$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft File: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft (raw, json) Hash identifier: q7CyhFneq9caMAodPVkF/I0zd5t3Tc6FCQWd2eUvxr4= Subject key identifier: C9:00:8A:0B:FE:00:42:4F:00:95:D3:1F:53:20:A8:38:FA:55:0F:31 Authority key identifier: F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD Certificate issuer: /CN=A91B0F3F/serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Certificate serial: 0A5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft Manifest number: 0A3D Signing time: Fri 22 Aug 2025 19:54:57 +0000 Manifest this update: Fri 22 Aug 2025 19:54:57 +0000 Manifest next update: Fri 29 Aug 2025 19:54:57 +0000 Files and hashes: 1: -Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl (hash: yggRIp+zA2oRd8XmLBC/4LI/vcjG59txfVOgk4YTk9U=) 2: 59E4B0A81B9211F0A5D50649C4F9AE02.roa (hash: 4uAphyYn6AbiifiDtaxCom6jwozyhzmoBVY1cw2irI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:54:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2652 (0xa5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B0F3F, serialNumber=F818FC988EC7032C3E2C6A48A55498AB7CD565FD Validity Not Before: Aug 22 19:54:57 2025 GMT Not After : Aug 29 19:54:57 2025 GMT Subject: CN=68a8cb11-a423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:c2:96:2d:71:06:66:0f:c1:17:08:23:b0: 81:fd:12:4d:c4:1e:a4:ba:b5:94:a6:fd:78:ee:a7: 4f:99:28:d4:63:d8:b0:1f:b5:58:ec:af:16:a3:b2: 5a:f6:f4:c7:1e:88:df:2e:08:db:a8:b0:71:11:63: ea:16:e7:b2:7b:32:1f:8b:52:0e:8b:76:88:f7:24: 30:ae:96:d0:b8:5d:da:08:9d:06:6d:85:a8:7d:28: 69:65:d1:16:f4:63:19:51:82:76:1e:c9:5c:f9:ea: fb:50:3f:0a:73:86:dd:7f:8c:de:a0:ed:37:32:1d: ed:6e:c4:0a:09:e5:e3:a2:8a:c1:31:a4:64:ca:b5: 28:43:3b:ed:43:b9:d7:3b:9e:6e:54:35:0b:32:d3: 3d:c3:87:f4:6a:fe:8d:48:77:fd:de:13:24:eb:b8: 74:70:14:39:4d:d8:5c:cf:cf:d8:1e:79:71:dc:9c: 09:cd:ac:95:ed:da:c5:9f:98:f8:7b:af:a3:78:83: 06:d3:ba:8c:76:cd:d5:b0:af:f4:20:1e:6a:33:3d: e0:b0:00:8c:73:85:24:ac:aa:45:4e:9d:75:7e:6e: 63:16:0a:67:2c:24:ed:3a:a5:a7:21:64:90:05:cf: 51:ee:46:c2:cf:6e:12:5a:a1:c5:dd:04:c1:1a:4a: a2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:00:8A:0B:FE:00:42:4F:00:95:D3:1F:53:20:A8:38:FA:55:0F:31 X509v3 Authority Key Identifier: keyid:F8:18:FC:98:8E:C7:03:2C:3E:2C:6A:48:A5:54:98:AB:7C:D5:65:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0F3F/09373AD678C211EABD772359C4F9AE02/-Bj8mI7HAyw-LGpIpVSYq3zVZf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:79:bf:af:9a:39:b2:5e:12:5c:cc:bb:6e:98:ae:2a:36:f7: 36:2f:2b:7d:80:42:e8:30:16:ca:39:75:1b:01:14:74:60:3b: 46:b2:18:d5:fa:a8:72:83:7a:9c:a8:9a:a9:da:05:d4:6f:61: 98:8f:4c:04:75:57:bc:6d:8b:57:ae:0d:fe:6e:59:a2:8c:a8: 09:8f:21:de:1a:3b:f0:29:3c:d2:5a:c7:7e:a0:89:19:bf:1c: c3:8e:cd:8c:0e:dd:de:47:7f:4f:fa:31:cd:1e:8f:db:ad:81: 88:97:f9:31:6b:ad:0e:22:36:f1:06:ad:1b:bb:24:ee:27:41: 8f:06:d4:52:9a:30:43:d4:9d:64:70:8d:9b:38:9b:c9:e9:31: 98:9a:e1:fd:7e:f2:b5:e2:a1:a5:71:b6:8c:a9:7f:ca:3d:ab: 5e:55:72:46:e8:3a:88:ff:36:b8:a9:95:ca:1f:21:de:f4:0b: b2:2f:a5:72:f6:87:a3:f1:ec:43:79:ff:de:02:de:1b:15:dd: 14:81:c5:64:d6:ed:e5:7c:1d:92:30:57:9d:8c:a6:09:46:dd: 24:91:04:07:a6:ae:8d:10:30:17:2a:13:c7:bb:85:9c:0b:af: 4b:5a:1a:b0:4f:35:3b:cd:53:5e:12:c7:1f:63:3f:62:24:29: ba:da:66:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICClwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjBGM0YxMTAvBgNVBAUTKEY4MThGQzk4OEVDNzAzMkMzRTJDNkE0OEE1NTQ5OEFC N0NENTY1RkQwHhcNMjUwODIyMTk1NDU3WhcNMjUwODI5MTk1NDU3WjAYMRYwFAYD VQQDEw02OGE4Y2IxMS1hNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAve/Cli1xBmYPwRcII7CB/RJNxB6kurWUpv147qdPmSjUY9iwH7VY7K8Wo7Ja 9vTHHojfLgjbqLBxEWPqFueyezIfi1IOi3aI9yQwrpbQuF3aCJ0GbYWofShpZdEW 9GMZUYJ2Hslc+er7UD8Kc4bdf4zeoO03Mh3tbsQKCeXjoorBMaRkyrUoQzvtQ7nX O55uVDULMtM9w4f0av6NSHf93hMk67h0cBQ5Tdhcz8/YHnlx3JwJzayV7drFn5j4 e6+jeIMG07qMds3VsK/0IB5qMz3gsACMc4UkrKpFTp11fm5jFgpnLCTtOqWnIWSQ Bc9R7kbCz24SWqHF3QTBGkqi5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMkAigv+ AEJPAJXTH1MgqDj6VQ8xMB8GA1UdIwQYMBaAFPgY/JiOxwMsPixqSKVUmKt81WX9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEYzRi8wOTM3M0FENjc4 QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5dy1MR3BJcFZTWXEzelZa ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1CajhtSTdIQXl3LUxHcElwVlNZcTN6VlpmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MEYzRi8wOTM3M0FENjc4QzIxMUVBQkQ3NzIzNTlDNEY5QUUwMi8tQmo4bUk3SEF5 dy1MR3BJcFZTWXEzelZaZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBueb+vmjmyXhJczLtumK4qNvc2Lyt9gELoMBbKOXUbARR0YDtGshjV +qhyg3qcqJqp2gXUb2GYj0wEdVe8bYtXrg3+blmijKgJjyHeGjvwKTzSWsd+oIkZ vxzDjs2MDt3eR39P+jHNHo/brYGIl/kxa60OIjbxBq0buyTuJ0GPBtRSmjBD1J1k cI2bOJvJ6TGYmuH9fvK14qGlcbaMqX/KPateVXJG6DqI/za4qZXKHyHe9AuyL6Vy 9oej8exDef/eAt4bFd0UgcVk1u3lfB2SMFedjKYJRt0kkQQHpq6NEDAXKhPHu4Wc C69LWhqwTzU7zVNeEscfYz9iJCm62mab -----END CERTIFICATE-----Generated at Sat Aug 23 09:33:11 2025 by rpki-client