$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft File: BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft (raw, json) Hash identifier: yXQHAJX25bzGHUTJqqHurctkgdAigTp1ztnJoM4Umco= Subject key identifier: D3:22:FF:1B:29:96:EE:3F:45:81:05:58:BD:77:43:8B:2B:54:40:51 Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE Certificate issuer: /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE Certificate serial: 068D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft Manifest number: 0671 Signing time: Fri 22 Aug 2025 22:48:30 +0000 Manifest this update: Fri 22 Aug 2025 22:48:29 +0000 Manifest next update: Fri 29 Aug 2025 22:48:29 +0000 Files and hashes: 1: BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl (hash: ka1nd5EXVQKfu7Iihr1ilxKfe0WJn33CF9jXoOXHghI=) 2: BFC00D26D18011EEB673FD69C4F9AE02.roa (hash: slvz1DiBN7RpHIPZvSLyRTkEJiuUppucAlEd1/xFZqs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:48:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184279, serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE Validity Not Before: Aug 22 22:48:29 2025 GMT Not After : Aug 29 22:48:29 2025 GMT Subject: CN=68a8f3bd-9edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:a7:8f:bb:ae:30:07:db:29:f5:7c:a9:43: 7a:22:26:93:57:e8:63:5a:34:cd:94:da:ff:2a:d8: 93:1b:c3:3e:31:69:1e:db:07:ec:92:e2:41:56:b5: 2d:4c:25:d1:2b:bf:2d:36:b7:7a:ac:9e:54:69:5e: ee:f6:73:e6:ef:35:07:8c:3d:21:20:61:a7:80:18: 83:2d:55:d8:6f:16:4e:fd:ae:4f:d3:21:90:2e:7d: ab:bb:ad:97:07:50:15:a1:30:04:65:ca:96:b3:85: 28:b4:72:de:01:7d:36:77:aa:d5:85:cc:f2:a6:2c: 64:00:78:14:d8:5f:fd:36:cd:66:95:c4:49:67:59: 85:9b:49:70:6b:7d:40:c8:a6:84:b7:7f:4c:c7:de: 70:4b:6c:f0:be:85:76:6b:e7:b4:6a:15:7d:40:8d: c9:8d:1b:fd:45:2d:3a:bb:ca:a3:8e:53:61:69:b8: 2c:85:7e:5e:b4:b6:ed:41:9b:8b:2b:e6:72:b5:a3: 7c:f6:c3:49:c9:94:86:57:93:ef:44:41:64:5a:7f: bf:4d:bb:16:84:06:9b:1e:97:52:fe:3b:87:4a:f0: f1:4e:ac:95:31:a7:6d:b8:06:0f:6a:a4:cf:71:a3: 65:3e:66:7e:5f:ee:69:67:4d:5f:b4:57:26:66:45: a7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:22:FF:1B:29:96:EE:3F:45:81:05:58:BD:77:43:8B:2B:54:40:51 X509v3 Authority Key Identifier: keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a8:66:67:1a:86:67:68:36:23:fe:9b:1a:0c:d4:7c:e7:59: 0d:de:54:ba:97:de:e7:ac:db:79:cc:85:48:a7:22:98:55:1e: 35:56:be:7b:df:04:53:0c:c8:77:f4:4b:e8:b9:24:46:ef:be: f2:54:db:f8:27:87:b9:49:c4:16:f5:19:df:77:6b:42:e7:35: 94:2d:c9:6f:44:c1:da:cd:76:07:44:53:19:0d:0a:be:d7:9d: c2:36:25:da:d7:99:bf:1f:9e:1f:c2:49:96:ec:b7:7e:c4:0b: 2e:24:37:42:19:4d:28:89:4a:5f:af:bc:4d:b0:1a:52:92:b1: 0a:f5:09:cf:61:ee:68:6a:70:2e:de:7c:55:e0:ff:f8:96:5a: 24:1e:e6:73:bd:87:43:dd:3c:ae:7d:d7:83:62:cf:e1:30:0c: 56:f5:ce:24:5f:04:be:d9:1d:26:41:29:aa:e9:ad:7e:ec:97: 27:d7:6c:dc:07:59:ef:53:50:62:31:1d:9b:bf:d3:c8:a0:50: 86:6e:21:37:46:42:7c:15:a2:a4:8f:d8:c2:7b:53:f5:81:08: c2:31:9c:81:6a:28:13:82:08:1e:d5:b6:60:42:1e:84:6f:cc: 08:97:cf:6e:c2:7f:8b:ca:12:88:22:47:ec:8f:e6:4f:3a:d6: bf:cf:18:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyNzkxMTAvBgNVBAUTKDA2RDI4QzQzRUFFNDNGMUY1REE1NkM2QTIxRTZDQUJC RkNCODhEQkUwHhcNMjUwODIyMjI0ODI5WhcNMjUwODI5MjI0ODI5WjAYMRYwFAYD VQQDEw02OGE4ZjNiZC05ZWRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxyGnj7uuMAfbKfV8qUN6IiaTV+hjWjTNlNr/KtiTG8M+MWke2wfskuJBVrUt TCXRK78tNrd6rJ5UaV7u9nPm7zUHjD0hIGGngBiDLVXYbxZO/a5P0yGQLn2ru62X B1AVoTAEZcqWs4UotHLeAX02d6rVhczypixkAHgU2F/9Ns1mlcRJZ1mFm0lwa31A yKaEt39Mx95wS2zwvoV2a+e0ahV9QI3JjRv9RS06u8qjjlNhabgshX5etLbtQZuL K+ZytaN89sNJyZSGV5PvREFkWn+/TbsWhAabHpdS/juHSvDxTqyVMadtuAYPaqTP caNlPmZ+X+5pZ01ftFcmZkWnxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNMi/xsp lu4/RYEFWL13Q4srVEBRMB8GA1UdIwQYMBaAFAbSjEPq5D8fXaVsaiHmyrv8uI2+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI3OS8wRTM2MUJCNjlD MTUxMUVCOTk3QUJENTlDNEY5QUUwMi9CdEtNUS1ya1B4OWRwV3hxSWViS3VfeTRq YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0S01RLXJrUHg5ZHBXeHFJZWJLdV95NGpiNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI3OS8wRTM2MUJCNjlDMTUxMUVCOTk3QUJENTlDNEY5QUUwMi9CdEtNUS1ya1B4 OWRwV3hxSWViS3VfeTRqYjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaqGZnGoZnaDYj/psaDNR851kN3lS6l97nrNt5zIVIpyKYVR41Vr57 3wRTDMh39EvouSRG777yVNv4J4e5ScQW9Rnfd2tC5zWULclvRMHazXYHRFMZDQq+ 153CNiXa15m/H54fwkmW7Ld+xAsuJDdCGU0oiUpfr7xNsBpSkrEK9QnPYe5oanAu 3nxV4P/4llokHuZzvYdD3TyufdeDYs/hMAxW9c4kXwS+2R0mQSmq6a1+7Jcn12zc B1nvU1BiMR2bv9PIoFCGbiE3RkJ8FaKkj9jCe1P1gQjCMZyBaigTggge1bZgQh6E b8wIl89uwn+LyhKIIkfsj+ZPOta/zxjk -----END CERTIFICATE-----Generated at Sat Aug 23 19:06:20 2025 by rpki-client