvBgNVBAUTKDZDOERGQTA0M0MyMkI4QTI3RUFCNjA0NzBBRjQwNjYw MjRBNjg0NDAwHhcNMjUwODIzMDUxNDEyWhcNMjUwODMwMDUxNDEyWjAYMRYwFAYD VQQDEw02OGE5NGUyNC1jNWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+ycb7VQdV7SWmT7KbA1rOs6buo5TlZ6MH6UUs3ZQIb3BJTnMTQXykoXlGgLS GEDY11TUVnAZgNjhW44QCUfOuMfXQHFybo+cj6i8+SF/uZAOoZncuZZM5ksWPBnG UKKeFKJ15KMj3SF4hY8mmeXwQIB8TuD9tZJiak37AfDT75RiSivRrzTzLXekKluE FmddhXI9eBokyysRFc+Z05ZTxp8UYxaCZ8jlVyR/q0RLT4rQomSTxlBpcVMw5HTd PPiSN4Y9PEvVnWKRpH64HjLwgsrFjFmX94K0TS8Hl9ogdY1sVCDfy38GQCenKDwC 9XMC15QP3WD2XrQc0ymss+ljdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLXiATR srCVHNjKk3ppMLV/vaU9MB8GA1UdIwQYMBaAFGyN+gQ8IriifqtgRwr0BmAkpoRA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREY4QS84RjAxMUM2RUYz NzkxMUVFQjdFOURDNkFDNEY5QUUwMi9iSTM2QkR3aXVLSi1xMkJIQ3ZRR1lDU21o RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JJMzZCRHdpdUtKLXEyQkhDdlFHWUNTbWhFQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz REY4QS84RjAxMUM2RUYzNzkxMUVFQjdFOURDNkFDNEY5QUUwMi9iSTM2QkR3aXVL Si1xMkJIQ3ZRR1lDU21oRUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCvHiCYarpSQy8CwzrqsaSHKlaH4Nnv0T/JBBsD8nM5rL67hcGye8u NS2GR8iGIhXJ842E9RIFnHeXdlUcXF0kVbBXJYcS0rEW/SyjWkgcJTmpVC+woeT9 bceijq0zDXFkicivtLXxLs8j2rnA8Zhx4s1no+Ue3HJTKeh8VHxsrx4TyEFvtW8+ 7e9XoFK6Rl6XIWcHma16kTN+nvXyLGQFw7PE75Hd7W2YiVGiK7pPNafRE13p16dr 8ejCMgc525UT6qpr6WvnkxXW4g+hWDsUt9HZr+F00xTbi4/qTxIcPgh7ko6bX/Rg 2XqcwwABGjrUxKzaAv4uOWEsaSjFjRC/ -----END CERTIFICATE-----Generated at Sat Aug 23 17:07:45 2025 by rpki-client