$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft File: bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json) Hash identifier: 4ww2X+BTr+Bnu+RlwoPcx1Ax52ny7YUffV/nnvxxAnc= Subject key identifier: 26:99:17:9A:73:21:A8:C1:A1:B1:14:0F:40:9A:F0:23:DB:0D:9B:9E Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9 Certificate issuer: /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9 Certificate serial: 04AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft Manifest number: 04A4 Signing time: Mon 11 Aug 2025 00:07:49 +0000 Manifest this update: Mon 11 Aug 2025 00:07:49 +0000 Manifest next update: Mon 18 Aug 2025 00:07:49 +0000 Files and hashes: 1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: 2TUMxniV+Ayya6oSpIf2Coy76e4R2qDhnqoWUgd7cxM=) 2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: eaIiY9RvMlvN9KkRdh0VxXvRbPe5lNuNtQtAJNjGWj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1196 (0x4ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080, serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9 Validity Not Before: Aug 11 00:07:49 2025 GMT Not After : Aug 18 00:07:49 2025 GMT Subject: CN=68993455-f092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ef:1d:40:6b:87:af:4e:99:3b:43:e2:5e:78: b8:f8:15:9b:fb:a0:af:57:e5:b6:7b:61:f3:4f:7a: 85:83:68:41:6c:8f:53:59:10:6b:e8:a1:fd:25:9d: be:c2:6d:0b:57:f5:6b:fd:4c:de:c2:38:93:f0:5a: 04:3d:2c:d7:5a:00:b1:eb:93:35:21:dd:20:b9:69: cd:d5:2d:4d:85:5b:de:ac:bb:51:d0:ee:8d:3b:0b: 63:85:05:9a:a0:f7:54:8c:4a:0d:a7:72:9a:6a:ee: 4e:59:9f:eb:95:2f:c3:66:11:87:7c:2a:ba:66:7e: cf:33:0d:f0:1e:dd:33:d9:6c:b7:3a:a4:19:65:c2: 79:58:d0:fa:14:3e:54:b7:47:ea:b5:dd:e5:b9:0e: 90:b1:49:5f:64:ec:35:99:95:94:b0:fd:7b:7e:10: 7e:1b:31:7f:73:f2:cf:f6:ab:b4:fe:db:5d:05:4d: 0a:2e:aa:45:09:49:43:3f:b0:bd:c8:07:44:74:78: 8c:74:bc:3f:8b:3a:84:b0:e4:a9:cb:21:58:4d:fb: 4b:af:5c:72:e3:79:57:b7:0f:1e:dc:65:14:5c:96: 9d:bf:11:90:07:4b:1e:73:96:1f:bc:57:55:11:af: 2a:08:dc:b2:f6:e8:c6:8b:96:92:49:99:ad:5e:92: 9f:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:99:17:9A:73:21:A8:C1:A1:B1:14:0F:40:9A:F0:23:DB:0D:9B:9E X509v3 Authority Key Identifier: keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:07:f2:a2:67:fc:d0:8d:72:3b:33:f0:4c:48:91:4c:cd:6f: d0:29:47:84:ce:23:2d:94:35:51:9b:51:bb:7c:53:a9:f8:f9: 82:1a:3e:9d:38:6c:93:c9:96:0a:45:df:d8:79:cb:50:34:3f: 3d:65:e5:d3:c1:8a:33:a0:bd:e9:7f:3d:ea:0a:b2:35:77:11: fc:be:9c:86:7a:9a:8a:53:9a:80:13:bd:33:d5:66:cc:b4:8a: 7c:f1:c7:f6:c6:7e:39:a9:30:6a:4f:ee:a7:15:ac:98:37:c5: de:df:9c:9f:6a:72:da:aa:a1:cd:6c:8e:92:4c:44:65:0b:9c: 97:2f:56:74:d9:85:8c:e1:2c:a9:8b:e1:dc:af:b2:70:e9:26: f9:3f:2d:2b:f1:e0:81:99:30:17:2c:ce:7b:d0:68:db:a1:7b: d8:1d:cc:a3:cb:98:c4:bf:19:23:48:c5:fa:69:72:39:79:27: 3a:27:77:cd:3c:09:ae:3c:ac:47:6e:f1:24:a8:bd:a0:bc:50: 2f:cf:da:1f:8e:61:66:04:26:44:41:c2:e3:6f:db:e0:f3:65: 90:4d:44:06:58:00:36:79:d1:be:b5:6a:7d:5f:c7:fd:15:b5: 55:5b:93:f1:c5:89:18:51:b2:e2:82:3b:bd:27:3b:dd:c3:ec: fb:c5:13:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKDZFQTA3QkQwM0U4MzQ3QTgwNUJBNUFGNDg4QjMyQjJG OUExNDJFRjkwHhcNMjUwODExMDAwNzQ5WhcNMjUwODE4MDAwNzQ5WjAYMRYwFAYD VQQDEw02ODk5MzQ1NS1mMDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+8dQGuHr06ZO0PiXni4+BWb+6CvV+W2e2HzT3qFg2hBbI9TWRBr6KH9JZ2+ wm0LV/Vr/UzewjiT8FoEPSzXWgCx65M1Id0guWnN1S1NhVverLtR0O6NOwtjhQWa oPdUjEoNp3Kaau5OWZ/rlS/DZhGHfCq6Zn7PMw3wHt0z2Wy3OqQZZcJ5WND6FD5U t0fqtd3luQ6QsUlfZOw1mZWUsP17fhB+GzF/c/LP9qu0/ttdBU0KLqpFCUlDP7C9 yAdEdHiMdLw/izqEsOSpyyFYTftLr1xy43lXtw8e3GUUXJadvxGQB0sec5YfvFdV Ea8qCNyy9ujGi5aSSZmtXpKfAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaZF5pz IajBobEUD0Ca8CPbDZueMB8GA1UdIwQYMBaAFG6ge9A+g0eoBbpa9IizKy+aFC75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8yMjNFM0E1MDQ2 OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2Z0Z1bHIwaUxNckw1b1VM dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JxQjcwRDZEUjZnRnVscjBpTE1yTDVvVUx2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8yMjNFM0E1MDQ2OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2 Z0Z1bHIwaUxNckw1b1VMdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBGB/KiZ/zQjXI7M/BMSJFMzW/QKUeEziMtlDVRm1G7fFOp+PmCGj6d OGyTyZYKRd/YectQND89ZeXTwYozoL3pfz3qCrI1dxH8vpyGepqKU5qAE70z1WbM tIp88cf2xn45qTBqT+6nFayYN8Xe35yfanLaqqHNbI6STERlC5yXL1Z02YWM4Syp i+Hcr7Jw6Sb5Py0r8eCBmTAXLM570GjboXvYHcyjy5jEvxkjSMX6aXI5eSc6J3fN PAmuPKxHbvEkqL2gvFAvz9ofjmFmBCZEQcLjb9vg82WQTUQGWAA2edG+tWp9X8f9 FbVVW5PxxYkYUbLigju9Jzvdw+z7xRPv -----END CERTIFICATE-----Generated at Mon Aug 11 04:21:10 2025 by rpki-client