$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json) Hash identifier: qw5+c0hMqKv9ZD3UGWh0cTV11lZgSeMvxh7+fvDbmfA= Subject key identifier: 1D:17:A4:B2:06:74:D1:81:D7:F1:A4:44:F6:30:CB:B5:49:F5:90:95 Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 0528 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft Manifest number: 0516 Signing time: Fri 22 Aug 2025 23:52:25 +0000 Manifest this update: Fri 22 Aug 2025 23:52:24 +0000 Manifest next update: Fri 29 Aug 2025 23:52:24 +0000 Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: Gy2vIWPRViW1vlckDqy65I0XWd2qiDqqHJeSHE6JQqY=) 2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: bWFskxvhi7CkjX9KQtUg/L6OTceIBUoGJSArRRh8yOc=) 3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: TEWGyyYFx9ktn3pEsyb60J6bTDtXfXp/IzUXg77M9qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:52:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1320 (0x528) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Validity Not Before: Aug 22 23:52:24 2025 GMT Not After : Aug 29 23:52:24 2025 GMT Subject: CN=68a902b8-1514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b6:b2:7c:8b:3c:78:cb:72:7c:25:ab:95:f8: 0b:45:69:88:80:4a:ac:2f:9a:9c:39:88:87:8b:97: 35:9c:4b:c5:91:8f:d1:a3:8b:1f:cf:7d:73:04:3b: eb:8f:9c:25:9d:a9:e7:e6:f5:a5:5c:34:11:d3:16: 15:ab:70:de:bd:92:3e:00:c9:ac:e6:46:c2:92:d4: e2:a2:91:2e:a6:cc:d4:20:7c:7f:2e:77:92:d1:34: a0:c8:46:4a:d7:77:51:23:05:66:b9:c0:b9:23:d8: 1d:3f:13:e4:ae:86:d2:fc:0f:95:33:67:af:36:57: 2c:bf:b4:32:1f:77:a8:29:cd:1c:d5:45:e5:89:6e: 42:93:81:0b:45:cb:97:52:32:0f:e5:ac:35:d9:f3: eb:0a:15:ed:66:13:46:80:5a:78:d3:87:6f:41:81: 69:8f:79:49:2a:bb:14:8a:38:53:65:65:7c:6a:0b: 9b:5b:c5:55:e9:65:73:38:9a:75:b9:57:2c:59:ca: f0:9f:97:0d:9d:7a:d5:04:8e:b1:37:d5:7e:6b:e1: 6f:78:7d:9f:b2:68:9b:3f:01:94:e1:0b:a9:f0:91: 3f:24:76:e0:c3:99:b3:b9:23:f2:b4:35:4f:d2:ce: 0f:35:96:11:53:a4:ca:40:87:d8:ad:c7:78:f4:88: f0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:17:A4:B2:06:74:D1:81:D7:F1:A4:44:F6:30:CB:B5:49:F5:90:95 X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:fd:a4:d7:f0:a6:e0:48:c1:0e:0a:65:bc:cd:8b:e8:e5:9a: ab:cf:82:39:24:12:6d:d4:3e:20:a8:6d:39:78:ba:0b:f6:d2: 45:07:03:ac:84:33:21:52:11:66:ae:b1:c1:bf:bd:55:60:74: a2:c6:26:8c:04:77:c4:de:0c:3b:de:a0:06:34:35:91:13:6a: f5:6f:8d:f5:98:c5:60:05:66:ba:e3:ea:35:78:51:c2:16:55: 78:ca:86:e5:d4:5c:ea:cf:75:a8:06:3a:fc:a5:8c:10:d4:a9: 1e:82:f1:61:cd:15:b8:3f:73:2d:c6:1a:ad:b6:77:c7:9e:21: aa:75:a4:d4:dc:1c:64:69:c6:f1:a6:8d:34:a2:1d:9f:8d:95: 71:73:ac:88:94:c6:2b:2d:5a:fe:0f:c6:05:8f:84:a1:b8:d3: d5:a6:e6:3f:76:12:c4:fa:c2:86:73:32:4d:d8:a1:ed:66:68: c5:2f:67:04:15:9f:2e:b7:1c:c9:65:fa:6a:09:3c:08:2d:30: 5a:99:55:ec:6d:4e:72:ad:7d:b5:79:58:2a:fc:f0:5f:6b:d4: ed:ea:4f:60:79:4d:72:c5:11:fb:af:d2:b4:02:ed:18:07:5c: cd:b0:f6:a4:45:e1:a6:c8:7a:03:d2:09:71:88:be:bf:e7:ec: ac:e4:72:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBSgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjUwODIyMjM1MjI0WhcNMjUwODI5MjM1MjI0WjAYMRYwFAYD VQQDEw02OGE5MDJiOC0xNTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu7ayfIs8eMtyfCWrlfgLRWmIgEqsL5qcOYiHi5c1nEvFkY/Ro4sfz31zBDvr j5wlnann5vWlXDQR0xYVq3DevZI+AMms5kbCktTiopEupszUIHx/LneS0TSgyEZK 13dRIwVmucC5I9gdPxPkrobS/A+VM2evNlcsv7QyH3eoKc0c1UXliW5Ck4ELRcuX UjIP5aw12fPrChXtZhNGgFp404dvQYFpj3lJKrsUijhTZWV8agubW8VV6WVzOJp1 uVcsWcrwn5cNnXrVBI6xN9V+a+FveH2fsmibPwGU4Qup8JE/JHbgw5mzuSPytDVP 0s4PNZYRU6TKQIfYrcd49Ijw1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB0XpLIG dNGB1/GkRPYwy7VJ9ZCVMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkU3MC9CRUM1Q0E3MjIxMUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3Bp SXRfTGtNSzBDa3Q1S1Rkbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBV/aTX8KbgSMEOCmW8zYvo5Zqrz4I5JBJt1D4gqG05eLoL9tJFBwOs hDMhUhFmrrHBv71VYHSixiaMBHfE3gw73qAGNDWRE2r1b431mMVgBWa64+o1eFHC FlV4yobl1Fzqz3WoBjr8pYwQ1KkegvFhzRW4P3MtxhqttnfHniGqdaTU3Bxkacbx po00oh2fjZVxc6yIlMYrLVr+D8YFj4ShuNPVpuY/dhLE+sKGczJN2KHtZmjFL2cE FZ8utxzJZfpqCTwILTBamVXsbU5yrX21eVgq/PBfa9Tt6k9geU1yxRH7r9K0Au0Y B1zNsPakReGmyHoD0glxiL6/5+ys5HJO -----END CERTIFICATE-----Generated at Sun Aug 24 03:35:10 2025 by rpki-client