$ rpki-client -vvf rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft File: bu53G7POfpjbOWDE2C90Kiz36Ek.mft (raw, json) Hash identifier: D0eSaupFxfL/JZtpd8OEFKyWUFrJ5Y0rIDDC79LCJfM= Subject key identifier: EE:4C:F0:6F:28:65:11:07:5C:42:ED:D4:8F:A9:83:81:90:6D:EA:B5 Authority key identifier: 6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49 Certificate issuer: /CN=A9118827/serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849 Certificate serial: 0504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft Manifest number: 0500 Signing time: Sat 09 Aug 2025 00:07:25 +0000 Manifest this update: Sat 09 Aug 2025 00:07:24 +0000 Manifest next update: Sat 16 Aug 2025 00:07:24 +0000 Files and hashes: 1: bu53G7POfpjbOWDE2C90Kiz36Ek.crl (hash: ajetJyhxZnwk2Rcgoa8qin/dCPsl93e7fe72UbcA4yQ=) 2: 95D9A9461BEC11EC97B39812C4F9AE02.roa (hash: O7MsLUw+gaoXTG9KiMvLQn/bjyCnjO8H09gMJ3FbG7s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1284 (0x504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9118827, serialNumber=6EEE771BB3CE7E98DB3960C4D82F742A2CF7E849 Validity Not Before: Aug 9 00:07:24 2025 GMT Not After : Aug 16 00:07:24 2025 GMT Subject: CN=6896913c-d58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d2:f9:06:9a:08:c4:b2:5e:38:c9:be:0d:bb: 39:b7:cf:be:10:18:02:8c:ba:09:49:08:20:9e:b7: f2:79:99:27:c0:17:7d:84:a4:db:3f:e4:0b:93:e5: cf:95:8c:ee:9a:19:21:02:4e:19:83:99:07:da:3d: e9:7d:bd:ea:7b:03:ae:e0:ba:c4:c4:ed:cc:52:6e: c0:16:a9:db:35:00:23:33:e1:2d:43:a7:12:7b:db: a3:bc:a3:04:de:02:94:cb:de:dc:0d:00:06:63:da: 7d:dd:17:4e:78:b2:a0:02:d5:47:01:70:2e:c8:d2: 75:8d:3a:20:90:86:f7:48:14:6b:99:73:b2:96:ed: d8:06:cc:f3:6d:1c:15:02:fe:35:c6:27:73:b3:a5: ba:ad:b1:cc:7e:fa:fb:ab:39:b7:cf:14:ae:10:4b: ac:9d:41:57:78:87:e0:eb:8a:f3:5f:f0:33:15:1a: 8e:5e:4e:36:f1:99:67:52:e5:4a:e6:32:61:a7:57: 35:26:11:cf:7f:b0:21:c7:6f:6a:41:24:91:b5:a8: ca:93:6c:d6:e3:6c:6d:c6:2e:0f:09:26:af:f2:42: b0:3d:8a:35:e5:8c:32:8f:7d:1a:57:79:e0:c3:56: d8:a2:ff:79:b2:66:a6:e8:8c:b0:83:9f:b4:c1:6c: d2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4C:F0:6F:28:65:11:07:5C:42:ED:D4:8F:A9:83:81:90:6D:EA:B5 X509v3 Authority Key Identifier: keyid:6E:EE:77:1B:B3:CE:7E:98:DB:39:60:C4:D8:2F:74:2A:2C:F7:E8:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bu53G7POfpjbOWDE2C90Kiz36Ek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118827/3C7CB4501BE811ECBBA65B50C4F9AE02/bu53G7POfpjbOWDE2C90Kiz36Ek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:61:17:33:bc:52:a0:bb:50:50:b3:0a:99:16:f3:d9:df:6b: 24:81:55:78:f7:43:23:67:f3:34:d5:c3:c6:e5:a7:01:5e:5b: cc:98:b0:3c:cf:fe:3f:bf:5a:15:95:a8:9e:e7:47:d5:73:2b: 8d:48:c0:be:51:32:8d:a6:8a:ca:0b:8a:b5:21:93:c2:23:47: 3d:46:83:df:69:04:f4:77:cc:2c:a9:8d:8d:fb:ca:6c:e4:73: b8:94:8e:c2:72:1b:83:44:68:a4:d8:08:93:72:01:01:c9:82: 0b:01:c9:33:52:73:6f:4d:1e:ec:74:95:00:6c:56:ba:e8:44: 39:49:2c:fa:58:1a:4e:bd:62:29:e5:89:1d:ab:ca:b7:3e:77: 6e:1e:ee:4d:16:7d:3b:b9:2e:27:43:cf:01:97:88:5e:f4:4f: 1c:b2:a9:ac:88:ed:ab:f4:f2:b8:5f:64:19:53:a1:5d:59:59: d8:68:bc:bb:84:bf:12:ea:11:42:41:8f:91:9a:e8:9f:a2:a8: e2:80:7c:fc:d4:ea:84:bb:61:fe:ee:3f:65:ce:5d:6b:10:2d: 09:5e:5c:cf:78:79:dd:ba:d7:34:3d:07:83:79:8c:cf:65:64: 2c:bb:d9:8d:d7:22:1d:29:5d:7c:8d:03:06:71:d8:42:07:ea: 3a:34:68:4b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg4MjcxMTAvBgNVBAUTKDZFRUU3NzFCQjNDRTdFOThEQjM5NjBDNEQ4MkY3NDJB MkNGN0U4NDkwHhcNMjUwODA5MDAwNzI0WhcNMjUwODE2MDAwNzI0WjAYMRYwFAYD VQQDEw02ODk2OTEzYy1kNThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NL5BpoIxLJeOMm+Dbs5t8++EBgCjLoJSQggnrfyeZknwBd9hKTbP+QLk+XP lYzumhkhAk4Zg5kH2j3pfb3qewOu4LrExO3MUm7AFqnbNQAjM+EtQ6cSe9ujvKME 3gKUy97cDQAGY9p93RdOeLKgAtVHAXAuyNJ1jTogkIb3SBRrmXOylu3YBszzbRwV Av41xidzs6W6rbHMfvr7qzm3zxSuEEusnUFXeIfg64rzX/AzFRqOXk428ZlnUuVK 5jJhp1c1JhHPf7Ahx29qQSSRtajKk2zW42xtxi4PCSav8kKwPYo15Ywyj30aV3ng w1bYov95smam6Iywg5+0wWzSJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO5M8G8o ZREHXELt1I+pg4GQbeq1MB8GA1UdIwQYMBaAFG7udxuzzn6Y2zlgxNgvdCos9+hJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODgyNy8zQzdDQjQ1MDFC RTgxMUVDQkJBNjVCNTBDNEY5QUUwMi9idTUzRzdQT2ZwamJPV0RFMkM5MEtpejM2 RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J1NTNHN1BPZnBqYk9XREUyQzkwS2l6MzZFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx ODgyNy8zQzdDQjQ1MDFCRTgxMUVDQkJBNjVCNTBDNEY5QUUwMi9idTUzRzdQT2Zw amJPV0RFMkM5MEtpejM2RWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqYRczvFKgu1BQswqZFvPZ32skgVV490MjZ/M01cPG5acBXlvMmLA8 z/4/v1oVlaie50fVcyuNSMC+UTKNporKC4q1IZPCI0c9RoPfaQT0d8wsqY2N+8ps 5HO4lI7CchuDRGik2AiTcgEByYILAckzUnNvTR7sdJUAbFa66EQ5SSz6WBpOvWIp 5Ykdq8q3PnduHu5NFn07uS4nQ88Bl4he9E8csqmsiO2r9PK4X2QZU6FdWVnYaLy7 hL8S6hFCQY+RmuifoqjigHz81OqEu2H+7j9lzl1rEC0JXlzPeHndutc0PQeDeYzP ZWQsu9mN1yIdKV18jQMGcdhCB+o6NGhL -----END CERTIFICATE-----Generated at Sat Aug 9 22:41:59 2025 by rpki-client