$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft File: BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft (raw, json) Hash identifier: ru/L9bZjjjemtewG7O7vHNc0Ge9qZ87es4UD6WjsKVk= Subject key identifier: AF:46:B4:50:77:74:58:A1:C7:F1:88:3D:E0:ED:F8:8D:FB:33:1C:5F Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93 Certificate issuer: /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293 Certificate serial: AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft Manifest number: A4 Signing time: Fri 05 Sep 2025 06:50:17 +0000 Manifest this update: Fri 05 Sep 2025 06:50:17 +0000 Manifest next update: Fri 12 Sep 2025 06:50:17 +0000 Files and hashes: 1: BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl (hash: dFCfbrCg53pA3Ist/Oe6eWdZs8BBYdvrRBJuBhRcYDQ=) 2: 0576696C889311F0B21CA526C4F9AE02.roa (hash: 5eG8sDChja1gXmJsueTdz5dQwV5fJE7Ln4KJ9zejKk4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293 Validity Not Before: Sep 5 06:50:17 2025 GMT Not After : Sep 12 06:50:17 2025 GMT Subject: CN=68ba8829-0f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:58:cd:f2:f0:f1:27:6f:83:cf:86:70:be:34: 2e:10:ab:11:f6:c9:1b:68:cb:d0:50:8a:12:a4:52: a1:a1:f2:67:0b:3c:c4:74:c3:76:4a:37:53:8a:74: 81:61:40:5a:83:2f:43:37:9a:c9:08:22:cc:e9:ef: 3c:1c:0e:6c:2b:1f:ad:cb:38:5d:ba:1d:d1:6d:ce: 4a:d5:9f:ce:0f:0c:ec:b8:97:a8:b0:56:1e:64:0b: c7:24:94:9b:83:0a:86:49:00:db:8a:bc:a7:72:e2: 46:b3:ab:1e:17:8a:37:5c:54:81:9f:ee:b2:4f:cc: 6a:b4:a9:58:ba:49:a7:17:1d:b5:3e:bb:5a:97:c7: 69:ee:98:b8:b9:9b:ad:5f:1f:8a:57:c7:37:0a:b4: 67:cc:2e:ea:88:e8:7e:4f:ca:12:dc:a1:93:7e:4d: 76:66:1b:53:45:76:33:ab:0b:06:8b:2b:33:4e:77: 19:f9:1a:aa:7a:f9:87:e5:d1:49:22:de:ec:8e:63: 76:2a:46:08:2f:63:6f:87:b2:b9:42:ea:9c:15:02: c3:11:5d:67:b7:eb:10:1e:59:85:d2:49:21:5e:1a: c8:b3:0c:ac:4e:89:30:cd:6a:c3:39:b7:a4:48:2d: 54:c8:31:72:c2:14:d0:48:d0:33:19:ec:ff:6c:7b: 3b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:46:B4:50:77:74:58:A1:C7:F1:88:3D:E0:ED:F8:8D:FB:33:1C:5F X509v3 Authority Key Identifier: keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:9d:85:ee:f2:8e:bf:e9:a3:42:c0:7e:cb:27:fa:86:68:58: c0:d9:56:b5:3c:df:d6:51:bc:62:f7:4b:1e:8f:aa:ef:5f:a7: 6e:0c:17:93:8c:0d:13:80:02:4f:1e:b9:3f:3b:d9:f3:60:08: 60:a2:4e:bc:f7:1b:49:51:20:51:5e:8c:0f:fb:af:7d:87:1e: e1:f6:66:43:53:6b:63:d3:ac:ed:2c:b4:48:4c:de:0f:52:d0: 6b:61:67:e3:d2:22:45:8e:21:f7:92:cb:99:81:d6:d8:49:fe: 42:7d:67:7a:3e:e9:b7:c0:70:a5:84:e8:0b:81:17:ef:5f:ed: 21:83:e0:b4:bf:d5:44:18:43:2b:07:02:7f:f4:d2:35:1d:c6: 99:af:9c:81:22:c6:8d:27:1f:f7:ec:8c:5b:14:51:05:d8:1b: b1:a0:1f:41:1b:8f:24:fd:15:a4:e5:fd:de:5b:56:8b:5a:7e: f1:fd:92:1a:0c:98:a6:a2:10:4a:15:5a:79:9a:af:24:5d:e9: c8:4c:84:48:39:4e:70:5a:7d:3b:b1:2a:5e:17:71:64:ed:f2: 81:b5:c4:67:c0:2b:f6:f2:30:52:a6:51:cc:1b:03:b2:22:dd: 3d:24:db:49:90:a3:80:7e:d0:91:17:4b:90:cf:e9:04:f9:10: f9:6c:86:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKDA0Qzc5QTRERDI0RkZBMDNGQThGOTI5Njc2NkY4MkEw Mzg1Q0UyOTMwHhcNMjUwOTA1MDY1MDE3WhcNMjUwOTEyMDY1MDE3WjAYMRYwFAYD VQQDEw02OGJhODgyOS0wZjViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1jN8vDxJ2+Dz4ZwvjQuEKsR9skbaMvQUIoSpFKhofJnCzzEdMN2SjdTinSB YUBagy9DN5rJCCLM6e88HA5sKx+tyzhduh3Rbc5K1Z/ODwzsuJeosFYeZAvHJJSb gwqGSQDbiryncuJGs6seF4o3XFSBn+6yT8xqtKlYukmnFx21Prtal8dp7pi4uZut Xx+KV8c3CrRnzC7qiOh+T8oS3KGTfk12ZhtTRXYzqwsGiyszTncZ+RqqevmH5dFJ It7sjmN2KkYIL2Nvh7K5QuqcFQLDEV1nt+sQHlmF0kkhXhrIswysTokwzWrDObek SC1UyDFywhTQSNAzGez/bHs75wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9GtFB3 dFihx/GIPeDt+I37MxxfMB8GA1UdIwQYMBaAFATHmk3ST/oD+o+SlnZvgqA4XOKT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS83QzZFREE4Q0Ex Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi9CTWVhVGRKUC1nUDZqNUtXZG0tQ29EaGM0 cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JNZWFUZEpQLWdQNmo1S1dkbS1Db0RoYzRwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTg3RS83QzZFREE4Q0ExQ0YxMUVGODc4RTYwNjFDNEY5QUUwMi9CTWVhVGRKUC1n UDZqNUtXZG0tQ29EaGM0cE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArnYXu8o6/6aNCwH7LJ/qGaFjA2Va1PN/WUbxi90sej6rvX6duDBeT jA0TgAJPHrk/O9nzYAhgok689xtJUSBRXowP+699hx7h9mZDU2tj06ztLLRITN4P UtBrYWfj0iJFjiH3ksuZgdbYSf5CfWd6Pum3wHClhOgLgRfvX+0hg+C0v9VEGEMr BwJ/9NI1HcaZr5yBIsaNJx/37IxbFFEF2BuxoB9BG48k/RWk5f3eW1aLWn7x/ZIa DJimohBKFVp5mq8kXenITIRIOU5wWn07sSpeF3Fk7fKBtcRnwCv28jBSplHMGwOy It09JNtJkKOAftCRF0uQz+kE+RD5bIbq -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:10 2025 by rpki-client