$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft File: bjdXKUWj6XupZFmfpVXE20JjwOQ.mft (raw, json) Hash identifier: 8kRDcAw0pXPzH438ALeZ1xgDC1mCPlHb2kJhLyf8ZQo= Subject key identifier: 11:29:BA:E2:E1:DF:DE:27:1F:2F:6E:78:BB:75:9E:6E:E1:8B:DC:68 Authority key identifier: 6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4 Certificate issuer: /CN=A9176302/serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft Manifest number: 35 Signing time: Sat 23 Aug 2025 05:42:36 +0000 Manifest this update: Sat 23 Aug 2025 05:42:35 +0000 Manifest next update: Sat 30 Aug 2025 05:42:35 +0000 Files and hashes: 1: bjdXKUWj6XupZFmfpVXE20JjwOQ.crl (hash: 63GZxlv6UGaoUUsQRfA3caA/r6izMrdjSLHlBOMRZNc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:42:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176302, serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4 Validity Not Before: Aug 23 05:42:35 2025 GMT Not After : Aug 30 05:42:35 2025 GMT Subject: CN=68a954cb-9739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:61:79:7c:64:21:06:6f:a3:7a:64:f1:a9: a9:7f:f0:d5:94:15:7e:fd:ff:56:4e:68:36:4b:48: 86:c7:2d:89:c8:fe:39:ca:22:57:ea:35:c5:11:a1: ae:72:3b:e8:00:73:3c:68:c4:5a:d9:63:31:a1:c1: 25:64:91:f7:89:4f:9b:8e:f6:75:d2:67:b1:24:ae: 80:13:11:2c:2c:a5:08:2b:16:32:50:b0:fc:a9:fc: 84:ff:67:83:bd:75:b3:fe:e4:12:93:28:cf:0e:b2: ab:88:37:f7:5d:41:d4:68:a1:7e:57:1d:53:5c:56: 4f:0a:4f:f1:6f:25:3a:23:07:c9:58:7c:1a:b0:7a: b2:4a:7e:4c:66:a7:f6:22:14:3d:8d:5d:49:7e:57: d2:63:2d:82:bf:fd:00:50:08:a7:20:3b:f0:25:12: a3:32:c6:eb:6b:0a:e1:04:e0:6d:6d:dd:9e:fd:3d: 87:fb:b6:60:98:33:59:32:b4:2d:fa:7e:06:c5:0a: 95:d7:3a:c8:5b:c1:62:58:1d:0b:e2:18:8d:19:9b: 3b:26:16:8c:f2:5b:36:1a:cd:0e:c4:b0:2c:fd:5d: ee:00:c9:08:21:85:c5:49:db:93:6b:9b:d5:fd:1d: e9:eb:b2:31:28:83:8e:19:e8:5f:f8:b1:09:2d:cf: 2e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:29:BA:E2:E1:DF:DE:27:1F:2F:6E:78:BB:75:9E:6E:E1:8B:DC:68 X509v3 Authority Key Identifier: keyid:6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:09:14:99:ba:18:3b:ba:88:9f:a9:44:22:66:f0:99:e6:9a: 4b:fe:73:4d:fd:93:71:d2:38:bc:d3:f8:c7:ec:ff:7a:01:c3: b1:45:56:96:4c:04:30:50:d2:19:3f:e1:56:ec:5e:6a:8e:47: c8:9d:98:7f:8d:77:a5:a3:76:be:2d:d0:63:f8:9c:bd:bd:ba: ba:bf:bc:e3:39:fb:d1:c9:c6:65:25:16:31:96:5b:5e:67:03: a4:ee:95:a6:2d:36:30:08:bd:74:29:aa:88:b1:f5:31:fe:d5: 24:8a:17:29:ec:5b:07:7f:a0:bb:3b:21:30:a5:e7:1b:73:33: 95:95:f4:55:e5:d9:18:03:1a:49:85:d2:40:8c:ce:77:2d:55: f3:c4:1b:49:89:d3:64:af:3b:ac:c6:42:5b:22:7a:b9:4e:b8: 00:cc:83:ca:20:6b:27:0a:1a:19:57:90:3c:71:5f:5d:a5:7e: 74:c7:b1:4e:84:a3:62:a4:64:69:a9:b3:83:fa:16:54:9f:0d: 56:66:b2:22:0a:9b:8a:ae:3f:12:91:7f:5d:56:e6:eb:04:67: d4:b2:8b:0c:64:10:00:48:28:f8:69:f7:a4:b5:e9:40:47:44: 28:20:6f:a5:6c:97:46:f8:56:d2:62:d2:f3:f4:76:c4:22:4e: 9b:ba:39:bf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NjMwMjExMC8GA1UEBRMoNkUzNzU3Mjk0NUEzRTk3QkE5NjQ1OTlGQTU1NUM0REI0 MjYzQzBFNDAeFw0yNTA4MjMwNTQyMzVaFw0yNTA4MzAwNTQyMzVaMBgxFjAUBgNV BAMTDTY4YTk1NGNiLTk3MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsHGF5fGQhBm+jemTxqal/8NWUFX79/1ZOaDZLSIbHLYnI/jnKIlfqNcURoa5y O+gAczxoxFrZYzGhwSVkkfeJT5uO9nXSZ7EkroATESwspQgrFjJQsPyp/IT/Z4O9 dbP+5BKTKM8OsquIN/ddQdRooX5XHVNcVk8KT/FvJTojB8lYfBqwerJKfkxmp/Yi FD2NXUl+V9JjLYK//QBQCKcgO/AlEqMyxutrCuEE4G1t3Z79PYf7tmCYM1kytC36 fgbFCpXXOshbwWJYHQviGI0ZmzsmFozyWzYazQ7EsCz9Xe4AyQghhcVJ25Nrm9X9 HenrsjEog44Z6F/4sQktzy6vAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUESm64uHf 3icfL254u3WebuGL3GgwHwYDVR0jBBgwFoAUbjdXKUWj6XupZFmfpVXE20JjwOQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2MzAyLzM2MjcyREU4MzA2 NTExRjA4RTgyQTIxNEM0RjlBRTAyL2JqZFhLVVdqNlh1cFpGbWZwVlhFMjBKandP US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYmpkWEtVV2o2WHVwWkZtZnBWWEUyMEpqd09RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 MzAyLzM2MjcyREU4MzA2NTExRjA4RTgyQTIxNEM0RjlBRTAyL2JqZFhLVVdqNlh1 cFpGbWZwVlhFMjBKandPUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIAJFJm6GDu6iJ+pRCJm8Jnmmkv+c039k3HSOLzT+Mfs/3oBw7FFVpZM BDBQ0hk/4VbsXmqOR8idmH+Nd6Wjdr4t0GP4nL29urq/vOM5+9HJxmUlFjGWW15n A6TulaYtNjAIvXQpqoix9TH+1SSKFynsWwd/oLs7ITCl5xtzM5WV9FXl2RgDGkmF 0kCMznctVfPEG0mJ02SvO6zGQlsierlOuADMg8ogaycKGhlXkDxxX12lfnTHsU6E o2KkZGmps4P6FlSfDVZmsiIKm4quPxKRf11W5usEZ9SyiwxkEABIKPhp96S16UBH RCggb6Vsl0b4VtJi0vP0dsQiTpu6Ob8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:49:43 2025 by rpki-client