$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: 5bYwaJ8+NbKRtHFR/7qm/c/fdP203oy6sO+awAeqXwQ= Subject key identifier: 70:8A:2D:8B:DE:75:BD:28:4A:C5:E8:18:12:A8:85:5D:C1:91:4B:0F Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 0F42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 0F38 Signing time: Fri 22 Aug 2025 17:43:39 +0000 Manifest this update: Fri 22 Aug 2025 17:43:38 +0000 Manifest next update: Fri 29 Aug 2025 17:43:38 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: z9X3gfY9cqi8knF9giNRiNHmwkzXirjHrU7VQwKUOUE=) 2: 39275D0C232511EC925DF318C4F9AE02.roa (hash: kMA98lH1wtLYavwio/f29E4JAww9w+abzPZIVQ6M1dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3906 (0xf42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: Aug 22 17:43:38 2025 GMT Not After : Aug 29 17:43:38 2025 GMT Subject: CN=68a8ac4a-7508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:5f:43:36:ce:e4:ba:7c:88:a2:b0:c7:89: d4:d0:1b:e1:1d:5e:b6:1c:cf:60:ff:4b:88:a7:5f: 22:6f:29:cc:57:b0:4a:d9:8f:53:eb:90:76:91:72: 33:24:04:35:57:e7:b2:3b:b1:91:1d:d1:88:32:94: fd:d2:e5:2a:74:cb:48:49:c1:14:e0:66:41:08:32: 50:ea:59:6f:76:17:0b:7c:14:aa:61:5c:99:ca:c1: 80:cf:db:f5:2d:2c:3b:5d:64:f8:23:f7:b3:0e:3f: c4:b2:74:0a:ff:3b:a2:03:ce:a5:0c:05:01:ed:e7: 43:d2:71:77:14:9e:9b:33:0a:94:1f:aa:b2:68:6e: 5f:35:39:2d:a4:e9:15:86:5d:7d:7c:0d:83:67:fd: 56:84:b4:36:80:b6:cb:9e:92:68:d2:c0:b2:64:a7: 33:83:0e:f4:e0:c9:e1:93:b2:e5:f1:e8:d8:99:74: 64:95:79:e3:f5:49:64:bf:1c:06:98:f3:29:f3:51: 9f:2d:7e:76:11:24:62:9d:56:ba:70:40:6b:e0:e6: 35:28:9d:1b:dc:60:88:41:6b:e9:25:a6:aa:ca:9d: 30:5b:9a:97:e5:fa:b7:05:b7:45:e5:c8:76:e4:bc: 2f:2a:37:4d:ec:87:8a:f7:1f:79:c6:8b:ce:e6:a2: bb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8A:2D:8B:DE:75:BD:28:4A:C5:E8:18:12:A8:85:5D:C1:91:4B:0F X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:e3:6f:de:5d:b1:b3:4a:1b:ac:8c:b5:de:f7:40:ff:a4:17: c8:fe:a4:00:ce:87:ef:4d:91:36:3b:9f:27:9f:19:43:bd:9b: 10:89:01:22:f8:44:61:e5:5d:de:df:f8:e3:b3:36:06:9f:1c: 18:d6:ee:50:94:33:c3:d1:23:94:80:22:8c:b8:13:5e:d1:93: 27:b4:ca:19:75:91:b7:8f:e6:9e:a6:f9:07:6a:98:ec:cc:fc: 24:fa:bc:7c:bb:bb:9d:6e:5b:9a:4d:18:0a:af:62:fd:d7:c0: 58:81:61:30:b6:e1:eb:fe:97:0f:2d:50:58:6c:24:e0:2c:78: 3f:c3:5d:ca:4e:3d:d0:12:66:d2:df:dc:07:83:2c:cc:7b:7f: 1c:54:ac:95:cc:f3:fa:bd:82:7b:54:98:8a:45:86:4e:8a:21: c6:56:65:79:b1:e2:f6:42:c5:e9:89:93:b5:5e:ed:dc:b8:4d: 6c:1a:21:db:b5:9e:41:32:bd:28:8e:7b:e4:53:ef:e3:f8:aa: 75:e7:47:c9:a3:11:05:45:0e:e2:47:a1:10:69:2e:a9:77:cb: 07:33:bb:0a:67:b5:2e:83:11:04:09:3f:3e:8d:5d:f9:04:51: b6:6d:d7:b3:e9:f1:7d:41:9e:27:e6:26:cb:8a:f5:4f:a7:4a: 1d:e5:a2:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD0IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjUwODIyMTc0MzM4WhcNMjUwODI5MTc0MzM4WjAYMRYwFAYD VQQDEw02OGE4YWM0YS03NTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/RfQzbO5Lp8iKKwx4nU0BvhHV62HM9g/0uIp18ibynMV7BK2Y9T65B2kXIz JAQ1V+eyO7GRHdGIMpT90uUqdMtIScEU4GZBCDJQ6llvdhcLfBSqYVyZysGAz9v1 LSw7XWT4I/ezDj/EsnQK/zuiA86lDAUB7edD0nF3FJ6bMwqUH6qyaG5fNTktpOkV hl19fA2DZ/1WhLQ2gLbLnpJo0sCyZKczgw704Mnhk7Ll8ejYmXRklXnj9UlkvxwG mPMp81GfLX52ESRinVa6cEBr4OY1KJ0b3GCIQWvpJaaqyp0wW5qX5fq3BbdF5ch2 5LwvKjdN7IeK9x95xovO5qK7QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHCKLYve db0oSsXoGBKohV3BkUsPMB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAo42/eXbGzShusjLXe90D/pBfI/qQAzofvTZE2O58nnxlDvZsQiQEi +ERh5V3e3/jjszYGnxwY1u5QlDPD0SOUgCKMuBNe0ZMntMoZdZG3j+aepvkHapjs zPwk+rx8u7udbluaTRgKr2L918BYgWEwtuHr/pcPLVBYbCTgLHg/w13KTj3QEmbS 39wHgyzMe38cVKyVzPP6vYJ7VJiKRYZOiiHGVmV5seL2QsXpiZO1Xu3cuE1sGiHb tZ5BMr0ojnvkU+/j+Kp150fJoxEFRQ7iR6EQaS6pd8sHM7sKZ7UugxEECT8+jV35 BFG2bdez6fF9QZ4n5ibLivVPp0od5aL5 -----END CERTIFICATE-----Generated at Sat Aug 23 13:45:34 2025 by rpki-client