$ rpki-client -vvf rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft File: badIHjljLTOANmkPe0OixINj22g.mft (raw, json) Hash identifier: ulHTewxcNSo63Jc8BoLMeCedqyebTYTukmbCbie4u+U= Subject key identifier: 51:24:91:32:90:74:52:14:E2:5C:B0:A0:01:89:84:BA:82:33:6A:62 Authority key identifier: 6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68 Certificate issuer: /CN=A9156854/serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68 Certificate serial: 80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft Manifest number: 7F Signing time: Tue 09 Sep 2025 06:47:35 +0000 Manifest this update: Tue 09 Sep 2025 06:47:35 +0000 Manifest next update: Tue 16 Sep 2025 06:47:35 +0000 Files and hashes: 1: badIHjljLTOANmkPe0OixINj22g.crl (hash: ZH9eZETmqsb7YqEArHa6qqIdQ5zfg1MQXYfVnLHfRuo=) 2: CCE068D6CB2411EF93F63631C4F9AE02.roa (hash: ZSOsUiVtVH7stSF1LBrKEfbqy25tB+towx5vwiTWj1U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 06:47:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156854, serialNumber=6DA7481E39632D338036690F7B43A2C48363DB68 Validity Not Before: Sep 9 06:47:35 2025 GMT Not After : Sep 16 06:47:35 2025 GMT Subject: CN=68bfcd87-600d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cc:54:f7:b0:68:03:ae:15:f0:75:2a:6f:99: 08:56:8e:52:07:db:bf:52:d9:a6:fe:46:bb:3d:1a: 4e:9d:7e:25:31:4f:f1:5f:f2:9d:15:b0:6e:2c:99: 80:d1:5b:8b:3d:2e:d6:7c:eb:25:09:85:1f:3b:4c: fd:17:eb:4e:42:05:35:70:b7:48:6c:8e:81:c7:d3: e6:05:c3:01:90:cc:bc:2d:73:e7:3f:e1:c9:c3:56: 76:be:e9:6c:a6:0f:9d:6a:1d:01:15:7d:2b:10:4c: 87:73:af:fb:21:69:c1:dc:06:74:9a:23:b3:59:78: 3b:dd:20:92:9c:1c:24:d7:77:a8:ba:94:70:0e:eb: b2:0c:04:57:6e:75:3d:d7:9a:0e:46:67:6d:93:c2: db:29:1a:34:d1:4a:eb:f9:88:78:47:3c:8c:bf:03: 70:1a:e2:fe:eb:69:5f:a8:c2:06:bc:b8:76:7b:5e: d5:13:56:25:97:7b:6b:d6:ae:2f:c4:10:d3:d8:c3: db:bc:35:f4:26:cd:52:65:fa:88:bc:24:43:8c:8f: 2a:d5:b5:62:b3:1e:f5:d1:23:30:02:38:37:ba:98: ee:66:aa:77:21:55:15:c7:01:bc:60:48:0e:68:3b: 71:0d:15:2e:55:58:c7:ac:07:fd:ac:83:4a:ab:a3: c0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:24:91:32:90:74:52:14:E2:5C:B0:A0:01:89:84:BA:82:33:6A:62 X509v3 Authority Key Identifier: keyid:6D:A7:48:1E:39:63:2D:33:80:36:69:0F:7B:43:A2:C4:83:63:DB:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/badIHjljLTOANmkPe0OixINj22g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156854/DD90C3C0CB2311EF9E86682EC4F9AE02/badIHjljLTOANmkPe0OixINj22g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:7a:cf:9f:66:fd:ec:ab:aa:1b:4b:52:3b:c8:df:ad:46:87: 58:a0:e0:a8:7b:55:94:3c:99:de:98:a1:a6:2d:39:08:38:eb: 79:17:08:5b:6f:4b:f4:5c:12:9d:bf:1f:65:03:2a:3a:ad:e1: 9a:8e:c6:e1:a3:59:96:ef:bd:ca:5d:52:93:21:76:91:07:52: 50:9a:e0:e5:5d:78:6f:b3:6e:b5:3b:55:d6:5a:44:f4:11:f9: bf:69:91:4c:1f:df:47:44:55:e6:88:9a:e7:ed:06:e6:b0:d8: 5f:9e:9a:b8:89:71:76:52:5c:51:52:40:27:19:04:32:a6:9f: e3:f1:c1:39:bc:a7:2b:55:2f:80:b5:fe:1f:c3:6f:20:7d:61: d3:f5:26:db:80:d3:6a:c6:36:1d:5d:e0:1c:29:8c:45:5d:52: 86:0b:84:48:65:63:6a:7c:00:56:08:b7:4c:a6:cf:d3:4e:cd: c1:64:19:a9:69:9b:d9:00:aa:a2:60:d2:ad:c2:95:ef:30:21: b4:72:42:2c:7f:91:e1:67:15:8c:2e:73:83:21:a3:fa:40:d9: e1:bd:36:75:d3:51:90:d2:59:b9:1e:31:b6:b3:cd:0d:6d:5e: a1:d8:af:54:54:15:2d:f1:6d:ea:7e:3e:57:18:e4:df:b6:81: a2:20:04:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4NTQxMTAvBgNVBAUTKDZEQTc0ODFFMzk2MzJEMzM4MDM2NjkwRjdCNDNBMkM0 ODM2M0RCNjgwHhcNMjUwOTA5MDY0NzM1WhcNMjUwOTE2MDY0NzM1WjAYMRYwFAYD VQQDEw02OGJmY2Q4Ny02MDBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8xU97BoA64V8HUqb5kIVo5SB9u/Utmm/ka7PRpOnX4lMU/xX/KdFbBuLJmA 0VuLPS7WfOslCYUfO0z9F+tOQgU1cLdIbI6Bx9PmBcMBkMy8LXPnP+HJw1Z2vuls pg+dah0BFX0rEEyHc6/7IWnB3AZ0miOzWXg73SCSnBwk13eoupRwDuuyDARXbnU9 15oORmdtk8LbKRo00Urr+Yh4RzyMvwNwGuL+62lfqMIGvLh2e17VE1Yll3tr1q4v xBDT2MPbvDX0Js1SZfqIvCRDjI8q1bVisx710SMwAjg3upjuZqp3IVUVxwG8YEgO aDtxDRUuVVjHrAf9rINKq6PAqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEkkTKQ dFIU4lywoAGJhLqCM2piMB8GA1UdIwQYMBaAFG2nSB45Yy0zgDZpD3tDosSDY9to MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njg1NC9ERDkwQzNDMENC MjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9iYWRJSGpsakxUT0FObWtQZTBPaXhJTmoy MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JhZElIamxqTFRPQU5ta1BlME9peElOajIyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Njg1NC9ERDkwQzNDMENCMjMxMUVGOUU4NjY4MkVDNEY5QUUwMi9iYWRJSGpsakxU T0FObWtQZTBPaXhJTmoyMmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC+es+fZv3sq6obS1I7yN+tRodYoOCoe1WUPJnemKGmLTkIOOt5Fwhb b0v0XBKdvx9lAyo6reGajsbho1mW773KXVKTIXaRB1JQmuDlXXhvs261O1XWWkT0 Efm/aZFMH99HRFXmiJrn7QbmsNhfnpq4iXF2UlxRUkAnGQQypp/j8cE5vKcrVS+A tf4fw28gfWHT9SbbgNNqxjYdXeAcKYxFXVKGC4RIZWNqfABWCLdMps/TTs3BZBmp aZvZAKqiYNKtwpXvMCG0ckIsf5HhZxWMLnODIaP6QNnhvTZ101GQ0lm5HjG2s80N bV6h2K9UVBUt8W3qfj5XGOTftoGiIARW -----END CERTIFICATE-----Generated at Tue Sep 9 09:02:47 2025 by rpki-client