$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft File: -bspsKvoSef-GA4znkscKCNoxSE.mft (raw, json) Hash identifier: 16Dy91vIUo8gODngfcwvS2dx9oBMC77HcWEduHpjCYc= Subject key identifier: 31:DC:0E:51:FC:8A:49:F3:73:4D:5E:79:27:8C:F2:28:56:77:E2:C9 Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 Certificate issuer: /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Certificate serial: 1021 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft Manifest number: 1009 Signing time: Sun 10 Aug 2025 17:28:53 +0000 Manifest this update: Sun 10 Aug 2025 17:28:53 +0000 Manifest next update: Sun 17 Aug 2025 17:28:53 +0000 Files and hashes: 1: -bspsKvoSef-GA4znkscKCNoxSE.crl (hash: gaIaFax+PrGNELHa94viD837oO6PymRjl0Qwos5A25U=) 2: F7F18D8C2BA711F09514D439C4F9AE02.roa (hash: RQ31QQqNnbR7hUGab4NBe2n82ZvCRfsZ20QWiB5eLdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4129 (0x1021) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Validity Not Before: Aug 10 17:28:53 2025 GMT Not After : Aug 17 17:28:53 2025 GMT Subject: CN=6898d6d5-1c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:06:ef:cd:d6:27:fd:72:63:c2:8c:be:ac:e0: 51:d5:aa:6e:22:fb:5f:0f:2a:02:4c:1e:eb:2c:b8: b6:12:70:83:7e:14:84:9d:0e:59:fb:e2:b3:57:bb: f5:f3:1b:cf:76:0a:49:31:08:eb:00:2b:d7:6e:b1: cf:bd:67:73:fe:fc:59:7e:50:c1:bf:6f:60:c2:61: 1a:20:34:10:7a:df:77:47:1e:a7:aa:5c:3c:6c:68: 3a:76:ef:b6:d7:33:e8:e2:6c:39:7d:f4:c6:cc:ec: 40:1d:7b:0a:db:e1:59:f8:b8:14:74:ed:23:ef:9b: d3:61:a3:ef:23:fe:96:d0:47:5c:38:f7:ea:f5:6f: 00:9d:8b:68:ad:e1:ce:c0:2c:05:f7:c7:7e:5a:dd: e9:f6:ae:0b:20:ee:8c:b2:38:3a:2e:96:69:64:56: 70:75:94:10:92:4b:d8:5c:5a:60:0c:c9:d4:c9:ee: bf:7f:08:26:14:f3:d9:cc:97:e8:6c:5d:8b:9b:94: 9d:7f:13:bc:e8:7d:32:92:64:6a:03:53:1b:a8:9a: 60:5d:28:79:6d:b3:60:6b:42:04:57:c5:d0:88:bb: df:60:f6:c9:67:fb:bd:48:c3:57:03:36:07:90:1b: d1:e0:11:66:c3:c5:f9:ae:66:ef:88:75:f7:ff:a4: eb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DC:0E:51:FC:8A:49:F3:73:4D:5E:79:27:8C:F2:28:56:77:E2:C9 X509v3 Authority Key Identifier: keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:af:71:fe:0c:ed:82:c4:64:58:fb:90:20:f8:5f:50:91:bb: 1c:7c:de:67:97:77:21:f9:e3:f3:78:f3:77:e4:b5:c4:51:6c: 76:28:74:2d:af:c6:fc:27:9a:f0:2f:ae:2a:7a:fd:ae:b0:6b: 6d:2d:4f:77:ee:d8:3b:f8:12:c3:c0:c3:f5:88:78:11:05:7e: 31:34:35:ae:bf:61:f1:ca:5e:00:19:ed:8b:51:ae:3c:0b:76: 25:1c:94:27:05:65:48:6c:77:46:40:9b:f0:a7:c6:67:16:aa: 68:94:01:6d:bf:ad:00:99:5b:30:00:4b:bf:bb:84:c4:5f:80: 56:84:43:ee:d7:b4:5f:4a:9f:83:7c:7c:64:f6:3b:21:8e:48: a3:12:b0:7d:7e:09:38:81:87:fa:77:9a:3b:aa:c0:f3:52:97: d0:78:9e:0e:b6:43:23:45:4c:95:3a:6d:0c:97:4d:b0:91:88: ab:b5:54:60:af:d4:27:c8:0f:19:40:91:0d:8d:76:73:e3:50: c7:41:50:62:d5:91:1e:e1:2c:9e:b1:32:85:10:f4:a2:e2:d8: fd:45:4d:16:0e:9e:ac:72:74:14:58:8d:c6:a4:45:c2:03:16: 93:d7:a2:aa:0c:39:0d:b7:7d:f3:16:25:80:8b:cd:62:dd:c8: ed:7a:6c:6e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICECEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY5QkIyOUIwQUJFODQ5RTdGRTE4MEUzMzlFNEIxQzI4 MjM2OEM1MjEwHhcNMjUwODEwMTcyODUzWhcNMjUwODE3MTcyODUzWjAYMRYwFAYD VQQDEw02ODk4ZDZkNS0xYzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQbvzdYn/XJjwoy+rOBR1apuIvtfDyoCTB7rLLi2EnCDfhSEnQ5Z++KzV7v1 8xvPdgpJMQjrACvXbrHPvWdz/vxZflDBv29gwmEaIDQQet93Rx6nqlw8bGg6du+2 1zPo4mw5ffTGzOxAHXsK2+FZ+LgUdO0j75vTYaPvI/6W0EdcOPfq9W8AnYtoreHO wCwF98d+Wt3p9q4LIO6Msjg6LpZpZFZwdZQQkkvYXFpgDMnUye6/fwgmFPPZzJfo bF2Lm5SdfxO86H0ykmRqA1MbqJpgXSh5bbNga0IEV8XQiLvfYPbJZ/u9SMNXAzYH kBvR4BFmw8X5rmbviHX3/6TrbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHcDlH8 iknzc01eeSeM8ihWd+LJMB8GA1UdIwQYMBaAFPm7KbCr6Enn/hgOM55LHCgjaMUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8wQTA0RjRFMjU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1NlZi1HQTR6bmtzY0tDTm94 U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ic3BzS3ZvU2VmLUdBNHpua3NjS0NOb3hTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8wQTA0RjRFMjU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1Nl Zi1HQTR6bmtzY0tDTm94U0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqr3H+DO2CxGRY+5Ag+F9QkbscfN5nl3ch+ePzePN35LXEUWx2KHQt r8b8J5rwL64qev2usGttLU937tg7+BLDwMP1iHgRBX4xNDWuv2Hxyl4AGe2LUa48 C3YlHJQnBWVIbHdGQJvwp8ZnFqpolAFtv60AmVswAEu/u4TEX4BWhEPu17RfSp+D fHxk9jshjkijErB9fgk4gYf6d5o7qsDzUpfQeJ4OtkMjRUyVOm0Ml02wkYirtVRg r9QnyA8ZQJENjXZz41DHQVBi1ZEe4SyesTKFEPSi4tj9RU0WDp6scnQUWI3GpEXC AxaT16KqDDkNt33zFiWAi81i3cjtemxu -----END CERTIFICATE-----Generated at Sun Aug 10 19:59:40 2025 by rpki-client