$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft File: BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json) Hash identifier: 63MOSMrTmGJMxUyhJPy0i3Ey/LbP6McLaJSnx5wP1NY= Subject key identifier: 76:BD:5A:6A:01:7F:69:11:C8:56:33:44:EA:D7:4C:C6:95:8C:68:28 Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Certificate serial: 01C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft Manifest number: 01BB Signing time: Wed 17 Sep 2025 03:37:04 +0000 Manifest this update: Wed 17 Sep 2025 03:37:03 +0000 Manifest next update: Wed 24 Sep 2025 03:37:03 +0000 Files and hashes: 1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: e1rk8qOtYsj46zMqfA/kBWiR/V2eEGQOVs/ghQFWZFE=) 2: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: Q3/I4xZV8CvWyhr+A+P9zzW5K8pcc6S3V6pLPjC2BoQ=) 3: EA22589E373C11F0909EF25DC4F9AE02.roa (hash: pK7K0oDGB09OEHam5uLFYf312YyVDqFKY5nBRiwk3eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 451 (0x1c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Validity Not Before: Sep 17 03:37:03 2025 GMT Not After : Sep 24 03:37:03 2025 GMT Subject: CN=68ca2ce0-80a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d6:28:fe:4f:bb:31:77:29:5b:21:d0:81:21: 57:0e:3a:dc:b8:71:bb:9e:07:4b:da:de:96:58:60: f6:17:a7:21:13:f0:10:07:cd:4f:a3:a6:a0:c3:a8: 79:e2:78:c5:64:03:91:b7:0c:8a:38:7c:97:35:2a: 2d:79:1f:de:8e:fd:35:6d:c2:8a:2e:d5:03:56:1f: 6b:99:bb:59:5b:6e:83:cf:58:26:81:4a:e1:13:b6: 1d:b4:44:ba:08:f6:a9:dc:97:89:7c:a5:78:65:1e: c4:67:03:69:36:eb:e4:e2:ae:c8:eb:78:96:ab:1b: 2d:be:ee:f3:ec:17:94:40:5f:81:25:eb:1d:93:2e: a9:0e:6d:59:9d:f1:47:fb:67:1d:b5:14:1e:51:11: 02:ec:55:ba:41:b9:f8:b6:75:fa:f8:68:f8:f9:94: 59:b8:3a:1e:9e:64:b3:1e:ed:28:8d:cd:6b:49:2c: 4f:fe:bc:08:cf:dd:3d:19:7a:09:ee:65:f4:87:87: 38:9f:a3:12:b1:82:b7:40:bb:5c:3f:41:d6:e4:52: 76:65:01:b3:a7:8f:a5:6e:fd:df:b2:c5:38:89:b9: 5d:8d:6d:c9:f9:82:ef:52:58:1a:c1:0d:d3:a0:c5: 64:dc:2b:d1:7c:6d:82:06:b1:10:e8:12:ef:ff:fb: cb:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:BD:5A:6A:01:7F:69:11:C8:56:33:44:EA:D7:4C:C6:95:8C:68:28 X509v3 Authority Key Identifier: keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:e7:c4:05:28:ef:56:80:dc:f4:bc:e6:4d:ef:fd:39:38:dc: f6:05:95:e1:be:91:74:84:1f:bf:d0:41:c2:4c:97:bb:9b:ce: 59:93:e3:d4:50:e6:c2:d3:11:02:ef:3d:86:82:85:cd:bf:72: 86:a5:b6:88:b3:c0:b9:39:7a:ce:09:7b:85:3b:75:54:83:48: 46:c0:0f:7f:0a:8a:00:74:e4:64:f1:d5:74:64:1d:79:b2:66: 5c:de:78:d2:4e:de:4b:94:87:b0:1e:6b:0e:1d:4a:b0:67:b7: db:a8:43:1a:ef:2e:01:da:64:43:08:e6:65:5e:36:e2:79:58: 54:3a:0a:7d:45:11:57:8f:0c:df:66:ba:f0:6b:f8:66:28:d9: 53:e6:fc:14:74:a2:0f:e6:9d:dc:0b:c7:96:a2:08:23:cb:25: 68:8b:cc:6f:b3:79:a5:74:d3:32:4e:dd:ed:29:f0:a5:73:79: 23:c5:0a:bf:54:b3:c7:51:fc:21:1f:9f:d4:b5:5d:61:4f:28: a9:44:a0:d0:cf:e5:00:ff:c4:98:04:11:17:ff:df:44:72:c6: cb:90:e2:43:4f:80:ec:f6:c3:f2:83:b8:20:81:92:be:2c:3a: 5e:74:17:5d:e6:0b:71:51:b3:47:b2:c2:24:83:77:90:21:72: ca:4e:16:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFBNzkxMTAvBgNVBAUTKDA1Mjk4NUYyQkUyOEM3OUU3NEVGRjREQjRDNzE0MjI4 NDU0NzczNUMwHhcNMjUwOTE3MDMzNzAzWhcNMjUwOTI0MDMzNzAzWjAYMRYwFAYD VQQDEw02OGNhMmNlMC04MGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA29Yo/k+7MXcpWyHQgSFXDjrcuHG7ngdL2t6WWGD2F6chE/AQB81Po6agw6h5 4njFZAORtwyKOHyXNSoteR/ejv01bcKKLtUDVh9rmbtZW26Dz1gmgUrhE7YdtES6 CPap3JeJfKV4ZR7EZwNpNuvk4q7I63iWqxstvu7z7BeUQF+BJesdky6pDm1ZnfFH +2cdtRQeUREC7FW6Qbn4tnX6+Gj4+ZRZuDoenmSzHu0ojc1rSSxP/rwIz909GXoJ 7mX0h4c4n6MSsYK3QLtcP0HW5FJ2ZQGzp4+lbv3fssU4ibldjW3J+YLvUlgawQ3T oMVk3CvRfG2CBrEQ6BLv//vLLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHa9WmoB f2kRyFYzROrXTMaVjGgoMB8GA1UdIwQYMBaAFAUphfK+KMeedO/020xxQihFR3Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUE3OS9ENENBMTVDMEY5 NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1NTA3X1RiVEhGQ0tFVkhj MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JTbUY4cjRveDU1MDdfVGJUSEZDS0VWSGMxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUE3OS9ENENBMTVDMEY5NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1 NTA3X1RiVEhGQ0tFVkhjMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn58QFKO9WgNz0vOZN7/05ONz2BZXhvpF0hB+/0EHCTJe7m85Zk+PU UObC0xEC7z2GgoXNv3KGpbaIs8C5OXrOCXuFO3VUg0hGwA9/CooAdORk8dV0ZB15 smZc3njSTt5LlIewHmsOHUqwZ7fbqEMa7y4B2mRDCOZlXjbieVhUOgp9RRFXjwzf Zrrwa/hmKNlT5vwUdKIP5p3cC8eWoggjyyVoi8xvs3mldNMyTt3tKfClc3kjxQq/ VLPHUfwhH5/UtV1hTyipRKDQz+UA/8SYBBEX/99EcsbLkOJDT4Ds9sPyg7gggZK+ LDpedBdd5gtxUbNHssIkg3eQIXLKThYe -----END CERTIFICATE-----Generated at Fri Sep 19 00:40:57 2025 by rpki-client