$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft File: BPDYqTArIrYOMPRlG4KumZ_3TJs.mft (raw, json) Hash identifier: Z3enpOlkUzXxZYgYawcLxdOWNPXnr6HyvsQ7jJ/Ig6s= Subject key identifier: 47:47:8C:20:6C:35:AB:4F:9F:8C:DB:36:D1:83:5F:E8:3E:AE:1A:96 Authority key identifier: 04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B Certificate issuer: /CN=A9171882/serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B Certificate serial: FE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft Manifest number: FC Signing time: Sat 09 Aug 2025 05:33:06 +0000 Manifest this update: Sat 09 Aug 2025 05:33:06 +0000 Manifest next update: Sat 16 Aug 2025 05:33:06 +0000 Files and hashes: 1: BPDYqTArIrYOMPRlG4KumZ_3TJs.crl (hash: 7kbhwkDzdpOaOH8AERW8K2kktDPy5Ac6k10y81p2lHo=) 2: 08D1870EF0B411EE962EE784C4F9AE02.roa (hash: nrFzYe2K6I+fVS0WsJAv1h0mXVgQBFKENnTmsnUT3Jo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 254 (0xfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171882, serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B Validity Not Before: Aug 9 05:33:06 2025 GMT Not After : Aug 16 05:33:06 2025 GMT Subject: CN=6896dd92-b6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:23:7e:4c:eb:dc:47:bd:99:96:10:81:6d: 6a:dc:19:a5:c0:76:97:8b:b5:f9:1b:ab:82:2a:ba: 3e:a3:34:43:ef:83:f3:e6:3c:b6:ff:cf:ba:6b:68: 1c:96:5a:3f:1a:69:60:f3:d1:76:3c:b5:18:9c:72: de:e5:a4:91:c0:58:cc:c1:7b:8c:d4:73:38:24:eb: c6:fa:aa:f7:1f:18:f6:11:9a:c3:64:e5:43:6c:cf: 23:5d:8e:97:5c:be:40:d6:1c:11:c0:4e:80:99:3a: af:4d:16:d7:ca:fb:6f:d7:cd:60:82:20:65:68:b3: cb:94:83:57:7d:be:cd:10:3b:25:46:67:ec:32:c4: 7b:f3:f2:65:99:6e:5e:7c:d8:58:25:7d:e4:0a:5e: b3:ea:33:2b:a0:ab:c8:6b:39:9d:4d:5f:43:53:ae: 59:6f:b9:f9:50:ee:ad:07:f5:94:db:b0:2d:58:9a: c4:9d:b3:a1:eb:b7:0b:b3:b9:03:e4:7d:3f:96:cd: c2:3e:5d:0d:00:a7:12:d8:a1:ae:2f:bd:ad:c2:c8: cb:73:56:94:20:2d:97:8c:6e:56:5d:bd:f8:92:b0: 4e:0b:df:c4:e7:3b:26:fc:b6:98:bf:2a:4b:46:aa: b1:e6:a8:2f:70:b8:52:25:bb:24:a3:02:24:58:86: 42:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:47:8C:20:6C:35:AB:4F:9F:8C:DB:36:D1:83:5F:E8:3E:AE:1A:96 X509v3 Authority Key Identifier: keyid:04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:26:e3:04:b7:e2:c4:2c:70:7f:b0:4c:0b:d2:f5:5c:4e:27: eb:5c:da:ee:2a:38:3d:25:b9:59:3d:0d:40:84:d0:8f:56:9c: c9:c0:70:d5:51:cc:e9:24:7b:b9:db:75:32:c4:6e:3d:de:b7: 1b:54:84:cf:05:3e:05:03:9f:8a:a6:64:1d:aa:a5:cb:b1:91: f6:b2:bb:90:b5:10:7b:08:73:cd:64:0b:19:d0:7d:27:88:bc: 30:d0:4d:41:67:46:e0:26:40:c9:70:7c:3e:99:a8:37:d2:c4: 16:85:98:b9:6b:2c:29:13:59:d5:1e:36:15:49:ff:b6:ee:d3: 0a:20:6d:1c:98:37:a9:e4:1b:14:df:b8:d3:46:ae:5e:0d:6d: bc:88:27:88:b6:20:41:4b:07:9e:f6:73:72:45:03:02:72:fc: 85:40:15:d9:60:fc:88:d9:d1:88:2a:e5:c7:db:da:f8:72:88: 8a:eb:ce:3f:ae:98:bf:fa:4e:a8:e5:7c:e9:97:65:02:a0:59: 72:d7:e0:27:8b:90:dd:f4:d2:5d:ad:2c:65:62:78:04:b9:3e: 0f:7d:34:29:3a:d3:f5:4d:27:44:9f:74:a2:08:65:b4:03:32: 4e:de:b6:5c:b6:c0:c2:0c:7d:f8:1c:4c:82:8e:62:a8:61:ca: 64:4b:e9:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4ODIxMTAvBgNVBAUTKDA0RjBEOEE5MzAyQjIyQjYwRTMwRjQ2NTFCODJBRTk5 OUZGNzRDOUIwHhcNMjUwODA5MDUzMzA2WhcNMjUwODE2MDUzMzA2WjAYMRYwFAYD VQQDEw02ODk2ZGQ5Mi1iNmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFYjfkzr3Ee9mZYQgW1q3BmlwHaXi7X5G6uCKro+ozRD74Pz5jy2/8+6a2gc llo/Gmlg89F2PLUYnHLe5aSRwFjMwXuM1HM4JOvG+qr3Hxj2EZrDZOVDbM8jXY6X XL5A1hwRwE6AmTqvTRbXyvtv181ggiBlaLPLlINXfb7NEDslRmfsMsR78/JlmW5e fNhYJX3kCl6z6jMroKvIazmdTV9DU65Zb7n5UO6tB/WU27AtWJrEnbOh67cLs7kD 5H0/ls3CPl0NAKcS2KGuL72twsjLc1aUIC2XjG5WXb34krBOC9/E5zsm/LaYvypL Rqqx5qgvcLhSJbskowIkWIZCLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEdHjCBs NatPn4zbNtGDX+g+rhqWMB8GA1UdIwQYMBaAFATw2KkwKyK2DjD0ZRuCrpmf90yb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg4Mi9CMjM4QTE4NEYw QjMxMUVFQTRDNzJGODRDNEY5QUUwMi9CUERZcVRBcklyWU9NUFJsRzRLdW1aXzNU SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JQRFlxVEFySXJZT01QUmxHNEt1bVpfM1RKcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg4Mi9CMjM4QTE4NEYwQjMxMUVFQTRDNzJGODRDNEY5QUUwMi9CUERZcVRBckly WU9NUFJsRzRLdW1aXzNUSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiJuMEt+LELHB/sEwL0vVcTifrXNruKjg9JblZPQ1AhNCPVpzJwHDV UczpJHu523UyxG493rcbVITPBT4FA5+KpmQdqqXLsZH2sruQtRB7CHPNZAsZ0H0n iLww0E1BZ0bgJkDJcHw+mag30sQWhZi5aywpE1nVHjYVSf+27tMKIG0cmDep5BsU 37jTRq5eDW28iCeItiBBSwee9nNyRQMCcvyFQBXZYPyI2dGIKuXH29r4coiK684/ rpi/+k6o5Xzpl2UCoFly1+Ani5Dd9NJdrSxlYngEuT4PfTQpOtP1TSdEn3SiCGW0 AzJO3rZctsDCDH34HEyCjmKoYcpkS+ni -----END CERTIFICATE-----Generated at Sat Aug 9 10:43:46 2025 by rpki-client