$ rpki-client -vvf rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft File: bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft (raw, json) Hash identifier: 19yXipNpNF8pdjtpv1NCZ7ybJLmWvQt7A/SAPWv3pBI= Subject key identifier: 53:78:90:C6:F5:17:2A:D5:B9:0F:82:FE:00:1F:43:0F:20:0D:B5:A2 Authority key identifier: 6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65 Certificate issuer: /CN=A91240E6/serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65 Certificate serial: 262C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft Manifest number: 2613 Signing time: Wed 02 Jul 2025 15:48:54 +0000 Manifest this update: Wed 02 Jul 2025 15:48:53 +0000 Manifest next update: Wed 09 Jul 2025 15:48:53 +0000 Files and hashes: 1: bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl (hash: knXAa5/XVbuBL9vK2nq+s7YAwU7gPBVzXo4LPVN6/hE=) 2: 8A721F4EB10C11E5BB6B2A16C4F9AE02.roa (hash: mvyjt+3dRIE1/Krz/XL4fNVu3c2fcm82NTuO/MfHBcQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9772 (0x262c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91240E6, serialNumber=6DCE52F9A228CBF6F30CD55D43384D1268487B65 Validity Not Before: Jul 2 15:48:53 2025 GMT Not After : Jul 9 15:48:53 2025 GMT Subject: CN=686554e5-191d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3d:2f:f7:89:55:f0:42:dd:d8:8f:73:09:fd: 18:bf:47:a6:3e:48:34:99:ed:e4:db:61:32:79:f0: ac:23:1d:30:07:a0:a8:32:81:32:cc:ba:60:f7:16: 94:14:5d:1e:e5:ec:57:e8:5e:28:f0:0f:f2:c1:73: 64:d6:fe:a0:4c:a4:f6:28:30:6e:b5:2a:a9:40:d6: 69:e3:fa:02:60:98:df:85:c2:56:92:83:f2:db:c0: cf:4d:a3:5e:ab:43:bd:69:f4:52:9a:7e:ed:e4:f4: e4:9c:ca:9a:fe:de:00:54:0b:f9:50:1c:ba:49:6a: ce:f8:02:bb:8b:e7:8f:81:03:dc:b6:08:47:9e:b1: e2:8b:03:0d:66:a6:9f:05:23:4c:6f:19:c6:34:29: 73:74:8c:cf:82:75:d6:bb:3d:a8:d3:75:28:42:3f: 6a:2d:1e:ef:5b:2a:5f:67:c0:7a:a4:ba:bc:73:95: 68:76:58:a6:03:3f:55:70:d4:f2:1a:58:0d:c2:71: 59:03:2d:82:0f:0d:a8:74:fa:5c:46:de:94:82:42: 8b:c2:27:cf:3f:8e:dc:23:6f:a7:a5:fb:bd:91:58: 8b:da:c8:d5:87:a6:49:51:63:c0:bc:75:0e:b2:fb: ce:af:ac:f5:53:fe:d4:ca:77:30:45:f9:2d:62:04: 41:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:78:90:C6:F5:17:2A:D5:B9:0F:82:FE:00:1F:43:0F:20:0D:B5:A2 X509v3 Authority Key Identifier: keyid:6D:CE:52:F9:A2:28:CB:F6:F3:0C:D5:5D:43:38:4D:12:68:48:7B:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bc5S-aIoy_bzDNVdQzhNEmhIe2U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91240E6/660742C8FD2111E488AB0C34C4F9AE02/bc5S-aIoy_bzDNVdQzhNEmhIe2U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:57:f4:f8:bc:b7:de:f2:df:96:c9:62:2b:0f:9f:b1:c8:6d: 0f:fc:f8:e0:59:a8:5d:c7:5a:73:af:7a:5d:17:26:7c:12:7e: ff:0f:80:44:dc:02:fa:8c:79:a6:2f:a8:be:24:67:cc:82:fa: 07:11:36:5f:30:d7:f0:f2:fa:e1:72:f1:6b:89:25:2a:86:6f: 9f:9a:81:44:96:fd:b5:7c:cd:cc:43:b4:35:22:7a:2e:4c:65: e5:2d:ed:a1:38:f6:19:63:88:6a:c6:d4:26:cd:d3:da:49:22: c7:c7:a6:fe:e4:0b:1d:73:af:4b:e8:f3:34:17:c5:26:43:a1: ab:3a:cc:ca:d7:d7:c2:ec:ee:98:8b:5d:45:9a:65:b8:4e:80: 84:1c:85:9e:bd:3f:6f:6e:00:d5:c8:bd:66:cb:f9:0d:c6:1d: 89:4a:d3:47:3b:90:48:08:4d:a3:84:60:a9:3b:bd:54:ee:59: 9a:0a:33:60:4d:a3:03:27:8a:73:a2:64:39:17:07:1e:8e:2d: 68:22:64:01:1b:7d:fa:0e:3f:1e:bc:d3:96:5f:17:de:56:ec: 8a:e4:f5:2b:b5:b8:f8:ab:b7:ae:31:f0:c5:c2:11:e6:4f:b6: df:91:0c:53:53:92:19:bd:05:34:8d:1c:1c:78:75:0c:ab:5d: 8a:25:3c:4e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjQwRTYxMTAvBgNVBAUTKDZEQ0U1MkY5QTIyOENCRjZGMzBDRDU1RDQzMzg0RDEy Njg0ODdCNjUwHhcNMjUwNzAyMTU0ODUzWhcNMjUwNzA5MTU0ODUzWjAYMRYwFAYD VQQDEw02ODY1NTRlNS0xOTFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApT0v94lV8ELd2I9zCf0Yv0emPkg0me3k22EyefCsIx0wB6CoMoEyzLpg9xaU FF0e5exX6F4o8A/ywXNk1v6gTKT2KDButSqpQNZp4/oCYJjfhcJWkoPy28DPTaNe q0O9afRSmn7t5PTknMqa/t4AVAv5UBy6SWrO+AK7i+ePgQPctghHnrHiiwMNZqaf BSNMbxnGNClzdIzPgnXWuz2o03UoQj9qLR7vWypfZ8B6pLq8c5VodlimAz9VcNTy GlgNwnFZAy2CDw2odPpcRt6UgkKLwifPP47cI2+npfu9kViL2sjVh6ZJUWPAvHUO svvOr6z1U/7UyncwRfktYgRBlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFN4kMb1 FyrVuQ+C/gAfQw8gDbWiMB8GA1UdIwQYMBaAFG3OUvmiKMv28wzVXUM4TRJoSHtl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDBFNi82NjA3NDJDOEZE MjExMUU0ODhBQjBDMzRDNEY5QUUwMi9iYzVTLWFJb3lfYnpETlZkUXpoTkVtaEll MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JjNVMtYUlveV9iekROVmRRemhORW1oSWUyVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NDBFNi82NjA3NDJDOEZEMjExMUU0ODhBQjBDMzRDNEY5QUUwMi9iYzVTLWFJb3lf YnpETlZkUXpoTkVtaEllMlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxV/T4vLfe8t+WyWIrD5+xyG0P/PjgWahdx1pzr3pdFyZ8En7/D4BE 3AL6jHmmL6i+JGfMgvoHETZfMNfw8vrhcvFriSUqhm+fmoFElv21fM3MQ7Q1Inou TGXlLe2hOPYZY4hqxtQmzdPaSSLHx6b+5Asdc69L6PM0F8UmQ6GrOszK19fC7O6Y i11FmmW4ToCEHIWevT9vbgDVyL1my/kNxh2JStNHO5BICE2jhGCpO71U7lmaCjNg TaMDJ4pzomQ5Fwceji1oImQBG336Dj8evNOWXxfeVuyK5PUrtbj4q7euMfDFwhHm T7bfkQxTU5IZvQU0jRwceHUMq12KJTxO -----END CERTIFICATE-----Generated at Fri Jul 4 07:24:37 2025 by rpki-client