$ rpki-client -vvf rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft File: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft (raw, json) Hash identifier: 2MYeKdBN5xFrmq9I3ZnbS8LX0gXwDoAJZPeY34ne7SY= Subject key identifier: 48:E8:5E:4E:1D:B2:57:4B:DF:CA:AE:34:DB:BF:05:4B:97:04:A3:39 Authority key identifier: F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4 Certificate issuer: /CN=A915E012/serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4 Certificate serial: 50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft Manifest number: 4E Signing time: Sun 07 Sep 2025 07:49:19 +0000 Manifest this update: Sun 07 Sep 2025 07:49:18 +0000 Manifest next update: Sun 14 Sep 2025 07:49:18 +0000 Files and hashes: 1: -bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl (hash: b7FPU3TUpafyP42qOTcwjzgc4f9LLjP9Yje/0dlFAFA=) 2: 28BBA728141411F08D862A74C4F9AE02.roa (hash: bM0rHlFCkCxESty36KKICwvwa1HEG8pgqoXnhaZGbjI=) 3: 2857C712141411F08D862A74C4F9AE02.roa (hash: q/LJ7SPvTkUYwfSCfg1Hilqw1bbJVMWb831qXikLEmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 07:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 80 (0x50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E012, serialNumber=F9B4022C029E7D9E5A634968FDBA4A0E9CD624E4 Validity Not Before: Sep 7 07:49:18 2025 GMT Not After : Sep 14 07:49:18 2025 GMT Subject: CN=68bd38ff-ee3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f9:6a:98:c4:20:c1:59:f9:d3:e5:b9:16:96: d4:9b:3c:a2:d5:b9:e0:9f:bc:c2:4e:c1:d5:0f:a8: 77:3f:51:95:d0:4b:e5:67:31:0a:8f:e4:80:77:a5: f1:19:1b:a7:56:bb:83:84:29:40:4a:14:4a:e9:d5: 5c:12:72:57:77:50:03:d6:a8:91:be:d2:fb:6a:2d: 13:06:61:ba:d9:b3:9c:60:b1:1b:5d:ef:2e:1d:c6: bf:66:69:15:a5:58:36:8a:b3:5b:e7:ed:8d:d1:a5: d3:9e:9d:fa:a9:f8:fb:66:12:ce:58:5c:59:aa:99: e2:09:5a:88:b8:33:54:57:0a:b4:86:9f:b1:a1:eb: 73:1b:c0:22:0d:af:c1:b0:4a:52:8c:40:d1:d0:c4: a0:f3:b1:06:f3:80:f7:ef:ea:cf:83:08:a3:3b:f7: 5e:07:b5:09:1e:58:8a:82:28:be:52:c5:bc:cb:0c: c3:3e:a1:19:08:8d:82:fd:9c:e6:c7:0b:c8:ba:51: 2e:21:bb:cf:09:01:7c:6a:10:27:46:94:c1:c7:9f: ed:19:54:fc:01:dc:ea:2a:ef:f6:25:c9:ed:fe:9f: 6e:f6:9d:a0:b7:18:f9:b4:11:85:a2:44:58:e6:1a: 27:1d:87:08:46:0d:ce:1d:a4:02:20:83:33:80:c3: 64:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E8:5E:4E:1D:B2:57:4B:DF:CA:AE:34:DB:BF:05:4B:97:04:A3:39 X509v3 Authority Key Identifier: keyid:F9:B4:02:2C:02:9E:7D:9E:5A:63:49:68:FD:BA:4A:0E:9C:D6:24:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E012/B81AA258141311F0B68E7373C4F9AE02/-bQCLAKefZ5aY0lo_bpKDpzWJOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0f:41:25:6f:7a:9b:5f:05:b9:a9:80:30:bc:71:83:b3:8b: a8:23:5d:e0:61:06:3b:36:9b:e8:48:9b:a8:ec:e7:0d:2f:a0: 3d:87:58:fc:a9:23:86:3b:e2:58:f0:7c:ce:38:d8:37:1f:c9: d3:b5:54:30:b2:50:71:cf:04:5f:9f:42:df:74:1e:fd:86:96: 61:7b:9e:35:77:8f:b8:20:96:74:2d:2b:7c:e3:20:c9:dc:89: 35:70:20:f7:b9:4b:08:6b:f1:f0:de:c2:11:c5:87:59:8c:fd: 15:0d:76:58:ce:c0:00:a6:a8:81:dc:ae:71:6a:2e:93:58:f3: 4b:d0:c9:94:bf:4c:29:07:0f:7c:a4:5a:bf:b6:dd:5d:29:c7: f2:24:28:03:99:ab:9b:90:61:af:4f:4f:4f:a0:26:91:a9:86: 2d:2d:02:50:d8:ed:00:a6:03:8b:dd:5a:49:4e:a6:6b:08:e6: e7:8c:6f:14:bf:fc:c1:15:3c:b6:cc:a5:a1:91:6a:6b:e3:a9: 24:88:6a:8f:5e:2b:a0:12:ba:07:c1:0e:8c:35:2c:31:19:19: 3e:55:9a:e5:7b:bd:c5:69:77:a8:a3:f6:9e:63:72:d4:28:de: d6:9b:0a:a0:5c:8b:d8:dd:3b:79:ae:b9:fb:88:75:f6:45:c3: c7:61:5b:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTAxMjExMC8GA1UEBRMoRjlCNDAyMkMwMjlFN0Q5RTVBNjM0OTY4RkRCQTRBMEU5 Q0Q2MjRFNDAeFw0yNTA5MDcwNzQ5MThaFw0yNTA5MTQwNzQ5MThaMBgxFjAUBgNV BAMTDTY4YmQzOGZmLWVlM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCx+WqYxCDBWfnT5bkWltSbPKLVueCfvMJOwdUPqHc/UZXQS+VnMQqP5IB3pfEZ G6dWu4OEKUBKFErp1VwScld3UAPWqJG+0vtqLRMGYbrZs5xgsRtd7y4dxr9maRWl WDaKs1vn7Y3RpdOenfqp+PtmEs5YXFmqmeIJWoi4M1RXCrSGn7Gh63MbwCINr8Gw SlKMQNHQxKDzsQbzgPfv6s+DCKM7914HtQkeWIqCKL5SxbzLDMM+oRkIjYL9nObH C8i6US4hu88JAXxqECdGlMHHn+0ZVPwB3Ooq7/Ylye3+n272naC3GPm0EYWiRFjm GicdhwhGDc4dpAIggzOAw2QHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUSOheTh2y V0vfyq40278FS5cEozkwHwYDVR0jBBgwFoAU+bQCLAKefZ5aY0lo/bpKDpzWJOQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMDEyL0I4MUFBMjU4MTQx MzExRjBCNjhFNzM3M0M0RjlBRTAyLy1iUUNMQUtlZlo1YVkwbG9fYnBLRHB6V0pP US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLWJRQ0xBS2VmWjVhWTBsb19icEtEcHpXSk9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MDEyL0I4MUFBMjU4MTQxMzExRjBCNjhFNzM3M0M0RjlBRTAyLy1iUUNMQUtlZlo1 YVkwbG9fYnBLRHB6V0pPUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADsPQSVveptfBbmpgDC8cYOzi6gjXeBhBjs2m+hIm6js5w0voD2HWPyp I4Y74ljwfM442DcfydO1VDCyUHHPBF+fQt90Hv2GlmF7njV3j7gglnQtK3zjIMnc iTVwIPe5Swhr8fDewhHFh1mM/RUNdljOwACmqIHcrnFqLpNY80vQyZS/TCkHD3yk Wr+23V0px/IkKAOZq5uQYa9PT0+gJpGphi0tAlDY7QCmA4vdWklOpmsI5ueMbxS/ /MEVPLbMpaGRamvjqSSIao9eK6ASugfBDow1LDEZGT5VmuV7vcVpd6ij9p5jctQo 3tabCqBci9jdO3muufuIdfZFw8dhW2Y= -----END CERTIFICATE-----Generated at Mon Sep 8 04:20:26 2025 by rpki-client