$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: 2S/ITiyYS1YEwGpxNuyqdCkoR8zzkrpcGTKO/ybeHFU= Subject key identifier: 2A:57:FF:DA:31:57:90:C0:4A:43:2B:3A:11:EF:A0:4A:4F:47:67:FC Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: 58 Signing time: Mon 11 Aug 2025 07:26:07 +0000 Manifest this update: Mon 11 Aug 2025 07:26:06 +0000 Manifest next update: Mon 18 Aug 2025 07:26:06 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: XhmzJBhoWT1YG0GeoEDu6suiykZ49eVTIZ5WRCSOxb8=) 2: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: BMK5egNvgRPb4zFSiHjhQ8AJphJuXdtk94523bl6Tzs=) 3: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: waSBCEbcYlolsmBXhQe06r7v3tswwJfsDI5vXs6FVRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 07:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: Aug 11 07:26:06 2025 GMT Not After : Aug 18 07:26:06 2025 GMT Subject: CN=68999b0f-99f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f7:5e:46:88:6c:5e:5c:12:cd:0a:5a:5e:38: 77:1f:8c:19:af:8e:b9:2c:bf:9b:3f:b4:d1:ac:15: 32:52:33:d2:38:3c:7b:f5:45:25:b1:e4:ba:8c:78: 6c:71:60:b8:ff:09:0d:27:d8:f9:cf:03:1c:cb:01: 0b:d4:a8:aa:22:d6:6e:14:0a:fc:6e:87:3f:e0:28: 5c:d6:ec:8a:99:77:c6:42:ab:e4:d4:2f:f5:b1:19: 2f:c8:58:b2:1f:2f:de:db:cb:a9:b4:36:30:ab:2c: 03:f1:0a:af:fb:fc:61:60:62:08:86:d4:cc:d6:e3: 85:8f:96:ad:67:0e:72:22:d0:ea:a3:2b:82:6d:50: de:c7:98:ac:c6:ef:b5:d4:b7:75:db:a9:1c:2a:70: 6f:4e:11:66:e1:2d:58:a6:dd:64:19:11:23:ac:42: a0:97:60:d7:06:c8:bf:80:12:d0:6e:4a:e2:3c:4c: 50:76:7a:7f:85:6b:9d:3f:6b:b9:35:d3:ba:0f:6a: a1:44:ea:9d:1f:a8:04:6c:41:e1:ff:06:d2:9a:11: 74:9a:65:a2:bd:79:30:9c:03:7d:f7:52:dc:24:3e: 2b:b4:a0:24:d8:33:8f:8f:3e:8d:c4:90:0e:c1:fa: d1:ea:a5:e6:f5:bb:66:a4:84:df:a5:5f:e2:16:7c: b9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:57:FF:DA:31:57:90:C0:4A:43:2B:3A:11:EF:A0:4A:4F:47:67:FC X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:95:42:f9:a9:4f:7c:a8:b8:14:8f:3b:b1:84:9f:ac:09:8d: 24:6f:8a:50:61:19:45:64:ed:9f:a0:bf:82:0c:16:f0:68:6b: 1a:d1:8e:de:41:d9:c0:1c:b6:6d:cb:67:69:fa:b3:1f:48:3f: ce:47:45:d3:26:96:ec:59:89:0e:3a:28:d3:64:e4:7f:e3:15: e5:f9:4e:9f:8e:04:5e:88:b9:05:c4:2a:b9:1c:4d:39:3e:bd: 00:09:53:75:7d:74:c8:f4:8a:da:d7:bc:56:b1:7e:b3:94:0e: 93:90:8b:9c:88:10:a8:3c:1c:da:6b:55:9d:90:8a:2d:c5:c4: 41:fa:d6:bf:2f:c1:54:8b:2e:5f:e4:53:df:03:83:35:a3:9b: 18:14:01:cd:08:0c:e8:cd:ff:94:1a:96:a3:d8:e8:0f:2a:38: e5:ef:e4:9d:67:e5:30:db:ae:b3:14:e7:01:3a:9e:39:9d:db: 56:7a:4e:a1:0f:aa:9e:b4:1f:4b:f1:31:03:67:a5:4e:1d:8e: 85:05:a5:be:d6:95:05:df:71:42:e8:8d:f5:ff:b6:f2:2c:e7: 84:d5:49:72:0b:ad:cd:ed:c2:8f:c8:c5:68:56:8f:cf:f9:1d: 14:a7:e9:24:02:12:dd:fe:8c:55:7b:24:37:0b:bd:e1:ca:41: 7c:f4:c2:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkI1RDExMC8GA1UEBRMoMEZFMDYzMjRGMTc4N0M4RjIxNEZCRUFFNjdEODg2RDIy RjgxNjcwMjAeFw0yNTA4MTEwNzI2MDZaFw0yNTA4MTgwNzI2MDZaMBgxFjAUBgNV BAMTDTY4OTk5YjBmLTk5ZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDc915GiGxeXBLNClpeOHcfjBmvjrksv5s/tNGsFTJSM9I4PHv1RSWx5LqMeGxx YLj/CQ0n2PnPAxzLAQvUqKoi1m4UCvxuhz/gKFzW7IqZd8ZCq+TUL/WxGS/IWLIf L97by6m0NjCrLAPxCq/7/GFgYgiG1MzW44WPlq1nDnIi0OqjK4JtUN7HmKzG77XU t3XbqRwqcG9OEWbhLVim3WQZESOsQqCXYNcGyL+AEtBuSuI8TFB2en+Fa50/a7k1 07oPaqFE6p0fqARsQeH/BtKaEXSaZaK9eTCcA333UtwkPiu0oCTYM4+PPo3EkA7B +tHqpeb1u2akhN+lX+IWfLnzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKlf/2jFX kMBKQys6Ee+gSk9HZ/wwHwYDVR0jBBgwFoAUD+BjJPF4fI8hT76uZ9iG0i+BZwIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QjVELzk4RkQxQTQyRjFD MDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRC1CakpQRjRmSThoVDc2dVo5aUcwaS1CWndJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QjVELzk4RkQxQTQyRjFDMDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4 aFQ3NnVaOWlHMGktQlp3SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB2VQvmpT3youBSPO7GEn6wJjSRvilBhGUVk7Z+gv4IMFvBoaxrRjt5B 2cActm3LZ2n6sx9IP85HRdMmluxZiQ46KNNk5H/jFeX5Tp+OBF6IuQXEKrkcTTk+ vQAJU3V9dMj0itrXvFaxfrOUDpOQi5yIEKg8HNprVZ2Qii3FxEH61r8vwVSLLl/k U98DgzWjmxgUAc0IDOjN/5QalqPY6A8qOOXv5J1n5TDbrrMU5wE6njmd21Z6TqEP qp60H0vxMQNnpU4djoUFpb7WlQXfcULojfX/tvIs54TVSXILrc3two/IxWhWj8/5 HRSn6SQCEt3+jFV7JDcLveHKQXz0wuU= -----END CERTIFICATE-----Generated at Wed Aug 13 00:33:20 2025 by rpki-client