$ rpki-client -vvf rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft File: bBH4O5qMvdIVMt3w6mHek4jRPGs.mft (raw, json) Hash identifier: RyZNilXFdeVLNNhAkS3JHSgjkfnCPSnVF5z+3K0Du60= Subject key identifier: C2:D9:37:3D:C4:19:3A:5B:86:FB:1E:5A:8D:9C:D3:E8:04:E2:6D:02 Authority key identifier: 6C:11:F8:3B:9A:8C:BD:D2:15:32:DD:F0:EA:61:DE:93:88:D1:3C:6B Certificate issuer: /CN=A917D958/serialNumber=6C11F83B9A8CBDD21532DDF0EA61DE9388D13C6B Certificate serial: 86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft Manifest number: 86 Signing time: Sat 23 Aug 2025 06:52:00 +0000 Manifest this update: Sat 23 Aug 2025 06:52:00 +0000 Manifest next update: Sat 30 Aug 2025 06:52:00 +0000 Files and hashes: 1: bBH4O5qMvdIVMt3w6mHek4jRPGs.crl (hash: SJdGHtpfiPlXpucUkeKxLHV50jrNv6w028DuvJOqsU4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.crl rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 134 (0x86) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D958, serialNumber=6C11F83B9A8CBDD21532DDF0EA61DE9388D13C6B Validity Not Before: Aug 23 06:52:00 2025 GMT Not After : Aug 30 06:52:00 2025 GMT Subject: CN=68a96510-506f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:64:62:f7:9a:cb:87:5a:7e:ed:3a:39:94:0c: c1:7b:2f:23:7c:69:2b:4a:07:39:02:7e:a6:97:78: ff:32:16:c9:26:36:ce:55:c6:5b:38:9a:9e:3b:d1: 7d:f9:2d:0c:11:61:22:7e:bd:88:7f:93:6d:fd:86: 84:fa:78:e6:dc:c7:b9:c2:12:44:26:9f:c4:da:84: e6:e3:34:76:3f:0c:03:9f:b2:97:c2:39:7c:d4:7a: c1:8a:66:75:ef:7f:d6:7c:a2:b8:15:a2:cf:69:4b: d0:bb:30:6b:b0:dd:3b:57:bc:84:e5:ed:b0:29:a3: 6d:14:11:70:e9:ca:01:fa:77:7e:30:f3:4f:74:c5: 6a:94:b9:72:42:98:07:df:20:03:77:2f:f1:fb:bd: e2:8f:86:bf:9d:73:06:d2:50:e7:01:23:4f:fa:64: fd:f3:79:be:ce:be:0d:bf:e5:c8:cd:a7:fe:8d:c9: 61:e7:68:8c:9e:c4:2e:f3:03:5e:02:e0:e2:7b:a7: 65:f9:bb:52:dc:9d:28:b4:0e:f3:b3:80:69:42:e9: 45:f3:b3:63:63:d1:e5:8a:84:80:c8:59:9b:46:8e: a9:32:5d:a0:a8:df:94:2f:7f:c6:41:2f:d6:67:95: 82:2a:e8:7d:ad:5a:b4:2f:27:bc:4c:0e:b4:4a:30: 39:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D9:37:3D:C4:19:3A:5B:86:FB:1E:5A:8D:9C:D3:E8:04:E2:6D:02 X509v3 Authority Key Identifier: keyid:6C:11:F8:3B:9A:8C:BD:D2:15:32:DD:F0:EA:61:DE:93:88:D1:3C:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bBH4O5qMvdIVMt3w6mHek4jRPGs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D958/6F628388B39B11EF80F6435EC4F9AE02/bBH4O5qMvdIVMt3w6mHek4jRPGs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:db:be:f8:bf:56:51:17:40:59:be:57:ed:e2:ff:b6:18:30: ac:aa:ab:32:14:40:84:bd:24:60:cd:ac:76:d5:81:65:72:86: 35:e3:53:5e:ef:82:bd:1d:5c:9f:ec:5a:e5:75:0f:9a:4d:ff: d0:02:06:d4:1d:e5:b8:fb:51:07:4d:cb:14:23:aa:21:f7:25: 87:24:e1:82:1d:4c:d5:f5:a4:7b:7c:36:e4:15:46:61:0c:b8: 77:96:2d:ff:56:8d:0d:e6:f7:6f:78:de:f2:1d:bd:8e:a8:4b: 0e:57:d5:9c:5b:4a:91:68:32:bf:22:01:91:fe:86:b4:fa:28: 05:ae:16:a8:d3:f4:b1:3c:0d:6a:97:81:27:4f:ff:d1:6b:16: c1:04:9d:e0:ef:d3:87:47:7c:18:9d:c8:8c:e5:29:c5:79:5a: df:15:d4:b4:92:58:9c:ec:e0:0a:fd:b2:7c:86:cc:34:7c:72: 59:03:af:a7:71:62:85:c9:33:43:32:6c:e4:a5:8d:2d:91:ab: 35:e2:0a:01:c6:27:7c:40:53:9c:fa:bf:b3:8b:ec:e3:8e:81: 28:89:59:af:8b:b3:93:3d:59:eb:cc:4e:87:ba:a1:a0:4e:2e: 88:e1:db:9c:a8:1a:17:78:df:83:c6:e8:18:d4:60:ae:35:bc: 6a:4c:0d:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5NTgxMTAvBgNVBAUTKDZDMTFGODNCOUE4Q0JERDIxNTMyRERGMEVBNjFERTkz ODhEMTNDNkIwHhcNMjUwODIzMDY1MjAwWhcNMjUwODMwMDY1MjAwWjAYMRYwFAYD VQQDEw02OGE5NjUxMC01MDZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApmRi95rLh1p+7To5lAzBey8jfGkrSgc5An6ml3j/MhbJJjbOVcZbOJqeO9F9 +S0MEWEifr2If5Nt/YaE+njm3Me5whJEJp/E2oTm4zR2PwwDn7KXwjl81HrBimZ1 73/WfKK4FaLPaUvQuzBrsN07V7yE5e2wKaNtFBFw6coB+nd+MPNPdMVqlLlyQpgH 3yADdy/x+73ij4a/nXMG0lDnASNP+mT983m+zr4Nv+XIzaf+jclh52iMnsQu8wNe AuDie6dl+btS3J0otA7zs4BpQulF87NjY9HlioSAyFmbRo6pMl2gqN+UL3/GQS/W Z5WCKuh9rVq0Lye8TA60SjA5YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMLZNz3E GTpbhvseWo2c0+gE4m0CMB8GA1UdIwQYMBaAFGwR+DuajL3SFTLd8Oph3pOI0Txr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDk1OC82RjYyODM4OEIz OUIxMUVGODBGNjQzNUVDNEY5QUUwMi9iQkg0TzVxTXZkSVZNdDN3Nm1IZWs0alJQ R3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JCSDRPNXFNdmRJVk10M3c2bUhlazRqUlBHcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RDk1OC82RjYyODM4OEIzOUIxMUVGODBGNjQzNUVDNEY5QUUwMi9iQkg0TzVxTXZk SVZNdDN3Nm1IZWs0alJQR3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC92774v1ZRF0BZvlft4v+2GDCsqqsyFECEvSRgzax21YFlcoY141Ne 74K9HVyf7FrldQ+aTf/QAgbUHeW4+1EHTcsUI6oh9yWHJOGCHUzV9aR7fDbkFUZh DLh3li3/Vo0N5vdveN7yHb2OqEsOV9WcW0qRaDK/IgGR/oa0+igFrhao0/SxPA1q l4EnT//RaxbBBJ3g79OHR3wYnciM5SnFeVrfFdS0klic7OAK/bJ8hsw0fHJZA6+n cWKFyTNDMmzkpY0tkas14goBxid8QFOc+r+zi+zjjoEoiVmvi7OTPVnrzE6HuqGg Ti6I4ducqBoXeN+DxugY1GCuNbxqTA0Q -----END CERTIFICATE-----Generated at Sun Aug 24 03:10:42 2025 by rpki-client