$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft File: bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft (raw, json) Hash identifier: iDKz4sLk0MXqIM8Fc0LZWlPrnPhYCfOgq8DvSvszcug= Subject key identifier: C5:1D:D0:1F:91:57:CA:1E:4C:FC:FC:3C:58:BF:41:0B:D3:E9:9E:94 Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91 Certificate issuer: /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91 Certificate serial: 01A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft Manifest number: 0199 Signing time: Sat 23 Aug 2025 03:34:08 +0000 Manifest this update: Sat 23 Aug 2025 03:34:08 +0000 Manifest next update: Sat 30 Aug 2025 03:34:08 +0000 Files and hashes: 1: bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl (hash: tQahfWmlH7PhkXbpn39evSee+xdokfkvmFNbhj0jIuM=) 2: 62A9A9AC240A11F0A6893962C4F9AE02.roa (hash: LvnWXi9L3u+fKG77QzH6WnEL9Cc/sS3Yn7M7dhZqrvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 419 (0x1a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F69, serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91 Validity Not Before: Aug 23 03:34:08 2025 GMT Not After : Aug 30 03:34:08 2025 GMT Subject: CN=68a936b0-f0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:b1:17:2a:21:70:40:df:bd:6b:98:84:91: 8f:74:57:b2:e8:d3:03:30:70:b9:9a:97:1d:8e:fd: 2a:70:80:ba:27:1a:59:8f:b2:cd:cf:07:5b:b7:21: e5:71:ba:b4:78:94:b2:cd:d0:71:04:a1:32:bb:32: a4:56:0e:b0:45:19:17:92:a2:90:2f:22:e7:45:0d: 2a:4a:ec:de:a4:34:ac:e4:2e:f6:f3:3a:1f:df:3b: 2e:8d:cc:94:fd:e4:18:ec:4d:12:fe:4b:88:ca:28: a7:5e:72:51:2e:7d:9b:9f:79:6b:e1:01:3d:65:1e: b5:65:9c:5b:bd:52:e5:be:4f:2e:ef:cb:83:e3:68: 22:01:a7:db:ce:74:c0:0c:b9:07:2a:4d:07:70:f7: 3e:4c:2f:fa:91:35:bc:f6:d1:ce:1f:75:58:d6:dd: 38:38:9f:21:e2:1e:cf:fa:50:00:c4:9b:77:f8:02: 96:f9:fd:34:65:e7:93:64:f0:1b:84:ee:1f:a3:70: 6d:d7:cf:3b:ba:2f:8e:63:c2:67:db:ef:e5:f3:d6: 4a:f4:90:1e:5e:19:9e:48:0c:e9:1e:42:72:34:8f: 32:f9:57:d3:d1:40:91:2a:57:a5:85:3f:b3:5f:ef: 1d:77:c9:73:68:65:a0:e7:2b:d5:be:6d:ce:a6:f5: ba:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1D:D0:1F:91:57:CA:1E:4C:FC:FC:3C:58:BF:41:0B:D3:E9:9E:94 X509v3 Authority Key Identifier: keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:42:f5:b3:bc:29:52:78:94:34:ff:96:40:93:59:e1:56:d9: b9:4b:d4:77:fe:77:45:ae:c0:66:3c:36:3f:df:20:b2:c0:60: 12:af:d1:f5:8f:2b:1b:1f:19:7e:86:02:96:c3:07:35:7e:ec: 01:c2:53:51:ca:32:4b:f9:1c:07:84:42:72:20:64:5b:95:d8: 88:b7:18:f5:0e:ad:0a:ad:dc:0d:9c:8a:9c:7a:e3:10:cd:98: 68:ad:ca:89:5f:f1:8f:98:d9:4a:3b:52:c2:10:c4:ec:0d:14: 25:d6:19:6e:66:34:cd:6b:b3:c0:22:9f:6d:bf:d6:17:77:05: 10:06:5d:8f:ad:36:0c:71:f0:0c:ee:d7:af:79:40:a6:d1:35: 04:8c:31:9f:da:af:24:91:4c:34:dc:57:0d:a5:8d:88:75:85: be:1c:76:4a:00:c5:d0:c6:ea:64:f0:c9:b0:5d:fa:a1:eb:22: 8a:79:60:3c:69:a9:6d:05:6f:39:95:b4:91:99:06:41:15:3d: 30:b9:72:3e:d2:01:0a:7a:6f:8b:25:6e:46:9d:2a:2f:fc:03: 51:03:2f:86:f9:2b:e2:e4:b9:07:e0:08:f0:6d:9c:fb:8a:af: 18:28:96:c3:64:62:87:db:b4:ec:3a:c0:64:50:da:ae:0d:d4: 15:fa:79:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGNjkxMTAvBgNVBAUTKDZFOTVBNjg5MjIwOTdFNzZDNERCMTI0N0VFQ0VFMUEz QjExRjhFOTEwHhcNMjUwODIzMDMzNDA4WhcNMjUwODMwMDMzNDA4WjAYMRYwFAYD VQQDEw02OGE5MzZiMC1mMGYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAycOxFyohcEDfvWuYhJGPdFey6NMDMHC5mpcdjv0qcIC6JxpZj7LNzwdbtyHl cbq0eJSyzdBxBKEyuzKkVg6wRRkXkqKQLyLnRQ0qSuzepDSs5C728zof3zsujcyU /eQY7E0S/kuIyiinXnJRLn2bn3lr4QE9ZR61ZZxbvVLlvk8u78uD42giAafbznTA DLkHKk0HcPc+TC/6kTW89tHOH3VY1t04OJ8h4h7P+lAAxJt3+AKW+f00ZeeTZPAb hO4fo3Bt1887ui+OY8Jn2+/l89ZK9JAeXhmeSAzpHkJyNI8y+VfT0UCRKlelhT+z X+8dd8lzaGWg5yvVvm3OpvW6swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMUd0B+R V8oeTPz8PFi/QQvT6Z6UMB8GA1UdIwQYMBaAFG6VpokiCX52xNsSR+7O4aOxH46R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEY2OS9EQ0Y1QzNEMjFB NUYxMUVFOUFBQUIzODZDNEY5QUUwMi9icFdtaVNJSmZuYkUyeEpIN3M3aG83RWZq cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwV21pU0lKZm5iRTJ4Skg3czdobzdFZmpwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEY2OS9EQ0Y1QzNEMjFBNUYxMUVFOUFBQUIzODZDNEY5QUUwMi9icFdtaVNJSmZu YkUyeEpIN3M3aG83RWZqcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMQvWzvClSeJQ0/5ZAk1nhVtm5S9R3/ndFrsBmPDY/3yCywGASr9H1 jysbHxl+hgKWwwc1fuwBwlNRyjJL+RwHhEJyIGRbldiItxj1Dq0KrdwNnIqceuMQ zZhorcqJX/GPmNlKO1LCEMTsDRQl1hluZjTNa7PAIp9tv9YXdwUQBl2PrTYMcfAM 7teveUCm0TUEjDGf2q8kkUw03FcNpY2IdYW+HHZKAMXQxupk8MmwXfqh6yKKeWA8 aaltBW85lbSRmQZBFT0wuXI+0gEKem+LJW5GnSov/ANRAy+G+Svi5LkH4AjwbZz7 iq8YKJbDZGKH27TsOsBkUNquDdQV+nnM -----END CERTIFICATE-----Generated at Sat Aug 23 21:36:38 2025 by rpki-client