$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft File: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json) Hash identifier: I8Aaka60+8qKI7BgDvkQ+/KvTYEKGzdRAHDDWPH1kBI= Subject key identifier: 6D:B0:E1:3E:EB:70:D4:43:D3:68:9B:68:C5:D2:90:47:C4:29:68:5D Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 Certificate issuer: /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Certificate serial: 01B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft Manifest number: 01AF Signing time: Sat 09 Aug 2025 03:31:08 +0000 Manifest this update: Sat 09 Aug 2025 03:31:07 +0000 Manifest next update: Sat 16 Aug 2025 03:31:07 +0000 Files and hashes: 1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: 8392pLea9BQV2S7pgFK7rLJWGpf1VTacUncBOOYetAA=) 2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: 5VwQvP2fVpjZvZxgLpSBhfWvfSymTIgG5SpcIoI9Jnk=) 3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: OJOp4QsqdIdHyogZJwwwl2CA1RHQVKJeYLhatS2OCss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 437 (0x1b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Validity Not Before: Aug 9 03:31:07 2025 GMT Not After : Aug 16 03:31:07 2025 GMT Subject: CN=6896c0fc-670e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:6f:fd:59:e5:a4:5c:f5:ef:94:9c:a5:5a: ec:2e:02:c8:4d:ba:72:23:b9:26:c3:d3:e7:4d:c5: ba:52:0d:7d:4d:a5:d2:3a:d5:bf:77:e7:63:3b:8b: c6:d1:86:d0:e9:f5:b8:fa:0e:d7:e7:c2:a1:8c:6d: db:60:1a:d1:7f:e6:f5:54:f2:6b:6b:e8:01:13:4d: 4e:3e:41:d1:af:24:86:bb:d4:ea:43:ea:cb:8c:9d: 84:f5:3c:61:0f:a6:68:77:36:39:77:33:5b:b9:55: a0:22:58:31:7c:b1:d9:17:20:76:69:78:67:2c:3c: 90:a4:88:02:40:a6:bd:86:ff:31:8b:eb:a4:b4:13: 10:6e:ba:c0:bc:32:49:81:95:9b:52:08:97:32:5c: 82:1b:1f:22:29:cd:36:5b:9c:bd:4d:ee:af:97:47: ef:45:1c:10:f6:aa:81:51:7d:58:73:c4:e6:cb:2b: 99:4a:93:14:f6:5a:2f:cd:7a:2f:a2:1b:6e:76:ee: 08:f5:71:3e:a7:58:2f:27:21:de:58:cb:9e:1c:2a: cd:ab:2d:03:d4:db:44:cc:1c:11:70:d7:40:ce:49: 10:3f:33:9b:00:8c:1f:eb:54:2b:c2:f4:33:04:db: 46:a1:ce:4e:f2:e3:77:d9:e4:19:89:be:fc:98:36: fc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B0:E1:3E:EB:70:D4:43:D3:68:9B:68:C5:D2:90:47:C4:29:68:5D X509v3 Authority Key Identifier: keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:bf:8f:dd:c4:1e:d7:c6:fa:94:c5:b6:46:b1:26:ce:07:57: 59:24:2f:b2:02:e3:48:7b:81:ea:8e:48:0f:88:5c:a1:92:40: 3b:d2:f0:d5:16:8c:1b:34:bc:5a:fe:2e:d6:8a:9d:c6:3c:9c: 40:4c:01:02:01:8a:e9:4e:b0:18:51:67:58:7c:cf:b1:c6:ec: 06:13:2a:11:67:51:ae:9c:be:df:06:9d:39:f9:aa:25:5c:1b: 32:fd:69:2a:97:e6:99:ad:3b:25:95:f9:58:6c:b5:85:b4:22: dc:02:c5:bc:7c:24:8b:e4:89:ef:54:27:f4:4e:7a:3d:71:ea: a4:09:f7:64:b0:07:27:ef:ae:4c:ea:45:b8:cc:07:b0:63:b1: 64:d9:f0:2d:af:44:c2:1a:57:84:80:01:36:4a:0f:30:7a:20: c7:f8:fc:43:bc:b3:23:b1:9c:8d:fe:22:f3:8a:5f:8a:7a:da: 1d:2f:fe:01:88:8b:90:05:20:bb:8f:af:1f:b1:f0:7f:42:c9: a0:55:a4:61:45:4b:19:2e:f2:03:9a:0a:47:b8:ff:6e:86:3f: df:1d:c9:92:22:84:8a:50:02:6c:e8:b2:a8:a1:7b:b1:ef:65: 12:20:d4:42:d3:5f:04:b6:dc:e9:9d:6b:d4:c5:92:21:76:23: 32:40:a9:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZCN0MxMTAvBgNVBAUTKDA0RjA3NEEwQkE4NzgwNUM1MEZDNzk5M0Q0MDQxMEI4 NEExMUQyRjYwHhcNMjUwODA5MDMzMTA3WhcNMjUwODE2MDMzMTA3WjAYMRYwFAYD VQQDEw02ODk2YzBmYy02NzBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5Nv/VnlpFz175ScpVrsLgLITbpyI7kmw9PnTcW6Ug19TaXSOtW/d+djO4vG 0YbQ6fW4+g7X58KhjG3bYBrRf+b1VPJra+gBE01OPkHRrySGu9TqQ+rLjJ2E9Txh D6ZodzY5dzNbuVWgIlgxfLHZFyB2aXhnLDyQpIgCQKa9hv8xi+uktBMQbrrAvDJJ gZWbUgiXMlyCGx8iKc02W5y9Te6vl0fvRRwQ9qqBUX1Yc8TmyyuZSpMU9lovzXov ohtudu4I9XE+p1gvJyHeWMueHCrNqy0D1NtEzBwRcNdAzkkQPzObAIwf61QrwvQz BNtGoc5O8uN32eQZib78mDb8ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2w4T7r cNRD02ibaMXSkEfEKWhdMB8GA1UdIwQYMBaAFATwdKC6h4BcUPx5k9QEELhKEdL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkI3Qy81MUE5NDQ1QURG ODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdGeFFfSG1UMUFRUXVFb1Iw dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JQQjBvTHFIZ0Z4UV9IbVQxQVFRdUVvUjB2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkI3Qy81MUE5NDQ1QURGODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdG eFFfSG1UMUFRUXVFb1IwdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpv4/dxB7XxvqUxbZGsSbOB1dZJC+yAuNIe4HqjkgPiFyhkkA70vDV FowbNLxa/i7Wip3GPJxATAECAYrpTrAYUWdYfM+xxuwGEyoRZ1GunL7fBp05+aol XBsy/Wkql+aZrTsllflYbLWFtCLcAsW8fCSL5InvVCf0Tno9ceqkCfdksAcn765M 6kW4zAewY7Fk2fAtr0TCGleEgAE2Sg8weiDH+PxDvLMjsZyN/iLzil+KetodL/4B iIuQBSC7j68fsfB/QsmgVaRhRUsZLvIDmgpHuP9uhj/fHcmSIoSKUAJs6LKooXux 72USINRC018EttzpnWvUxZIhdiMyQKku -----END CERTIFICATE-----Generated at Sun Aug 10 05:41:52 2025 by rpki-client