$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json) Hash identifier: /x04ezDmaWQlGiRVQFfWmxVR+9PFRsXy40rk6b9W6t4= Subject key identifier: 00:78:36:49:B4:12:A7:F1:44:27:F3:D2:41:55:5D:00:4B:A1:93:BB Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Certificate serial: 9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft Manifest number: 99 Signing time: Fri 05 Sep 2025 06:50:46 +0000 Manifest this update: Fri 05 Sep 2025 06:50:45 +0000 Manifest next update: Fri 12 Sep 2025 06:50:45 +0000 Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: FkTP52nbpgrEGHpuvBVvqYGnhzQ/m2mVQzxM39vg+dg=) 2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: dlLY0c4zcx4nsoESDYqmPB7RubZLl/a17nHw+0+FjyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Validity Not Before: Sep 5 06:50:45 2025 GMT Not After : Sep 12 06:50:45 2025 GMT Subject: CN=68ba8845-258c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:35:23:e8:dc:e8:10:c4:25:26:86:62:ba:fe: 47:8d:87:f9:22:6c:2f:15:82:54:ea:ce:3b:65:9e: f3:5f:c2:20:00:31:a0:33:25:77:d7:4e:a7:0c:3e: c2:0e:cb:a3:7e:ca:80:e3:e5:e3:d7:ef:94:36:59: 85:c9:b4:a6:e5:4d:b1:75:ff:60:e6:b6:0b:91:47: c9:b6:2c:e0:b3:7c:66:11:d9:8c:82:aa:aa:99:92: a0:80:09:e3:0a:2e:ee:53:82:7c:0d:cf:39:2c:af: 76:66:ad:fb:dd:2d:2e:fd:21:c5:26:c8:da:d7:de: 4d:c5:e6:1a:8c:79:95:ba:5b:10:25:07:08:9a:9e: df:37:94:91:eb:c3:c2:99:09:19:e0:c6:e7:3a:7c: 7e:25:c9:5a:f7:1f:79:03:be:f0:74:f7:37:8c:48: 9e:3a:f8:b1:a1:4e:a1:38:2e:16:c0:84:19:5d:5a: 36:35:2d:64:27:72:5e:27:0e:ba:f7:5e:dc:3e:cd: 99:66:5b:06:97:f7:f9:84:54:78:50:1c:e8:69:9b: fe:f2:03:18:e4:b2:97:82:15:5c:f1:76:55:95:70: 43:73:16:2a:73:df:14:96:49:f9:c1:82:01:51:9e: a5:52:1c:3a:ae:d1:e4:2b:eb:94:5d:e7:fa:9a:7d: 1b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:78:36:49:B4:12:A7:F1:44:27:F3:D2:41:55:5D:00:4B:A1:93:BB X509v3 Authority Key Identifier: keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:98:d8:5f:c2:b2:d5:ba:69:be:eb:85:54:c3:4f:be:9d:84: d8:c7:b0:e4:ed:45:a5:70:bb:fc:d9:ad:8f:1e:a0:87:95:aa: 37:68:8a:a0:0c:ef:53:74:c8:83:c7:e1:cc:14:53:b4:15:e6: cd:17:31:cb:7c:c5:83:26:74:2b:38:9f:dd:fa:f4:02:a4:97: 09:f4:a5:c4:3c:28:21:17:a5:0a:37:51:b2:41:ec:1c:f8:dd: d3:09:7a:0b:a0:f3:ef:20:82:c1:38:5c:9e:8f:c8:39:38:1a: be:11:c4:f1:5a:60:3a:8b:d6:c0:a7:83:16:8f:d7:69:32:95: b7:36:63:60:80:ec:95:4f:44:67:e0:d5:2d:b6:78:47:c9:01: b2:80:4e:33:80:14:31:c3:0d:87:a0:50:1d:3f:19:cf:6e:5b: b3:9d:f1:4c:59:22:d9:4c:52:bb:0e:54:d2:0c:00:58:56:3c: 32:d9:bd:23:ef:cd:10:40:d6:ec:d2:5f:03:0c:0f:62:df:96: d1:a0:b9:8f:bd:5d:ac:2c:0e:bc:94:22:32:fe:94:4f:91:4d: ef:e9:0c:a9:1e:3b:fe:5a:eb:e9:93:10:55:19:d5:b2:09:bc: 62:03:33:b5:66:c8:dc:c4:6c:45:05:59:e1:75:eb:2c:8b:cd: d4:2b:72:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0QTUxMTAvBgNVBAUTKENGRTA3MUE5NzJGRDc4QTY3RjZEM0VENTZBNjE4NDM0 MEFCM0UzQTYwHhcNMjUwOTA1MDY1MDQ1WhcNMjUwOTEyMDY1MDQ1WjAYMRYwFAYD VQQDEw02OGJhODg0NS0yNThjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqTUj6NzoEMQlJoZiuv5HjYf5ImwvFYJU6s47ZZ7zX8IgADGgMyV3106nDD7C DsujfsqA4+Xj1++UNlmFybSm5U2xdf9g5rYLkUfJtizgs3xmEdmMgqqqmZKggAnj Ci7uU4J8Dc85LK92Zq373S0u/SHFJsja195NxeYajHmVulsQJQcImp7fN5SR68PC mQkZ4MbnOnx+Jcla9x95A77wdPc3jEieOvixoU6hOC4WwIQZXVo2NS1kJ3JeJw66 917cPs2ZZlsGl/f5hFR4UBzoaZv+8gMY5LKXghVc8XZVlXBDcxYqc98Ulkn5wYIB UZ6lUhw6rtHkK+uUXef6mn0bRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAB4Nkm0 EqfxRCfz0kFVXQBLoZO7MB8GA1UdIwQYMBaAFM/gcaly/Ximf20+1WphhDQKs+Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRBNS9CRjUwRTg2MkEy MzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVLWl9iVDdWYW1HRU5BcXo0 NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRBNS9CRjUwRTg2MkEyMzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVL Wl9iVDdWYW1HRU5BcXo0NlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSmNhfwrLVumm+64VUw0++nYTYx7Dk7UWlcLv82a2PHqCHlao3aIqg DO9TdMiDx+HMFFO0FebNFzHLfMWDJnQrOJ/d+vQCpJcJ9KXEPCghF6UKN1GyQewc +N3TCXoLoPPvIILBOFyej8g5OBq+EcTxWmA6i9bAp4MWj9dpMpW3NmNggOyVT0Rn 4NUttnhHyQGygE4zgBQxww2HoFAdPxnPbluznfFMWSLZTFK7DlTSDABYVjwy2b0j 780QQNbs0l8DDA9i35bRoLmPvV2sLA68lCIy/pRPkU3v6QypHjv+WuvpkxBVGdWy CbxiAzO1ZsjcxGxFBVnhdessi83UK3JA -----END CERTIFICATE-----Generated at Sat Sep 6 21:10:57 2025 by rpki-client