$ rpki-client -vvf rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft File: bC3jjX43M-CH3e95d-MYOcCt7jc.mft (raw, json) Hash identifier: obPLNIGkq2DVCm1WLJKxUyMrfbU9EWCsFWV15vdmFxc= Subject key identifier: 24:E7:54:30:1A:C6:B9:46:9B:B4:FE:1B:D4:FA:41:6D:5E:C9:62:30 Authority key identifier: 6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37 Certificate issuer: /CN=A9181380/serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37 Certificate serial: 0231 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft Manifest number: 022D Signing time: Sun 07 Sep 2025 02:18:51 +0000 Manifest this update: Sun 07 Sep 2025 02:18:50 +0000 Manifest next update: Sun 14 Sep 2025 02:18:50 +0000 Files and hashes: 1: bC3jjX43M-CH3e95d-MYOcCt7jc.crl (hash: xqpK6kxoWIdMWhXjyR51mQz9IPR6KE5nXwHIWyLO1HU=) 2: 164993A63FBA11EDA5387132C4F9AE02.roa (hash: XYc2mxLenXQc+O8B80ZFK5EpIFxtXO429dywGYqqozs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 02:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 561 (0x231) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181380, serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37 Validity Not Before: Sep 7 02:18:50 2025 GMT Not After : Sep 14 02:18:50 2025 GMT Subject: CN=68bceb8b-4b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0e:1b:e6:a4:7e:2d:22:d2:e4:36:03:ac:1e: ae:13:a8:f9:d0:36:f0:96:35:be:a0:41:19:81:8b: 02:18:a6:6c:35:01:6a:a1:7d:13:ea:98:77:b4:d6: d8:59:73:e7:c9:77:74:36:64:47:4e:b7:55:c5:b4: 9d:b7:8c:a2:e0:ca:bb:00:59:4c:af:3b:9a:46:af: fc:1e:6c:b2:35:ab:5c:e1:40:f2:34:71:f8:b4:2b: 32:03:f8:82:fa:98:bd:85:36:75:cf:22:38:46:19: 78:0a:a1:3b:5c:a8:65:25:c1:3c:61:44:d1:50:4b: 9b:f0:01:b2:2b:f0:bd:b4:66:3c:c5:6a:49:af:93: ca:ba:89:97:df:32:12:7d:1a:e5:47:f3:3e:cb:24: ea:99:49:85:cc:05:8a:6d:8a:a0:bd:48:a6:86:8e: b0:31:ef:96:84:cc:74:d5:b9:95:d3:ec:78:f1:02: 62:62:0d:3f:1f:78:d4:3f:8a:73:79:02:ae:7b:e4: a2:65:c0:ee:75:44:12:9c:55:0f:0c:df:f6:91:85: 43:ec:73:dd:72:b4:8a:b7:ef:10:b8:58:bd:2d:38: 9a:88:1e:7c:24:82:cb:dc:53:2f:56:fc:a6:d6:92: 9a:96:bd:ce:88:d2:bd:c3:8b:c9:9d:1a:2a:cb:d9: a4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E7:54:30:1A:C6:B9:46:9B:B4:FE:1B:D4:FA:41:6D:5E:C9:62:30 X509v3 Authority Key Identifier: keyid:6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:56:2c:0a:16:1a:48:d5:a8:1e:f5:61:49:fd:ef:61:cf:3c: d3:13:f3:7f:a6:1b:2d:73:ea:2b:10:0b:6c:f7:93:98:b5:1c: 5e:fd:f8:36:b6:18:08:c7:95:01:3b:31:cb:bd:6c:0d:34:32: 8d:3f:57:c1:01:09:e2:cc:3d:be:b7:a0:3b:40:fb:55:42:23: 2e:48:a8:dc:82:c9:a3:8e:7d:a5:03:ae:d1:4c:c1:4e:cf:f5: 3e:f7:0d:bf:5e:e8:ca:da:84:c2:a1:09:11:79:14:38:0f:e8: e6:d1:43:d5:8d:e8:a9:46:81:4a:b2:d2:de:ef:d4:5a:00:1e: f4:25:65:73:d2:77:e2:52:97:43:a3:9c:62:a5:c5:df:ec:e1: f2:37:cd:2c:c4:3e:7b:76:4c:31:15:18:91:b4:f3:84:16:22: 80:e5:d9:ef:90:0a:ba:4b:a1:79:a5:48:42:1c:d1:8c:51:bb: 70:cb:6a:2a:a2:9d:da:81:4e:49:de:40:e2:4f:16:7b:02:f6: 80:0a:ab:6b:dc:e4:cc:5d:2c:5f:a7:12:6d:ad:0e:9d:fd:a1: 97:e2:bd:8e:0f:00:c8:74:e7:de:c9:c1:9f:cd:09:de:83:9a: bc:f0:a9:0e:69:6a:a0:b8:2b:a9:36:94:83:bc:41:f4:d3:d3: 44:14:71:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzODAxMTAvBgNVBAUTKDZDMkRFMzhEN0UzNzMzRTA4N0RERUY3OTc3RTMxODM5 QzBBREVFMzcwHhcNMjUwOTA3MDIxODUwWhcNMjUwOTE0MDIxODUwWjAYMRYwFAYD VQQDEw02OGJjZWI4Yi00YjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApA4b5qR+LSLS5DYDrB6uE6j50DbwljW+oEEZgYsCGKZsNQFqoX0T6ph3tNbY WXPnyXd0NmRHTrdVxbSdt4yi4Mq7AFlMrzuaRq/8HmyyNatc4UDyNHH4tCsyA/iC +pi9hTZ1zyI4Rhl4CqE7XKhlJcE8YUTRUEub8AGyK/C9tGY8xWpJr5PKuomX3zIS fRrlR/M+yyTqmUmFzAWKbYqgvUimho6wMe+WhMx01bmV0+x48QJiYg0/H3jUP4pz eQKue+SiZcDudUQSnFUPDN/2kYVD7HPdcrSKt+8QuFi9LTiaiB58JILL3FMvVvym 1pKalr3OiNK9w4vJnRoqy9mkkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCTnVDAa xrlGm7T+G9T6QW1eyWIwMB8GA1UdIwQYMBaAFGwt441+NzPgh93veXfjGDnAre43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM4MC8wREYzQjM5QTNF RkIxMUVEQjdEQTc4NzVDNEY5QUUwMi9iQzNqalg0M00tQ0gzZTk1ZC1NWU9jQ3Q3 amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDM2pqWDQzTS1DSDNlOTVkLU1ZT2NDdDdqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM4MC8wREYzQjM5QTNFRkIxMUVEQjdEQTc4NzVDNEY5QUUwMi9iQzNqalg0M00t Q0gzZTk1ZC1NWU9jQ3Q3amMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJViwKFhpI1age9WFJ/e9hzzzTE/N/phstc+orEAts95OYtRxe/fg2 thgIx5UBOzHLvWwNNDKNP1fBAQnizD2+t6A7QPtVQiMuSKjcgsmjjn2lA67RTMFO z/U+9w2/XujK2oTCoQkReRQ4D+jm0UPVjeipRoFKstLe79RaAB70JWVz0nfiUpdD o5xipcXf7OHyN80sxD57dkwxFRiRtPOEFiKA5dnvkAq6S6F5pUhCHNGMUbtwy2oq op3agU5J3kDiTxZ7AvaACqtr3OTMXSxfpxJtrQ6d/aGX4r2ODwDIdOfeycGfzQne g5q88KkOaWqguCupNpSDvEH009NEFHEM -----END CERTIFICATE-----Generated at Mon Sep 8 21:38:34 2025 by rpki-client