$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft File: BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft (raw, json) Hash identifier: jP/2uME0w6L7mD9OJ98hXymHoL1vEgEojwOC3DEBC3A= Subject key identifier: 6B:1C:EB:A1:A7:23:9B:AC:AF:FC:61:1F:C7:E5:7A:C6:8C:C7:74:BE Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Certificate serial: 0838 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft Manifest number: 082D Signing time: Fri 22 Aug 2025 20:57:12 +0000 Manifest this update: Fri 22 Aug 2025 20:57:11 +0000 Manifest next update: Fri 29 Aug 2025 20:57:11 +0000 Files and hashes: 1: BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl (hash: ex0mVs51xGahaRTGF8K2jsXG5TDPcTdMLpDbSHqqh0E=) 2: 02F863F6C09211EC8950E57AC4F9AE02.roa (hash: YNUo90dPfw7aNa6aT24Mb69b4ZpufKscErkIIX/bwoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2104 (0x838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4AA0, serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Validity Not Before: Aug 22 20:57:11 2025 GMT Not After : Aug 29 20:57:11 2025 GMT Subject: CN=68a8d9a7-289a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3a:f7:28:12:d8:0e:76:01:85:18:53:67:af: be:c2:83:c9:36:65:f3:9e:89:fa:7e:98:aa:e7:ea: 52:ae:8c:43:24:e4:0d:fe:2d:48:f2:60:12:36:30: ec:14:20:49:31:6f:36:da:6b:07:2c:bc:91:89:2f: 73:75:3f:cc:5f:db:8b:3d:f6:96:08:61:46:eb:f2: 21:97:2f:e7:1e:02:ec:fc:14:52:51:ca:a7:fa:4c: 29:ac:7b:df:71:44:1a:ab:52:d5:e2:eb:29:a1:7a: aa:7d:6b:92:a0:c9:a7:6e:a6:89:26:8e:aa:54:e4: d0:5b:77:9f:6b:77:14:28:ca:61:3e:99:fe:d7:1d: cc:a6:75:75:44:18:4a:0d:3a:06:c4:6a:c3:44:13: 8c:b0:15:8d:6f:c2:f9:d1:6e:92:22:b2:a2:e2:10: f9:18:f1:b7:b3:e8:2b:15:a4:65:2f:2e:89:ff:c8: 28:8e:b0:7d:37:76:69:94:72:1f:6e:62:dd:e9:47: 6a:f1:b8:9e:8e:2d:5e:de:59:d3:33:22:a7:88:a2: cb:e6:68:8e:4e:48:02:68:c1:92:fb:dc:f1:f1:dd: 64:d3:ac:cb:7d:d6:ff:34:90:89:10:2e:2d:45:32: 5d:17:aa:ae:b5:51:01:0b:3f:39:de:65:ea:af:f9: db:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1C:EB:A1:A7:23:9B:AC:AF:FC:61:1F:C7:E5:7A:C6:8C:C7:74:BE X509v3 Authority Key Identifier: keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ef:27:ba:66:9e:57:21:ff:11:52:00:bf:93:b2:a0:d8:57: 95:be:a1:00:f0:5a:7a:d9:76:f5:a1:01:ac:80:c4:17:47:cc: 12:b8:83:1e:73:bf:fd:55:b4:e6:a7:e2:76:bf:52:2d:d7:f1: 8e:14:34:13:89:18:bf:62:c0:ac:9f:a3:ef:3d:54:8a:5f:37: e5:08:b0:fc:76:2c:df:b6:1a:1d:3f:19:98:ad:07:14:3c:cf: b6:cd:d5:82:28:b3:49:07:02:68:b6:90:af:01:c6:09:ca:59: 36:40:99:4d:f8:7b:ec:ea:c0:5c:c0:b4:07:71:31:87:4f:b6: 33:0d:2b:a1:42:f0:1f:d9:72:ca:ad:ae:ed:5f:4d:9c:c3:47: 00:65:ae:ce:fb:e4:63:0f:b5:18:86:0f:07:c1:3c:63:d2:55: 2a:03:c5:93:1d:f9:0c:75:e1:2c:e9:0f:85:6b:7c:69:e1:00: 52:cb:21:ad:36:2b:50:83:a6:e3:6f:4d:82:50:c8:ec:bf:30: 80:cd:38:4f:0c:89:cc:7d:1b:c0:0c:02:03:d4:1b:77:00:61: 7d:7c:42:ee:a1:d2:1d:c5:bd:20:81:58:7c:a6:51:a5:c9:78: aa:c8:52:21:fa:ce:a8:81:bb:6d:2d:ed:4f:81:f6:66:96:7c: e7:5e:a1:03 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRBQTAxMTAvBgNVBAUTKDA0Q0Y1N0YyQTdGRkNBNzJDMDc0NjhBOEM2RDVGMjQ1 MTdGRjQ2QjkwHhcNMjUwODIyMjA1NzExWhcNMjUwODI5MjA1NzExWjAYMRYwFAYD VQQDEw02OGE4ZDlhNy0yODlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzr3KBLYDnYBhRhTZ6++woPJNmXznon6fpiq5+pSroxDJOQN/i1I8mASNjDs FCBJMW822msHLLyRiS9zdT/MX9uLPfaWCGFG6/Ihly/nHgLs/BRSUcqn+kwprHvf cUQaq1LV4uspoXqqfWuSoMmnbqaJJo6qVOTQW3efa3cUKMphPpn+1x3MpnV1RBhK DToGxGrDRBOMsBWNb8L50W6SIrKi4hD5GPG3s+grFaRlLy6J/8gojrB9N3ZplHIf bmLd6Udq8bieji1e3lnTMyKniKLL5miOTkgCaMGS+9zx8d1k06zLfdb/NJCJEC4t RTJdF6qutVEBCz853mXqr/nbSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsc66Gn I5usr/xhH8flesaMx3S+MB8GA1UdIwQYMBaAFATPV/Kn/8pywHRoqMbV8kUX/0a5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEFBMC8xMDQxRTVFQUUy QzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3luTEFkR2lveHRYeVJSZl9S cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JNOVg4cWZfeW5MQWRHaW94dFh5UlJmX1Jyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEFBMC8xMDQxRTVFQUUyQzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3lu TEFkR2lveHRYeVJSZl9ScmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCA7ye6Zp5XIf8RUgC/k7Kg2FeVvqEA8Fp62Xb1oQGsgMQXR8wSuIMe c7/9VbTmp+J2v1It1/GOFDQTiRi/YsCsn6PvPVSKXzflCLD8dizfthodPxmYrQcU PM+2zdWCKLNJBwJotpCvAcYJylk2QJlN+Hvs6sBcwLQHcTGHT7YzDSuhQvAf2XLK ra7tX02cw0cAZa7O++RjD7UYhg8HwTxj0lUqA8WTHfkMdeEs6Q+Fa3xp4QBSyyGt NitQg6bjb02CUMjsvzCAzThPDInMfRvADAID1Bt3AGF9fELuodIdxb0ggVh8plGl yXiqyFIh+s6ogbttLe1PgfZmlnznXqED -----END CERTIFICATE-----Generated at Sat Aug 23 16:03:44 2025 by rpki-client