$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft File: bkVzNIaAMm09remFIV0iZii58Ws.mft (raw, json) Hash identifier: iCep3jzFodbFge2GVEqU95PtaYYQyeGiGSEm2fwbLlY= Subject key identifier: F0:43:20:85:96:8C:DF:76:C6:FA:E7:D8:3D:A2:A8:A6:E9:E5:38:F6 Authority key identifier: 6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B Certificate issuer: /CN=A915A0FB/serialNumber=6E4573348680326D3DADE985215D226628B9F16B Certificate serial: FA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft Manifest number: F8 Signing time: Sat 09 Aug 2025 05:39:53 +0000 Manifest this update: Sat 09 Aug 2025 05:39:53 +0000 Manifest next update: Sat 16 Aug 2025 05:39:53 +0000 Files and hashes: 1: bkVzNIaAMm09remFIV0iZii58Ws.crl (hash: F9uJYVIWhhYltlYEHdTvEXtY9YPijQgQYXGY4U7zpog=) 2: 47B1ABEA005711EF9DA70542C4F9AE02.roa (hash: GoylksPgamABprAXemlh5qC8IA2EnKvQRHTbupKYReA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 250 (0xfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915A0FB, serialNumber=6E4573348680326D3DADE985215D226628B9F16B Validity Not Before: Aug 9 05:39:53 2025 GMT Not After : Aug 16 05:39:53 2025 GMT Subject: CN=6896df29-2318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:31:72:29:e9:8d:86:e4:11:a5:8d:4c:bd:ea: 99:6e:d8:82:d5:5c:9e:a5:32:41:8a:36:f4:5d:31: a1:5a:38:ec:a1:f6:5d:40:a3:1f:1b:14:29:d6:05: 2d:74:05:02:81:97:54:4d:48:a6:51:bc:4b:6f:10: f9:1c:4f:57:e5:56:84:37:90:9b:7d:eb:3b:51:37: 63:0e:62:fa:f8:70:61:69:4e:2c:21:c1:02:a5:49: ae:e4:59:52:cc:a0:3c:a2:b5:76:13:52:a7:5e:0a: 15:63:f5:a4:23:c5:fd:56:00:54:03:18:79:02:8e: 36:aa:65:df:ed:69:2c:1e:a4:b0:44:b7:ac:67:86: a0:e8:49:9c:9a:c3:aa:55:7b:75:81:26:b6:62:97: 0f:d9:c7:b8:69:a3:81:02:42:02:09:d7:f1:93:00: ec:50:50:3e:54:ef:92:2c:ba:44:fb:6d:3d:65:6b: b5:72:63:72:78:83:14:04:05:bf:59:aa:ec:75:f5: 6d:43:67:48:62:f6:4b:1f:82:bb:23:fe:8d:35:80: 36:81:5b:f6:51:4e:e5:82:30:ea:1c:73:6e:97:35: 66:a3:4c:da:2a:2c:8f:7f:cf:4c:cf:97:01:cc:03: 9f:17:01:b6:f0:39:d8:7d:d6:bb:e4:4d:7d:71:fd: c5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:43:20:85:96:8C:DF:76:C6:FA:E7:D8:3D:A2:A8:A6:E9:E5:38:F6 X509v3 Authority Key Identifier: keyid:6E:45:73:34:86:80:32:6D:3D:AD:E9:85:21:5D:22:66:28:B9:F1:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkVzNIaAMm09remFIV0iZii58Ws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0FB/5056C8B2005611EFA54D6140C4F9AE02/bkVzNIaAMm09remFIV0iZii58Ws.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0a:87:93:41:cc:9c:e6:cb:3b:42:03:65:1b:07:ad:0b:f8:77: 39:44:f0:1a:2b:54:cf:83:4a:44:d5:43:20:8a:a8:fa:ca:4d: b3:9b:d6:bc:14:76:4a:e6:3b:30:a1:95:fc:1f:37:75:2e:85: ae:9e:e2:40:d8:db:32:f3:fe:f5:d9:1c:d2:9c:f9:ca:d5:07: 7a:78:da:e4:cd:82:76:fa:03:be:8b:d2:56:ec:bb:c8:b8:90: 31:9c:80:72:0c:e1:21:a0:af:99:27:2b:69:dc:1d:f0:64:83: 05:5f:d5:6a:fc:e2:b8:4b:f2:92:a3:e1:85:57:18:df:6b:d3: 68:ef:e5:84:24:47:d9:c5:53:73:2f:a7:f0:e8:1a:60:5d:ca: 0b:5a:2f:3b:1b:32:f8:25:f3:a9:d8:3a:4f:9f:20:ba:2f:71: 89:60:63:16:08:25:39:76:30:6d:dd:57:15:65:fb:85:58:e2: 31:9c:12:d8:11:3e:a4:b1:af:f1:63:7f:aa:0b:d3:d5:bd:c1: 7f:3a:36:a6:45:84:9b:0f:9f:be:fd:d4:c6:9f:36:d5:b9:03: de:d5:06:cd:12:39:aa:8b:76:7a:31:b4:55:78:0e:db:b4:e9: ca:73:65:7d:49:5f:aa:7e:64:ad:8b:bf:ca:f3:ef:34:6a:fd: 1e:75:61:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUEwRkIxMTAvBgNVBAUTKDZFNDU3MzM0ODY4MDMyNkQzREFERTk4NTIxNUQyMjY2 MjhCOUYxNkIwHhcNMjUwODA5MDUzOTUzWhcNMjUwODE2MDUzOTUzWjAYMRYwFAYD VQQDEw02ODk2ZGYyOS0yMzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzjFyKemNhuQRpY1MveqZbtiC1VyepTJBijb0XTGhWjjsofZdQKMfGxQp1gUt dAUCgZdUTUimUbxLbxD5HE9X5VaEN5Cbfes7UTdjDmL6+HBhaU4sIcECpUmu5FlS zKA8orV2E1KnXgoVY/WkI8X9VgBUAxh5Ao42qmXf7WksHqSwRLesZ4ag6EmcmsOq VXt1gSa2YpcP2ce4aaOBAkICCdfxkwDsUFA+VO+SLLpE+209ZWu1cmNyeIMUBAW/ WarsdfVtQ2dIYvZLH4K7I/6NNYA2gVv2UU7lgjDqHHNulzVmo0zaKiyPf89Mz5cB zAOfFwG28DnYfda75E19cf3FNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBDIIWW jN92xvrn2D2iqKbp5Tj2MB8GA1UdIwQYMBaAFG5FczSGgDJtPa3phSFdImYoufFr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGQi81MDU2QzhCMjAw NTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6TklhQU1tMDlyZW1GSVYwaVppaTU4 V3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrVnpOSWFBTW0wOXJlbUZJVjBpWmlpNThXcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QTBGQi81MDU2QzhCMjAwNTYxMUVGQTU0RDYxNDBDNEY5QUUwMi9ia1Z6TklhQU1t MDlyZW1GSVYwaVppaTU4V3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAKh5NBzJzmyztCA2UbB60L+Hc5RPAaK1TPg0pE1UMgiqj6yk2zm9a8 FHZK5jswoZX8Hzd1LoWunuJA2Nsy8/712RzSnPnK1Qd6eNrkzYJ2+gO+i9JW7LvI uJAxnIByDOEhoK+ZJytp3B3wZIMFX9Vq/OK4S/KSo+GFVxjfa9No7+WEJEfZxVNz L6fw6BpgXcoLWi87GzL4JfOp2DpPnyC6L3GJYGMWCCU5djBt3VcVZfuFWOIxnBLY ET6ksa/xY3+qC9PVvcF/OjamRYSbD5++/dTGnzbVuQPe1QbNEjmqi3Z6MbRVeA7b tOnKc2V9SV+qfmSti7/K8+80av0edWH/ -----END CERTIFICATE-----Generated at Sun Aug 10 05:47:27 2025 by rpki-client