$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: WViMLD2mw4y08lGMA2KM6YmCstC2qbk4GunDU0jbayk= Subject key identifier: 35:45:18:E1:48:CB:C2:FC:C9:34:39:7B:87:1B:C6:28:5A:3A:CF:0C Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: 68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: 66 Signing time: Sun 07 Sep 2025 07:30:38 +0000 Manifest this update: Sun 07 Sep 2025 07:30:38 +0000 Manifest next update: Sun 14 Sep 2025 07:30:38 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: X4vjN/B9d/kSgW1O2+PZA2RrTVyYpcwvuEqcz3RgLU4=) 2: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: BMK5egNvgRPb4zFSiHjhQ8AJphJuXdtk94523bl6Tzs=) 3: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: waSBCEbcYlolsmBXhQe06r7v3tswwJfsDI5vXs6FVRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 104 (0x68) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: Sep 7 07:30:38 2025 GMT Not After : Sep 14 07:30:38 2025 GMT Subject: CN=68bd349e-f7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:ec:b8:6d:bf:b8:20:a8:80:f8:cb:53:79: 5b:e2:6b:95:44:6e:e5:df:0b:2b:ce:32:37:c3:63: 7d:75:36:3b:65:17:18:0b:c1:23:8d:28:9b:e4:0b: 12:16:d5:5f:a0:f0:04:6b:c0:dc:ea:2b:04:a5:99: 60:67:4a:52:85:9d:9d:a6:90:dd:fa:f8:cc:c5:25: 9a:40:f9:fe:8f:4d:6c:12:af:8e:c7:9e:0d:3d:3d: 0f:e7:2f:ec:db:43:58:82:d0:d1:7b:89:c7:96:93: 36:b3:aa:50:94:cb:7d:b7:25:b4:f0:4c:e5:eb:fb: c4:95:26:27:72:bb:e9:db:f4:2f:c8:32:2b:d0:87: d7:04:68:ce:7a:f8:df:2f:8d:dd:75:7d:34:65:ad: e6:97:5e:22:33:5e:a0:54:e5:5e:14:5a:22:05:b1: 43:18:6e:3d:f7:e2:58:de:94:4c:9b:1c:b1:14:12: 5e:e1:6f:03:de:9b:6b:32:d9:8e:61:80:19:22:bc: 66:23:6a:b5:53:77:8d:f0:8f:e9:a9:02:b9:13:40: 16:80:93:c4:06:be:61:1e:fd:d2:54:7d:f8:49:5c: 26:33:2f:1f:d3:b2:04:72:54:f3:99:9a:0b:05:56: 06:14:91:9b:e4:01:3e:85:90:05:5c:a9:27:cb:38: 0a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:45:18:E1:48:CB:C2:FC:C9:34:39:7B:87:1B:C6:28:5A:3A:CF:0C X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:48:f2:93:20:99:ec:ec:cf:7b:2a:06:0a:66:55:c7:5f:48: a0:14:6a:8c:ed:54:a3:b9:2d:6b:6a:68:71:79:ff:f5:05:92: 15:89:ce:7b:79:57:fb:67:c6:17:46:27:43:8b:30:c9:00:ef: f4:85:2f:54:1d:f7:ab:60:47:34:b4:78:fb:1f:e0:2c:e2:d1: c9:7b:5f:31:a9:2b:28:48:79:8e:8f:7f:c9:8d:d0:64:77:c3: db:0c:48:96:53:d8:f5:29:61:44:ff:3e:62:2d:b2:2e:85:96: ba:11:b4:9f:dc:d8:97:a2:de:9a:4b:7d:0c:65:e1:91:55:db: 82:91:8c:c3:8a:80:ab:d6:b8:0c:f6:d0:f8:4c:83:51:68:2a: 50:f1:c7:84:a7:d9:c3:13:bf:bc:3f:4e:4b:b0:3e:a8:2c:a7: b7:10:52:70:5b:7f:fb:06:ad:0f:5e:69:43:c0:b5:8b:1e:02: d4:00:5f:d4:c6:af:9a:d1:c0:61:87:9c:fa:4e:0c:9f:b0:56: d7:0e:0b:f1:7f:b1:57:ca:ae:06:89:87:b6:4a:8a:d5:87:0d: 27:83:29:2e:c5:e1:a5:04:00:cd:5d:c7:59:15:a3:72:1a:f9: e7:1d:84:47:31:84:4e:87:02:e1:0a:8b:66:42:f5:01:eb:a8: 6e:69:63:ae -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBaDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkI1RDExMC8GA1UEBRMoMEZFMDYzMjRGMTc4N0M4RjIxNEZCRUFFNjdEODg2RDIy RjgxNjcwMjAeFw0yNTA5MDcwNzMwMzhaFw0yNTA5MTQwNzMwMzhaMBgxFjAUBgNV BAMTDTY4YmQzNDllLWY3YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8HOy4bb+4IKiA+MtTeVvia5VEbuXfCyvOMjfDY311NjtlFxgLwSONKJvkCxIW 1V+g8ARrwNzqKwSlmWBnSlKFnZ2mkN36+MzFJZpA+f6PTWwSr47Hng09PQ/nL+zb Q1iC0NF7iceWkzazqlCUy323JbTwTOXr+8SVJidyu+nb9C/IMivQh9cEaM56+N8v jd11fTRlreaXXiIzXqBU5V4UWiIFsUMYbj334ljelEybHLEUEl7hbwPem2sy2Y5h gBkivGYjarVTd43wj+mpArkTQBaAk8QGvmEe/dJUffhJXCYzLx/TsgRyVPOZmgsF VgYUkZvkAT6FkAVcqSfLOApVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNUUY4UjL wvzJNDl7hxvGKFo6zwwwHwYDVR0jBBgwFoAUD+BjJPF4fI8hT76uZ9iG0i+BZwIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QjVELzk4RkQxQTQyRjFD MDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRC1CakpQRjRmSThoVDc2dVo5aUcwaS1CWndJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QjVELzk4RkQxQTQyRjFDMDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4 aFQ3NnVaOWlHMGktQlp3SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHNI8pMgmezsz3sqBgpmVcdfSKAUaoztVKO5LWtqaHF5//UFkhWJznt5 V/tnxhdGJ0OLMMkA7/SFL1Qd96tgRzS0ePsf4Czi0cl7XzGpKyhIeY6Pf8mN0GR3 w9sMSJZT2PUpYUT/PmItsi6FlroRtJ/c2Jei3ppLfQxl4ZFV24KRjMOKgKvWuAz2 0PhMg1FoKlDxx4Sn2cMTv7w/TkuwPqgsp7cQUnBbf/sGrQ9eaUPAtYseAtQAX9TG r5rRwGGHnPpODJ+wVtcOC/F/sVfKrgaJh7ZKitWHDSeDKS7F4aUEAM1dx1kVo3Ia +ecdhEcxhE6HAuEKi2ZC9QHrqG5pY64= -----END CERTIFICATE-----Generated at Mon Sep 8 04:40:51 2025 by rpki-client