$ rpki-client -vvf rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft File: cBB77LhKxM5elcxh0RCmcj-QycM.mft (raw, json) Hash identifier: xzG3mtvds1auslFEX4q0dSpDqeK5IRdwgIua1AUT0Xc= Subject key identifier: 0E:46:37:8A:BF:1E:57:63:B8:C9:2B:49:5D:37:A0:DF:0F:B2:9F:63 Authority key identifier: 70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3 Certificate issuer: /CN=A916C2B9/serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft Manifest number: 0125 Signing time: Sat 23 Aug 2025 04:51:51 +0000 Manifest this update: Sat 23 Aug 2025 04:51:51 +0000 Manifest next update: Sat 30 Aug 2025 04:51:51 +0000 Files and hashes: 1: cBB77LhKxM5elcxh0RCmcj-QycM.crl (hash: NQCYHbsG2VdcQU9acjsCWmLWBRe6+J/EaVnFYuRC7D4=) 2: 4FB5C8F4C43D11EE973ADE48C4F9AE02.roa (hash: 1zjPjAAMi/TzSsloil5toyL9PUAMXEmH20tRK4X3XV8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:51:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C2B9, serialNumber=70107BECB84AC4CE5E95CC61D110A6723F90C9C3 Validity Not Before: Aug 23 04:51:51 2025 GMT Not After : Aug 30 04:51:51 2025 GMT Subject: CN=68a948e7-4238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:12:b0:d5:11:b6:d7:60:0d:be:a6:d1:ff:8d: 38:43:46:6d:21:d6:59:f6:f9:c8:f7:c4:18:86:aa: 54:82:1c:38:3b:e2:9b:42:6b:26:94:45:f7:b0:36: b9:f1:c6:4b:7c:f4:ee:f3:c2:54:14:bf:d5:10:ce: d9:f5:18:a1:d1:a7:68:6b:63:ea:ae:bc:59:58:42: 8b:68:f5:6e:50:05:96:2c:ed:0a:d7:c3:c5:ee:f4: 7a:5f:60:89:e9:3a:c9:05:f5:8c:12:c0:f2:ed:1d: f6:b1:fd:8e:a2:2f:2a:e6:1d:52:f3:61:95:67:56: bd:a8:9e:fe:55:fd:bf:e4:2f:f0:03:1d:51:c9:6a: d9:9d:67:99:5e:0a:49:ca:53:05:7b:5b:d3:7b:d8: f1:7a:0a:06:03:8a:43:6c:ac:9e:4e:fe:e7:f8:03: e0:6b:03:73:9f:fa:4b:e5:a0:e9:72:ad:27:69:91: 20:09:61:4c:9b:85:f5:9f:bf:f4:80:b1:8e:3f:25: 79:b7:dd:3d:7a:51:a6:d4:1b:09:f5:e5:16:fd:6b: 86:46:84:12:c4:41:c4:53:25:f0:04:55:ad:2c:1b: 98:3a:6d:69:a7:05:62:9b:cc:29:ff:d5:89:b0:6c: 58:13:ae:9b:3a:b6:58:b5:6e:bb:75:fc:21:eb:21: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:46:37:8A:BF:1E:57:63:B8:C9:2B:49:5D:37:A0:DF:0F:B2:9F:63 X509v3 Authority Key Identifier: keyid:70:10:7B:EC:B8:4A:C4:CE:5E:95:CC:61:D1:10:A6:72:3F:90:C9:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cBB77LhKxM5elcxh0RCmcj-QycM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C2B9/306699CAC2A211EE91D9535CC4F9AE02/cBB77LhKxM5elcxh0RCmcj-QycM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:cb:16:6e:23:a3:5b:80:de:a9:76:64:76:55:65:a1:f4:2e: 47:99:85:f5:79:da:cf:f3:cc:af:9a:35:dd:75:71:0a:54:b5: 2d:79:73:d4:92:49:00:88:9c:6b:41:5e:f5:2f:27:81:86:e0: 05:0c:ac:b8:db:39:2e:54:48:26:82:48:f2:5c:4e:04:0a:9f: ea:81:9c:e8:97:16:58:9f:70:f4:c6:cc:90:ed:46:d0:a7:fa: bb:ad:59:f7:ce:72:26:ee:90:a9:a2:5a:8f:b5:90:d2:ca:95: 83:49:d1:0a:5d:e3:9b:4c:4d:e0:db:af:03:61:9f:ef:f4:f6: 23:9b:d1:ef:1e:57:b8:9a:26:c6:b8:d4:d1:03:11:fa:8d:53: 1a:b4:8b:31:47:41:46:c5:59:1e:6f:3e:40:af:b6:71:5d:09: 28:69:3c:83:5f:ff:53:03:0c:29:b5:c8:06:b1:44:d8:fa:0d: 96:b2:62:69:46:cc:cf:bd:6b:79:62:67:01:a5:2f:88:4c:8a: 56:6b:6f:14:e5:1c:a8:ab:19:d0:fe:53:9b:80:36:4f:46:d4: f3:dd:74:44:fd:03:52:44:b0:fd:95:ea:7e:6b:1d:23:cd:ca: e1:85:99:1f:79:64:a7:c6:8c:00:93:05:b8:47:2e:6e:2e:10: 6e:5b:4b:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkMyQjkxMTAvBgNVBAUTKDcwMTA3QkVDQjg0QUM0Q0U1RTk1Q0M2MUQxMTBBNjcy M0Y5MEM5QzMwHhcNMjUwODIzMDQ1MTUxWhcNMjUwODMwMDQ1MTUxWjAYMRYwFAYD VQQDEw02OGE5NDhlNy00MjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RKw1RG212ANvqbR/404Q0ZtIdZZ9vnI98QYhqpUghw4O+KbQmsmlEX3sDa5 8cZLfPTu88JUFL/VEM7Z9Rih0adoa2PqrrxZWEKLaPVuUAWWLO0K18PF7vR6X2CJ 6TrJBfWMEsDy7R32sf2Ooi8q5h1S82GVZ1a9qJ7+Vf2/5C/wAx1RyWrZnWeZXgpJ ylMFe1vTe9jxegoGA4pDbKyeTv7n+APgawNzn/pL5aDpcq0naZEgCWFMm4X1n7/0 gLGOPyV5t909elGm1BsJ9eUW/WuGRoQSxEHEUyXwBFWtLBuYOm1ppwVim8wp/9WJ sGxYE66bOrZYtW67dfwh6yHcuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5GN4q/ HldjuMkrSV03oN8Psp9jMB8GA1UdIwQYMBaAFHAQe+y4SsTOXpXMYdEQpnI/kMnD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzJCOS8zMDY2OTlDQUMy QTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9jQkI3N0xoS3hNNWVsY3hoMFJDbWNqLVF5 Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2NCQjc3TGhLeE01ZWxjeGgwUkNtY2otUXljTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzJCOS8zMDY2OTlDQUMyQTIxMUVFOTFEOTUzNUNDNEY5QUUwMi9jQkI3N0xoS3hN NWVsY3hoMFJDbWNqLVF5Y00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFyxZuI6NbgN6pdmR2VWWh9C5HmYX1edrP88yvmjXddXEKVLUteXPU kkkAiJxrQV71LyeBhuAFDKy42zkuVEgmgkjyXE4ECp/qgZzolxZYn3D0xsyQ7UbQ p/q7rVn3znIm7pCpolqPtZDSypWDSdEKXeObTE3g268DYZ/v9PYjm9HvHle4mibG uNTRAxH6jVMatIsxR0FGxVkebz5Ar7ZxXQkoaTyDX/9TAwwptcgGsUTY+g2WsmJp RszPvWt5YmcBpS+ITIpWa28U5RyoqxnQ/lObgDZPRtTz3XRE/QNSRLD9lep+ax0j zcrhhZkfeWSnxowAkwW4Ry5uLhBuW0uL -----END CERTIFICATE-----Generated at Sat Aug 23 12:38:47 2025 by rpki-client