$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft File: bKnl9NY_H1jrllKlKzuc-7vnQbw.mft (raw, json) Hash identifier: rtLQU/UiFsMNmnJWpuBr4laLKFPD93taLB9UXHCqHSs= Subject key identifier: A7:A7:44:AB:9A:96:9C:63:8D:3E:0D:A4:DA:AB:5C:C7:08:C0:CD:67 Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC Certificate issuer: /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Certificate serial: 1317 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft Manifest number: 1310 Signing time: Fri 22 Aug 2025 17:09:53 +0000 Manifest this update: Fri 22 Aug 2025 17:09:52 +0000 Manifest next update: Fri 29 Aug 2025 17:09:52 +0000 Files and hashes: 1: bKnl9NY_H1jrllKlKzuc-7vnQbw.crl (hash: PgJn3yr3H1Rz22icQq0/50iqbGfHQ9CypI+9kz69AUo=) 2: 706382C2B67811E8A2696333C4F9AE02.roa (hash: rzftRMPtJ5B6XfKei48LV2pqboch+DlK8AP2NtHbsfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4887 (0x1317) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC Validity Not Before: Aug 22 17:09:52 2025 GMT Not After : Aug 29 17:09:52 2025 GMT Subject: CN=68a8a461-8b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:67:f2:69:31:43:80:0d:3f:85:21:77:f3: 9f:12:cc:cf:50:60:58:ed:fd:ef:41:65:0a:b3:9b: 7b:1c:ac:ce:d5:04:e5:f3:b5:0d:3f:10:96:e4:db: 66:b9:45:98:64:4e:b5:fa:d3:30:bc:3b:a5:fd:d2: 3f:8a:ab:79:f5:a5:01:c6:f4:57:c7:81:f3:d5:93: 6c:11:e4:22:fb:b3:ac:50:05:43:b1:66:03:eb:8c: e0:81:af:49:ff:14:97:aa:4c:7e:7e:29:dc:f2:a3: 7b:7c:f9:c9:dc:b6:9a:e0:bd:6b:17:29:b9:c3:ae: e7:73:98:90:25:c0:46:e0:a4:52:8a:8e:75:e0:d4: 25:65:5e:54:fe:49:dc:c2:54:23:d2:ae:db:3e:e8: 38:9e:b2:64:7f:88:8b:41:df:fb:08:55:fd:c1:e0: f5:9c:25:ba:b2:db:68:1d:53:ba:aa:f1:a8:27:33: 00:bc:b9:7c:4d:b6:4f:6e:2a:d2:fb:3c:d5:e1:c3: ed:03:5f:fa:85:fd:f0:15:b8:46:29:6b:96:d1:01: 2b:0b:8f:68:08:ce:d1:d4:c2:53:f5:3c:fb:88:51: fc:a7:be:a4:23:dc:48:1c:41:c8:ab:0f:8a:59:c6: 12:e8:ba:ba:48:05:c3:7a:f4:2a:92:11:c3:a6:30: e4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A7:44:AB:9A:96:9C:63:8D:3E:0D:A4:DA:AB:5C:C7:08:C0:CD:67 X509v3 Authority Key Identifier: keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:23:87:f7:10:f5:2f:b0:1c:08:38:13:1d:d4:30:0e:1a:ed: 44:a8:46:cb:48:61:a2:42:bb:d0:92:d8:ee:65:60:a0:10:7e: dd:40:f9:77:69:0f:ab:7c:24:e1:c3:3a:bd:37:28:e4:dd:e9: e3:7e:fd:d4:40:08:ff:b2:29:79:7e:1d:95:86:bc:5d:16:9f: 69:3c:3f:58:60:85:2b:23:f2:18:17:ee:78:95:92:b7:fc:92: 96:01:f1:aa:4f:5f:7c:8b:c3:1d:c7:98:df:84:25:3a:bb:77: 54:ce:5b:38:98:52:c2:fc:c8:e8:84:88:23:8d:05:11:55:78: d0:e0:e3:5e:b0:05:0b:2f:bd:81:36:a2:a3:80:c1:0a:da:ba: 57:f9:b3:b0:c7:d9:67:8c:b3:9c:b9:be:75:fc:a7:d8:e0:ba: f9:89:6c:23:1c:3b:c1:66:f5:e6:e9:0d:b5:b3:90:80:f9:3f: e7:5e:fa:dd:c4:46:24:dd:78:3f:bd:27:8a:1a:5d:60:1b:fd: be:0a:57:1f:cb:95:fa:6e:00:11:bb:4c:20:99:dc:09:fa:f5: 4d:b7:89:8d:0c:fe:15:fd:7e:eb:0e:11:16:c2:95:60:6e:4e: 6c:e0:1f:99:22:dc:5f:c5:9a:8a:07:51:b4:15:8c:27:23:49: e0:6e:f5:3b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICExcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0ZDMjYxMTAvBgNVBAUTKDZDQTlFNUY0RDYzRjFGNThFQjk2NTJBNTJCM0I5Q0ZC QkJFNzQxQkMwHhcNMjUwODIyMTcwOTUyWhcNMjUwODI5MTcwOTUyWjAYMRYwFAYD VQQDEw02OGE4YTQ2MS04YjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy01n8mkxQ4ANP4Uhd/OfEszPUGBY7f3vQWUKs5t7HKzO1QTl87UNPxCW5Ntm uUWYZE61+tMwvDul/dI/iqt59aUBxvRXx4Hz1ZNsEeQi+7OsUAVDsWYD64zgga9J /xSXqkx+finc8qN7fPnJ3Laa4L1rFym5w67nc5iQJcBG4KRSio514NQlZV5U/knc wlQj0q7bPug4nrJkf4iLQd/7CFX9weD1nCW6sttoHVO6qvGoJzMAvLl8TbZPbirS +zzV4cPtA1/6hf3wFbhGKWuW0QErC49oCM7R1MJT9Tz7iFH8p76kI9xIHEHIqw+K WcYS6Lq6SAXDevQqkhHDpjDkvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKenRKua lpxjjT4NpNqrXMcIwM1nMB8GA1UdIwQYMBaAFGyp5fTWPx9Y65ZSpSs7nPu750G8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkMyNi9GRUE1N0U2MEI2 NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gxanJsbEtsS3p1Yy03dm5R YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JLbmw5TllfSDFqcmxsS2xLenVjLTd2blFidy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RkMyNi9GRUE1N0U2MEI2NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gx anJsbEtsS3p1Yy03dm5RYncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5I4f3EPUvsBwIOBMd1DAOGu1EqEbLSGGiQrvQktjuZWCgEH7dQPl3 aQ+rfCThwzq9Nyjk3enjfv3UQAj/sil5fh2VhrxdFp9pPD9YYIUrI/IYF+54lZK3 /JKWAfGqT198i8Mdx5jfhCU6u3dUzls4mFLC/MjohIgjjQURVXjQ4ONesAULL72B NqKjgMEK2rpX+bOwx9lnjLOcub51/KfY4Lr5iWwjHDvBZvXm6Q21s5CA+T/nXvrd xEYk3Xg/vSeKGl1gG/2+Clcfy5X6bgARu0wgmdwJ+vVNt4mNDP4V/X7rDhEWwpVg bk5s4B+ZItxfxZqKB1G0FYwnI0ngbvU7 -----END CERTIFICATE-----Generated at Sun Aug 24 11:40:17 2025 by rpki-client