$ rpki-client -vvf rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft File: bCx8FCiea7W3J1sapr_foCJ7kIY.mft (raw, json) Hash identifier: RH4zJ/CK7rCIhtUW0d+9febz8AiVN1grX+/FT8Z3a3g= Subject key identifier: A2:71:B6:2E:B6:2E:35:BD:BE:42:B4:A0:75:5D:7D:59:75:24:83:65 Authority key identifier: 6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 Certificate issuer: /CN=A913120A/serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Certificate serial: B7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft Manifest number: AA Signing time: Thu 07 Aug 2025 06:54:29 +0000 Manifest this update: Thu 07 Aug 2025 06:54:28 +0000 Manifest next update: Thu 14 Aug 2025 06:54:28 +0000 Files and hashes: 1: bCx8FCiea7W3J1sapr_foCJ7kIY.crl (hash: pujHagaZe9JpqyhhhYlNV3b0Z/4pS2c1uQtQQXMMLME=) 2: 63A0A458F38811EFB8E2D638C4F9AE02.roa (hash: bYiGlJTSCLhia07K1lJYXHC5JgOu+61a9mLQrwhq6HI=) 3: BC8ECC20F38811EF8AB19939C4F9AE02.roa (hash: mbFfYSX+BdjEnhF4lUo27j9bjQ0kInCW9ZTNXOQrp2Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 183 (0xb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913120A, serialNumber=6C2C7C14289E6BB5B7275B1AA6BFDFA0227B9086 Validity Not Before: Aug 7 06:54:28 2025 GMT Not After : Aug 14 06:54:28 2025 GMT Subject: CN=68944da5-358f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5c:8f:d1:67:e2:dc:63:d0:90:43:96:55:be: 99:8d:41:c0:83:2c:9c:fc:bc:87:22:7b:0d:d9:f1: ec:98:37:fa:81:cc:35:07:63:2a:97:ae:e0:17:7b: 88:8b:ec:57:49:c0:09:00:3d:64:26:46:08:5a:79: 46:6b:68:cc:8c:3e:c8:b5:54:96:46:bc:a1:70:12: 3d:4f:9a:eb:73:80:67:99:f8:51:44:32:d2:9d:a2: f2:9f:6d:00:bb:d3:3b:68:7d:1f:6c:dc:42:4a:cb: 65:82:96:4f:2a:50:92:ad:3c:d1:78:15:27:b8:08: a2:4f:e6:28:36:51:70:86:3b:78:41:7d:68:bb:a1: 16:0a:87:ff:0a:45:71:8e:b9:40:74:01:49:aa:66: 2d:ff:cb:e1:00:fa:fd:41:08:e6:f3:06:d2:b9:f1: 47:4c:46:f6:f4:a2:9c:19:df:c2:28:0f:cb:fd:10: d7:91:34:05:a0:27:ff:fa:cc:b2:67:b0:06:dc:a3: 18:72:10:38:dc:c2:46:39:ea:dd:e1:12:65:f9:79: 0c:c0:3f:78:b6:3a:44:2e:43:a4:63:fa:b0:c4:56: 79:60:bc:9a:79:4d:26:bb:d4:f0:3b:8d:8d:20:2d: 7a:59:2d:4e:23:f7:7f:95:c1:77:0d:1d:5b:85:d0: c2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:71:B6:2E:B6:2E:35:BD:BE:42:B4:A0:75:5D:7D:59:75:24:83:65 X509v3 Authority Key Identifier: keyid:6C:2C:7C:14:28:9E:6B:B5:B7:27:5B:1A:A6:BF:DF:A0:22:7B:90:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bCx8FCiea7W3J1sapr_foCJ7kIY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913120A/DAF81C4486F911EFB096510CC4F9AE02/bCx8FCiea7W3J1sapr_foCJ7kIY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:de:8d:b0:3f:55:05:8a:af:28:ef:7d:93:78:b9:55:02:25: 8d:69:5d:46:0c:c8:23:62:e8:23:2a:fe:9e:36:c5:6c:b5:43: 56:3e:da:fb:a6:c1:59:79:65:e9:77:ee:a1:40:c4:10:8e:be: 62:a5:f3:6a:a2:6b:54:eb:79:be:fc:31:23:fd:54:9a:33:11: a1:31:43:ab:87:f5:c7:e5:07:53:4c:57:a4:8b:2f:6e:97:72: b4:5d:09:b4:f1:5b:a9:9f:6c:ba:4e:ac:bd:8f:5c:1c:96:7c: a7:1c:a3:9e:1a:54:43:49:e3:bc:68:76:32:25:b8:d0:6f:5d: be:00:f2:a1:0a:ee:7a:9f:e0:c0:e4:12:07:b1:c9:d1:32:36: 7e:28:ea:ab:d3:a4:99:e4:86:75:32:11:8c:37:46:35:20:25: f2:14:39:cf:ed:8e:92:32:d4:7f:ad:25:49:ec:a0:ad:96:c7: 2c:31:d9:51:72:5a:61:4a:70:f3:0c:77:ea:c4:96:7d:b6:58: 3a:1f:a2:1f:45:32:0f:ba:d1:57:05:3d:b3:5c:8d:f6:1c:df: f7:4d:ad:f9:f2:55:b4:0f:58:e3:32:18:a1:bf:df:8f:7f:8b: 51:a6:26:52:fd:00:79:7a:7e:2d:09:61:b1:04:02:93:1d:83: e4:69:95:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzEyMEExMTAvBgNVBAUTKDZDMkM3QzE0Mjg5RTZCQjVCNzI3NUIxQUE2QkZERkEw MjI3QjkwODYwHhcNMjUwODA3MDY1NDI4WhcNMjUwODE0MDY1NDI4WjAYMRYwFAYD VQQDEw02ODk0NGRhNS0zNThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFyP0Wfi3GPQkEOWVb6ZjUHAgyyc/LyHInsN2fHsmDf6gcw1B2Mql67gF3uI i+xXScAJAD1kJkYIWnlGa2jMjD7ItVSWRryhcBI9T5rrc4BnmfhRRDLSnaLyn20A u9M7aH0fbNxCSstlgpZPKlCSrTzReBUnuAiiT+YoNlFwhjt4QX1ou6EWCof/CkVx jrlAdAFJqmYt/8vhAPr9QQjm8wbSufFHTEb29KKcGd/CKA/L/RDXkTQFoCf/+syy Z7AG3KMYchA43MJGOerd4RJl+XkMwD94tjpELkOkY/qwxFZ5YLyaeU0mu9TwO42N IC16WS1OI/d/lcF3DR1bhdDCLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKJxti62 LjW9vkK0oHVdfVl1JINlMB8GA1UdIwQYMBaAFGwsfBQonmu1tydbGqa/36Aie5CG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTIwQS9EQUY4MUM0NDg2 RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3VzNKMXNhcHJfZm9DSjdr SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JDeDhGQ2llYTdXM0oxc2Fwcl9mb0NKN2tJWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MTIwQS9EQUY4MUM0NDg2RjkxMUVGQjA5NjUxMENDNEY5QUUwMi9iQ3g4RkNpZWE3 VzNKMXNhcHJfZm9DSjdrSVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo3o2wP1UFiq8o732TeLlVAiWNaV1GDMgjYugjKv6eNsVstUNWPtr7 psFZeWXpd+6hQMQQjr5ipfNqomtU63m+/DEj/VSaMxGhMUOrh/XH5QdTTFekiy9u l3K0XQm08Vupn2y6Tqy9j1wclnynHKOeGlRDSeO8aHYyJbjQb12+APKhCu56n+DA 5BIHscnRMjZ+KOqr06SZ5IZ1MhGMN0Y1ICXyFDnP7Y6SMtR/rSVJ7KCtlscsMdlR clphSnDzDHfqxJZ9tlg6H6IfRTIPutFXBT2zXI32HN/3Ta358lW0D1jjMhihv9+P f4tRpiZS/QB5en4tCWGxBAKTHYPkaZWE -----END CERTIFICATE-----Generated at Fri Aug 8 20:58:16 2025 by rpki-client