$ rpki-client -vvf rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft File: B_MbR0cTs6FSxqX49I3tIJfcJB8.mft (raw, json) Hash identifier: luQi1jioP9nhJ3+MV4BK+BYPWmBvMgzs52kEUrFtvLY= Subject key identifier: 9D:23:13:88:21:06:BD:DC:6F:64:6D:34:91:26:1A:6E:FC:B4:0A:B4 Authority key identifier: 07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F Certificate issuer: /CN=A9170D3E/serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft Manifest number: 92 Signing time: Sat 23 Aug 2025 06:40:02 +0000 Manifest this update: Sat 23 Aug 2025 06:40:01 +0000 Manifest next update: Sat 30 Aug 2025 06:40:01 +0000 Files and hashes: 1: B_MbR0cTs6FSxqX49I3tIJfcJB8.crl (hash: f1/N8l7W9CnT+9WyM8GVyoNg6MnrDKUAxy5Cw+gBfgs=) 2: 232F490A9FD811EFA92BE338C4F9AE02.roa (hash: oshENdblJra/vyPm3h+L7O2yi470pUSFRiQdE49uRfI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170D3E, serialNumber=07F31B474713B3A152C6A5F8F48DED2097DC241F Validity Not Before: Aug 23 06:40:01 2025 GMT Not After : Aug 30 06:40:01 2025 GMT Subject: CN=68a96241-ff9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:bc:19:58:94:2e:87:74:ba:35:9e:46:5d:3d: 21:54:7e:82:76:e2:63:ad:32:17:1d:3e:95:3c:f7: a3:a7:76:73:04:7b:66:0c:e5:11:80:5a:f1:46:d5: e9:6b:c5:e2:6d:c7:3e:b6:dd:6c:77:ae:a2:09:84: b5:62:cd:91:5e:7e:fd:76:b4:95:22:b6:8e:9d:bb: a3:d9:84:90:bd:04:c1:cd:bc:78:55:4c:61:da:dc: a1:0d:19:3e:f6:dd:40:fb:90:03:a9:8a:dd:2f:0d: a1:b1:8c:eb:8b:e9:66:fa:44:cf:9b:e9:1d:01:51: e6:2a:fc:13:8e:7d:77:72:56:92:ae:eb:bd:d1:dd: 2f:30:00:a2:1f:51:18:90:a2:ef:d6:12:5c:fa:47: f5:fa:4c:4d:dd:fe:d7:79:3c:60:d3:d7:74:fd:17: 93:d5:6d:6e:c4:c5:ad:3c:e2:dd:92:55:ea:06:a2: 43:a0:f2:28:fc:f4:cc:cf:4f:d2:f7:98:7a:59:da: 14:5f:3c:18:d1:dd:d2:3c:f2:c2:72:4c:98:fe:13: 16:f5:fa:59:ff:bd:7c:c2:28:dc:75:23:a5:31:d3: ae:c7:5e:ea:cc:c7:cf:25:b7:57:ab:7a:83:ca:8e: 26:e6:11:12:21:89:34:f1:39:a8:31:25:10:2c:c9: db:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:23:13:88:21:06:BD:DC:6F:64:6D:34:91:26:1A:6E:FC:B4:0A:B4 X509v3 Authority Key Identifier: keyid:07:F3:1B:47:47:13:B3:A1:52:C6:A5:F8:F4:8D:ED:20:97:DC:24:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B_MbR0cTs6FSxqX49I3tIJfcJB8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170D3E/BDEE9E249FD711EF9E38A837C4F9AE02/B_MbR0cTs6FSxqX49I3tIJfcJB8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:93:8f:f6:78:a4:cd:40:c0:48:d6:e7:84:bc:ce:99:6b:57: 0d:6e:57:55:fb:8c:73:e3:30:fb:8a:82:ee:68:1e:ad:4e:18: f2:73:91:e2:b2:17:fe:2d:8b:99:21:6f:5a:60:b5:c5:e1:07: 70:f3:80:da:ea:e0:e2:ce:0a:42:1e:f3:a8:c2:6d:af:b3:08: b2:2e:12:77:03:b3:b6:5e:03:b1:a8:e1:5d:7d:2a:fd:df:d9: e9:d9:90:0c:6c:15:37:b8:f0:a8:29:64:e7:7e:d4:71:a0:b0: 05:68:b3:04:e3:e6:43:b2:d2:50:1a:ac:43:5d:d4:c4:b0:b9: 2e:13:b3:71:65:a8:c7:76:69:e3:ce:22:c3:c2:0a:e1:17:4f: 59:4e:c4:da:02:4d:7d:25:e4:53:40:86:d2:08:79:29:87:d1: 35:78:3c:df:6c:31:5d:09:05:4e:f1:b6:f8:8c:1e:09:0d:9e: 97:7c:c6:a7:a4:6f:e2:fc:b1:a1:46:60:be:16:06:2b:61:8e: 5c:10:58:77:fa:4b:61:83:fe:9d:c6:1b:fb:48:f7:eb:c8:1f: 9d:94:4e:d5:bc:74:5b:09:ec:f9:21:46:92:39:92:a5:38:cc: 23:a6:c7:b1:a7:3d:74:0e:fa:d1:31:2c:c5:5e:7a:62:d0:ff: f4:4f:41:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBEM0UxMTAvBgNVBAUTKDA3RjMxQjQ3NDcxM0IzQTE1MkM2QTVGOEY0OERFRDIw OTdEQzI0MUYwHhcNMjUwODIzMDY0MDAxWhcNMjUwODMwMDY0MDAxWjAYMRYwFAYD VQQDEw02OGE5NjI0MS1mZjlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5rwZWJQuh3S6NZ5GXT0hVH6CduJjrTIXHT6VPPejp3ZzBHtmDOURgFrxRtXp a8Xibcc+tt1sd66iCYS1Ys2RXn79drSVIraOnbuj2YSQvQTBzbx4VUxh2tyhDRk+ 9t1A+5ADqYrdLw2hsYzri+lm+kTPm+kdAVHmKvwTjn13claSruu90d0vMACiH1EY kKLv1hJc+kf1+kxN3f7XeTxg09d0/ReT1W1uxMWtPOLdklXqBqJDoPIo/PTMz0/S 95h6WdoUXzwY0d3SPPLCckyY/hMW9fpZ/718wijcdSOlMdOux17qzMfPJbdXq3qD yo4m5hESIYk08TmoMSUQLMnb7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0jE4gh Br3cb2RtNJEmGm78tAq0MB8GA1UdIwQYMBaAFAfzG0dHE7OhUsal+PSN7SCX3CQf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEQzRS9CREVFOUUyNDlG RDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2RlN4cVg0OUkzdElKZmNK QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JfTWJSMGNUczZGU3hxWDQ5STN0SUpmY0pCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MEQzRS9CREVFOUUyNDlGRDcxMUVGOUUzOEE4MzdDNEY5QUUwMi9CX01iUjBjVHM2 RlN4cVg0OUkzdElKZmNKQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8k4/2eKTNQMBI1ueEvM6Za1cNbldV+4xz4zD7ioLuaB6tThjyc5Hi shf+LYuZIW9aYLXF4Qdw84Da6uDizgpCHvOowm2vswiyLhJ3A7O2XgOxqOFdfSr9 39np2ZAMbBU3uPCoKWTnftRxoLAFaLME4+ZDstJQGqxDXdTEsLkuE7NxZajHdmnj ziLDwgrhF09ZTsTaAk19JeRTQIbSCHkph9E1eDzfbDFdCQVO8bb4jB4JDZ6XfMan pG/i/LGhRmC+FgYrYY5cEFh3+kthg/6dxhv7SPfryB+dlE7VvHRbCez5IUaSOZKl OMwjpsexpz10DvrRMSzFXnpi0P/0T0Fu -----END CERTIFICATE-----Generated at Sat Aug 23 18:51:53 2025 by rpki-client