$ rpki-client -vvf rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft File: B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft (raw, json) Hash identifier: +C+hN7Jg2mgQE6bXdBCYd2yIYc1iJ7F1q86W1/gk248= Subject key identifier: 3C:C9:A8:1D:95:F9:0A:55:D6:B1:37:7E:C8:D5:51:37:59:B0:CA:B5 Authority key identifier: 07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B Certificate issuer: /CN=A917C5E0/serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft Manifest number: BD Signing time: Sat 09 Aug 2025 06:18:31 +0000 Manifest this update: Sat 09 Aug 2025 06:18:30 +0000 Manifest next update: Sat 16 Aug 2025 06:18:30 +0000 Files and hashes: 1: B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl (hash: KgMDURdq2ED2qFATNuc8q/QyFKYeF5L6SNREnqxQd8M=) 2: 335E880A5A1811EFB08E4F38C4F9AE02.roa (hash: jtzgN1MOOr070vNZYtooFlK21goBoXbnFmu7OIsIw2o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C5E0, serialNumber=078B4A80D1DFE6C052533AADB19534AC59A3954B Validity Not Before: Aug 9 06:18:30 2025 GMT Not After : Aug 16 06:18:30 2025 GMT Subject: CN=6896e837-146d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4b:df:ac:c4:39:be:19:1d:4f:6e:9d:b2:33: 50:68:6c:c8:4a:50:24:1b:d1:1e:44:df:06:99:22: 37:2c:b4:51:e2:00:83:a3:55:6c:87:76:55:38:f2: 6d:3d:ff:7e:3d:f5:29:bd:c7:78:11:4e:ec:a3:d2: fb:68:5f:df:22:21:1b:09:8b:a1:de:32:ae:ba:f9: 99:89:a9:25:f6:1c:78:5f:1c:fa:df:59:c8:43:8b: c6:d9:35:08:6d:68:16:e9:6a:78:5c:6e:9f:74:31: bf:f4:9d:44:57:fe:b8:03:2b:27:87:b6:d4:ab:0e: 39:ea:34:fd:d1:1e:fb:ad:5a:8f:93:d3:40:bf:a1: 85:74:62:b9:a8:c8:ce:18:bf:0a:a0:82:65:a8:df: 75:35:73:42:f8:fe:1c:42:01:2e:a8:fc:a5:36:f7: a3:d7:6d:8d:0d:b7:d6:a7:08:11:8e:1b:7f:bb:74: 19:45:40:6f:9b:a0:34:9c:bf:0d:28:38:9d:17:4b: 09:ac:3c:74:2a:78:d3:c5:6f:2f:35:1c:0f:ff:16: f8:aa:0b:1b:b4:fc:fb:e1:b7:ad:38:35:93:06:9b: 0c:dc:e6:52:fb:a3:38:65:59:53:ee:2e:a5:96:8d: 91:dd:13:86:94:a9:92:d6:7e:90:6d:46:a8:77:07: 8a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C9:A8:1D:95:F9:0A:55:D6:B1:37:7E:C8:D5:51:37:59:B0:CA:B5 X509v3 Authority Key Identifier: keyid:07:8B:4A:80:D1:DF:E6:C0:52:53:3A:AD:B1:95:34:AC:59:A3:95:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B4tKgNHf5sBSUzqtsZU0rFmjlUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C5E0/8720AB185A1711EFAA22A729C4F9AE02/B4tKgNHf5sBSUzqtsZU0rFmjlUs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:92:fd:9f:c2:71:d1:33:18:c0:b3:9b:a4:0c:8d:0b:4f:c2: 17:a4:a8:b2:cb:27:cb:ff:d2:80:0c:98:a7:aa:bc:21:42:10: 02:2f:de:54:97:7d:d1:42:aa:ad:30:cf:a4:0d:66:e2:a2:d6: 8d:ff:1b:ec:4a:77:0e:ca:8e:bf:39:f4:d2:7c:4c:c9:5a:58: 31:ec:b3:f6:5f:1c:bc:69:20:d9:c5:35:0d:a9:3b:4c:4f:3c: d0:56:96:0d:2d:0d:44:ad:34:b6:1a:2b:8c:69:ab:89:69:45: 44:fb:47:6b:29:74:39:80:2c:7a:62:44:d3:8b:64:35:46:54: 5a:b9:59:d5:19:3e:80:f0:8d:44:a0:d6:85:96:78:29:72:cc: 9d:8b:b0:db:e8:e7:4b:45:ae:45:fb:2b:47:28:0f:45:1c:50: 93:72:1b:a9:07:86:cf:49:2d:a2:2f:2f:a8:0e:22:b1:b8:1e: ad:ff:25:fe:f0:62:40:96:5e:2c:d5:5c:b1:fe:3f:4c:1a:e4: 71:89:8f:cc:04:af:24:d4:51:0e:ca:c9:e8:ee:52:e4:74:ca: 53:54:8c:73:a3:86:0d:34:87:51:f3:4a:38:e2:a2:d2:10:f1: 00:70:2e:2f:b4:1a:8c:51:b0:e3:d1:9c:be:75:32:21:4e:6f: f7:26:59:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M1RTAxMTAvBgNVBAUTKDA3OEI0QTgwRDFERkU2QzA1MjUzM0FBREIxOTUzNEFD NTlBMzk1NEIwHhcNMjUwODA5MDYxODMwWhcNMjUwODE2MDYxODMwWjAYMRYwFAYD VQQDEw02ODk2ZTgzNy0xNDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA60vfrMQ5vhkdT26dsjNQaGzISlAkG9EeRN8GmSI3LLRR4gCDo1Vsh3ZVOPJt Pf9+PfUpvcd4EU7so9L7aF/fIiEbCYuh3jKuuvmZiakl9hx4Xxz631nIQ4vG2TUI bWgW6Wp4XG6fdDG/9J1EV/64Aysnh7bUqw456jT90R77rVqPk9NAv6GFdGK5qMjO GL8KoIJlqN91NXNC+P4cQgEuqPylNvej122NDbfWpwgRjht/u3QZRUBvm6A0nL8N KDidF0sJrDx0KnjTxW8vNRwP/xb4qgsbtPz74betODWTBpsM3OZS+6M4ZVlT7i6l lo2R3ROGlKmS1n6QbUaodweKJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzJqB2V +QpV1rE3fsjVUTdZsMq1MB8GA1UdIwQYMBaAFAeLSoDR3+bAUlM6rbGVNKxZo5VL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzVFMC84NzIwQUIxODVB MTcxMUVGQUEyMkE3MjlDNEY5QUUwMi9CNHRLZ05IZjVzQlNVenF0c1pVMHJGbWps VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I0dEtnTkhmNXNCU1V6cXRzWlUwckZtamxVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzVFMC84NzIwQUIxODVBMTcxMUVGQUEyMkE3MjlDNEY5QUUwMi9CNHRLZ05IZjVz QlNVenF0c1pVMHJGbWpsVXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMkv2fwnHRMxjAs5ukDI0LT8IXpKiyyyfL/9KADJinqrwhQhACL95U l33RQqqtMM+kDWbiotaN/xvsSncOyo6/OfTSfEzJWlgx7LP2Xxy8aSDZxTUNqTtM TzzQVpYNLQ1ErTS2GiuMaauJaUVE+0drKXQ5gCx6YkTTi2Q1RlRauVnVGT6A8I1E oNaFlngpcsydi7Db6OdLRa5F+ytHKA9FHFCTchupB4bPSS2iLy+oDiKxuB6t/yX+ 8GJAll4s1Vyx/j9MGuRxiY/MBK8k1FEOysno7lLkdMpTVIxzo4YNNIdR80o44qLS EPEAcC4vtBqMUbDj0Zy+dTIhTm/3Jlmx -----END CERTIFICATE-----Generated at Mon Aug 11 02:05:25 2025 by rpki-client