$ rpki-client -vvf rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft File: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft (raw, json) Hash identifier: eadMumuDYv4lOxqLAVVSZlKX1iGmCbkY8ERyJ/+H2hI= Subject key identifier: 58:8C:75:D3:F9:F3:40:B3:7A:C3:E5:B8:24:37:4A:20:E1:9F:26:C7 Authority key identifier: 07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 Certificate issuer: /CN=A9129162/serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Certificate serial: 8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft Manifest number: 8A Signing time: Mon 11 Aug 2025 06:53:54 +0000 Manifest this update: Mon 11 Aug 2025 06:53:54 +0000 Manifest next update: Mon 18 Aug 2025 06:53:54 +0000 Files and hashes: 1: B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl (hash: kh2BR0CO7hYoA8Csofar4hpB5tdQ3TcTRAWjcMd6YH8=) 2: A5CE322CAD4311EF8552641BC4F9AE02.roa (hash: oXiSJMCySt2dFDYGEcN3qaUXeVsh5lk+krDNaZUgJ2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 06:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 142 (0x8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129162, serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734 Validity Not Before: Aug 11 06:53:54 2025 GMT Not After : Aug 18 06:53:54 2025 GMT Subject: CN=68999382-12f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:28:5c:43:ae:bf:b0:47:2e:d2:e1:82:6c:ab: 9b:27:df:03:cf:cf:f3:dd:49:b8:3a:d3:ad:33:d2: 10:19:c4:b6:5d:5e:1d:43:5f:bd:a1:1d:0b:2f:62: 20:39:41:89:ee:69:8c:01:2b:db:ff:20:7f:0e:92: 51:0d:dc:76:8d:7f:aa:c3:61:b9:e0:9d:ec:23:ac: 88:07:1a:bf:be:36:22:8a:7b:ea:9c:5c:07:1d:35: a2:33:35:e2:f4:3b:80:ed:bb:ce:8f:d8:d7:4a:0e: a8:5f:40:65:e1:51:2b:85:9e:99:a1:d0:30:d3:a5: d8:dc:51:cd:40:55:0b:a1:0d:c6:f8:86:11:86:fa: 00:b2:42:a9:05:c3:4f:1a:59:d2:9c:98:4f:a4:7f: c1:03:8b:61:76:69:43:18:a4:95:42:7b:6e:dc:a4: 2c:cb:d7:25:35:f3:7a:11:d7:22:18:5b:08:ad:0d: 8e:7f:23:8d:c2:6f:f8:a7:34:83:94:a7:08:78:43: 7f:9d:d3:59:f7:c2:a1:e0:bf:23:dc:e0:06:5e:5e: 1a:b8:90:d2:6f:48:cf:19:25:e3:f0:af:43:a0:b8: a0:ff:57:d7:9b:c6:73:ac:02:bb:a2:44:f0:dd:6e: 31:ca:37:18:a4:46:db:b7:fe:18:b5:a0:39:f2:10: 13:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8C:75:D3:F9:F3:40:B3:7A:C3:E5:B8:24:37:4A:20:E1:9F:26:C7 X509v3 Authority Key Identifier: keyid:07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:97:ed:e4:d8:63:2f:69:20:c8:05:4c:5a:69:f3:53:39:a7: 04:27:43:5d:40:83:3a:31:fb:80:87:88:c3:7a:e1:9b:58:40: b9:31:24:22:1a:89:82:11:7d:ac:97:14:1e:67:cc:e1:f6:f7: d9:60:bc:94:64:37:f7:34:81:3c:32:31:14:14:7d:b9:b7:c3: 16:8e:81:56:25:87:23:37:f4:b9:03:db:af:33:dd:a6:17:13: 94:c6:c3:40:0b:2f:d2:0d:39:89:46:e3:98:35:45:ac:68:2a: 07:34:b1:4c:39:57:75:5d:f9:05:37:d3:c4:91:87:b7:6b:22: 9f:63:dd:10:59:1c:ca:76:47:98:4d:11:44:6a:dc:5d:93:b5: 8c:43:94:66:be:82:18:e3:94:bc:d2:d0:3c:b1:ea:62:12:5e: 2d:e5:a1:9d:a6:fe:09:3a:8a:88:f4:87:20:90:b7:69:74:0e: 0a:41:f0:9a:0e:09:cf:69:5c:83:35:7a:bc:1f:fc:8c:2f:c4: e4:4a:96:a7:5d:22:1d:df:11:7a:6b:76:3b:b6:ad:b2:e4:b5: fe:bb:fe:78:d8:ba:01:e4:d6:42:cb:47:ba:b9:1f:ce:c8:c4: ab:57:78:a6:22:f0:36:1a:79:32:94:81:d0:f5:f8:a4:54:9f: c2:65:f7:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkxNjIxMTAvBgNVBAUTKDA3QTY4MUM5MUMzRTA1MTJEMzY4OUU5OUJDRTVCQzY2 NDA5MTY3MzQwHhcNMjUwODExMDY1MzU0WhcNMjUwODE4MDY1MzU0WjAYMRYwFAYD VQQDEw02ODk5OTM4Mi0xMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyyhcQ66/sEcu0uGCbKubJ98Dz8/z3Um4OtOtM9IQGcS2XV4dQ1+9oR0LL2Ig OUGJ7mmMASvb/yB/DpJRDdx2jX+qw2G54J3sI6yIBxq/vjYiinvqnFwHHTWiMzXi 9DuA7bvOj9jXSg6oX0Bl4VErhZ6ZodAw06XY3FHNQFULoQ3G+IYRhvoAskKpBcNP GlnSnJhPpH/BA4thdmlDGKSVQntu3KQsy9clNfN6EdciGFsIrQ2OfyONwm/4pzSD lKcIeEN/ndNZ98Kh4L8j3OAGXl4auJDSb0jPGSXj8K9DoLig/1fXm8ZzrAK7okTw 3W4xyjcYpEbbt/4YtaA58hATrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFiMddP5 80CzesPluCQ3SiDhnybHMB8GA1UdIwQYMBaAFAemgckcPgUS02iembzlvGZAkWc0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTE2Mi81QTM4MEQ2QUFE NDMxMUVGQUE4NkMzMUFDNEY5QUUwMi9CNmFCeVJ3LUJSTFRhSjZadk9XOFprQ1Ja elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2YUJ5UnctQlJMVGFKNlp2T1c4WmtDUlp6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OTE2Mi81QTM4MEQ2QUFENDMxMUVGQUE4NkMzMUFDNEY5QUUwMi9CNmFCeVJ3LUJS TFRhSjZadk9XOFprQ1JaelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1l+3k2GMvaSDIBUxaafNTOacEJ0NdQIM6MfuAh4jDeuGbWEC5MSQi GomCEX2slxQeZ8zh9vfZYLyUZDf3NIE8MjEUFH25t8MWjoFWJYcjN/S5A9uvM92m FxOUxsNACy/SDTmJRuOYNUWsaCoHNLFMOVd1XfkFN9PEkYe3ayKfY90QWRzKdkeY TRFEatxdk7WMQ5RmvoIY45S80tA8sepiEl4t5aGdpv4JOoqI9IcgkLdpdA4KQfCa DgnPaVyDNXq8H/yML8TkSpanXSId3xF6a3Y7tq2y5LX+u/542LoB5NZCy0e6uR/O yMSrV3imIvA2GnkylIHQ9fikVJ/CZfdI -----END CERTIFICATE-----Generated at Wed Aug 13 02:51:41 2025 by rpki-client