$ rpki-client -vvf rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft File: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft (raw, json) Hash identifier: X8nafnUsO5+cjoIimyhT5iOhkQKy4aqjE4rtrx0aJ5A= Subject key identifier: D5:4D:E1:EB:0D:72:9D:D8:7D:72:02:F4:76:A2:AC:D7:24:38:AE:8B Authority key identifier: 05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA Certificate issuer: /CN=A9157724/serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft Manifest number: 0147 Signing time: Thu 21 Aug 2025 04:32:59 +0000 Manifest this update: Thu 21 Aug 2025 04:32:59 +0000 Manifest next update: Thu 28 Aug 2025 04:32:59 +0000 Files and hashes: 1: BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl (hash: qZEE3dg7w2pNXqy5/7eBlDLRS1T2v7/8mga7x4qlqu4=) 2: 6063C75CB6E411EE94471D14C4F9AE02.roa (hash: 5GVQ1bIBa+U3v3tASIB7alCOpvULFOKmUN8ptv6R1ws=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 04:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157724, serialNumber=05D24B3B8A2227B6FEE92DCD25D54BF05EE868CA Validity Not Before: Aug 21 04:32:59 2025 GMT Not After : Aug 28 04:32:59 2025 GMT Subject: CN=68a6a17b-cf08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:f3:74:f5:1f:82:4f:0d:88:43:82:80:5c: a9:ce:b0:db:8d:28:ed:ea:c0:ca:94:f9:08:50:73: 30:38:3f:2c:96:ed:fa:a5:b9:90:ed:a4:b8:7c:62: b6:04:72:f9:33:50:a4:97:07:16:26:ed:1f:79:2e: 08:89:87:07:31:ad:da:95:45:e6:31:97:26:27:2d: 4a:ea:1c:88:6f:c8:f1:2d:d7:6f:b8:81:ce:b8:a8: 1c:70:3c:13:5b:18:8f:65:07:64:fc:49:91:b6:74: 41:d2:22:03:55:b9:d8:b7:8e:68:da:fb:ae:b0:af: 8a:a0:a3:9f:eb:ef:7a:98:2f:bf:fd:30:4b:12:1d: ee:03:82:09:90:71:75:0e:d7:84:d0:b1:c6:0b:0d: e0:0d:1b:e6:2f:d5:03:6d:8e:84:81:dc:5a:cb:41: 69:bd:86:46:16:8d:19:4b:24:d1:84:85:35:cb:48: 56:7b:89:6d:7e:a7:36:8b:15:05:eb:e7:e2:85:63: 9b:c6:6e:32:3b:9e:28:59:bd:06:60:01:43:4f:ec: 1d:da:b8:b2:56:69:bb:c5:23:e5:ce:c1:1f:4a:31: 42:a6:06:6d:0d:30:9a:09:9e:da:86:c2:b1:86:7f: 63:26:90:15:3a:66:04:74:45:88:68:df:71:f8:7e: 00:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4D:E1:EB:0D:72:9D:D8:7D:72:02:F4:76:A2:AC:D7:24:38:AE:8B X509v3 Authority Key Identifier: keyid:05:D2:4B:3B:8A:22:27:B6:FE:E9:2D:CD:25:D5:4B:F0:5E:E8:68:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157724/D7398728958711EEAD3BB262C4F9AE02/BdJLO4oiJ7b-6S3NJdVL8F7oaMo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ea:4b:23:c8:25:84:a9:ff:0e:6a:af:29:d2:bb:5f:a2:28:dd: ac:e0:84:23:25:07:42:c1:c2:65:6b:9d:82:21:b1:32:8f:ce: de:18:4e:72:50:27:90:b9:8e:70:42:b6:3c:fe:f1:e4:eb:ec: e1:c9:7c:94:88:ad:27:45:2d:64:7a:d4:33:bc:73:56:f3:bc: 8b:9f:e3:38:8b:05:34:4d:5e:b5:cb:7f:39:ff:11:28:c6:90: e9:ce:06:c4:cd:8f:98:bb:fc:e1:e5:15:cd:2f:17:2f:3a:6f: e0:d7:a8:9b:02:07:ce:bf:a2:cb:c8:14:71:97:cf:dd:62:e8: 76:58:35:1c:9d:be:5f:e0:96:e6:05:d2:b9:ce:a6:fc:e6:3b: 88:fb:54:b1:4d:e1:92:d6:85:83:82:93:66:6e:fc:32:a6:b5: 93:65:a7:4a:6a:83:f3:78:33:35:35:0f:f5:38:54:ba:be:ff: 7e:bd:af:5f:bd:84:b4:f0:53:e0:98:47:a4:fc:d2:26:6f:68: 26:2d:0d:38:26:c8:69:2b:86:df:30:18:c1:0f:5a:64:c0:3b: 44:56:86:95:68:2f:c3:86:c1:ab:7a:34:b0:77:7d:8c:16:33: 97:5a:e8:19:04:ff:b9:af:16:6e:d6:d0:a8:f2:41:d8:64:75: 62:75:e0:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTc3MjQxMTAvBgNVBAUTKDA1RDI0QjNCOEEyMjI3QjZGRUU5MkRDRDI1RDU0QkYw NUVFODY4Q0EwHhcNMjUwODIxMDQzMjU5WhcNMjUwODI4MDQzMjU5WjAYMRYwFAYD VQQDEw02OGE2YTE3Yi1jZjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvHzdPUfgk8NiEOCgFypzrDbjSjt6sDKlPkIUHMwOD8slu36pbmQ7aS4fGK2 BHL5M1CklwcWJu0feS4IiYcHMa3alUXmMZcmJy1K6hyIb8jxLddvuIHOuKgccDwT WxiPZQdk/EmRtnRB0iIDVbnYt45o2vuusK+KoKOf6+96mC+//TBLEh3uA4IJkHF1 DteE0LHGCw3gDRvmL9UDbY6Egdxay0FpvYZGFo0ZSyTRhIU1y0hWe4ltfqc2ixUF 6+fihWObxm4yO54oWb0GYAFDT+wd2riyVmm7xSPlzsEfSjFCpgZtDTCaCZ7ahsKx hn9jJpAVOmYEdEWIaN9x+H4AnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVN4esN cp3YfXIC9HairNckOK6LMB8GA1UdIwQYMBaAFAXSSzuKIie2/uktzSXVS/Be6GjK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NzcyNC9ENzM5ODcyODk1 ODcxMUVFQUQzQkIyNjJDNEY5QUUwMi9CZEpMTzRvaUo3Yi02UzNOSmRWTDhGN29h TW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JkSkxPNG9pSjdiLTZTM05KZFZMOEY3b2FNby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NzcyNC9ENzM5ODcyODk1ODcxMUVFQUQzQkIyNjJDNEY5QUUwMi9CZEpMTzRvaUo3 Yi02UzNOSmRWTDhGN29hTW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDqSyPIJYSp/w5qrynSu1+iKN2s4IQjJQdCwcJla52CIbEyj87eGE5y UCeQuY5wQrY8/vHk6+zhyXyUiK0nRS1ketQzvHNW87yLn+M4iwU0TV61y385/xEo xpDpzgbEzY+Yu/zh5RXNLxcvOm/g16ibAgfOv6LLyBRxl8/dYuh2WDUcnb5f4Jbm BdK5zqb85juI+1SxTeGS1oWDgpNmbvwyprWTZadKaoPzeDM1NQ/1OFS6vv9+va9f vYS08FPgmEek/NImb2gmLQ04JshpK4bfMBjBD1pkwDtEVoaVaC/DhsGrejSwd32M FjOXWugZBP+5rxZu1tCo8kHYZHVideAV -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:42 2025 by rpki-client