$ rpki-client -vvf rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft File: Bst2YhlvZE7eydz72HmbjHPjlwk.mft (raw, json) Hash identifier: suyhe5aMNzebmCK8GvKZ+Fc1yghDpIP63XW/NUkvbWg= Subject key identifier: 56:A8:F4:07:93:6C:E5:7B:C0:31:69:C3:6E:6E:AA:5A:82:F8:15:D5 Authority key identifier: 06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 Certificate issuer: /CN=A9127C93/serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Certificate serial: 020E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft Manifest number: 0208 Signing time: Sat 09 Aug 2025 02:40:08 +0000 Manifest this update: Sat 09 Aug 2025 02:40:07 +0000 Manifest next update: Sat 16 Aug 2025 02:40:07 +0000 Files and hashes: 1: Bst2YhlvZE7eydz72HmbjHPjlwk.crl (hash: RHn9eyyeaDUcgsJglEczp776yf/2H5n2iM29gXcCFlQ=) 2: 2965791E5F4011ED9361C246C4F9AE02.roa (hash: giH1vIhIIPvv5hJDOK02Raj/lgCr3oz3hTTRlbexHIs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 526 (0x20e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9127C93, serialNumber=06CB7662196F644EDEC9DCFBD8799B8C73E39709 Validity Not Before: Aug 9 02:40:07 2025 GMT Not After : Aug 16 02:40:07 2025 GMT Subject: CN=6896b508-fa16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:54:6d:1a:ff:45:5e:aa:3e:ab:e9:7d:73:70: 71:69:10:c1:ea:35:0b:e2:bb:c6:52:4f:9c:56:2e: 39:de:f0:38:03:ba:42:a9:ed:c5:a6:b7:05:f0:40: cf:e2:0a:14:39:b2:aa:8f:b6:91:fe:00:82:6e:2b: dd:d4:c5:20:88:0f:95:8a:a0:d0:cf:8e:05:ca:b4: fa:dd:d9:95:8f:17:4f:df:8c:ae:15:43:bd:80:3e: 27:0a:97:11:29:dd:29:b3:19:8c:f4:42:26:87:69: 01:78:f7:ee:9d:4b:10:9f:23:bc:51:4f:6a:8f:0c: d9:5d:dc:5d:53:d9:5a:bc:da:0f:f7:4b:b4:2b:e6: f0:c7:0b:82:18:f8:13:7e:64:f3:d0:8a:58:3f:e1: ac:c9:ac:34:d9:bd:12:ee:f6:24:34:6e:f1:fe:2a: ec:2d:12:19:5c:df:87:06:9f:d1:a4:31:d2:f4:39: 46:07:69:11:1e:03:89:f2:09:0c:84:8c:32:31:77: b5:84:68:ad:15:a3:90:f4:6b:2a:29:59:d0:cd:57: a3:06:9b:76:03:ad:c9:ce:45:9a:f5:5e:45:b2:32: 6e:17:2d:31:63:41:4e:87:3c:ce:bd:29:1d:d6:1f: 3f:dd:d0:6d:02:0c:df:4a:34:fc:fb:1c:93:24:64: 61:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A8:F4:07:93:6C:E5:7B:C0:31:69:C3:6E:6E:AA:5A:82:F8:15:D5 X509v3 Authority Key Identifier: keyid:06:CB:76:62:19:6F:64:4E:DE:C9:DC:FB:D8:79:9B:8C:73:E3:97:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bst2YhlvZE7eydz72HmbjHPjlwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127C93/4021A4E65F2411EDB80C1921C4F9AE02/Bst2YhlvZE7eydz72HmbjHPjlwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:63:37:b6:dc:cc:fd:dd:24:f3:35:d2:73:f4:6c:8f:75:9e: e8:65:71:da:ec:cc:54:7b:6e:c7:3a:86:71:aa:ef:9c:23:62: 94:13:64:a1:f8:c8:5a:89:a0:c5:2b:1c:17:ff:53:42:92:10: 61:a7:36:d1:01:c0:ef:55:50:ad:f0:45:e6:29:30:75:86:39: 45:c7:79:55:2c:84:b1:6c:b8:e3:25:1d:f2:40:9d:27:c5:2a: 31:3d:1d:1d:2f:b4:d4:ab:de:69:b0:ba:ca:2a:9c:8f:e8:64: 1d:b9:c3:19:c2:ce:5b:0c:17:17:b8:db:1b:15:20:05:eb:5a: a0:d9:ac:d5:77:44:c2:69:2f:47:a4:d5:8e:39:fe:df:ee:27: f5:63:a7:a5:66:ec:4f:62:b0:22:6d:dc:cc:c8:60:97:56:cc: 39:28:c9:ca:ec:dc:72:6f:eb:f1:cd:fd:30:bb:89:96:44:81: 7a:17:ea:b9:d4:b7:a8:d0:b3:8e:64:80:bb:a1:68:d6:59:6b: 1b:6e:f5:1c:a0:29:c1:9f:36:b1:fc:5c:03:f5:a7:6c:44:ed: 42:53:16:ce:3c:28:8f:13:04:71:fc:77:b4:32:1e:e1:ec:7f: 23:ac:d3:63:07:ba:20:72:b8:e6:84:88:36:00:84:46:4d:e8: 09:a0:c5:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjdDOTMxMTAvBgNVBAUTKDA2Q0I3NjYyMTk2RjY0NEVERUM5RENGQkQ4Nzk5QjhD NzNFMzk3MDkwHhcNMjUwODA5MDI0MDA3WhcNMjUwODE2MDI0MDA3WjAYMRYwFAYD VQQDEw02ODk2YjUwOC1mYTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3FRtGv9FXqo+q+l9c3BxaRDB6jUL4rvGUk+cVi453vA4A7pCqe3FprcF8EDP 4goUObKqj7aR/gCCbivd1MUgiA+ViqDQz44FyrT63dmVjxdP34yuFUO9gD4nCpcR Kd0psxmM9EImh2kBePfunUsQnyO8UU9qjwzZXdxdU9lavNoP90u0K+bwxwuCGPgT fmTz0IpYP+Gsyaw02b0S7vYkNG7x/irsLRIZXN+HBp/RpDHS9DlGB2kRHgOJ8gkM hIwyMXe1hGitFaOQ9GsqKVnQzVejBpt2A63JzkWa9V5FsjJuFy0xY0FOhzzOvSkd 1h8/3dBtAgzfSjT8+xyTJGRhWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFao9AeT bOV7wDFpw25uqlqC+BXVMB8GA1UdIwQYMBaAFAbLdmIZb2RO3snc+9h5m4xz45cJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyN0M5My80MDIxQTRFNjVG MjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpFN2V5ZHo3MkhtYmpIUGps d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JzdDJZaGx2WkU3ZXlkejcySG1iakhQamx3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy N0M5My80MDIxQTRFNjVGMjQxMUVEQjgwQzE5MjFDNEY5QUUwMi9Cc3QyWWhsdlpF N2V5ZHo3MkhtYmpIUGpsd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSYze23Mz93STzNdJz9GyPdZ7oZXHa7MxUe27HOoZxqu+cI2KUE2Sh +MhaiaDFKxwX/1NCkhBhpzbRAcDvVVCt8EXmKTB1hjlFx3lVLISxbLjjJR3yQJ0n xSoxPR0dL7TUq95psLrKKpyP6GQducMZws5bDBcXuNsbFSAF61qg2azVd0TCaS9H pNWOOf7f7if1Y6elZuxPYrAibdzMyGCXVsw5KMnK7Nxyb+vxzf0wu4mWRIF6F+q5 1Leo0LOOZIC7oWjWWWsbbvUcoCnBnzax/FwD9adsRO1CUxbOPCiPEwRx/He0Mh7h 7H8jrNNjB7ogcrjmhIg2AIRGTegJoMV0 -----END CERTIFICATE-----Generated at Mon Aug 11 02:04:37 2025 by rpki-client