$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft File: bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft (raw, json) Hash identifier: E5rM0j0p5rNjhxsvmOcvGi61hK8SHl1mqgq2sWgsu3U= Subject key identifier: 83:DC:3A:C6:A8:7C:79:79:30:2B:C1:12:C8:13:4C:BA:F9:C1:B7:AB Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91 Certificate issuer: /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91 Certificate serial: 019C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft Manifest number: 0192 Signing time: Sat 09 Aug 2025 03:53:44 +0000 Manifest this update: Sat 09 Aug 2025 03:53:43 +0000 Manifest next update: Sat 16 Aug 2025 03:53:43 +0000 Files and hashes: 1: bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl (hash: I5kkP7v5dKoERIEuo84RdTvP0QcdiaG9XE5CNgPJChM=) 2: 62A9A9AC240A11F0A6893962C4F9AE02.roa (hash: LvnWXi9L3u+fKG77QzH6WnEL9Cc/sS3Yn7M7dhZqrvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F69, serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91 Validity Not Before: Aug 9 03:53:43 2025 GMT Not After : Aug 16 03:53:43 2025 GMT Subject: CN=6896c648-e47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:b2:6b:a6:dc:ed:38:e7:c7:46:ae:a9:a8: 02:97:18:06:8e:66:23:a8:1e:8b:ae:d0:a9:c6:8b: 2b:a3:a2:c9:14:4c:01:5f:44:3a:fd:d0:0c:39:9a: 3d:1b:f4:2c:5e:19:02:a3:6b:55:e1:03:79:b7:a1: ec:3f:17:39:9d:a6:51:98:ab:b8:16:26:22:03:7a: 12:e4:40:be:d4:fc:57:5c:9c:cb:06:84:22:2e:0b: c2:18:4b:15:e2:36:55:cf:24:4a:d2:45:b8:05:da: 7c:f3:7e:e9:3a:60:77:e7:b4:5c:59:be:ed:88:74: 86:06:8a:3b:3f:ad:1a:01:92:ea:cb:d0:c2:bb:2e: 87:c1:7c:e8:0a:d8:5d:1c:87:22:58:c8:0f:c0:cf: 25:75:74:a5:02:10:d5:b4:af:af:f4:16:0e:ca:a5: 53:4e:8f:5c:3b:93:c0:08:cb:5d:a2:7f:b8:47:b5: f2:4c:ec:f1:7b:3d:06:8f:3b:32:05:9e:cb:58:ff: 3d:2c:6e:12:7f:81:66:e1:e8:fe:a7:25:1c:3b:cb: 14:b0:e5:e6:cd:f9:cd:23:50:69:75:95:bc:db:14: bc:a3:8c:18:e0:fa:1d:6b:a3:9c:f8:19:5c:27:b2: 2f:1c:a3:5b:c9:c1:25:f4:2d:da:b3:51:80:8f:cd: 86:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:DC:3A:C6:A8:7C:79:79:30:2B:C1:12:C8:13:4C:BA:F9:C1:B7:AB X509v3 Authority Key Identifier: keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption df:92:7e:42:73:1a:2d:26:37:6d:80:9f:0c:26:84:ed:ab:ee: fb:ca:b8:67:70:4a:d1:53:0f:7e:18:da:8f:19:0f:be:cf:c9: 20:7d:27:3d:cf:f7:ba:fb:45:c4:54:d5:88:0b:40:dc:dd:e7: e6:42:b5:c7:3e:33:9b:31:39:ce:c3:94:af:56:ea:14:5b:fe: 53:5e:7a:e4:36:af:a1:e4:3b:53:32:3d:ab:90:54:04:08:5d: 21:d0:25:cc:83:3c:0e:4b:07:89:7c:70:c3:0f:9c:0a:6b:00: ce:21:04:02:f6:cd:29:c8:b1:29:1c:e3:b8:24:01:95:ab:93: 76:2b:ad:66:25:b9:0e:79:ec:dc:94:7f:9d:dd:8b:e3:8f:90: 82:8f:b6:09:ef:d4:e9:34:10:71:b6:c7:2f:3a:8c:c6:18:0b: f4:eb:b6:d5:34:33:5e:0b:1f:64:42:55:29:aa:ed:ca:13:93: 2d:4f:29:5b:37:57:dd:fe:a5:2d:5f:7d:d1:80:48:52:1a:1b: c9:4c:2c:d7:33:6d:c5:d9:ea:8a:11:ce:46:b9:e7:5f:0c:f0: 47:a0:02:dc:d2:70:b9:19:c4:7a:ab:09:a3:7e:56:80:d7:0f: 61:e6:b1:f3:8e:af:99:45:b6:6b:39:4b:ae:37:d0:b8:dd:ba: 1f:76:72:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGNjkxMTAvBgNVBAUTKDZFOTVBNjg5MjIwOTdFNzZDNERCMTI0N0VFQ0VFMUEz QjExRjhFOTEwHhcNMjUwODA5MDM1MzQzWhcNMjUwODE2MDM1MzQzWjAYMRYwFAYD VQQDEw02ODk2YzY0OC1lNDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsOuya6bc7Tjnx0auqagClxgGjmYjqB6LrtCpxosro6LJFEwBX0Q6/dAMOZo9 G/QsXhkCo2tV4QN5t6HsPxc5naZRmKu4FiYiA3oS5EC+1PxXXJzLBoQiLgvCGEsV 4jZVzyRK0kW4Bdp8837pOmB357RcWb7tiHSGBoo7P60aAZLqy9DCuy6HwXzoCthd HIciWMgPwM8ldXSlAhDVtK+v9BYOyqVTTo9cO5PACMtdon+4R7XyTOzxez0Gjzsy BZ7LWP89LG4Sf4Fm4ej+pyUcO8sUsOXmzfnNI1BpdZW82xS8o4wY4Poda6Oc+Blc J7IvHKNbycEl9C3as1GAj82GqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIPcOsao fHl5MCvBEsgTTLr5wberMB8GA1UdIwQYMBaAFG6VpokiCX52xNsSR+7O4aOxH46R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEY2OS9EQ0Y1QzNEMjFB NUYxMUVFOUFBQUIzODZDNEY5QUUwMi9icFdtaVNJSmZuYkUyeEpIN3M3aG83RWZq cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwV21pU0lKZm5iRTJ4Skg3czdobzdFZmpwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEY2OS9EQ0Y1QzNEMjFBNUYxMUVFOUFBQUIzODZDNEY5QUUwMi9icFdtaVNJSmZu YkUyeEpIN3M3aG83RWZqcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDfkn5CcxotJjdtgJ8MJoTtq+77yrhncErRUw9+GNqPGQ++z8kgfSc9 z/e6+0XEVNWIC0Dc3efmQrXHPjObMTnOw5SvVuoUW/5TXnrkNq+h5DtTMj2rkFQE CF0h0CXMgzwOSweJfHDDD5wKawDOIQQC9s0pyLEpHOO4JAGVq5N2K61mJbkOeezc lH+d3Yvjj5CCj7YJ79TpNBBxtscvOozGGAv067bVNDNeCx9kQlUpqu3KE5MtTylb N1fd/qUtX33RgEhSGhvJTCzXM23F2eqKEc5GuedfDPBHoALc0nC5GcR6qwmjflaA 1w9h5rHzjq+ZRbZrOUuuN9C43bofdnIS -----END CERTIFICATE-----Generated at Mon Aug 11 02:04:14 2025 by rpki-client