$ rpki-client -vvf rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft File: bC3jjX43M-CH3e95d-MYOcCt7jc.mft (raw, json) Hash identifier: TIoCGA8JXf6Dw9kcSWEC2nt/azJnK1oxLQXg0MFfe8k= Subject key identifier: 21:5C:13:6B:2A:83:D3:A8:7E:AB:6E:0A:85:F6:CE:00:90:DB:D2:4B Authority key identifier: 6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37 Certificate issuer: /CN=A9181380/serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37 Certificate serial: 0229 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft Manifest number: 0225 Signing time: Sat 23 Aug 2025 02:09:37 +0000 Manifest this update: Sat 23 Aug 2025 02:09:37 +0000 Manifest next update: Sat 30 Aug 2025 02:09:37 +0000 Files and hashes: 1: bC3jjX43M-CH3e95d-MYOcCt7jc.crl (hash: 5ZjiV5eEUFFsDacxS55MgX8xUwDgghgogC23eUfTKqQ=) 2: 164993A63FBA11EDA5387132C4F9AE02.roa (hash: XYc2mxLenXQc+O8B80ZFK5EpIFxtXO429dywGYqqozs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:09:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 553 (0x229) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181380, serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37 Validity Not Before: Aug 23 02:09:37 2025 GMT Not After : Aug 30 02:09:37 2025 GMT Subject: CN=68a922e1-80d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0f:49:51:69:24:5a:c6:3d:69:71:7a:d3:b4: 68:27:59:8c:e3:c3:2e:40:b9:e0:9a:7a:dc:f7:ea: 2b:de:05:25:86:fd:91:e1:82:ed:12:b6:08:38:3b: 72:0f:76:62:df:1f:c6:49:bb:72:4b:3f:cf:f8:3d: 74:10:56:bc:8c:27:ce:d0:91:d0:ef:c9:1c:d8:ab: 7a:51:50:6c:f1:c2:bb:7d:7d:3d:7c:17:98:18:92: d7:18:c8:b3:1d:24:73:95:53:e3:f5:60:93:8b:7f: 1b:2a:e2:41:fb:99:1e:97:c1:32:41:ce:29:1d:a8: 51:40:20:80:23:44:0d:98:3a:ef:e9:ec:f8:22:be: 13:f5:08:8c:3e:4c:0c:2d:73:8d:fe:8e:8c:26:59: 2c:62:ba:10:36:39:81:04:37:29:2e:34:53:ae:3a: 9a:f8:7d:f9:0a:9b:cf:31:d0:d4:e7:ed:99:84:af: 75:40:f0:f7:63:1b:9d:2c:99:d4:e3:1d:ae:ce:39: e4:7b:ac:ef:5c:05:0a:92:e5:58:69:1d:76:2c:d2: ca:05:8a:d5:24:ff:89:c7:68:22:df:db:4c:46:75: 2c:b0:42:4d:3c:b6:6e:7f:eb:ae:54:b4:6a:1f:a5: b3:e8:00:53:c3:18:7c:30:84:44:6c:eb:f7:fd:be: c3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5C:13:6B:2A:83:D3:A8:7E:AB:6E:0A:85:F6:CE:00:90:DB:D2:4B X509v3 Authority Key Identifier: keyid:6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:b6:8f:b5:cc:c1:19:7e:8a:98:97:38:42:42:1a:1a:c6:50: 61:e0:8a:9d:44:36:e3:dd:37:5f:ca:4c:76:1f:76:15:c4:ea: 03:07:cc:27:38:92:1a:94:f6:63:c0:ed:16:2f:e1:bb:84:89: 9c:f3:28:bf:d9:2a:c2:18:08:28:bd:d3:a4:d5:1e:34:6b:67: 06:94:57:8b:60:50:9c:0f:fa:4f:fe:76:97:a1:ee:2b:a1:21: fc:52:a3:c4:6c:16:ad:f5:30:48:66:c9:9d:ae:90:e4:88:e5: 50:dd:70:ec:59:28:b8:0b:bb:85:04:14:42:f2:e1:a1:70:9e: e8:73:ee:03:52:bf:ed:82:14:90:e6:f7:5a:46:df:52:e3:59: 5b:4a:f5:b3:f2:b3:61:3c:c4:8e:1a:68:22:a7:b0:ab:e2:42: 4d:5d:30:d5:5a:1b:c2:3d:07:12:23:0c:05:70:04:25:ca:25: b5:80:8e:13:be:c6:d5:41:0a:8e:9d:06:34:ce:73:c7:67:a8: 28:b1:26:5e:00:63:ab:90:59:f5:a0:ea:7c:19:2e:c3:39:ca: e7:c3:4b:7e:ce:cd:80:f7:66:2e:a0:39:04:5a:bd:b4:e4:1f: cb:a9:da:bc:09:14:c3:4b:5b:90:67:fe:a4:ca:de:62:c9:a4: ea:09:41:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAikwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzODAxMTAvBgNVBAUTKDZDMkRFMzhEN0UzNzMzRTA4N0RERUY3OTc3RTMxODM5 QzBBREVFMzcwHhcNMjUwODIzMDIwOTM3WhcNMjUwODMwMDIwOTM3WjAYMRYwFAYD VQQDEw02OGE5MjJlMS04MGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuw9JUWkkWsY9aXF607RoJ1mM48MuQLngmnrc9+or3gUlhv2R4YLtErYIODty D3Zi3x/GSbtySz/P+D10EFa8jCfO0JHQ78kc2Kt6UVBs8cK7fX09fBeYGJLXGMiz HSRzlVPj9WCTi38bKuJB+5kel8EyQc4pHahRQCCAI0QNmDrv6ez4Ir4T9QiMPkwM LXON/o6MJlksYroQNjmBBDcpLjRTrjqa+H35CpvPMdDU5+2ZhK91QPD3YxudLJnU 4x2uzjnke6zvXAUKkuVYaR12LNLKBYrVJP+Jx2gi39tMRnUssEJNPLZuf+uuVLRq H6Wz6ABTwxh8MIREbOv3/b7DJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFcE2sq g9OofqtuCoX2zgCQ29JLMB8GA1UdIwQYMBaAFGwt441+NzPgh93veXfjGDnAre43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM4MC8wREYzQjM5QTNF RkIxMUVEQjdEQTc4NzVDNEY5QUUwMi9iQzNqalg0M00tQ0gzZTk1ZC1NWU9jQ3Q3 amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDM2pqWDQzTS1DSDNlOTVkLU1ZT2NDdDdqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM4MC8wREYzQjM5QTNFRkIxMUVEQjdEQTc4NzVDNEY5QUUwMi9iQzNqalg0M00t Q0gzZTk1ZC1NWU9jQ3Q3amMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXto+1zMEZfoqYlzhCQhoaxlBh4IqdRDbj3Tdfykx2H3YVxOoDB8wn OJIalPZjwO0WL+G7hImc8yi/2SrCGAgovdOk1R40a2cGlFeLYFCcD/pP/naXoe4r oSH8UqPEbBat9TBIZsmdrpDkiOVQ3XDsWSi4C7uFBBRC8uGhcJ7oc+4DUr/tghSQ 5vdaRt9S41lbSvWz8rNhPMSOGmgip7Cr4kJNXTDVWhvCPQcSIwwFcAQlyiW1gI4T vsbVQQqOnQY0znPHZ6gosSZeAGOrkFn1oOp8GS7DOcrnw0t+zs2A92YuoDkEWr20 5B/Lqdq8CRTDS1uQZ/6kyt5iyaTqCUHY -----END CERTIFICATE-----Generated at Sat Aug 23 19:05:07 2025 by rpki-client