$ rpki-client -vvf rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft File: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft (raw, json) Hash identifier: zZbVsUuIdY7VI1XM1sh/3FRZaBvh8HnvGv+p3R/GJWQ= Subject key identifier: BB:A3:50:D4:EE:10:07:35:60:1C:24:62:BF:7A:C5:37:10:78:32:6A Authority key identifier: 04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB Certificate issuer: /CN=A9196C96/serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB Certificate serial: 066D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft Manifest number: 0668 Signing time: Fri 22 Aug 2025 22:39:21 +0000 Manifest this update: Fri 22 Aug 2025 22:39:21 +0000 Manifest next update: Fri 29 Aug 2025 22:39:21 +0000 Files and hashes: 1: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl (hash: jkNWikiIruSnXjNRxVReUCtFTljpUohZHdHmOJfdPlM=) 2: D49D6040912311EB9DCD2A33C4F9AE02.roa (hash: aGdwS0nqIDPQmrDed9aL2d/6MVOmtEOC5VWnxIsYspE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196C96, serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB Validity Not Before: Aug 22 22:39:21 2025 GMT Not After : Aug 29 22:39:21 2025 GMT Subject: CN=68a8f199-28fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9d:60:a6:42:92:38:c3:b3:5c:0c:fb:45:55: 40:e9:31:85:f9:52:51:df:08:98:20:35:0a:b3:d4: 0d:a3:49:83:9d:95:12:8b:9a:a5:17:10:b5:7b:0b: f8:1e:cc:78:f4:a5:6a:6c:ce:88:66:5d:43:a6:bb: 8f:e9:79:a8:b2:eb:cb:75:48:1b:6e:13:8b:f2:49: 19:ea:6d:2a:f6:27:fb:30:b3:f2:f8:4f:88:b9:a8: 72:3d:3d:42:a6:43:a4:f9:55:54:9d:4d:55:81:7d: 3d:58:2d:de:7b:37:4d:4d:11:36:02:ce:85:a1:c8: 25:ac:d8:9c:85:b8:c3:70:7b:2a:6b:3d:64:fa:22: 72:39:ac:d9:ab:97:fe:ea:9b:1f:2a:94:4d:e8:8e: ad:e0:7a:76:93:28:3d:ae:bb:8d:46:14:36:a4:37: 7b:92:3d:b5:71:89:f6:65:cb:05:4c:88:f8:84:b6: 40:38:11:ae:b3:27:06:b7:4e:8d:c3:6b:e8:4b:bb: be:00:e2:9c:42:bd:26:90:6f:ed:cf:31:16:b7:39: ae:1a:ec:e7:25:11:c7:7b:6c:c8:07:3a:d2:c9:7f: e1:3a:7b:8b:b9:42:14:83:ff:d0:c1:65:f0:34:58: d1:df:c9:0c:53:68:31:dd:ec:df:53:a4:1f:30:f3: d9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A3:50:D4:EE:10:07:35:60:1C:24:62:BF:7A:C5:37:10:78:32:6A X509v3 Authority Key Identifier: keyid:04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:87:92:20:aa:4d:46:f1:39:c7:48:e6:14:22:a1:8a:b3:99: 4a:af:e5:b9:f3:9e:04:fc:50:e9:df:77:ee:75:9c:b5:e4:e2: fb:11:24:5c:05:95:7e:6e:28:42:3a:13:fb:da:43:68:06:e5: 49:51:ed:f7:c5:e6:f9:58:cd:24:7d:0b:87:44:59:88:85:83: 77:ca:06:52:c2:ee:11:62:e7:5d:96:16:83:0c:a8:a7:66:e2: ab:b9:98:15:28:db:5d:05:c1:42:e3:a2:c5:e8:b5:35:ea:d9: 7c:42:12:19:ed:a7:f4:df:2f:cd:64:ea:b1:1a:eb:02:e4:39: 49:0f:6a:1f:28:4f:76:ff:7c:cf:76:aa:7c:b3:96:89:b5:85: de:d7:91:aa:48:e0:18:18:ce:de:88:4d:c5:9b:75:9c:bc:7b: 22:79:91:be:24:54:6c:8f:e5:82:af:f9:71:a8:18:53:bb:f0: a6:b8:9a:f6:f4:ea:78:b3:46:4e:66:92:5a:8a:d7:79:ed:2d: 61:9a:54:c8:69:7c:c4:5b:ea:53:87:c8:6a:72:6f:54:50:65: 58:96:a6:79:f8:cb:8c:15:28:c9:39:bd:a8:df:ad:c6:21:f0: f4:aa:91:a6:bd:43:21:5e:a3:34:b3:46:58:7f:c4:31:8a:8e: 8c:1c:d1:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZDOTYxMTAvBgNVBAUTKDA0NjI3RENDOUI4MDg0MkQ0MzYzNzFDNENEQzczRDE5 QUI3RTVEQkIwHhcNMjUwODIyMjIzOTIxWhcNMjUwODI5MjIzOTIxWjAYMRYwFAYD VQQDEw02OGE4ZjE5OS0yOGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArZ1gpkKSOMOzXAz7RVVA6TGF+VJR3wiYIDUKs9QNo0mDnZUSi5qlFxC1ewv4 Hsx49KVqbM6IZl1DpruP6XmosuvLdUgbbhOL8kkZ6m0q9if7MLPy+E+IuahyPT1C pkOk+VVUnU1VgX09WC3eezdNTRE2As6FocglrNichbjDcHsqaz1k+iJyOazZq5f+ 6psfKpRN6I6t4Hp2kyg9rruNRhQ2pDd7kj21cYn2ZcsFTIj4hLZAOBGusycGt06N w2voS7u+AOKcQr0mkG/tzzEWtzmuGuznJRHHe2zIBzrSyX/hOnuLuUIUg//QwWXw NFjR38kMU2gx3ezfU6QfMPPZvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLujUNTu EAc1YBwkYr96xTcQeDJqMB8GA1UdIwQYMBaAFARifcybgIQtQ2NxxM3HPRmrfl27 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkM5Ni9BOEFFMEY5NDkw NDYxMUVCQkI4NEIyMjdDNEY5QUUwMi9CR0o5ekp1QWhDMURZM0hFemNjOUdhdC1Y YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JHSjl6SnVBaEMxRFkzSEV6Y2M5R2F0LVhicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkM5Ni9BOEFFMEY5NDkwNDYxMUVCQkI4NEIyMjdDNEY5QUUwMi9CR0o5ekp1QWhD MURZM0hFemNjOUdhdC1YYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2h5Igqk1G8TnHSOYUIqGKs5lKr+W5854E/FDp33fudZy15OL7ESRc BZV+bihCOhP72kNoBuVJUe33xeb5WM0kfQuHRFmIhYN3ygZSwu4RYuddlhaDDKin ZuKruZgVKNtdBcFC46LF6LU16tl8QhIZ7af03y/NZOqxGusC5DlJD2ofKE92/3zP dqp8s5aJtYXe15GqSOAYGM7eiE3Fm3WcvHsieZG+JFRsj+WCr/lxqBhTu/CmuJr2 9Op4s0ZOZpJaitd57S1hmlTIaXzEW+pTh8hqcm9UUGVYlqZ5+MuMFSjJOb2o363G IfD0qpGmvUMhXqM0s0ZYf8Qxio6MHNH3 -----END CERTIFICATE-----Generated at Sun Aug 24 01:01:24 2025 by rpki-client