$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft File: bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft (raw, json) Hash identifier: i5+sWFGHdSx8sCks6yEOE560UiNfDtht4+8tus/aPa4= Subject key identifier: 73:E5:5E:F3:6B:D6:51:4A:4D:03:6F:FB:78:17:D8:F4:4D:F0:E3:F6 Authority key identifier: 6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5 Certificate issuer: /CN=A91DDDA7/serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5 Certificate serial: 068B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft Manifest number: 0683 Signing time: Thu 04 Sep 2025 20:26:28 +0000 Manifest this update: Thu 04 Sep 2025 20:26:27 +0000 Manifest next update: Thu 11 Sep 2025 20:26:27 +0000 Files and hashes: 1: bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl (hash: s/w1qsKcmwGnx728XFO+gbYpAxvq5V6Rwu3d5aAmJew=) 2: 815931708D5411EB9DA31875C4F9AE02.roa (hash: wkR9MpAoedittpXX5DyOaKSrmisF/2g7AwvLAD2b1Jc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 20:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1675 (0x68b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDDA7, serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5 Validity Not Before: Sep 4 20:26:27 2025 GMT Not After : Sep 11 20:26:27 2025 GMT Subject: CN=68b9f5f4-873a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b5:69:81:0d:34:b9:5a:42:0b:d9:54:cc:52: b8:c4:51:43:8c:1b:b1:99:04:6a:9c:e4:91:58:30: 92:61:a5:62:0c:a1:63:dd:80:c0:b4:7c:c0:09:5e: 0d:b7:43:13:11:36:1a:73:67:ac:4c:2c:7d:e6:6c: 06:ab:cd:d8:1c:ee:74:47:7d:4f:ee:d0:96:be:9f: 52:33:5b:23:a0:61:e2:89:15:96:aa:09:54:1d:5d: 86:06:82:c9:13:e5:67:36:27:96:a0:fb:d9:21:cd: c1:16:8b:e5:48:45:79:85:ac:38:47:dc:57:3a:83: 51:47:d2:73:57:70:2f:14:90:36:0f:a6:f3:f8:15: e4:e3:73:dc:08:62:8c:1a:bf:ae:7b:79:b5:0a:d4: f7:7c:90:d3:5d:e5:4e:89:bc:3e:78:b0:e2:27:24: 06:67:81:df:5b:46:fa:21:38:e6:c9:0a:5a:76:73: 98:21:02:30:85:a3:14:2b:09:ab:4d:35:3e:59:12: 16:01:31:13:0a:3c:ee:bb:36:83:fb:c8:2c:b7:e8: 74:9c:4c:c1:96:c1:c3:8d:c6:6a:04:15:b5:aa:be: a4:86:00:76:bd:47:4c:36:eb:70:3e:25:5a:9c:fd: 9e:4e:93:6c:eb:3e:33:a0:81:97:02:98:33:15:aa: ad:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E5:5E:F3:6B:D6:51:4A:4D:03:6F:FB:78:17:D8:F4:4D:F0:E3:F6 X509v3 Authority Key Identifier: keyid:6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:c7:80:d5:6b:f3:fc:d0:71:da:f8:cc:a3:37:c4:12:82:a4: 65:91:4a:20:12:4f:5d:05:d5:d7:69:27:32:05:da:48:25:53: da:21:ba:ff:50:2f:d0:f3:bf:3a:bd:68:d0:16:4c:28:0d:9d: a0:e0:38:7a:c5:35:fa:32:4d:5c:45:6d:e0:5f:a5:4a:8a:38: c1:8f:f5:be:b2:91:44:e9:34:d5:ac:78:72:3e:06:1b:63:61: c7:1f:8b:3d:e9:52:93:ba:f2:d3:37:c6:df:fd:18:e6:fc:68: f8:c1:94:f6:3d:f0:c9:5e:ca:e8:4a:02:a0:69:67:f0:19:2b: 24:bc:75:7f:cf:94:bc:be:a5:a7:15:2e:55:45:bb:58:4a:fb: 03:62:10:09:41:4b:9f:50:c1:f3:4c:a4:4a:f1:00:82:a7:64: 46:9a:b1:65:38:3a:12:8d:c9:19:09:8b:4b:71:9d:af:24:3e: fc:3f:53:97:8f:06:fc:24:5a:92:bc:75:b4:18:b6:b1:86:0f: 66:88:9c:cf:bc:eb:bf:8d:4d:a8:8f:ec:8b:da:78:d5:fb:13: 50:7c:b2:30:3c:d5:46:a1:82:f0:00:d6:da:a6:7e:52:3b:a0: fc:a1:c8:ac:93:00:ac:ce:bf:81:30:d5:2d:fb:16:ca:2d:c1: 2e:1a:ba:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REREQTcxMTAvBgNVBAUTKDZFM0Y2QTRDQkQyQzc2NTFCNDkwRUI2NDkwNEJCRkYx RjQ2MjAxRDUwHhcNMjUwOTA0MjAyNjI3WhcNMjUwOTExMjAyNjI3WjAYMRYwFAYD VQQDEw02OGI5ZjVmNC04NzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rVpgQ00uVpCC9lUzFK4xFFDjBuxmQRqnOSRWDCSYaViDKFj3YDAtHzACV4N t0MTETYac2esTCx95mwGq83YHO50R31P7tCWvp9SM1sjoGHiiRWWqglUHV2GBoLJ E+VnNieWoPvZIc3BFovlSEV5haw4R9xXOoNRR9JzV3AvFJA2D6bz+BXk43PcCGKM Gr+ue3m1CtT3fJDTXeVOibw+eLDiJyQGZ4HfW0b6ITjmyQpadnOYIQIwhaMUKwmr TTU+WRIWATETCjzuuzaD+8gst+h0nEzBlsHDjcZqBBW1qr6khgB2vUdMNutwPiVa nP2eTpNs6z4zoIGXApgzFaqtrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHPlXvNr 1lFKTQNv+3gX2PRN8OP2MB8GA1UdIwQYMBaAFG4/aky9LHZRtJDrZJBLv/H0YgHV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERERBNy8zQzk1MzE5QzhE NTQxMUVCOTg0MEUwNUZDNEY5QUUwMi9iajlxVEwwc2RsRzBrT3Rra0V1XzhmUmlB ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JqOXFUTDBzZGxHMGtPdGtrRXVfOGZSaUFkVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RERBNy8zQzk1MzE5QzhENTQxMUVCOTg0MEUwNUZDNEY5QUUwMi9iajlxVEwwc2Rs RzBrT3Rra0V1XzhmUmlBZFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzx4DVa/P80HHa+MyjN8QSgqRlkUogEk9dBdXXaScyBdpIJVPaIbr/ UC/Q8786vWjQFkwoDZ2g4Dh6xTX6Mk1cRW3gX6VKijjBj/W+spFE6TTVrHhyPgYb Y2HHH4s96VKTuvLTN8bf/Rjm/Gj4wZT2PfDJXsroSgKgaWfwGSskvHV/z5S8vqWn FS5VRbtYSvsDYhAJQUufUMHzTKRK8QCCp2RGmrFlODoSjckZCYtLcZ2vJD78P1OX jwb8JFqSvHW0GLaxhg9miJzPvOu/jU2oj+yL2njV+xNQfLIwPNVGoYLwANbapn5S O6D8ociskwCszr+BMNUt+xbKLcEuGrr9 -----END CERTIFICATE-----Generated at Sat Sep 6 21:13:17 2025 by rpki-client