$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft File: bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft (raw, json) Hash identifier: tBdTcu4uFMY484o6OJwUv7MyUMV8AJrhn1jX+2ttsPc= Subject key identifier: 0A:49:23:D4:66:A5:A8:A8:B3:4B:C5:76:25:89:BC:80:9A:ED:D1:77 Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91 Certificate issuer: /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91 Certificate serial: 01AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft Manifest number: 01A2 Signing time: Tue 09 Sep 2025 03:24:58 +0000 Manifest this update: Tue 09 Sep 2025 03:24:58 +0000 Manifest next update: Tue 16 Sep 2025 03:24:58 +0000 Files and hashes: 1: bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl (hash: i6vKQpIXZpR20Eqg6VKkwVCviC6WkqEDjbZAzZUGVZI=) 2: 62A9A9AC240A11F0A6893962C4F9AE02.roa (hash: LvnWXi9L3u+fKG77QzH6WnEL9Cc/sS3Yn7M7dhZqrvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F69, serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91 Validity Not Before: Sep 9 03:24:58 2025 GMT Not After : Sep 16 03:24:58 2025 GMT Subject: CN=68bf9e0a-95f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:14:6b:97:90:32:f9:2a:04:81:8a:cc:ac:24: eb:c3:b9:36:bb:9c:ce:62:74:b7:a1:e4:38:03:cb: 36:9f:0f:b3:c9:b2:2d:73:c4:b0:5e:ce:69:14:66: eb:55:aa:c3:f4:59:05:e8:4c:f6:12:e9:ab:cc:0a: 83:1b:08:fa:47:70:b4:97:db:32:91:0c:36:c0:ce: 5a:f6:37:a3:4f:9b:c3:ef:99:8a:88:69:7c:83:91: dd:2a:66:99:1e:8a:9b:69:cf:55:92:a6:c8:95:f4: d6:a1:8c:cc:e4:dc:ec:80:e3:4a:42:08:ee:e3:f6: 06:b4:ae:c5:31:f3:ab:ab:89:03:91:ba:06:c7:bf: 65:f2:5f:d6:60:83:16:2b:06:c1:7d:de:8c:31:5f: 48:31:e0:d4:fa:82:ca:d1:b2:90:4f:08:9b:fe:68: c2:09:21:5f:cf:f1:5c:41:83:d9:0b:0b:5b:f5:c7: 28:ff:55:c7:f7:a5:13:94:90:d7:ec:db:3b:9a:4a: 41:aa:64:da:96:c0:65:16:bc:e1:a0:e3:cf:e0:ad: 02:e4:9f:83:d3:cd:fc:67:60:76:3b:13:a0:b7:29: bd:24:dd:b0:cc:0d:61:f8:16:4f:9d:55:85:9c:79: 65:a3:54:47:f3:61:7d:28:d2:e7:b1:92:5b:50:03: 78:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:49:23:D4:66:A5:A8:A8:B3:4B:C5:76:25:89:BC:80:9A:ED:D1:77 X509v3 Authority Key Identifier: keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:b5:2a:08:62:15:d6:be:93:de:5c:ac:e8:07:3c:a6:06:82: c2:3c:2e:c9:cf:46:c4:48:eb:ec:a0:03:8f:24:ee:92:88:7e: 48:e1:ff:d9:98:0c:46:94:1b:0a:d3:91:10:3f:62:13:a8:35: e7:27:1c:ac:16:d6:e8:dd:92:50:62:54:75:bf:0c:53:28:37: a1:4f:d6:9c:64:aa:00:52:a4:02:51:bc:a6:7e:48:a7:0a:8d: c4:16:60:31:ed:d5:f0:48:c7:55:a2:de:37:27:fe:bf:06:71: ef:25:80:fc:35:11:4b:fb:94:2c:80:8a:9e:71:9f:57:4a:60: d7:0d:cd:02:c2:fc:ae:aa:0b:70:bc:bd:af:15:8a:1f:41:37: 37:a0:ef:36:9e:4f:a8:a8:3d:69:6e:86:6a:c2:f0:1e:33:dc: 19:7a:85:70:25:51:44:87:81:ba:ff:69:e0:d2:a6:2c:18:54: a2:38:e0:aa:cf:9b:14:4f:2c:90:17:0f:6a:56:0b:5c:60:6d: 88:74:d9:07:08:26:87:e4:e3:ae:69:66:b4:82:d0:15:27:d8: ee:01:45:72:2f:d2:b5:23:36:a7:d4:4c:bf:93:20:d9:af:64: 82:c4:25:11:91:23:a0:f7:a7:8f:c1:cb:53:b7:d8:b7:06:60: 65:15:7a:d8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGNjkxMTAvBgNVBAUTKDZFOTVBNjg5MjIwOTdFNzZDNERCMTI0N0VFQ0VFMUEz QjExRjhFOTEwHhcNMjUwOTA5MDMyNDU4WhcNMjUwOTE2MDMyNDU4WjAYMRYwFAYD VQQDEw02OGJmOWUwYS05NWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqhRrl5Ay+SoEgYrMrCTrw7k2u5zOYnS3oeQ4A8s2nw+zybItc8SwXs5pFGbr VarD9FkF6Ez2EumrzAqDGwj6R3C0l9sykQw2wM5a9jejT5vD75mKiGl8g5HdKmaZ Hoqbac9VkqbIlfTWoYzM5NzsgONKQgju4/YGtK7FMfOrq4kDkboGx79l8l/WYIMW KwbBfd6MMV9IMeDU+oLK0bKQTwib/mjCCSFfz/FcQYPZCwtb9cco/1XH96UTlJDX 7Ns7mkpBqmTalsBlFrzhoOPP4K0C5J+D0838Z2B2OxOgtym9JN2wzA1h+BZPnVWF nHllo1RH82F9KNLnsZJbUAN4EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFApJI9Rm paios0vFdiWJvICa7dF3MB8GA1UdIwQYMBaAFG6VpokiCX52xNsSR+7O4aOxH46R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEY2OS9EQ0Y1QzNEMjFB NUYxMUVFOUFBQUIzODZDNEY5QUUwMi9icFdtaVNJSmZuYkUyeEpIN3M3aG83RWZq cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwV21pU0lKZm5iRTJ4Skg3czdobzdFZmpwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEY2OS9EQ0Y1QzNEMjFBNUYxMUVFOUFBQUIzODZDNEY5QUUwMi9icFdtaVNJSmZu YkUyeEpIN3M3aG83RWZqcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFtSoIYhXWvpPeXKzoBzymBoLCPC7Jz0bESOvsoAOPJO6SiH5I4f/Z mAxGlBsK05EQP2ITqDXnJxysFtbo3ZJQYlR1vwxTKDehT9acZKoAUqQCUbymfkin Co3EFmAx7dXwSMdVot43J/6/BnHvJYD8NRFL+5QsgIqecZ9XSmDXDc0Cwvyuqgtw vL2vFYofQTc3oO82nk+oqD1pboZqwvAeM9wZeoVwJVFEh4G6/2ng0qYsGFSiOOCq z5sUTyyQFw9qVgtcYG2IdNkHCCaH5OOuaWa0gtAVJ9juAUVyL9K1Izan1Ey/kyDZ r2SCxCURkSOg96ePwctTt9i3BmBlFXrY -----END CERTIFICATE-----Generated at Tue Sep 9 06:06:25 2025 by rpki-client