$ rpki-client -vvf rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft File: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft (raw, json) Hash identifier: 9UPMblbvKQ/77jZQcHkHLRLJvH41LYC3iO6L3K/eDYA= Subject key identifier: 31:2C:A2:EB:4E:50:24:D9:AD:01:85:05:54:9C:90:65:0A:20:7A:F7 Authority key identifier: 04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1 Certificate issuer: /CN=A9160244/serialNumber=0434017186DB84CA89477570DDA10AD731597FF1 Certificate serial: 24EB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft Manifest number: 24DC Signing time: Fri 22 Aug 2025 15:49:09 +0000 Manifest this update: Fri 22 Aug 2025 15:49:08 +0000 Manifest next update: Fri 29 Aug 2025 15:49:08 +0000 Files and hashes: 1: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl (hash: CRci5S7sKPnGu3v45kGeSrDW4FcmEPqQ0FJi0PdcBIc=) 2: E1FACBC0B10D11E5894F4D1CC4F9AE02.roa (hash: FvWwS3Spm+rRrjY0/JRXkfVlZov8/+1jHfihNOtR95E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9451 (0x24eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160244, serialNumber=0434017186DB84CA89477570DDA10AD731597FF1 Validity Not Before: Aug 22 15:49:08 2025 GMT Not After : Aug 29 15:49:08 2025 GMT Subject: CN=68a89174-55db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3c:8c:02:e4:17:ec:8d:e4:24:fc:85:c7:9c: d9:a9:4f:b1:d7:c7:69:b4:72:df:48:ee:71:a0:38: f5:a2:bb:7e:a7:d2:1b:5b:17:0a:73:6b:0a:0f:84: ea:8b:13:ff:e6:32:cb:7d:c3:05:b3:14:3f:b5:34: 46:83:a4:31:41:76:0b:f4:9b:2a:6a:09:0f:b5:6e: ec:26:1c:18:9f:37:70:87:6f:4d:e1:68:bd:c4:15: ac:21:8b:a7:05:39:ee:10:37:3c:be:40:8d:d9:1d: 2a:db:b2:1b:41:a1:ed:b8:03:06:0b:fd:c9:9a:f3: d0:d0:0d:4d:e7:ca:38:9d:ca:e3:1f:7e:5d:f5:b9: bf:a2:2a:b3:14:bd:96:cc:81:38:d5:94:fc:07:d8: 5d:7c:39:9e:c2:ef:4e:46:3d:1f:61:66:ff:ea:e7: 3d:44:df:a8:90:47:37:fb:16:1d:31:f3:fc:5c:1b: 3d:a1:00:ff:3e:4b:fe:91:61:cf:5c:bf:ae:5f:30: 5a:2e:94:55:53:ea:12:43:4e:52:f0:33:45:49:ca: 82:a7:58:06:46:f3:4e:12:b6:bd:14:d4:eb:ec:db: 83:cf:e4:2a:f6:87:bb:a0:a5:c6:27:b8:cf:33:fa: c0:76:c1:e9:65:4d:64:66:3f:f8:fc:3d:ff:65:ee: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2C:A2:EB:4E:50:24:D9:AD:01:85:05:54:9C:90:65:0A:20:7A:F7 X509v3 Authority Key Identifier: keyid:04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:84:ac:4f:d7:de:5f:79:8c:ef:2a:70:59:ac:cb:92:b2:f8: 36:e8:19:dc:aa:04:3c:fd:1f:20:0c:27:b5:cf:1e:76:ce:e7: 7b:9d:4d:3c:25:d0:f5:7a:36:90:a9:57:8d:98:ca:06:fa:ed: 37:ba:64:14:ee:78:67:85:db:bc:72:c9:c3:d8:b8:e3:d2:a2: 3d:83:f2:ae:46:cf:ef:81:67:0b:05:3d:db:fc:2c:36:bd:74: c4:ab:22:da:75:a5:2a:f3:32:58:bf:9f:a0:31:57:83:65:e9: ce:a6:9d:ab:20:da:96:7f:f3:26:d3:ca:d5:3f:c1:7a:7e:77: 84:83:af:a2:91:78:dc:82:c7:10:79:d1:19:20:65:8a:eb:a7: af:7d:7e:05:97:e6:ef:f6:ab:8a:40:05:9c:2e:d7:02:09:6a: 7d:ad:ad:c8:f5:75:ee:83:f6:d4:79:0e:43:1e:a0:d8:1c:86: 6a:71:54:dd:da:b3:f0:1d:0b:70:d5:ea:72:f7:d2:69:ef:ce: 5a:de:1e:f5:25:23:c3:3b:9d:e4:f4:22:3c:2e:28:47:df:d7: 7f:c6:2b:1c:c1:f1:42:3a:ac:8b:a1:4a:09:fb:04:74:0f:b8: ac:2d:40:bf:3c:c0:97:a0:9f:bf:4b:69:79:ec:ca:75:20:9a: 51:fe:d6:37 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJOswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyNDQxMTAvBgNVBAUTKDA0MzQwMTcxODZEQjg0Q0E4OTQ3NzU3MEREQTEwQUQ3 MzE1OTdGRjEwHhcNMjUwODIyMTU0OTA4WhcNMjUwODI5MTU0OTA4WjAYMRYwFAYD VQQDEw02OGE4OTE3NC01NWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyDyMAuQX7I3kJPyFx5zZqU+x18dptHLfSO5xoDj1ort+p9IbWxcKc2sKD4Tq ixP/5jLLfcMFsxQ/tTRGg6QxQXYL9JsqagkPtW7sJhwYnzdwh29N4Wi9xBWsIYun BTnuEDc8vkCN2R0q27IbQaHtuAMGC/3JmvPQ0A1N58o4ncrjH35d9bm/oiqzFL2W zIE41ZT8B9hdfDmewu9ORj0fYWb/6uc9RN+okEc3+xYdMfP8XBs9oQD/Pkv+kWHP XL+uXzBaLpRVU+oSQ05S8DNFScqCp1gGRvNOEra9FNTr7NuDz+Qq9oe7oKXGJ7jP M/rAdsHpZU1kZj/4/D3/Ze41fQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDEsoutO UCTZrQGFBVSckGUKIHr3MB8GA1UdIwQYMBaAFAQ0AXGG24TKiUd1cN2hCtcxWX/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDI0NC83RUFGRUNCMDND MDcxMUU1QjE2Q0VGNjNDNEY5QUUwMi9CRFFCY1liYmhNcUpSM1Z3M2FFSzF6Rlpm X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JEUUJjWWJiaE1xSlIzVnczYUVLMXpGWmZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDI0NC83RUFGRUNCMDNDMDcxMUU1QjE2Q0VGNjNDNEY5QUUwMi9CRFFCY1liYmhN cUpSM1Z3M2FFSzF6RlpmX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyhKxP195feYzvKnBZrMuSsvg26BncqgQ8/R8gDCe1zx52zud7nU08 JdD1ejaQqVeNmMoG+u03umQU7nhnhdu8csnD2Ljj0qI9g/KuRs/vgWcLBT3b/Cw2 vXTEqyLadaUq8zJYv5+gMVeDZenOpp2rINqWf/Mm08rVP8F6fneEg6+ikXjcgscQ edEZIGWK66evfX4Fl+bv9quKQAWcLtcCCWp9ra3I9XXug/bUeQ5DHqDYHIZqcVTd 2rPwHQtw1epy99Jp785a3h71JSPDO53k9CI8LihH39d/xiscwfFCOqyLoUoJ+wR0 D7isLUC/PMCXoJ+/S2l57Mp1IJpR/tY3 -----END CERTIFICATE-----Generated at Sat Aug 23 16:22:19 2025 by rpki-client