$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft File: BZOGVctKEp6P3fsJQsICA-N-G8E.mft (raw, json) Hash identifier: MqwBmrifCfOmXS/uuZDyQje56QtOdwolxfvV3Nd/L/0= Subject key identifier: 8E:9A:07:84:61:4D:62:0C:2C:E3:86:99:77:96:8E:7B:C5:E2:2D:D9 Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1 Certificate issuer: /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1 Certificate serial: 03D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft Manifest number: 03D1 Signing time: Tue 09 Sep 2025 00:40:51 +0000 Manifest this update: Tue 09 Sep 2025 00:40:50 +0000 Manifest next update: Tue 16 Sep 2025 00:40:50 +0000 Files and hashes: 1: BZOGVctKEp6P3fsJQsICA-N-G8E.crl (hash: BUKG20Kjz1p9PGd6MTIK2e5Ngp+wC0KmtIc/jWOIAQY=) 2: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (hash: IDcKfjrcD970kwyhuo4LacbpxchYwfNjnBXBdXrdXbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 00:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 982 (0x3d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF5AE, serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1 Validity Not Before: Sep 9 00:40:50 2025 GMT Not After : Sep 16 00:40:50 2025 GMT Subject: CN=68bf7793-39b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e7:a2:65:ca:94:46:dd:5c:6d:e8:b2:97:f6: 0c:a6:00:50:1a:b5:f4:20:27:29:b6:c4:1b:70:78: e2:21:e8:a8:f9:ff:35:f3:bc:ea:c2:93:77:95:05: 28:62:2a:ab:5c:53:6f:f8:5c:bb:34:21:2a:c8:9f: db:9b:16:72:73:64:71:48:f4:ea:05:c6:af:89:fc: 30:d4:0f:1c:f8:ab:9a:4d:e3:10:5f:5e:41:df:45: b9:3d:0d:81:a2:d2:45:89:da:65:76:ad:19:4b:6c: b1:90:8b:21:d8:b6:78:a1:24:5c:97:7b:39:64:8f: 6e:45:66:ca:05:01:2a:29:ca:36:27:59:1f:15:a9: f6:78:c5:af:3e:f4:eb:d7:f7:ea:38:06:47:96:f8: 84:47:14:80:1f:5e:34:eb:1b:46:ea:3d:4a:e8:2c: 27:64:1f:d9:f5:4c:1e:92:e3:db:a1:8b:71:8a:61: 10:ea:4b:93:49:5a:0c:38:0c:5c:1b:96:0d:f5:f6: 29:9d:92:5e:f0:30:ff:de:fe:09:23:ed:26:83:75: d5:cf:5c:6f:69:55:b7:3c:96:87:c5:13:2b:8c:2f: df:2e:6a:7e:94:3a:2c:23:ea:d6:b2:b7:c4:85:6f: a3:41:d5:61:c5:75:6c:81:74:aa:ff:26:39:eb:b3: 86:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9A:07:84:61:4D:62:0C:2C:E3:86:99:77:96:8E:7B:C5:E2:2D:D9 X509v3 Authority Key Identifier: keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:34:34:f6:b6:4a:b8:0f:b7:a8:b4:c3:f6:d9:79:5e:85:c7: e3:61:c5:54:54:c7:ec:d7:a1:ea:60:c0:0c:65:cc:2c:00:08: 6f:fe:e1:51:93:bf:90:65:17:67:49:be:ff:7f:87:57:94:b5: 9a:3f:92:ea:54:64:20:3a:a8:f4:2d:99:68:07:0b:66:da:d3: 7e:1b:2e:bd:a2:2c:6c:b6:25:bb:41:08:d4:89:2e:d8:9b:6d: 63:41:c3:0d:c8:5b:38:c7:e0:f5:00:35:78:d2:f8:e8:af:e3: 90:1f:37:82:a5:91:8f:6e:78:16:52:c2:4e:9b:56:bd:4f:5e: d0:5c:d3:e8:cd:4b:d9:52:10:d7:fd:b4:60:86:b1:b7:de:8c: 55:55:3a:1a:67:26:12:57:bf:5b:61:4f:c6:ac:49:e3:4a:6f: 45:16:a6:d0:16:62:d0:55:f2:2d:51:b3:f9:61:fb:60:3d:db: b0:ff:04:14:a1:32:b6:15:77:d2:32:38:95:99:c8:3e:43:de: 69:ac:57:06:d7:b1:31:4b:49:a5:cf:1d:9c:ed:4f:04:91:0c: bb:14:fa:78:81:aa:19:35:78:56:e5:5a:15:da:cb:6e:94:1e: 4d:3f:32:60:6e:28:0e:71:0d:5c:94:45:0c:cb:9e:a2:a5:8f: 52:83:ed:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1QUUxMTAvBgNVBAUTKDA1OTM4NjU1Q0I0QTEyOUU4RkRERkIwOTQyQzIwMjAz RTM3RTFCQzEwHhcNMjUwOTA5MDA0MDUwWhcNMjUwOTE2MDA0MDUwWjAYMRYwFAYD VQQDEw02OGJmNzc5My0zOWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7+eiZcqURt1cbeiyl/YMpgBQGrX0ICcptsQbcHjiIeio+f8187zqwpN3lQUo YiqrXFNv+Fy7NCEqyJ/bmxZyc2RxSPTqBcavifww1A8c+KuaTeMQX15B30W5PQ2B otJFidpldq0ZS2yxkIsh2LZ4oSRcl3s5ZI9uRWbKBQEqKco2J1kfFan2eMWvPvTr 1/fqOAZHlviERxSAH1406xtG6j1K6CwnZB/Z9UwekuPboYtximEQ6kuTSVoMOAxc G5YN9fYpnZJe8DD/3v4JI+0mg3XVz1xvaVW3PJaHxRMrjC/fLmp+lDosI+rWsrfE hW+jQdVhxXVsgXSq/yY567OGhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI6aB4Rh TWIMLOOGmXeWjnvF4i3ZMB8GA1UdIwQYMBaAFAWThlXLShKej937CULCAgPjfhvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjVBRS81RTZFMjA3ODlB QTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0VwNlAzZnNKUXNJQ0EtTi1H OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JaT0dWY3RLRXA2UDNmc0pRc0lDQS1OLUc4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjVBRS81RTZFMjA3ODlBQTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0Vw NlAzZnNKUXNJQ0EtTi1HOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKNDT2tkq4D7eotMP22XlehcfjYcVUVMfs16HqYMAMZcwsAAhv/uFR k7+QZRdnSb7/f4dXlLWaP5LqVGQgOqj0LZloBwtm2tN+Gy69oixstiW7QQjUiS7Y m21jQcMNyFs4x+D1ADV40vjor+OQHzeCpZGPbngWUsJOm1a9T17QXNPozUvZUhDX /bRghrG33oxVVToaZyYSV79bYU/GrEnjSm9FFqbQFmLQVfItUbP5YftgPduw/wQU oTK2FXfSMjiVmcg+Q95prFcG17ExS0mlzx2c7U8EkQy7FPp4gaoZNXhW5VoV2stu lB5NPzJgbigOcQ1clEUMy56ipY9Sg+1M -----END CERTIFICATE-----Generated at Tue Sep 9 17:52:57 2025 by rpki-client