$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft File: bifP0YnuRkQx1LkBO8wHWKgCZOY.mft (raw, json) Hash identifier: m1BPXOdAAiX3VX2TTwlR03Q1OC8xo3D8gnhiSQcbDus= Subject key identifier: 88:F0:58:14:0F:42:31:7D:1D:94:7C:48:95:CD:03:8C:8B:7E:F9:6F Authority key identifier: 6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6 Certificate issuer: /CN=A9157D13/serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6 Certificate serial: 18F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft Manifest number: 18DA Signing time: Thu 18 Sep 2025 16:35:51 +0000 Manifest this update: Thu 18 Sep 2025 16:35:51 +0000 Manifest next update: Thu 25 Sep 2025 16:35:51 +0000 Files and hashes: 1: bifP0YnuRkQx1LkBO8wHWKgCZOY.crl (hash: mqyK6DhMmV/KnAGwvbEXtsiA+CKX/kTqM9OGr4hFj+c=) 2: 33E73FAAE50B11EF838B6642C4F9AE02.roa (hash: hGExMUb+w4JyWjME6Pb9a+xtMzWk7NBawSO3YXbXwM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6384 (0x18f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157D13, serialNumber=6E27CFD189EE464431D4B9013BCC0758A80264E6 Validity Not Before: Sep 18 16:35:51 2025 GMT Not After : Sep 25 16:35:51 2025 GMT Subject: CN=68cc34e7-41c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:44:4f:62:06:7f:46:11:2d:e9:ed:e5:d3:26: 05:87:7d:a0:19:cd:00:8c:0d:93:9e:08:1f:08:d4: c5:fe:8d:ff:02:a8:7b:4d:4b:2e:94:30:ff:94:bf: ee:99:d6:3c:9a:d5:79:74:65:af:ce:c2:35:96:0d: d5:2c:c6:45:ca:7c:84:fc:b3:69:50:d1:8b:55:de: 55:56:45:ea:d9:79:13:de:c9:a5:b7:e0:f3:30:53: ae:51:41:d5:48:91:b7:a7:8d:b8:2a:94:01:7a:37: 15:ed:c6:ff:5a:7c:57:ca:39:50:09:01:fa:8c:89: 15:16:3b:6a:6b:3d:55:81:4a:da:ec:82:78:e1:b7: 18:b3:5a:78:b1:0b:8f:cb:2a:55:de:e5:c5:d2:b4: 37:e4:48:50:1d:a3:27:02:e5:5c:07:db:25:d7:e6: b8:c4:a4:17:fc:79:28:5f:31:3d:79:8c:c7:49:f6: 1e:c0:59:13:7e:01:ac:8b:73:55:d1:af:1a:83:83: 6a:bf:09:91:1a:6c:a0:d7:16:13:78:4e:5c:47:3e: 6e:a5:6d:b9:72:c3:cc:74:e4:cd:36:cb:ea:93:19: 3d:65:36:55:b3:6d:49:6c:65:f9:20:b3:26:8e:bb: ad:c6:7c:5a:ab:d7:3a:cd:13:62:d8:8d:a4:5e:17: 99:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F0:58:14:0F:42:31:7D:1D:94:7C:48:95:CD:03:8C:8B:7E:F9:6F X509v3 Authority Key Identifier: keyid:6E:27:CF:D1:89:EE:46:44:31:D4:B9:01:3B:CC:07:58:A8:02:64:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bifP0YnuRkQx1LkBO8wHWKgCZOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D13/AA25DF1C98FD11E7A8145560C4F9AE02/bifP0YnuRkQx1LkBO8wHWKgCZOY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:35:d9:95:90:6a:0b:d4:db:9d:11:5b:d5:45:c4:e4:79:04: 9c:ca:3b:32:b9:d4:a6:04:43:f5:0d:71:17:f6:9c:70:fc:6a: f4:eb:3e:c3:4d:99:24:0e:b6:5b:df:f7:c1:3d:ee:c4:56:60: a9:22:a1:12:c5:5e:d7:a4:62:f5:c1:c6:91:45:31:31:4f:e4: 6b:c7:ca:98:a7:be:75:3f:23:c9:83:18:bb:36:3e:2f:05:46: 70:c2:9d:7c:6b:41:35:ad:18:8e:cb:cf:ef:26:56:a6:43:ce: 29:7f:6c:0d:27:ce:ef:ce:5b:18:8f:97:da:b5:ac:20:ea:3b: f1:38:b4:93:83:08:66:a8:fa:ac:0c:03:17:6f:b6:ca:2c:5d: a0:87:bd:1b:39:84:54:82:91:d8:0b:73:e2:e7:08:78:cb:98: 76:0d:9e:04:fb:be:3d:4c:d8:82:cb:2d:33:06:71:41:d1:bf: f7:52:a8:08:14:b3:fa:3d:51:50:94:64:8c:02:aa:e6:ba:b9: 5d:25:a5:08:ef:83:c0:ec:fe:cb:3d:22:fc:42:27:71:94:a8: 30:cc:75:e6:8f:66:08:3b:fd:13:4f:60:09:6d:7c:20:42:f0: 0a:1f:02:9b:fb:41:43:28:3b:7d:40:c0:8a:26:fe:f7:f9:81: f3:71:ff:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdEMTMxMTAvBgNVBAUTKDZFMjdDRkQxODlFRTQ2NDQzMUQ0QjkwMTNCQ0MwNzU4 QTgwMjY0RTYwHhcNMjUwOTE4MTYzNTUxWhcNMjUwOTI1MTYzNTUxWjAYMRYwFAYD VQQDEw02OGNjMzRlNy00MWM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzURPYgZ/RhEt6e3l0yYFh32gGc0AjA2TnggfCNTF/o3/Aqh7TUsulDD/lL/u mdY8mtV5dGWvzsI1lg3VLMZFynyE/LNpUNGLVd5VVkXq2XkT3smlt+DzMFOuUUHV SJG3p424KpQBejcV7cb/WnxXyjlQCQH6jIkVFjtqaz1VgUra7IJ44bcYs1p4sQuP yypV3uXF0rQ35EhQHaMnAuVcB9sl1+a4xKQX/HkoXzE9eYzHSfYewFkTfgGsi3NV 0a8ag4NqvwmRGmyg1xYTeE5cRz5upW25csPMdOTNNsvqkxk9ZTZVs21JbGX5ILMm jrutxnxaq9c6zRNi2I2kXheZ5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIjwWBQP QjF9HZR8SJXNA4yLfvlvMB8GA1UdIwQYMBaAFG4nz9GJ7kZEMdS5ATvMB1ioAmTm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0QxMy9BQTI1REYxQzk4 RkQxMUU3QTgxNDU1NjBDNEY5QUUwMi9iaWZQMFludVJrUXgxTGtCTzh3SFdLZ0Na T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JpZlAwWW51UmtReDFMa0JPOHdIV0tnQ1pPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0QxMy9BQTI1REYxQzk4RkQxMUU3QTgxNDU1NjBDNEY5QUUwMi9iaWZQMFludVJr UXgxTGtCTzh3SFdLZ0NaT1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXNdmVkGoL1NudEVvVRcTkeQScyjsyudSmBEP1DXEX9pxw/Gr06z7D TZkkDrZb3/fBPe7EVmCpIqESxV7XpGL1wcaRRTExT+Rrx8qYp751PyPJgxi7Nj4v BUZwwp18a0E1rRiOy8/vJlamQ84pf2wNJ87vzlsYj5fatawg6jvxOLSTgwhmqPqs DAMXb7bKLF2gh70bOYRUgpHYC3Pi5wh4y5h2DZ4E+749TNiCyy0zBnFB0b/3UqgI FLP6PVFQlGSMAqrmurldJaUI74PA7P7LPSL8QidxlKgwzHXmj2YIO/0TT2AJbXwg QvAKHwKb+0FDKDt9QMCKJv73+YHzcf/d -----END CERTIFICATE-----Generated at Fri Sep 19 05:07:20 2025 by rpki-client