$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft File: BhgYSeLF-TE-pgozl9xhRyrBGw0.mft (raw, json) Hash identifier: /pKXZrxUxmW7NSyK04EKJ0qLmFeY8CjcxC7ETGyaZ9g= Subject key identifier: 3B:80:4D:1B:40:26:CA:24:E3:49:B0:CB:F0:7B:B5:97:8A:21:3B:0C Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D Certificate issuer: /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D Certificate serial: 069C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft Manifest number: 068A Signing time: Fri 22 Aug 2025 22:33:18 +0000 Manifest this update: Fri 22 Aug 2025 22:33:17 +0000 Manifest next update: Fri 29 Aug 2025 22:33:17 +0000 Files and hashes: 1: BhgYSeLF-TE-pgozl9xhRyrBGw0.crl (hash: 8fITteJINWMXxR8NW0qdZDdd1yzWHQmd9hDvE8XT+Ko=) 2: 4F1694B4C87B11ED981CC523C4F9AE02.roa (hash: FWRlVE7qxAGVhNJeQGVLW3KvlIyEGk0A9fnepbZFOKE=) 3: E4205416B2F111EFBB14DE0FC4F9AE02.roa (hash: u41x8Ny1raTvp1vwnGwm7MW/cINQCDMdw5LO04vaVeU=) 4: C18726F486D711EBA06B0E64C4F9AE02.roa (hash: 46EUYT6r3IQXKkQnGUbOAbbi8lZTq+8CIfeQWVvyW6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1692 (0x69c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D Validity Not Before: Aug 22 22:33:17 2025 GMT Not After : Aug 29 22:33:17 2025 GMT Subject: CN=68a8f02d-c5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:1e:b6:0f:75:22:c0:1d:19:3c:31:cc:23:8a: e9:fb:f3:24:35:e4:cf:a1:ff:5e:fe:06:46:4a:db: ab:9f:08:19:cd:01:b2:48:c5:9a:69:b4:73:75:ae: 72:f8:c6:1a:34:0c:b4:29:8e:fc:c8:52:c0:0c:97: 38:cb:88:49:9a:77:b9:69:cf:23:cf:8b:89:34:3f: 32:58:c6:2d:7b:67:22:fe:59:66:57:d3:73:d2:a8: 70:38:27:a2:78:34:2f:0a:ad:6f:3c:0a:1c:75:cc: d1:65:f3:4b:f1:3a:4e:a5:8f:3e:cb:9d:a8:60:ee: fe:a0:eb:f5:4f:41:1e:44:13:0c:ca:eb:b5:16:4a: 07:c7:89:fe:14:25:f3:51:41:ea:c3:b0:d9:c4:ba: 67:bf:9d:06:0d:1d:c5:fb:da:7d:1d:d2:6b:ab:91: 6c:94:af:5f:b4:94:f2:d0:0a:68:9d:86:31:b3:e8: 3e:7a:88:84:bc:b0:24:de:e8:61:23:c8:39:9d:7d: 5e:b1:5a:1a:36:ac:38:11:f3:50:70:1c:83:d2:b3: f9:79:fe:22:57:92:63:82:8c:fa:40:c8:52:bd:15: 59:96:e5:2f:43:2f:0c:aa:53:5b:c1:3a:1f:41:c0: 3f:e9:76:a6:35:1c:68:a5:e3:00:62:91:6b:5e:a6: c5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:80:4D:1B:40:26:CA:24:E3:49:B0:CB:F0:7B:B5:97:8A:21:3B:0C X509v3 Authority Key Identifier: keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:db:7e:fa:7d:bb:ae:9a:ca:98:bc:76:74:74:73:db:bc:db: f6:b9:64:fa:c2:8b:6e:76:bb:5d:d0:b6:81:54:df:65:05:44: be:0d:7a:8f:cd:4f:59:36:3f:0e:1b:72:63:fe:30:6b:fa:92: 78:f7:67:0f:f9:ab:dd:3a:05:1b:a1:a9:81:52:d4:e4:96:81: cc:1f:63:d6:dc:b6:e9:57:c2:dc:e0:02:0d:02:95:30:4f:32: 5d:e8:5f:db:b7:0b:9d:c8:93:16:42:79:00:09:51:b8:c8:3b: 88:ee:c2:04:df:8b:b3:18:b3:c5:7d:a1:8f:95:f5:f9:c8:b7: e8:83:9d:fa:a0:57:56:d5:30:d4:c9:eb:a7:7b:fa:e3:6e:6b: ac:9c:0b:a7:12:70:33:63:1d:03:33:57:b8:5f:77:11:7a:4d: 13:cd:b3:16:75:1c:50:a6:2c:48:8c:99:47:02:f1:be:22:9f: 93:62:ee:88:02:eb:3e:11:79:bd:d6:76:64:5b:c8:79:7d:06: df:26:41:9d:1d:25:f6:50:2d:ac:eb:b4:d5:08:fb:31:77:84: 9f:27:7f:04:3b:df:bf:37:9b:c6:ac:d0:c4:d6:b5:94:d0:9e: 11:4b:f7:f0:d8:b1:54:55:7f:94:1d:46:08:85:e7:81:04:43: d6:4a:d6:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCQkMxMTAvBgNVBAUTKDA2MTgxODQ5RTJDNUY5MzEzRUE2MEEzMzk3REM2MTQ3 MkFDMTFCMEQwHhcNMjUwODIyMjIzMzE3WhcNMjUwODI5MjIzMzE3WjAYMRYwFAYD VQQDEw02OGE4ZjAyZC1jNWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9x62D3UiwB0ZPDHMI4rp+/MkNeTPof9e/gZGSturnwgZzQGySMWaabRzda5y +MYaNAy0KY78yFLADJc4y4hJmne5ac8jz4uJND8yWMYte2ci/llmV9Nz0qhwOCei eDQvCq1vPAocdczRZfNL8TpOpY8+y52oYO7+oOv1T0EeRBMMyuu1FkoHx4n+FCXz UUHqw7DZxLpnv50GDR3F+9p9HdJrq5FslK9ftJTy0AponYYxs+g+eoiEvLAk3uhh I8g5nX1esVoaNqw4EfNQcByD0rP5ef4iV5Jjgoz6QMhSvRVZluUvQy8MqlNbwTof QcA/6XamNRxopeMAYpFrXqbFAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDuATRtA Jsok40mwy/B7tZeKITsMMB8GA1UdIwQYMBaAFAYYGEnixfkxPqYKM5fcYUcqwRsN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0JCQy8xNDBDMTc1Njg2 RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VMRi1URS1wZ296bDl4aFJ5ckJH dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JoZ1lTZUxGLVRFLXBnb3psOXhoUnlyQkd3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0JCQy8xNDBDMTc1Njg2RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VMRi1U RS1wZ296bDl4aFJ5ckJHdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG2376fbuumsqYvHZ0dHPbvNv2uWT6wotudrtd0LaBVN9lBUS+DXqP zU9ZNj8OG3Jj/jBr+pJ492cP+avdOgUboamBUtTkloHMH2PW3LbpV8Lc4AINApUw TzJd6F/btwudyJMWQnkACVG4yDuI7sIE34uzGLPFfaGPlfX5yLfog536oFdW1TDU yeune/rjbmusnAunEnAzYx0DM1e4X3cRek0TzbMWdRxQpixIjJlHAvG+Ip+TYu6I Aus+EXm91nZkW8h5fQbfJkGdHSX2UC2s67TVCPsxd4SfJ38EO9+/N5vGrNDE1rWU 0J4RS/fw2LFUVX+UHUYIheeBBEPWStZm -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:58 2025 by rpki-client