$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft File: BtM8jWukpiIt_LkMK0Ckt5KTdno.mft (raw, json) Hash identifier: ixg1WkVz+J+hwW9MrULizqW5SAK3NztP+RGNYL8hTNA= Subject key identifier: 44:57:B5:3E:68:7A:93:CB:AA:CB:EA:08:00:74:82:69:AD:D7:A2:8B Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A Certificate issuer: /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Certificate serial: 0530 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft Manifest number: 051E Signing time: Sat 06 Sep 2025 23:59:48 +0000 Manifest this update: Sat 06 Sep 2025 23:59:47 +0000 Manifest next update: Sat 13 Sep 2025 23:59:47 +0000 Files and hashes: 1: BtM8jWukpiIt_LkMK0Ckt5KTdno.crl (hash: 9RMoAdEclqCyg9LoTS+8OcEZdHC7oQr2XQ0/Vuaht/Q=) 2: 5BC9A0B0C91211ED91C9A325C4F9AE02.roa (hash: bWFskxvhi7CkjX9KQtUg/L6OTceIBUoGJSArRRh8yOc=) 3: 900F6E92211E11ECAEED8632C4F9AE02.roa (hash: TEWGyyYFx9ktn3pEsyb60J6bTDtXfXp/IzUXg77M9qA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:59:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1328 (0x530) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A Validity Not Before: Sep 6 23:59:47 2025 GMT Not After : Sep 13 23:59:47 2025 GMT Subject: CN=68bccaf4-6c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:d3:b1:b2:8b:5f:78:a2:f1:db:4b:92:51: 61:fd:04:a5:5a:67:6b:8d:83:51:6b:c7:05:d4:a4: ac:94:c0:36:2e:3f:18:da:ce:0d:02:2b:76:96:a1: b1:d8:26:c1:7a:95:79:43:65:40:13:76:80:25:5d: be:e2:62:f1:fb:00:98:fb:f6:3e:60:c1:98:0f:f9: b7:f1:9f:7a:04:bc:90:4d:b9:40:76:4f:ee:0d:66: 60:ad:31:ef:a0:07:de:11:09:f0:e9:94:0d:5e:a6: 62:8d:c2:fd:1a:3a:05:cd:1a:40:ac:67:60:fd:a3: b1:33:e7:56:22:08:e2:1c:77:4a:0a:2a:67:d4:49: 46:27:76:5f:4d:25:df:5b:66:e5:0f:f3:3f:2a:17: 9b:81:e2:bd:16:73:93:2f:5b:91:8a:e6:75:3f:f3: 15:55:7e:1d:4e:de:de:a7:7f:93:a6:eb:e7:29:db: d7:c5:95:b9:cd:e3:97:e9:60:a9:b8:42:0f:f0:6a: 10:b9:6d:a7:e3:20:c9:55:96:31:04:fe:6f:db:79: 62:e3:da:84:8b:ae:f8:e5:31:85:08:d0:65:25:31: 2b:33:e6:1e:39:a1:c2:3f:23:a0:9d:9d:81:ab:16: f9:69:81:ed:74:7b:55:9b:98:c0:30:51:a5:ef:4d: 5d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:57:B5:3E:68:7A:93:CB:AA:CB:EA:08:00:74:82:69:AD:D7:A2:8B X509v3 Authority Key Identifier: keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:a1:62:53:30:fa:89:9f:1e:5e:2e:d1:59:ef:da:e1:d7:e1: df:18:f2:af:50:63:2f:92:18:a6:c9:78:aa:a4:c8:19:e5:e8: 6b:3c:b9:2c:d2:2e:c0:83:8f:e4:ea:ac:dc:88:97:79:b6:fc: 3e:d0:5f:b7:d2:43:5b:40:59:c7:76:a0:23:dd:98:be:95:28: b6:cf:45:32:e0:a8:6e:ef:8a:01:59:0f:af:d8:f8:cf:2b:f3: b3:2a:63:75:15:c0:81:2d:ee:67:93:f9:3b:2b:1d:ee:c6:1b: a5:71:53:b3:bf:a1:5a:2a:5f:6d:cd:3e:6a:49:04:dd:5e:4f: 2e:b2:61:8a:a8:1c:ea:fc:85:01:dd:73:17:e2:37:77:22:d8: e3:cc:02:50:ff:68:00:fc:f0:68:fc:d6:4d:c2:60:64:04:51: 6d:85:41:f2:8e:68:cd:7b:ef:40:46:e0:b3:fe:f6:bf:e2:ca: ab:07:d6:30:9e:9b:ab:d1:0e:08:26:b7:2e:4a:64:12:90:b1: 1d:6c:9e:c7:53:8c:f0:6e:1b:b4:2e:f9:b7:b3:49:be:ce:83: 44:fb:96:2c:c4:e7:39:0c:aa:a8:cf:1a:68:14:25:95:30:dc: ac:d3:3d:fd:c2:12:48:02:36:fa:6f:d9:9a:80:87:71:63:27: 8f:3b:1c:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTJFNzAxMTAvBgNVBAUTKDA2RDMzQzhENkJBNEE2MjIyREZDQjkwQzJCNDBBNEI3 OTI5Mzc2N0EwHhcNMjUwOTA2MjM1OTQ3WhcNMjUwOTEzMjM1OTQ3WjAYMRYwFAYD VQQDEw02OGJjY2FmNC02YzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyM/TsbKLX3ii8dtLklFh/QSlWmdrjYNRa8cF1KSslMA2Lj8Y2s4NAit2lqGx 2CbBepV5Q2VAE3aAJV2+4mLx+wCY+/Y+YMGYD/m38Z96BLyQTblAdk/uDWZgrTHv oAfeEQnw6ZQNXqZijcL9GjoFzRpArGdg/aOxM+dWIgjiHHdKCipn1ElGJ3ZfTSXf W2blD/M/KhebgeK9FnOTL1uRiuZ1P/MVVX4dTt7ep3+TpuvnKdvXxZW5zeOX6WCp uEIP8GoQuW2n4yDJVZYxBP5v23li49qEi6745TGFCNBlJTErM+YeOaHCPyOgnZ2B qxb5aYHtdHtVm5jAMFGl701dRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFERXtT5o epPLqsvqCAB0gmmt16KLMB8GA1UdIwQYMBaAFAbTPI1rpKYiLfy5DCtApLeSk3Z6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkU3MC9CRUM1Q0E3MjIx MUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3BpSXRfTGtNSzBDa3Q1S1Rk bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0TThqV3VrcGlJdF9Ma01LMENrdDVLVGRuby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MkU3MC9CRUM1Q0E3MjIxMUIxMUVDQjQ1RkQ0MkZDNEY5QUUwMi9CdE04ald1a3Bp SXRfTGtNSzBDa3Q1S1Rkbm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApoWJTMPqJnx5eLtFZ79rh1+HfGPKvUGMvkhimyXiqpMgZ5ehrPLks 0i7Ag4/k6qzciJd5tvw+0F+30kNbQFnHdqAj3Zi+lSi2z0Uy4Khu74oBWQ+v2PjP K/OzKmN1FcCBLe5nk/k7Kx3uxhulcVOzv6FaKl9tzT5qSQTdXk8usmGKqBzq/IUB 3XMX4jd3ItjjzAJQ/2gA/PBo/NZNwmBkBFFthUHyjmjNe+9ARuCz/va/4sqrB9Yw npur0Q4IJrcuSmQSkLEdbJ7HU4zwbhu0Lvm3s0m+zoNE+5YsxOc5DKqozxpoFCWV MNys0z39whJIAjb6b9magIdxYyePOxz/ -----END CERTIFICATE-----Generated at Sun Sep 7 14:39:51 2025 by rpki-client