$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft File: X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft (raw, json) Hash identifier: RejK/9RbM3e4bsyB8IyI5jWIOL7uKKHJnAaPWb8uh5w= Subject key identifier: 49:B9:27:F1:14:25:08:BA:A9:B5:09:35:14:1B:DB:B9:35:0C:04:5A Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE Certificate issuer: /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE Certificate serial: 01F3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft Manifest number: 01EC Signing time: Wed 17 Sep 2025 03:03:01 +0000 Manifest this update: Wed 17 Sep 2025 03:03:00 +0000 Manifest next update: Wed 24 Sep 2025 03:03:00 +0000 Files and hashes: 1: X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl (hash: yQ8/Zvyu+4BqSn46oE3ZnXrICyiLSnMrFvZT2eVSDmU=) 2: 6B9615FCD6E311EE94842842C4F9AE02.roa (hash: 9FynllD8H+NI8HSEXg9Jjmq002CiTaGo7ZssucPUw/c=) 3: 6A9D79ECD6E311EE94842842C4F9AE02.roa (hash: pf/aq5LQ2SyN9nQK//wVXk1HeFtnOQFOhE/br9mZqh4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 03:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 499 (0x1f3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A51B, serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE Validity Not Before: Sep 17 03:03:00 2025 GMT Not After : Sep 24 03:03:00 2025 GMT Subject: CN=68ca24e5-868e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:eb:25:db:9f:79:4d:85:ef:33:50:1a:f6:bd: f1:3a:da:28:52:0c:b1:e3:22:e1:1d:fd:7e:57:ed: 0b:dc:8c:83:6c:96:71:d6:44:bd:b9:0b:76:54:e7: 77:8b:40:a6:2e:9b:06:ec:98:fa:aa:62:35:71:a5: 2b:c5:e4:8e:12:75:e7:e3:4e:75:fe:92:d1:1c:6c: e9:1f:00:6a:7b:b6:3c:80:86:ed:69:4b:fd:94:c7: 81:6d:3d:02:93:9a:3d:99:ec:9b:a9:fd:c4:01:9c: b9:9a:84:ea:de:f8:96:cb:2b:c1:ac:7e:d6:06:0c: 26:b0:a2:6e:15:e1:40:09:cd:df:37:63:88:c3:db: 9b:df:63:34:8b:05:3a:bc:48:49:15:0b:92:43:24: d5:93:4c:38:23:ca:bd:02:f0:7b:e2:6c:31:87:2a: 87:33:b9:23:49:cf:6d:b8:a0:6e:d6:77:3a:38:a1: 7e:93:33:7b:13:d9:89:44:50:23:b0:c5:bb:a7:32: b2:29:5f:e7:22:60:53:c5:f2:aa:30:60:e9:09:c9: cc:19:8e:ff:51:fd:8a:ba:15:1d:32:4f:b5:11:49: b8:c7:47:e0:a1:3a:d2:8b:97:c5:91:3e:60:f1:f4: 34:0f:21:bb:e5:39:10:e6:9f:7f:cd:71:2d:05:9c: da:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B9:27:F1:14:25:08:BA:A9:B5:09:35:14:1B:DB:B9:35:0C:04:5A X509v3 Authority Key Identifier: keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:16:68:c3:e1:5a:54:64:11:9f:ca:5a:e0:90:7a:7e:a7:9a: ae:dc:40:fb:14:47:df:58:fa:3e:cc:b8:a2:1a:b6:7b:5c:a8: 8c:74:eb:4d:3f:fb:69:a9:66:60:5d:88:42:39:4f:c8:7c:b1: 76:46:f8:7a:a5:d3:a9:9f:6a:e6:d2:77:e1:26:08:a6:35:21: a0:1b:92:06:e6:5e:83:ab:30:65:e7:03:ba:93:9c:a8:90:b8: 61:7e:56:59:13:8e:30:35:c7:66:9d:a0:4f:08:ce:7f:48:7e: d2:ff:7b:1a:73:e0:dc:1d:a0:cd:3c:9a:1a:89:a3:20:33:fa: 02:2d:11:3b:0b:9f:11:b1:2d:5d:06:91:59:aa:e6:0a:ee:0b: cb:b2:56:73:cb:23:74:f2:25:5c:41:2e:9e:5d:cf:58:39:58: 2d:f8:72:e5:77:15:79:44:a2:3f:35:76:ef:e8:28:06:43:4b: 5c:16:2e:69:a3:2f:a2:e4:f2:3a:cf:a8:9a:5d:2e:4f:a7:74: 7c:62:17:f2:9f:4d:a4:89:c2:5e:69:45:32:27:e1:af:0f:e9: 5b:7c:79:d5:11:e9:62:0b:42:09:b4:97:bd:3d:da:d3:fa:0b: c8:fb:8c:87:63:c6:d8:69:ea:cd:6e:01:33:3f:4b:45:05:e5: e0:0a:11:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAfMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEE1MUIxMTAvBgNVBAUTKDVGRTA0Qzk1N0E2Q0JDNTQwQTM0RjQ1M0QxM0UzRjgw NTBDOEY0RUUwHhcNMjUwOTE3MDMwMzAwWhcNMjUwOTI0MDMwMzAwWjAYMRYwFAYD VQQDEw02OGNhMjRlNS04NjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsesl2595TYXvM1Aa9r3xOtooUgyx4yLhHf1+V+0L3IyDbJZx1kS9uQt2VOd3 i0CmLpsG7Jj6qmI1caUrxeSOEnXn4051/pLRHGzpHwBqe7Y8gIbtaUv9lMeBbT0C k5o9meybqf3EAZy5moTq3viWyyvBrH7WBgwmsKJuFeFACc3fN2OIw9ub32M0iwU6 vEhJFQuSQyTVk0w4I8q9AvB74mwxhyqHM7kjSc9tuKBu1nc6OKF+kzN7E9mJRFAj sMW7pzKyKV/nImBTxfKqMGDpCcnMGY7/Uf2KuhUdMk+1EUm4x0fgoTrSi5fFkT5g 8fQ0DyG75TkQ5p9/zXEtBZzapQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEm5J/EU JQi6qbUJNRQb27k1DARaMB8GA1UdIwQYMBaAFF/gTJV6bLxUCjT0U9E+P4BQyPTu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTUxQi8wMENBOThGMkEx QTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZGUUtOUFJUMFQ0X2dGREk5 TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1gtQk1sWHBzdkZRS05QUlQwVDRfZ0ZESTlPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTUxQi8wMENBOThGMkExQTUxMUVEOTEyMzIyNTRDNEY5QUUwMi9YLUJNbFhwc3ZG UUtOUFJUMFQ0X2dGREk5TzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5FmjD4VpUZBGfylrgkHp+p5qu3ED7FEffWPo+zLiiGrZ7XKiMdOtN P/tpqWZgXYhCOU/IfLF2Rvh6pdOpn2rm0nfhJgimNSGgG5IG5l6DqzBl5wO6k5yo kLhhflZZE44wNcdmnaBPCM5/SH7S/3sac+DcHaDNPJoaiaMgM/oCLRE7C58RsS1d BpFZquYK7gvLslZzyyN08iVcQS6eXc9YOVgt+HLldxV5RKI/NXbv6CgGQ0tcFi5p oy+i5PI6z6iaXS5Pp3R8Yhfyn02kicJeaUUyJ+GvD+lbfHnVEeliC0IJtJe9PdrT +gvI+4yHY8bYaerNbgEzP0tFBeXgChE0 -----END CERTIFICATE-----Generated at Thu Sep 18 21:43:04 2025 by rpki-client