$ rpki-client -vvf rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft File: -bj5HSkovqo1HMNFxHNpMv2GOfE.mft (raw, json) Hash identifier: m/e6ja3TIFhDy24LYsLxRifWTpXEw6x/UlS2HZBXD8s= Subject key identifier: 8F:D2:06:43:CB:E7:E0:AF:E6:98:69:45:84:9E:BE:4F:AD:55:D3:89 Authority key identifier: F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 Certificate issuer: /CN=A917C2CC/serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Certificate serial: 0F50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft Manifest number: 0F46 Signing time: Thu 18 Sep 2025 17:45:56 +0000 Manifest this update: Thu 18 Sep 2025 17:45:56 +0000 Manifest next update: Thu 25 Sep 2025 17:45:56 +0000 Files and hashes: 1: -bj5HSkovqo1HMNFxHNpMv2GOfE.crl (hash: kKgVgbO6ci2lZCH1hUsrZLUjsBJDb7pPKv0gjCHNmg8=) 2: 39275D0C232511EC925DF318C4F9AE02.roa (hash: kMA98lH1wtLYavwio/f29E4JAww9w+abzPZIVQ6M1dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 17:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3920 (0xf50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C2CC, serialNumber=F9B8F91D2928BEAA351CC345C4736932FD8639F1 Validity Not Before: Sep 18 17:45:56 2025 GMT Not After : Sep 25 17:45:56 2025 GMT Subject: CN=68cc4554-9135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cb:ec:e8:bd:a4:30:0a:10:8b:1d:8b:d2:18: d9:4a:3c:3f:96:8a:6f:1c:5a:ca:dd:ab:81:4d:dd: db:f9:ac:53:2a:55:a4:06:7a:b0:46:0c:2e:61:dc: 79:ca:df:70:a6:a2:d4:87:e8:5e:cb:13:11:93:d6: 1c:77:36:8b:90:07:04:9d:f5:6e:6d:2b:4e:2d:ac: 73:cf:9e:75:ba:f9:80:ed:19:7d:fa:17:5e:5d:da: f1:a4:b4:53:a8:eb:2a:15:8f:23:08:6f:23:ab:01: c2:31:e4:e1:55:d8:16:60:06:72:c4:cd:5f:6c:f7: 2d:50:16:66:22:dd:b8:c8:ff:24:e1:09:4f:e9:80: 65:55:91:0e:12:1c:89:8d:fb:cc:b8:7e:8a:f0:38: c7:93:e5:18:1c:0b:6b:ae:20:c7:4e:e2:28:b5:7a: 03:1d:f8:d1:39:2d:fa:b9:f9:0a:80:58:39:13:97: 14:84:79:10:3f:18:94:69:04:f7:eb:79:08:a1:e2: 49:72:e6:15:85:5b:ed:7e:d0:61:33:e8:f0:79:70: b0:fe:e8:2c:19:cf:8e:a5:b2:44:f6:f9:c2:be:a4: e8:5c:00:ca:97:30:9c:71:08:5f:77:33:90:7e:25: 56:c3:77:72:60:b3:63:ef:9c:f9:2f:6a:0e:94:fa: a4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D2:06:43:CB:E7:E0:AF:E6:98:69:45:84:9E:BE:4F:AD:55:D3:89 X509v3 Authority Key Identifier: keyid:F9:B8:F9:1D:29:28:BE:AA:35:1C:C3:45:C4:73:69:32:FD:86:39:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-bj5HSkovqo1HMNFxHNpMv2GOfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C2CC/CC19387678DA11E9901B7F4DC4F9AE02/-bj5HSkovqo1HMNFxHNpMv2GOfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:f7:5a:9c:ee:33:58:3f:f7:15:27:0e:96:86:da:26:1b:1d: b8:1a:37:fc:29:c3:f5:5a:0f:16:a5:1a:f9:36:f7:6c:58:5b: db:fa:4e:5e:db:8a:ae:0a:43:31:36:89:91:99:fd:7f:4a:7f: f3:07:ca:e4:e4:d3:ec:9a:da:e0:0d:1e:d1:7c:66:95:5d:6f: 70:4f:07:60:f5:f8:8c:a7:73:85:6b:f8:bd:b0:b7:ad:62:3b: f4:56:2f:44:69:c0:0c:c8:11:5d:c1:8e:91:86:d5:47:43:cc: 49:78:6a:e0:c5:97:2e:94:5c:80:30:e0:b8:05:c6:92:b9:43: bc:6a:68:27:c5:7b:f3:70:86:91:95:da:c5:f0:70:4f:6e:06: 8d:74:d4:9a:66:c3:da:5d:32:9f:dc:73:82:ff:c2:8d:ca:11: 09:fb:f3:77:80:92:71:ea:1b:77:77:f6:4a:fc:44:53:ec:2b: a0:e9:ef:ff:cc:be:d2:57:2a:32:a6:9c:77:7d:8d:67:ce:a1: ed:b7:bd:e1:2a:88:8b:be:77:79:a2:19:96:be:a3:ba:ed:09: a9:24:27:e3:e0:9e:c0:b5:e2:35:fd:0b:91:1b:37:fb:24:01: c2:9a:c4:d8:92:49:04:25:e8:88:47:89:7e:5b:92:0a:f8:5d: bb:e0:f4:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0MyQ0MxMTAvBgNVBAUTKEY5QjhGOTFEMjkyOEJFQUEzNTFDQzM0NUM0NzM2OTMy RkQ4NjM5RjEwHhcNMjUwOTE4MTc0NTU2WhcNMjUwOTI1MTc0NTU2WjAYMRYwFAYD VQQDEw02OGNjNDU1NC05MTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMvs6L2kMAoQix2L0hjZSjw/lopvHFrK3auBTd3b+axTKlWkBnqwRgwuYdx5 yt9wpqLUh+heyxMRk9YcdzaLkAcEnfVubStOLaxzz551uvmA7Rl9+hdeXdrxpLRT qOsqFY8jCG8jqwHCMeThVdgWYAZyxM1fbPctUBZmIt24yP8k4QlP6YBlVZEOEhyJ jfvMuH6K8DjHk+UYHAtrriDHTuIotXoDHfjROS36ufkKgFg5E5cUhHkQPxiUaQT3 63kIoeJJcuYVhVvtftBhM+jweXCw/ugsGc+OpbJE9vnCvqToXADKlzCccQhfdzOQ fiVWw3dyYLNj75z5L2oOlPqkzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/SBkPL 5+Cv5phpRYSevk+tVdOJMB8GA1UdIwQYMBaAFPm4+R0pKL6qNRzDRcRzaTL9hjnx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzJDQy9DQzE5Mzg3Njc4 REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3ZxbzFITU5GeEhOcE12MkdP ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1iajVIU2tvdnFvMUhNTkZ4SE5wTXYyR09mRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzJDQy9DQzE5Mzg3Njc4REExMUU5OTAxQjdGNERDNEY5QUUwMi8tYmo1SFNrb3Zx bzFITU5GeEhOcE12MkdPZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCm91qc7jNYP/cVJw6WhtomGx24Gjf8KcP1Wg8WpRr5NvdsWFvb+k5e 24quCkMxNomRmf1/Sn/zB8rk5NPsmtrgDR7RfGaVXW9wTwdg9fiMp3OFa/i9sLet Yjv0Vi9EacAMyBFdwY6RhtVHQ8xJeGrgxZculFyAMOC4BcaSuUO8amgnxXvzcIaR ldrF8HBPbgaNdNSaZsPaXTKf3HOC/8KNyhEJ+/N3gJJx6ht3d/ZK/ERT7Cug6e// zL7SVyoyppx3fY1nzqHtt73hKoiLvnd5ohmWvqO67QmpJCfj4J7AteI1/QuRGzf7 JAHCmsTYkkkEJeiIR4l+W5IK+F274PR9 -----END CERTIFICATE-----Generated at Fri Sep 19 12:53:13 2025 by rpki-client