$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft File: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft (raw, json) Hash identifier: Li2v2RSQ1bMK5UrSt13ZitAWmjhuyuEHmbAuTJ2T+B8= Subject key identifier: C8:E0:3E:88:B0:E7:A1:83:92:92:71:DC:90:8A:C0:63:D0:5E:AD:20 Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0CE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft Manifest number: 0CAD Signing time: Wed 10 Sep 2025 18:33:23 +0000 Manifest this update: Wed 10 Sep 2025 18:33:23 +0000 Manifest next update: Wed 17 Sep 2025 18:33:23 +0000 Files and hashes: 1: Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl (hash: MmVWukn5CQtwpnNVRyyxb8hV+QSeQrHiqyhvwOrUL2Q=) 2: 12561046368911EEA0CB766BC4F9AE02.roa (hash: ZsNiLxfxjjXIOR9efOK6g19RpsthQOBE4XYCmM1hnq8=) 3: 21A9C2D4221211EF9624DB0CC4F9AE02.roa (hash: UuY5qtUwk8Dlu801YZxvnO/xKQaWGop0bKAvOOHuar0=) 4: 2FC3DE84B15B11EB8CCCD624C4F9AE02.roa (hash: e/Kuo5QdtsaM/mztDHYG4XkizjKIPPrgUEb1ap1W45w=) 5: 22E63812221211EF9624DB0CC4F9AE02.roa (hash: tEtTFQOPTziC3M/Up8UOSv6VFGJx+4dP/cUQCVWj4l4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Sep 2025 18:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3301 (0xce5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: Sep 10 18:33:23 2025 GMT Not After : Sep 17 18:33:23 2025 GMT Subject: CN=68c1c473-7a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e0:cd:14:d0:9c:e7:63:5c:12:ad:e6:7b:7c: c7:00:6c:9d:64:e7:77:a9:32:ca:25:d5:c7:49:6e: 6a:f8:7f:db:96:63:55:ba:fa:ad:03:e6:9c:6c:10: ad:ee:c7:17:f5:e9:48:09:e5:ef:38:54:08:2c:80: 53:76:5e:fe:37:67:40:e8:76:a4:c2:3c:06:d1:e3: d2:1b:13:1e:5d:fb:50:1e:8e:d7:e8:40:e3:91:3f: 59:91:c1:1d:a9:5d:8d:79:2b:c2:2a:b5:f2:30:c1: 14:c6:d1:60:c9:ce:41:99:d0:18:8d:5a:b0:d7:14: 22:3c:ce:97:a3:b4:16:1d:ed:21:13:2a:3b:70:2c: ea:25:4f:33:04:43:e5:12:35:4d:58:4b:0d:d8:d9: e4:6f:c7:7c:36:00:53:78:9f:e4:65:84:03:f0:17: 8d:f8:02:c6:f0:f6:95:65:08:93:0b:b5:b1:9d:bf: d2:11:54:9f:a8:47:d1:e7:47:64:37:d8:2a:2a:31: d3:63:26:82:5f:03:a6:18:3a:0f:ac:3b:ae:a5:fc: 75:e4:6b:99:29:a1:e8:15:01:96:c5:53:f6:ea:14: 04:57:b5:aa:de:a3:b4:fe:94:37:25:4b:5a:fa:e5: 7a:9e:a8:29:ee:ba:11:8a:3d:c6:3a:37:d2:31:70: 94:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E0:3E:88:B0:E7:A1:83:92:92:71:DC:90:8A:C0:63:D0:5E:AD:20 X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:61:7f:06:13:92:d2:04:6d:10:8f:85:ca:ee:59:f6:4b:a6: 0e:e7:b5:6f:ba:85:50:d3:49:ae:15:24:dc:8e:85:a5:f2:57: fa:be:af:41:27:c8:2a:90:86:7a:ea:1b:87:eb:be:54:57:ed: 4b:85:b2:85:3c:62:37:74:5f:01:11:73:85:f7:b9:d2:63:70: 40:06:bc:9f:aa:84:d4:1a:60:2b:69:a2:63:5b:c5:f3:76:c6: b7:b0:09:a9:dc:f6:f9:7d:14:58:a3:10:51:d8:b8:c2:c5:34: 37:76:89:c7:ea:ab:6a:98:8b:f9:53:fa:98:6c:07:38:1f:2e: 46:ec:52:94:a3:ca:a4:e8:db:4e:c3:79:e6:e6:ef:10:00:b9: 42:f5:a9:70:df:4b:8f:23:f6:7f:4c:41:0c:8e:ce:c6:ce:a8: 4f:07:56:55:55:18:a6:e5:10:da:99:42:f5:37:4e:55:1b:ea: 5a:e7:dd:8e:63:4d:c7:2d:de:06:66:b2:3b:65:c3:3e:4a:f2: bc:5c:75:49:ed:0d:d9:06:64:ce:ae:6e:c9:aa:81:b3:6a:b7: d6:c2:75:7b:14:99:b1:03:ee:89:a6:a9:b4:51:18:d1:7f:fb: 73:1f:4f:86:1c:82:2b:2e:19:08:e4:22:db:57:c6:5d:2d:c0: a6:4e:9d:9d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjUwOTEwMTgzMzIzWhcNMjUwOTE3MTgzMzIzWjAYMRYwFAYD VQQDEw02OGMxYzQ3My03YTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoODNFNCc52NcEq3me3zHAGydZOd3qTLKJdXHSW5q+H/blmNVuvqtA+acbBCt 7scX9elICeXvOFQILIBTdl7+N2dA6HakwjwG0ePSGxMeXftQHo7X6EDjkT9ZkcEd qV2NeSvCKrXyMMEUxtFgyc5BmdAYjVqw1xQiPM6Xo7QWHe0hEyo7cCzqJU8zBEPl EjVNWEsN2Nnkb8d8NgBTeJ/kZYQD8BeN+ALG8PaVZQiTC7Wxnb/SEVSfqEfR50dk N9gqKjHTYyaCXwOmGDoPrDuupfx15GuZKaHoFQGWxVP26hQEV7Wq3qO0/pQ3JUta +uV6nqgp7roRij3GOjfSMXCUaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMjgPoiw 56GDkpJx3JCKwGPQXq0gMB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkE4MC9COThFODFENjA1QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3kt Q0dqY0M0X0tJOVNsOEgxM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzYX8GE5LSBG0Qj4XK7ln2S6YO57VvuoVQ00muFSTcjoWl8lf6vq9B J8gqkIZ66huH675UV+1LhbKFPGI3dF8BEXOF97nSY3BABryfqoTUGmAraaJjW8Xz dsa3sAmp3Pb5fRRYoxBR2LjCxTQ3donH6qtqmIv5U/qYbAc4Hy5G7FKUo8qk6NtO w3nm5u8QALlC9alw30uPI/Z/TEEMjs7GzqhPB1ZVVRim5RDamUL1N05VG+pa592O Y03HLd4GZrI7ZcM+SvK8XHVJ7Q3ZBmTOrm7JqoGzarfWwnV7FJmxA+6Jpqm0URjR f/tzH0+GHIIrLhkI5CLbV8ZdLcCmTp2d -----END CERTIFICATE-----Generated at Thu Sep 11 03:13:57 2025 by rpki-client