$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft File: -bspsKvoSef-GA4znkscKCNoxSE.mft (raw, json) Hash identifier: MUPgeTaNa5FlERIz2vIHP9XXR2TfHyFKMXk4TYGIQYs= Subject key identifier: 25:7C:B8:97:07:37:A7:00:43:97:BF:1D:82:2B:59:7E:53:2D:83:5D Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 Certificate issuer: /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Certificate serial: 1027 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft Manifest number: 100F Signing time: Fri 22 Aug 2025 17:35:37 +0000 Manifest this update: Fri 22 Aug 2025 17:35:36 +0000 Manifest next update: Fri 29 Aug 2025 17:35:36 +0000 Files and hashes: 1: -bspsKvoSef-GA4znkscKCNoxSE.crl (hash: BqPl7UF4dCXYESyw89IYJSngMf9n9mqwTALi+ZbgOMo=) 2: F7F18D8C2BA711F09514D439C4F9AE02.roa (hash: RQ31QQqNnbR7hUGab4NBe2n82ZvCRfsZ20QWiB5eLdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4135 (0x1027) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Validity Not Before: Aug 22 17:35:36 2025 GMT Not After : Aug 29 17:35:36 2025 GMT Subject: CN=68a8aa68-6250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:92:89:8f:44:b2:0e:22:96:e3:62:28:a2: 84:e8:79:d2:26:56:d0:82:79:43:0a:f4:22:2b:e1: bc:cd:44:8c:b7:d7:33:37:1d:da:6c:46:37:90:13: f7:87:c4:b7:b7:00:53:c1:86:06:b2:53:19:53:d6: 22:6f:91:5e:26:7d:bf:58:24:51:26:96:4a:c7:e8: 0e:00:68:00:36:a7:5a:2e:5c:7d:33:5e:be:f4:f9: 25:19:2e:bf:6c:38:bd:c1:ec:34:28:ac:45:69:bd: 90:4e:fb:6a:33:0b:26:95:1d:0e:90:03:57:13:f2: be:da:64:4a:bd:cb:e7:51:78:42:ee:ac:d2:48:d9: 96:d4:f5:0c:c0:82:98:37:24:77:e4:a1:44:3d:8b: fe:3f:9e:a1:fe:0f:c4:39:1c:c3:74:6e:13:b5:8e: 6c:e7:31:d6:ec:ce:3b:d3:cc:6c:8e:c8:20:66:48: 0d:e6:68:a5:0d:2e:4b:ec:0f:27:8c:8b:24:87:52: a3:3b:51:7e:52:49:13:b9:f6:be:f7:fe:7d:46:0b: ca:06:bc:1a:aa:b3:ca:2a:01:02:02:b4:a3:2b:08: 4f:95:e4:18:00:28:44:5e:63:04:90:82:4c:34:c6: fa:99:35:51:0a:03:ca:34:18:35:0a:f1:eb:e8:5d: 73:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7C:B8:97:07:37:A7:00:43:97:BF:1D:82:2B:59:7E:53:2D:83:5D X509v3 Authority Key Identifier: keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:01:b1:85:d0:d5:ed:a2:b1:dd:92:f5:59:b5:5c:63:5a:3a: f2:37:14:42:6f:a8:ee:dc:45:1b:e2:de:75:44:0a:cf:d2:11: 5b:bc:13:a8:ce:9d:da:78:4f:af:4a:14:c4:01:86:be:72:4e: 7c:5f:f2:cc:2a:1e:7d:0f:75:7a:1f:fb:62:f9:c4:84:03:0c: f5:94:a9:6c:ce:b3:77:c8:2a:ac:49:f0:a0:66:5d:ff:25:6f: 17:45:41:cd:96:59:9b:2d:6a:c5:fd:d5:88:37:6f:9b:de:1a: 2a:90:82:93:2a:8b:2a:63:b5:3c:49:b2:63:75:b7:5b:cf:9c: 29:2f:86:cc:6c:98:03:c3:a9:ae:a0:4c:1b:6d:1a:be:9d:f8: ed:41:ab:b4:01:70:ac:dc:91:9b:06:1d:6c:e6:49:7c:63:81: cd:26:d8:b1:43:97:7a:d1:05:6b:44:b0:01:29:14:93:d2:92: 83:6d:3c:a2:3a:3b:40:00:fa:04:cd:01:01:e8:f0:56:18:c0: dc:84:67:24:92:2f:35:c7:35:f9:cc:09:8d:7e:7f:ef:9a:58: cf:7b:5f:32:5e:41:c1:4a:c7:34:36:ba:37:a1:6b:22:aa:84: 68:2b:67:5e:d0:b0:cc:a5:ce:89:41:12:45:81:74:5b:b9:ed: 9f:1b:95:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY5QkIyOUIwQUJFODQ5RTdGRTE4MEUzMzlFNEIxQzI4 MjM2OEM1MjEwHhcNMjUwODIyMTczNTM2WhcNMjUwODI5MTczNTM2WjAYMRYwFAYD VQQDEw02OGE4YWE2OC02MjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQKSiY9Esg4iluNiKKKE6HnSJlbQgnlDCvQiK+G8zUSMt9czNx3abEY3kBP3 h8S3twBTwYYGslMZU9Yib5FeJn2/WCRRJpZKx+gOAGgANqdaLlx9M16+9PklGS6/ bDi9wew0KKxFab2QTvtqMwsmlR0OkANXE/K+2mRKvcvnUXhC7qzSSNmW1PUMwIKY NyR35KFEPYv+P56h/g/EORzDdG4TtY5s5zHW7M4708xsjsggZkgN5milDS5L7A8n jIskh1KjO1F+UkkTufa+9/59RgvKBrwaqrPKKgECArSjKwhPleQYAChEXmMEkIJM NMb6mTVRCgPKNBg1CvHr6F1zOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCV8uJcH N6cAQ5e/HYIrWX5TLYNdMB8GA1UdIwQYMBaAFPm7KbCr6Enn/hgOM55LHCgjaMUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8wQTA0RjRFMjU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1NlZi1HQTR6bmtzY0tDTm94 U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ic3BzS3ZvU2VmLUdBNHpua3NjS0NOb3hTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8wQTA0RjRFMjU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1Nl Zi1HQTR6bmtzY0tDTm94U0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdAbGF0NXtorHdkvVZtVxjWjryNxRCb6ju3EUb4t51RArP0hFbvBOo zp3aeE+vShTEAYa+ck58X/LMKh59D3V6H/ti+cSEAwz1lKlszrN3yCqsSfCgZl3/ JW8XRUHNllmbLWrF/dWIN2+b3hoqkIKTKosqY7U8SbJjdbdbz5wpL4bMbJgDw6mu oEwbbRq+nfjtQau0AXCs3JGbBh1s5kl8Y4HNJtixQ5d60QVrRLABKRST0pKDbTyi OjtAAPoEzQEB6PBWGMDchGckki81xzX5zAmNfn/vmljPe18yXkHBSsc0Nro3oWsi qoRoK2de0LDMpc6JQRJFgXRbue2fG5Ug -----END CERTIFICATE-----Generated at Sat Aug 23 12:49:39 2025 by rpki-client