$ rpki-client -vvf rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft File: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft (raw, json) Hash identifier: efVYYPRcEy3PUpWwfBMwwnP1RAr3L5+Wb0CmjG141L8= Subject key identifier: 6C:A0:64:D3:43:CB:04:8F:9C:A8:53:99:34:DC:7E:79:07:15:5A:5C Authority key identifier: 04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB Certificate issuer: /CN=A9196C96/serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB Certificate serial: 066C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft Manifest number: 0667 Signing time: Wed 20 Aug 2025 22:34:44 +0000 Manifest this update: Wed 20 Aug 2025 22:34:44 +0000 Manifest next update: Wed 27 Aug 2025 22:34:44 +0000 Files and hashes: 1: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl (hash: u87mmlPHf9KGxehIbz8TkD6FPpVjC+fJs+ohcflErVA=) 2: D49D6040912311EB9DCD2A33C4F9AE02.roa (hash: aGdwS0nqIDPQmrDed9aL2d/6MVOmtEOC5VWnxIsYspE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 22:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1644 (0x66c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196C96, serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB Validity Not Before: Aug 20 22:34:44 2025 GMT Not After : Aug 27 22:34:44 2025 GMT Subject: CN=68a64d84-6942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:11:b8:d8:d4:52:ae:10:26:f0:f9:54:a2:26: 96:ba:26:03:a1:36:90:b4:d7:6e:8b:e1:a0:e7:55: 46:94:f5:98:88:ef:31:10:96:d6:0f:86:49:06:f2: 4c:30:17:98:1f:35:fb:81:7a:8a:42:6d:8b:20:c0: 56:aa:1a:70:21:92:8e:1e:8e:58:87:09:08:15:0f: 51:1e:57:10:71:3c:bc:1a:17:38:25:7f:7d:8e:38: 04:a4:9a:ed:dd:2e:cb:9a:9a:c0:1b:ff:34:ec:9f: ca:25:99:44:fd:b1:87:07:20:3b:fb:cc:d3:3f:a4: 1b:a4:83:85:ef:61:9d:eb:f3:8e:9c:64:c9:10:a4: f3:90:53:22:4c:e5:ea:6f:64:2f:ed:7f:cb:81:3c: 62:f0:f0:f8:fe:86:50:5b:83:56:d7:35:67:a5:84: 9d:6d:ff:ea:0a:d9:66:35:23:54:6e:7e:af:62:e6: b8:22:7b:a5:a7:29:fe:6c:99:0d:ab:2d:83:fd:c5: 21:6c:fd:b0:af:17:0a:85:43:4f:09:40:4d:8e:ac: 27:15:6f:8e:44:d1:62:f9:b9:92:50:a9:d5:a1:9d: 8d:7b:30:86:22:b9:a4:ae:b8:f5:e9:a8:d5:e3:e8: c1:50:25:eb:87:c3:02:ef:75:15:65:09:c3:af:a0: 3c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A0:64:D3:43:CB:04:8F:9C:A8:53:99:34:DC:7E:79:07:15:5A:5C X509v3 Authority Key Identifier: keyid:04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:e4:94:69:b0:82:85:e1:bb:dd:4f:56:0e:07:c5:44:d3:6e: 42:73:7b:43:c9:c8:40:aa:f7:3c:c9:27:5d:31:65:57:6f:14: 76:d4:1a:a9:7e:08:55:eb:41:4c:66:4a:21:ad:4f:fa:7c:c1: 7c:03:a8:a6:ce:1b:42:9f:c7:b4:90:66:39:d9:19:9a:8c:76: c1:c8:06:3b:cc:01:c4:b8:17:6b:cd:36:d3:cb:af:4a:b0:9c: 7d:12:06:7a:06:6d:39:fe:43:ee:86:f9:a7:95:43:31:46:c2: de:3a:b5:c5:40:48:7e:42:ef:4c:5d:3b:35:95:91:29:c4:8d: 63:cd:c4:12:61:52:4c:54:ee:24:01:0b:51:1d:d4:e1:27:1e: a3:1c:5e:6c:56:bc:4d:02:18:ee:74:ec:2d:95:c0:d4:b0:94: e4:05:3b:46:06:53:bb:ac:d7:a2:fc:3c:7b:09:b2:84:42:74: b0:25:7a:ab:6a:e1:84:be:d2:07:0e:1c:24:8b:7b:cf:ba:b5: 80:85:19:32:a9:2c:27:a1:1a:17:24:4d:e5:7c:b9:37:79:34: 8f:df:c0:53:5f:a8:3a:e9:94:83:b9:80:bd:67:e7:aa:19:2f: ce:4c:0f:20:ba:07:79:1e:93:17:eb:12:9b:4a:0d:da:f1:a5: 6f:b4:f3:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZDOTYxMTAvBgNVBAUTKDA0NjI3RENDOUI4MDg0MkQ0MzYzNzFDNENEQzczRDE5 QUI3RTVEQkIwHhcNMjUwODIwMjIzNDQ0WhcNMjUwODI3MjIzNDQ0WjAYMRYwFAYD VQQDEw02OGE2NGQ4NC02OTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyBG42NRSrhAm8PlUoiaWuiYDoTaQtNdui+Gg51VGlPWYiO8xEJbWD4ZJBvJM MBeYHzX7gXqKQm2LIMBWqhpwIZKOHo5YhwkIFQ9RHlcQcTy8Ghc4JX99jjgEpJrt 3S7LmprAG/807J/KJZlE/bGHByA7+8zTP6QbpIOF72Gd6/OOnGTJEKTzkFMiTOXq b2Qv7X/LgTxi8PD4/oZQW4NW1zVnpYSdbf/qCtlmNSNUbn6vYua4Inulpyn+bJkN qy2D/cUhbP2wrxcKhUNPCUBNjqwnFW+ORNFi+bmSUKnVoZ2NezCGIrmkrrj16ajV 4+jBUCXrh8MC73UVZQnDr6A8DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGygZNND ywSPnKhTmTTcfnkHFVpcMB8GA1UdIwQYMBaAFARifcybgIQtQ2NxxM3HPRmrfl27 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkM5Ni9BOEFFMEY5NDkw NDYxMUVCQkI4NEIyMjdDNEY5QUUwMi9CR0o5ekp1QWhDMURZM0hFemNjOUdhdC1Y YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JHSjl6SnVBaEMxRFkzSEV6Y2M5R2F0LVhicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkM5Ni9BOEFFMEY5NDkwNDYxMUVCQkI4NEIyMjdDNEY5QUUwMi9CR0o5ekp1QWhD MURZM0hFemNjOUdhdC1YYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX5JRpsIKF4bvdT1YOB8VE025Cc3tDychAqvc8ySddMWVXbxR21Bqp fghV60FMZkohrU/6fMF8A6imzhtCn8e0kGY52RmajHbByAY7zAHEuBdrzTbTy69K sJx9EgZ6Bm05/kPuhvmnlUMxRsLeOrXFQEh+Qu9MXTs1lZEpxI1jzcQSYVJMVO4k AQtRHdThJx6jHF5sVrxNAhjudOwtlcDUsJTkBTtGBlO7rNei/Dx7CbKEQnSwJXqr auGEvtIHDhwki3vPurWAhRkyqSwnoRoXJE3lfLk3eTSP38BTX6g66ZSDuYC9Z+eq GS/OTA8gugd5HpMX6xKbSg3a8aVvtPPu -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:39 2025 by rpki-client