$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft File: B2lXYTNYblq0-b9NpSttXKFtnNU.mft (raw, json) Hash identifier: WU8ssRioLsn/KnAr0B5FlsqS6lrRO50WBcRUSbZxnlk= Subject key identifier: 7D:E6:95:74:4E:D1:1F:58:5A:29:30:3E:3B:7F:EE:CA:8C:DD:CE:F6 Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 Certificate issuer: /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Certificate serial: 0BFB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft Manifest number: 0BD7 Signing time: Sat 06 Sep 2025 19:03:57 +0000 Manifest this update: Sat 06 Sep 2025 19:03:57 +0000 Manifest next update: Sat 13 Sep 2025 19:03:57 +0000 Files and hashes: 1: B2lXYTNYblq0-b9NpSttXKFtnNU.crl (hash: BnSlpq7md69WEz9q6yHcj0ImHxUCoAJFhnVMW9y1rDE=) 2: 4B6A736E0A9111EEB13EAF44C4F9AE02.roa (hash: PsugJWGM5ONkTT/QKBNZcGT+Fx1Ca8/gO0JC72FJj/U=) 3: 4DC77C600A9111EEB13EAF44C4F9AE02.roa (hash: DqyU+6nXvs6HOFMKI16Emo+flYs9ktEh2tA31OF4Cw4=) 4: DAFD055806F811EC9558C827C4F9AE02.roa (hash: re/IaJHi711uC7kt/qe355ZQkGdlvPCAcW6M1Vv6a/M=) 5: 4CC6B77C0A9111EEB13EAF44C4F9AE02.roa (hash: PDvCAZx5hVOPcyfQ4LwOi2hSUYUbvW/tgd4X2jQj+2E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 19:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3067 (0xbfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5 Validity Not Before: Sep 6 19:03:57 2025 GMT Not After : Sep 13 19:03:57 2025 GMT Subject: CN=68bc859d-09d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:f3:09:4c:ec:17:b9:64:57:43:a3:69:6e: f3:1c:f4:a8:e1:7c:5c:7d:4e:91:80:51:48:ec:2f: b1:f2:f4:3b:01:6a:91:a4:a9:b7:f8:d9:23:7a:62: 75:2a:e1:41:73:c0:74:33:8f:e1:d0:26:be:38:1e: c6:bc:aa:a5:c4:91:97:dd:ff:35:79:3f:33:a1:18: b9:06:40:32:fe:ea:25:ba:ed:dd:ee:28:f1:86:c4: ba:d6:b7:fe:df:6a:ff:87:a4:92:5a:5d:f8:28:c5: 88:d6:3c:49:58:32:52:aa:ce:18:b3:79:64:5f:4f: 44:e5:10:d7:9b:de:e8:69:fe:39:76:cc:4e:01:0b: 41:f2:56:b3:89:61:37:04:6b:a6:d0:c7:38:eb:58: e8:7a:e9:2d:ad:6c:62:bc:14:9c:d0:22:8d:d3:3f: 50:03:f8:25:71:ec:78:98:01:de:c9:fb:0f:a3:bd: e9:33:9a:da:7d:72:09:6e:09:5a:9e:84:26:9d:c6: a6:23:47:17:9c:5a:c7:d6:a0:2c:3b:d3:71:5b:d9: d9:5c:1e:82:79:39:1b:38:eb:6c:8d:0b:b3:63:94: 61:02:b5:42:79:d0:69:e7:9d:ce:b7:bf:d6:aa:9e: 65:0b:f1:1b:55:ea:59:99:8a:18:10:cf:9c:d3:1a: 28:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E6:95:74:4E:D1:1F:58:5A:29:30:3E:3B:7F:EE:CA:8C:DD:CE:F6 X509v3 Authority Key Identifier: keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:6c:3e:4d:f1:47:c7:08:22:80:f1:04:f2:94:ed:81:64:20: d9:df:62:18:41:e3:7d:4a:da:a4:a5:4f:af:8f:cc:a8:e5:79: 19:f5:b3:89:ac:f4:27:42:67:66:e2:81:0e:75:f7:53:84:13: 3b:9d:a1:29:c4:56:86:0a:5d:61:de:92:23:73:49:05:4d:50: 11:ee:89:84:46:b9:84:d9:7d:0a:1b:7b:f5:0b:55:58:ce:45: 3b:2c:2a:01:26:a5:fc:bb:01:0b:84:6d:33:e3:1f:5d:1a:ed: 98:48:d2:de:e0:ab:5f:3a:58:9c:7f:13:6a:3d:23:23:e6:9f: aa:b1:3d:2d:f4:18:c7:f3:a1:b1:c0:cd:f3:8a:1c:cb:f8:1d: 4e:21:9b:96:3d:48:c4:67:ad:94:30:ab:3e:09:6d:22:24:3c: f9:a0:0e:36:6c:9c:28:16:8a:a8:b9:0a:e1:1a:7e:3d:5a:85: 95:26:2d:43:ff:48:3a:25:ab:bb:39:bc:9b:8c:76:39:76:87: dd:68:14:71:40:6a:f9:c4:01:a3:35:8a:5b:15:17:af:b0:1a: ca:f0:d7:ef:79:73:bc:f9:ac:92:a3:33:b3:82:8b:40:3f:ea: 0c:6a:ed:54:66:8b:18:57:7e:ae:10:fd:09:e3:a2:92:6c:9a: bb:49:78:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTA1N0IxMTAvBgNVBAUTKDA3Njk1NzYxMzM1ODZFNUFCNEY5QkY0REE1MkI2RDVD QTE2RDlDRDUwHhcNMjUwOTA2MTkwMzU3WhcNMjUwOTEzMTkwMzU3WjAYMRYwFAYD VQQDEw02OGJjODU5ZC0wOWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApHXzCUzsF7lkV0OjaW7zHPSo4XxcfU6RgFFI7C+x8vQ7AWqRpKm3+NkjemJ1 KuFBc8B0M4/h0Ca+OB7GvKqlxJGX3f81eT8zoRi5BkAy/uoluu3d7ijxhsS61rf+ 32r/h6SSWl34KMWI1jxJWDJSqs4Ys3lkX09E5RDXm97oaf45dsxOAQtB8laziWE3 BGum0Mc461joeuktrWxivBSc0CKN0z9QA/glcex4mAHeyfsPo73pM5rafXIJbgla noQmncamI0cXnFrH1qAsO9NxW9nZXB6CeTkbOOtsjQuzY5RhArVCedBp553Ot7/W qp5lC/EbVepZmYoYEM+c0xoogwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3mlXRO 0R9YWikwPjt/7sqM3c72MB8GA1UdIwQYMBaAFAdpV2EzWG5atPm/TaUrbVyhbZzV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDU3Qi9BOTE3RTc1NDI2 MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJscTAtYjlOcFN0dFhLRnRu TlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IybFhZVE5ZYmxxMC1iOU5wU3R0WEtGdG5OVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDU3Qi9BOTE3RTc1NDI2MDUxMUVBQjQ2NEUxNTVDNEY5QUUwMi9CMmxYWVROWWJs cTAtYjlOcFN0dFhLRnRuTlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfbD5N8UfHCCKA8QTylO2BZCDZ32IYQeN9StqkpU+vj8yo5XkZ9bOJ rPQnQmdm4oEOdfdThBM7naEpxFaGCl1h3pIjc0kFTVAR7omERrmE2X0KG3v1C1VY zkU7LCoBJqX8uwELhG0z4x9dGu2YSNLe4KtfOlicfxNqPSMj5p+qsT0t9BjH86Gx wM3zihzL+B1OIZuWPUjEZ62UMKs+CW0iJDz5oA42bJwoFoqouQrhGn49WoWVJi1D /0g6Jau7ObybjHY5dofdaBRxQGr5xAGjNYpbFRevsBrK8NfveXO8+aySozOzgotA P+oMau1UZosYV36uEP0J46KSbJq7SXho -----END CERTIFICATE-----Generated at Mon Sep 8 09:06:42 2025 by rpki-client