$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: nanQn3HnoE+sHDMTnEKEkbjuT1cwyU7W0dcuGLhqzr4= Subject key identifier: AA:C3:1F:B6:0D:ED:E7:E7:93:0C:C4:6D:82:33:CF:3D:52:B2:A3:13 Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 0F39 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 0F2F Signing time: Mon 04 Aug 2025 17:48:49 +0000 Manifest this update: Mon 04 Aug 2025 17:48:48 +0000 Manifest next update: Mon 11 Aug 2025 17:48:48 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: 9qmKmfs166+bHB6qVwjqn4lsdvGrB86/YbSzqGsuwZw=) 2: 39275D0C232511EC925DF318C4F9AE02.roa (hash: kMA98lH1wtLYavwio/f29E4JAww9w+abzPZIVQ6M1dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3897 (0xf39) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: Aug 4 17:48:48 2025 GMT Not After : Aug 11 17:48:48 2025 GMT Subject: CN=6890f280-31f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:ed:cc:31:d7:e8:e7:11:64:23:44:6b:8c: 67:ef:85:7c:6c:b0:7f:78:51:4c:1f:a7:66:7f:07: 1f:75:1d:a6:68:08:c9:5f:97:ae:f6:ef:69:e3:72: 0d:74:5c:4b:e7:f8:55:78:2e:59:83:95:ee:63:a5: 53:a1:b3:f7:6c:b1:2e:ef:57:00:91:dc:44:00:24: f9:d4:15:eb:e6:97:8b:ab:28:cb:a6:e6:8b:17:57: 51:0e:9b:3b:1e:0e:3b:13:70:bf:29:ed:13:7d:d9: 24:ff:91:5d:91:0f:60:27:26:26:c5:67:c9:dc:a1: 3d:2f:bb:84:32:e5:19:b7:33:13:94:e5:35:03:69: 87:e3:f8:85:88:83:9a:0a:26:2e:6b:3e:98:cd:8c: 57:06:f0:9a:e5:db:83:73:fa:d4:03:e8:f4:d2:da: c7:27:8f:3a:87:aa:cd:0c:0e:d6:7b:9f:4d:53:2b: bf:8c:b5:06:53:2d:e0:c5:6b:d1:d4:5d:5a:dd:a9: 2f:d6:9b:16:ec:75:6d:2c:52:4d:4e:86:f8:48:d1: 7a:5a:35:af:b2:a9:8d:ed:48:c9:a3:cc:6c:5a:71: bb:ae:00:a4:83:b0:f5:ac:59:31:dd:10:f9:4a:7c: a6:d9:ea:39:8a:48:64:1a:d4:30:30:35:c7:a8:97: fb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C3:1F:B6:0D:ED:E7:E7:93:0C:C4:6D:82:33:CF:3D:52:B2:A3:13 X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:45:93:a4:c5:67:0b:1a:52:ad:b6:70:70:e4:5c:cc:70:9c: 26:99:e8:7f:c5:52:27:28:4f:3f:1c:c0:7b:86:7d:ba:65:c3: 97:22:f5:7a:1e:7f:0d:5f:f9:f9:45:d1:54:1b:ff:fb:62:66: b4:c5:b8:ac:28:3d:aa:3a:32:e8:27:77:16:4c:cb:1f:f2:06: eb:5d:80:0d:cf:9d:91:84:2f:fc:35:37:b5:c0:1c:d6:93:39: c2:05:b0:f6:d4:cc:6d:d3:0c:04:dd:a3:38:c9:a9:fc:0b:d2: 9a:c0:a5:59:35:f1:41:03:e4:17:13:18:42:ae:7b:a1:7a:07: 7c:1a:b1:9a:ff:af:9c:4d:90:9b:37:e8:07:44:30:4d:44:e0: f8:86:7d:9b:53:af:b5:87:ee:dd:00:41:eb:98:2a:62:25:1b: fe:fb:d6:f2:e7:8d:bd:9b:bb:a7:31:21:b5:6e:b2:b0:7b:f0: 20:c9:51:e2:5a:1f:8c:00:b6:3f:ef:06:9e:db:7e:d1:e5:96: 1a:bc:38:37:b4:eb:17:83:8a:a6:9f:7e:77:c6:78:ef:bd:dc: 4f:34:98:d8:80:cb:95:fc:c6:53:a1:d1:f9:ee:7c:48:af:28: e6:65:69:78:fc:32:0b:b4:49:61:b6:9a:2e:2a:eb:6e:8e:aa: ae:ed:0f:f4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjUwODA0MTc0ODQ4WhcNMjUwODExMTc0ODQ4WjAYMRYwFAYD VQQDEw02ODkwZjI4MC0zMWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnDtzDHX6OcRZCNEa4xn74V8bLB/eFFMH6dmfwcfdR2maAjJX5eu9u9p43IN dFxL5/hVeC5Zg5XuY6VTobP3bLEu71cAkdxEACT51BXr5peLqyjLpuaLF1dRDps7 Hg47E3C/Ke0Tfdkk/5FdkQ9gJyYmxWfJ3KE9L7uEMuUZtzMTlOU1A2mH4/iFiIOa CiYuaz6YzYxXBvCa5duDc/rUA+j00trHJ486h6rNDA7We59NUyu/jLUGUy3gxWvR 1F1a3akv1psW7HVtLFJNTob4SNF6WjWvsqmN7UjJo8xsWnG7rgCkg7D1rFkx3RD5 Snym2eo5ikhkGtQwMDXHqJf7PQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKrDH7YN 7efnkwzEbYIzzz1SsqMTMB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWRZOkxWcLGlKttnBw5FzMcJwmmeh/xVInKE8/HMB7hn26ZcOXIvV6 Hn8NX/n5RdFUG//7Yma0xbisKD2qOjLoJ3cWTMsf8gbrXYANz52RhC/8NTe1wBzW kznCBbD21Mxt0wwE3aM4yan8C9KawKVZNfFBA+QXExhCrnuhegd8GrGa/6+cTZCb N+gHRDBNROD4hn2bU6+1h+7dAEHrmCpiJRv++9by5429m7unMSG1brKwe/AgyVHi Wh+MALY/7wae237R5ZYavDg3tOsXg4qmn353xnjvvdxPNJjYgMuV/MZTodH57nxI ryjmZWl4/DILtElhtpouKutujqqu7Q/0 -----END CERTIFICATE-----Generated at Wed Aug 6 11:05:17 2025 by rpki-client