$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft File: B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft (raw, json) Hash identifier: +GFpPlivbaDcxlBhO92zPa4yOcGfSeJ1kmxFmq0IIzw= Subject key identifier: CD:85:6E:11:E1:1E:2E:A6:20:50:BE:89:97:AF:FE:2C:2D:7E:2D:8D Authority key identifier: 07:60:CA:EF:5B:72:DF:E5:B0:4B:76:DA:DF:FA:B8:67:C3:0A:98:C7 Certificate issuer: /CN=A91DA5FD/serialNumber=0760CAEF5B72DFE5B04B76DADFFAB867C30A98C7 Certificate serial: 017E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft Manifest number: 0179 Signing time: Fri 05 Sep 2025 04:07:01 +0000 Manifest this update: Fri 05 Sep 2025 04:07:01 +0000 Manifest next update: Fri 12 Sep 2025 04:07:00 +0000 Files and hashes: 1: B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl (hash: FE2MoaYSLsNFi+MvsEi9RYbIaw2w40A0UmiTte9rj1U=) 2: 76817340537011EEB43BD523C4F9AE02.roa (hash: DsEQaxFrrc5xgpPNa4O7R4/eOV3VnFZzLIxDWSYq7YI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 04:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA5FD, serialNumber=0760CAEF5B72DFE5B04B76DADFFAB867C30A98C7 Validity Not Before: Sep 5 04:07:01 2025 GMT Not After : Sep 12 04:07:00 2025 GMT Subject: CN=68ba61e5-ac3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:47:9c:b4:16:2c:a9:ac:40:c3:23:e4:3a:a8: 68:2d:dd:66:2b:79:8d:65:d1:8c:38:54:f0:17:58: 60:a4:2b:d3:a8:12:39:8d:26:0a:71:87:d3:24:5d: fb:a6:52:24:c8:cb:85:26:ae:8c:3b:00:24:27:98: d8:b2:75:ad:71:2d:ac:53:9d:11:27:87:7b:83:78: 09:5e:4b:fe:16:78:18:63:4a:13:68:74:7e:47:d5: e4:7d:8e:e1:c8:37:39:76:24:34:b2:ce:b9:2a:ec: ff:a6:1d:94:97:24:96:c5:1c:e6:18:ac:ac:31:e6: ea:30:7e:47:4d:95:2b:63:df:fe:44:d4:78:59:29: fd:7c:fd:34:0f:89:75:fd:72:0b:d1:fa:ca:ac:d6: fe:71:08:38:be:66:7b:e6:28:d3:fe:4d:4a:bf:9e: cf:48:0c:2e:1a:1c:7d:d6:ba:d6:8c:d7:2c:36:54: f3:8f:53:39:4a:78:9c:d6:64:c4:55:37:2c:5e:af: 61:df:bf:cb:a2:49:df:83:39:aa:6b:1e:ec:22:61: d8:bb:5d:c5:26:c0:3d:8f:3b:38:3e:17:54:21:95: cb:5e:99:3f:bc:f0:56:a3:14:19:e0:7f:ae:7c:90: 61:7b:6c:0e:4b:b7:5b:e8:0f:46:12:2f:6a:37:01: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:85:6E:11:E1:1E:2E:A6:20:50:BE:89:97:AF:FE:2C:2D:7E:2D:8D X509v3 Authority Key Identifier: keyid:07:60:CA:EF:5B:72:DF:E5:B0:4B:76:DA:DF:FA:B8:67:C3:0A:98:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2DK71ty3-WwS3ba3_q4Z8MKmMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5FD/8BDAFEF4528611EE89B00D87C4F9AE02/B2DK71ty3-WwS3ba3_q4Z8MKmMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3a:08:b6:9b:08:14:57:0f:65:3e:78:29:fe:ef:2f:67:11: 18:c8:4b:d8:a7:35:ba:54:9a:f6:93:16:c2:ac:c3:05:98:d9: 2a:8e:1d:14:03:d5:3d:c8:6c:c4:c2:8f:9b:7f:07:94:a0:cc: 18:3d:35:e4:77:97:32:ad:33:2b:df:6b:e3:18:39:36:e1:b9: 7d:8b:f9:07:ec:38:49:3b:26:a2:c5:b4:1b:d5:35:73:0a:7d: 77:ed:f5:03:e4:51:43:52:a6:1d:fd:ad:c4:a8:d0:7e:14:0b: 91:13:a7:c9:30:10:3c:c2:a4:c7:c9:15:00:92:72:a1:99:b6: f9:6e:7e:a2:97:70:3f:54:b6:22:2a:3a:a7:74:a1:6b:de:74: 23:9b:18:3f:25:74:83:39:9c:68:54:e6:60:2a:ec:d3:b3:9b: 95:75:e0:d5:88:56:f1:73:51:a2:4e:4f:7b:81:be:ac:09:30: 28:73:c1:5b:18:c7:26:53:79:cd:90:53:0f:88:2d:2d:17:eb: be:25:df:11:5a:c3:5a:f2:4f:66:12:80:a8:ac:0e:b7:02:8a: 7e:0b:cf:7d:da:af:39:10:04:7d:ca:52:ae:cd:a0:9f:17:36: 4f:4e:42:b7:45:d7:2a:a4:6e:b6:95:31:96:4f:d7:3d:2e:48: 3d:a1:6c:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE1RkQxMTAvBgNVBAUTKDA3NjBDQUVGNUI3MkRGRTVCMDRCNzZEQURGRkFCODY3 QzMwQTk4QzcwHhcNMjUwOTA1MDQwNzAxWhcNMjUwOTEyMDQwNzAwWjAYMRYwFAYD VQQDEw02OGJhNjFlNS1hYzNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu0ectBYsqaxAwyPkOqhoLd1mK3mNZdGMOFTwF1hgpCvTqBI5jSYKcYfTJF37 plIkyMuFJq6MOwAkJ5jYsnWtcS2sU50RJ4d7g3gJXkv+FngYY0oTaHR+R9XkfY7h yDc5diQ0ss65Kuz/ph2UlySWxRzmGKysMebqMH5HTZUrY9/+RNR4WSn9fP00D4l1 /XIL0frKrNb+cQg4vmZ75ijT/k1Kv57PSAwuGhx91rrWjNcsNlTzj1M5Snic1mTE VTcsXq9h37/Loknfgzmqax7sImHYu13FJsA9jzs4PhdUIZXLXpk/vPBWoxQZ4H+u fJBhe2wOS7db6A9GEi9qNwGU6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM2FbhHh Hi6mIFC+iZev/iwtfi2NMB8GA1UdIwQYMBaAFAdgyu9bct/lsEt22t/6uGfDCpjH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTVGRC84QkRBRkVGNDUy ODYxMUVFODlCMDBEODdDNEY5QUUwMi9CMkRLNzF0eTMtV3dTM2JhM19xNFo4TUtt TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IyREs3MXR5My1Xd1MzYmEzX3E0WjhNS21NYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTVGRC84QkRBRkVGNDUyODYxMUVFODlCMDBEODdDNEY5QUUwMi9CMkRLNzF0eTMt V3dTM2JhM19xNFo4TUttTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMOgi2mwgUVw9lPngp/u8vZxEYyEvYpzW6VJr2kxbCrMMFmNkqjh0U A9U9yGzEwo+bfweUoMwYPTXkd5cyrTMr32vjGDk24bl9i/kH7DhJOyaixbQb1TVz Cn137fUD5FFDUqYd/a3EqNB+FAuRE6fJMBA8wqTHyRUAknKhmbb5bn6il3A/VLYi KjqndKFr3nQjmxg/JXSDOZxoVOZgKuzTs5uVdeDViFbxc1GiTk97gb6sCTAoc8Fb GMcmU3nNkFMPiC0tF+u+Jd8RWsNa8k9mEoCorA63Aop+C8992q85EAR9ylKuzaCf FzZPTkK3RdcqpG62lTGWT9c9Lkg9oWyi -----END CERTIFICATE-----Generated at Sat Sep 6 13:45:17 2025 by rpki-client