$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft File: Bmy1pxYud36-c45cu4Dn9JRwzCE.mft (raw, json) Hash identifier: Sj9eFzVnOLa7gsDJdELfm2nobvE72aDblYEC/A0nByg= Subject key identifier: BE:14:37:DF:79:FD:FE:31:04:30:0E:74:BC:A4:DA:CE:32:D5:8C:65 Authority key identifier: 06:6C:B5:A7:16:2E:77:7E:BE:73:8E:5C:BB:80:E7:F4:94:70:CC:21 Certificate issuer: /CN=A9134FAF/serialNumber=066CB5A7162E777EBE738E5CBB80E7F49470CC21 Certificate serial: 21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft Manifest number: 21 Signing time: Sat 09 Aug 2025 08:21:41 +0000 Manifest this update: Sat 09 Aug 2025 08:21:41 +0000 Manifest next update: Sat 16 Aug 2025 08:21:41 +0000 Files and hashes: 1: Bmy1pxYud36-c45cu4Dn9JRwzCE.crl (hash: tW8CSpY71yBQlHJCXS1gm1mQ+AFzuovJiNjEivt26Dc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.crl rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33 (0x21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134FAF, serialNumber=066CB5A7162E777EBE738E5CBB80E7F49470CC21 Validity Not Before: Aug 9 08:21:41 2025 GMT Not After : Aug 16 08:21:41 2025 GMT Subject: CN=68970515-c37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:3f:c2:b7:0d:03:88:08:b0:00:0f:b3:9b: c1:b4:e1:d6:f7:fb:af:cd:40:d8:b5:31:41:f9:08: f7:fe:70:8d:10:13:4e:20:5e:57:3c:61:43:26:b6: 29:1b:79:a1:a9:9c:63:b9:06:ca:13:25:5d:d0:66: b2:66:e9:ff:b9:4c:a6:ba:b5:69:b0:22:31:da:df: 9b:a1:ee:41:f2:3b:55:d7:d7:29:88:9d:5b:53:58: 95:c4:2b:a9:90:53:64:ee:4d:0d:e4:a0:58:fb:d9: f7:48:e6:8b:b5:21:64:15:0f:67:93:7d:19:6f:1c: 97:96:b1:a1:c4:1b:82:32:ad:fc:16:eb:fb:66:72: ea:e2:b2:17:1b:00:05:ed:fe:38:ad:38:ef:94:93: b4:85:d1:e2:d7:83:7c:82:30:eb:93:d3:cb:7a:e6: b8:71:c8:9c:88:0f:21:3a:4b:ef:48:55:e7:5f:ac: e6:a3:08:41:a3:dc:65:e6:13:bb:4b:3f:24:7f:be: ed:14:a7:2c:f0:28:e7:01:f5:91:48:83:ea:e5:35: 69:ef:0e:c5:2e:bd:d9:1b:18:34:53:b3:21:67:d7: 6c:98:d8:db:63:eb:c6:17:c7:5d:7b:ce:5e:f0:72: 23:d6:12:08:c8:86:83:9e:2d:94:6a:6f:35:88:19: a4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:14:37:DF:79:FD:FE:31:04:30:0E:74:BC:A4:DA:CE:32:D5:8C:65 X509v3 Authority Key Identifier: keyid:06:6C:B5:A7:16:2E:77:7E:BE:73:8E:5C:BB:80:E7:F4:94:70:CC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:c7:4a:9a:83:a5:2d:7d:bc:dd:e6:06:e6:33:dc:a5:53:e3: 46:be:f4:1b:17:97:98:5a:7c:d8:33:a6:c9:b3:e7:0c:d2:3f: 5b:98:a6:32:d8:24:0a:a3:bf:0a:31:74:a2:83:c8:1f:a9:62: bd:a5:38:f2:8a:31:17:9a:a7:1b:98:39:a0:08:f5:fc:38:66: b6:c5:29:b4:3b:98:97:11:17:da:0e:0c:85:02:72:1b:77:57: a5:d7:fa:f8:60:d3:53:8a:c5:b5:27:65:a6:e4:d7:06:4d:1c: 7f:65:c9:59:cf:0e:f6:1c:9c:3d:39:ab:1a:07:4c:b8:89:0b: 0c:15:27:1d:b6:d3:39:ef:e5:7f:24:bb:00:bc:d0:fa:79:84: 76:b7:95:f0:76:19:d8:6a:a8:ff:da:c5:96:d0:6f:0f:37:44: 29:3b:41:3a:7e:78:8a:3d:9b:5a:47:51:b1:23:d4:00:48:1c: d1:36:0d:24:5a:b5:83:ea:c0:58:04:06:c4:1c:0d:73:ec:50: 92:6c:5d:69:11:03:0e:83:ef:a1:7c:94:9d:da:46:a9:2e:50: 97:1e:5d:4e:a2:f5:49:53:ca:4d:e4:f6:7d:b7:53:05:2c:52: 72:49:d4:50:71:ab:57:d2:6d:68:22:55:38:f4:69:98:1a:e8: 1a:f5:27:dd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEZBRjExMC8GA1UEBRMoMDY2Q0I1QTcxNjJFNzc3RUJFNzM4RTVDQkI4MEU3RjQ5 NDcwQ0MyMTAeFw0yNTA4MDkwODIxNDFaFw0yNTA4MTYwODIxNDFaMBgxFjAUBgNV BAMTDTY4OTcwNTE1LWMzN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6cz/Ctw0DiAiwAA+zm8G04db3+6/NQNi1MUH5CPf+cI0QE04gXlc8YUMmtikb eaGpnGO5BsoTJV3QZrJm6f+5TKa6tWmwIjHa35uh7kHyO1XX1ymInVtTWJXEK6mQ U2TuTQ3koFj72fdI5ou1IWQVD2eTfRlvHJeWsaHEG4IyrfwW6/tmcurishcbAAXt /jitOO+Uk7SF0eLXg3yCMOuT08t65rhxyJyIDyE6S+9IVedfrOajCEGj3GXmE7tL PyR/vu0UpyzwKOcB9ZFIg+rlNWnvDsUuvdkbGDRTsyFn12yY2Ntj68YXx117zl7w ciPWEgjIhoOeLZRqbzWIGaTxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvhQ333n9 /jEEMA50vKTazjLVjGUwHwYDVR0jBBgwFoAUBmy1pxYud36+c45cu4Dn9JRwzCEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0RkFGLzhBQzQxNzk0NDQ5 NzExRjBBOTc1NzM2MkM0RjlBRTAyL0JteTFweFl1ZDM2LWM0NWN1NERuOUpSd3pD RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQm15MXB4WXVkMzYtYzQ1Y3U0RG45SlJ3ekNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 RkFGLzhBQzQxNzk0NDQ5NzExRjBBOTc1NzM2MkM0RjlBRTAyL0JteTFweFl1ZDM2 LWM0NWN1NERuOUpSd3pDRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIDHSpqDpS19vN3mBuYz3KVT40a+9BsXl5hafNgzpsmz5wzSP1uYpjLY JAqjvwoxdKKDyB+pYr2lOPKKMReapxuYOaAI9fw4ZrbFKbQ7mJcRF9oODIUCcht3 V6XX+vhg01OKxbUnZabk1wZNHH9lyVnPDvYcnD05qxoHTLiJCwwVJx220znv5X8k uwC80Pp5hHa3lfB2GdhqqP/axZbQbw83RCk7QTp+eIo9m1pHUbEj1ABIHNE2DSRa tYPqwFgEBsQcDXPsUJJsXWkRAw6D76F8lJ3aRqkuUJceXU6i9UlTyk3k9n23UwUs UnJJ1FBxq1fSbWgiVTj0aZga6Br1J90= -----END CERTIFICATE-----Generated at Sun Aug 10 21:15:37 2025 by rpki-client