$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft File: BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft (raw, json) Hash identifier: XzQDKuHbg5W5lm3BJ/er/sWJ0vZh/WDlEZ4X1CG9ObM= Subject key identifier: 79:DE:C2:7D:C8:1A:B5:08:A1:D2:BF:F8:C9:F5:38:78:62:5A:7E:3C Authority key identifier: 04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 Certificate issuer: /CN=A9165B02/serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Certificate serial: 05FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft Manifest number: 05F8 Signing time: Fri 22 Aug 2025 23:05:40 +0000 Manifest this update: Fri 22 Aug 2025 23:05:40 +0000 Manifest next update: Fri 29 Aug 2025 23:05:40 +0000 Files and hashes: 1: BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl (hash: x86jELNN2v81Vr+K05EFIUnq3cOKzg1aqi07isiIbp8=) 2: CEEBA382BD1511EB9E873260C4F9AE02.roa (hash: SXzW5vEmVU+GCJ/5C4H8HxVaw63CXUsgN+mA1S8Q1HE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1533 (0x5fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165B02, serialNumber=041D519247C46E73F6A67DDF7C9049BFF279C0B7 Validity Not Before: Aug 22 23:05:40 2025 GMT Not After : Aug 29 23:05:40 2025 GMT Subject: CN=68a8f7c4-a3e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cb:49:e8:9a:36:9d:3e:67:ab:e6:d8:92:9a: 9f:15:f5:e1:0c:7c:29:4d:be:d6:b4:03:d6:f1:a8: 4c:3a:f6:3a:04:22:42:70:26:03:56:78:0b:92:59: e5:16:c1:86:b3:9e:97:79:29:93:4f:d9:e1:7b:99: 04:90:c5:f8:54:40:07:2f:f7:7c:02:3f:cb:f1:56: dc:7d:3f:b0:ce:ef:46:02:67:d4:03:82:c7:7a:7e: 38:33:bb:53:8f:b2:9b:83:50:5e:46:d8:a2:92:a8: 4c:a8:b1:da:11:3c:c1:28:9b:8e:c9:98:b1:9f:cc: c0:71:f0:57:ac:47:cf:40:ef:ac:47:a7:f0:20:c2: 28:8a:3b:27:96:1e:5a:7f:a3:19:39:9e:f9:f5:8b: f0:8b:f3:14:6e:66:ff:1a:86:78:95:1a:79:97:9b: c4:47:18:e3:ab:46:42:95:11:d8:86:d3:7c:10:e6: c9:ea:2a:67:89:c6:40:8e:89:c7:96:70:5c:3d:d5: f5:71:c5:b7:4f:57:cf:10:12:de:51:68:2a:5d:43: 98:8c:8d:67:3b:31:5a:1b:89:0d:d4:45:0c:32:67: 77:0d:25:6a:4b:74:5e:27:cd:1d:ce:37:b9:32:99: 0d:ff:a4:95:3d:d7:98:ce:90:e0:7f:c2:e3:ec:09: ae:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DE:C2:7D:C8:1A:B5:08:A1:D2:BF:F8:C9:F5:38:78:62:5A:7E:3C X509v3 Authority Key Identifier: keyid:04:1D:51:92:47:C4:6E:73:F6:A6:7D:DF:7C:90:49:BF:F2:79:C0:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BB1RkkfEbnP2pn3ffJBJv_J5wLc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B02/95A38EF6BD1411EBB5EEFD5FC4F9AE02/BB1RkkfEbnP2pn3ffJBJv_J5wLc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:fe:0d:b9:b5:1c:e9:bd:cd:08:a8:69:dc:5d:36:62:0e:14: 09:01:f0:9f:45:96:8b:32:c8:7c:d1:1e:b9:f5:23:9c:28:88: ae:ad:6c:38:21:69:16:40:f6:da:d3:d4:37:63:10:84:1c:95: 79:6c:24:bd:97:08:68:c3:2c:84:4f:a9:ca:9e:78:48:64:12: 9d:2e:b1:31:70:d1:ff:1d:16:23:2d:31:fd:dd:8d:fa:b7:e0: 88:0e:37:75:4d:88:9e:8d:5a:59:8a:4c:26:f9:5d:4c:79:42: dc:9d:ae:79:8c:b5:94:13:d9:4a:04:3c:ac:85:d7:b4:af:e6: 12:8d:18:cb:e8:0d:e0:f1:e2:48:44:e4:7b:d8:3e:a9:b9:91: 6f:74:67:3e:42:a9:8f:73:71:a3:98:b4:f7:8c:d5:75:f9:3b: c4:f6:c9:cb:cf:fc:b6:f6:f6:9e:75:52:a9:a3:c3:82:cc:35: 57:57:ea:1b:77:4d:b3:5c:14:fb:aa:bf:09:9e:9a:c2:e0:28: 49:07:5b:20:13:f1:88:34:f8:31:ff:1e:ad:c3:cd:19:71:6c: 28:25:1e:9d:2b:ea:47:b7:3b:8c:23:6f:ef:db:6c:e1:c8:f2: b2:4f:18:f5:d3:41:7d:37:f1:2f:02:9a:69:10:6a:83:bb:37: c3:21:87:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBf0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVCMDIxMTAvBgNVBAUTKDA0MUQ1MTkyNDdDNDZFNzNGNkE2N0RERjdDOTA0OUJG RjI3OUMwQjcwHhcNMjUwODIyMjMwNTQwWhcNMjUwODI5MjMwNTQwWjAYMRYwFAYD VQQDEw02OGE4ZjdjNC1hM2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr8tJ6Jo2nT5nq+bYkpqfFfXhDHwpTb7WtAPW8ahMOvY6BCJCcCYDVngLklnl FsGGs56XeSmTT9nhe5kEkMX4VEAHL/d8Aj/L8VbcfT+wzu9GAmfUA4LHen44M7tT j7Kbg1BeRtiikqhMqLHaETzBKJuOyZixn8zAcfBXrEfPQO+sR6fwIMIoijsnlh5a f6MZOZ759Yvwi/MUbmb/GoZ4lRp5l5vERxjjq0ZClRHYhtN8EObJ6ipnicZAjonH lnBcPdX1ccW3T1fPEBLeUWgqXUOYjI1nOzFaG4kN1EUMMmd3DSVqS3ReJ80dzje5 MpkN/6SVPdeYzpDgf8Lj7Amu/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHnewn3I GrUIodK/+Mn1OHhiWn48MB8GA1UdIwQYMBaAFAQdUZJHxG5z9qZ933yQSb/yecC3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUIwMi85NUEzOEVGNkJE MTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJuUDJwbjNmZkpCSnZfSjV3 TGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JCMVJra2ZFYm5QMnBuM2ZmSkJKdl9KNXdMYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NUIwMi85NUEzOEVGNkJEMTQxMUVCQjVFRUZENUZDNEY5QUUwMi9CQjFSa2tmRWJu UDJwbjNmZkpCSnZfSjV3TGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH/g25tRzpvc0IqGncXTZiDhQJAfCfRZaLMsh80R659SOcKIiurWw4 IWkWQPba09Q3YxCEHJV5bCS9lwhowyyET6nKnnhIZBKdLrExcNH/HRYjLTH93Y36 t+CIDjd1TYiejVpZikwm+V1MeULcna55jLWUE9lKBDyshde0r+YSjRjL6A3g8eJI ROR72D6puZFvdGc+QqmPc3GjmLT3jNV1+TvE9snLz/y29vaedVKpo8OCzDVXV+ob d02zXBT7qr8JnprC4ChJB1sgE/GINPgx/x6tw80ZcWwoJR6dK+pHtzuMI2/v22zh yPKyTxj100F9N/EvApppEGqDuzfDIYf0 -----END CERTIFICATE-----Generated at Sun Aug 24 05:16:02 2025 by rpki-client