$ rpki-client -vvf rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft File: bqxBZeyCmYqJiq391RHMKgRv7qc.mft (raw, json) Hash identifier: 2lY9Q6SlITIF2Ep5N4nxriuKhlDBS/AGxojgPW0j4vI= Subject key identifier: F9:4A:F3:4A:DE:0C:EE:8F:F7:41:6D:A8:A6:00:5F:0D:8E:ED:32:8D Authority key identifier: 6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7 Certificate issuer: /CN=A913075E/serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7 Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft Manifest number: 1F Signing time: Thu 03 Jul 2025 08:12:17 +0000 Manifest this update: Thu 03 Jul 2025 08:12:17 +0000 Manifest next update: Thu 10 Jul 2025 08:12:17 +0000 Files and hashes: 1: bqxBZeyCmYqJiq391RHMKgRv7qc.crl (hash: 6AiRo1s4RSTYn6s8OJs/5YHcEhhuem+KCDSRyp8zWiE=) 2: E9331F863B2911F084C93028C4F9AE02.roa (hash: Pnz5aFAbJ5Bkp2gyQ97UceAHI3FhcCchW1EhmLkhr+s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913075E, serialNumber=6EAC4165EC82998A898AADFDD511CC2A046FEEA7 Validity Not Before: Jul 3 08:12:17 2025 GMT Not After : Jul 10 08:12:17 2025 GMT Subject: CN=68663b61-b9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:22:9c:58:ab:d1:b0:d1:a0:25:b9:38:8a: f3:24:16:3a:c1:a9:16:d3:37:cc:67:38:46:07:2a: 2b:d7:e4:de:cf:6b:55:28:76:eb:e7:13:0c:9c:9a: 15:ab:66:85:2d:79:14:d2:07:14:87:f7:05:81:0b: 88:db:6a:63:c8:a0:06:c6:bf:ff:21:15:24:c3:b0: e6:1c:33:56:65:18:e3:a4:7e:c9:94:cf:e8:0f:bd: 41:98:e2:b4:c5:12:53:8e:71:2e:8c:41:7c:16:22: 7b:f2:3c:f4:5c:e3:5b:f7:2c:45:08:48:45:f9:b7: 61:d2:c3:a9:11:72:5c:c8:7a:13:9b:3b:2f:a4:a0: 3d:24:65:6a:cc:29:df:6d:5f:1c:fc:bd:67:3e:ae: f7:c5:54:2b:e7:c6:fd:00:2e:0f:aa:8f:d3:e8:83: 58:ab:92:84:37:60:58:cc:78:f8:cd:15:14:96:18: 6c:2f:d0:4e:ee:bb:fe:31:d4:43:73:b0:46:64:e8: 7a:24:1d:70:09:df:54:5d:e3:ad:61:16:20:c9:d0: 3a:c4:1a:76:68:b6:cf:27:26:3c:54:9d:32:37:d7: 38:64:85:98:f6:8f:13:f6:40:0b:04:da:89:c1:dc: fe:73:fd:7a:2d:87:08:4b:aa:4e:5b:7f:7f:57:62: cc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4A:F3:4A:DE:0C:EE:8F:F7:41:6D:A8:A6:00:5F:0D:8E:ED:32:8D X509v3 Authority Key Identifier: keyid:6E:AC:41:65:EC:82:99:8A:89:8A:AD:FD:D5:11:CC:2A:04:6F:EE:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bqxBZeyCmYqJiq391RHMKgRv7qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913075E/D708AB1A316E11F0BB327E30C4F9AE02/bqxBZeyCmYqJiq391RHMKgRv7qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:82:8b:da:68:2a:98:cb:e3:98:35:c0:8b:1d:a6:0f:43:cd: 86:f6:c7:3b:57:e8:05:d9:e5:e5:3f:1d:dd:1e:fb:cd:c0:2d: 70:7d:ab:15:70:ca:1b:f6:97:fc:58:0e:b1:56:05:e1:41:ed: 17:dc:f7:ca:da:86:16:e3:fd:cc:db:37:ef:b8:71:67:c8:3f: 6a:25:c5:7b:80:fc:8a:2e:ae:aa:3b:ab:83:f4:6b:86:a9:71: 73:ef:54:39:ac:cb:09:c0:9c:ac:8c:e1:1f:71:8c:ea:64:ff: 28:fd:5d:c7:e8:78:fe:38:0f:b3:b0:11:d9:4c:e2:b0:53:d9: 14:57:ab:94:55:81:aa:23:6f:26:65:d8:80:80:fb:4c:74:31: e7:73:40:b7:54:9e:66:3d:e5:56:90:61:0b:dc:f3:03:4e:ab: ea:16:d0:ee:39:df:77:39:98:db:37:fc:53:4c:f4:d8:d1:da: 3e:52:4f:69:72:2a:89:71:ca:81:51:bc:b9:5c:b1:29:3a:b2: 35:9b:3e:5c:f2:3b:cb:c4:ba:88:ce:c1:32:bf:21:3f:f5:b0: 4c:85:66:2f:7c:1d:32:65:50:5a:ef:f7:d5:cf:fb:89:00:75: 32:4e:5e:db:41:a7:9b:dd:64:06:e3:73:17:fb:9a:6a:41:c9: 1e:9f:c6:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDc1RTExMC8GA1UEBRMoNkVBQzQxNjVFQzgyOTk4QTg5OEFBREZERDUxMUNDMkEw NDZGRUVBNzAeFw0yNTA3MDMwODEyMTdaFw0yNTA3MTAwODEyMTdaMBgxFjAUBgNV BAMTDTY4NjYzYjYxLWI5ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC13yKcWKvRsNGgJbk4ivMkFjrBqRbTN8xnOEYHKivX5N7Pa1UoduvnEwycmhWr ZoUteRTSBxSH9wWBC4jbamPIoAbGv/8hFSTDsOYcM1ZlGOOkfsmUz+gPvUGY4rTF ElOOcS6MQXwWInvyPPRc41v3LEUISEX5t2HSw6kRclzIehObOy+koD0kZWrMKd9t Xxz8vWc+rvfFVCvnxv0ALg+qj9Pog1irkoQ3YFjMePjNFRSWGGwv0E7uu/4x1ENz sEZk6HokHXAJ31Rd461hFiDJ0DrEGnZots8nJjxUnTI31zhkhZj2jxP2QAsE2onB 3P5z/XothwhLqk5bf39XYswtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+UrzSt4M 7o/3QW2opgBfDY7tMo0wHwYDVR0jBBgwFoAUbqxBZeyCmYqJiq391RHMKgRv7qcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNzVFL0Q3MDhBQjFBMzE2 RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlxSmlxMzkxUkhNS2dSdjdx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYnF4QlpleUNtWXFKaXEzOTFSSE1LZ1J2N3FjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMw NzVFL0Q3MDhBQjFBMzE2RTExRjBCQjMyN0UzMEM0RjlBRTAyL2JxeEJaZXlDbVlx SmlxMzkxUkhNS2dSdjdxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKaCi9poKpjL45g1wIsdpg9DzYb2xztX6AXZ5eU/Hd0e+83ALXB9qxVw yhv2l/xYDrFWBeFB7Rfc98rahhbj/czbN++4cWfIP2olxXuA/Iourqo7q4P0a4ap cXPvVDmsywnAnKyM4R9xjOpk/yj9XcfoeP44D7OwEdlM4rBT2RRXq5RVgaojbyZl 2ICA+0x0MedzQLdUnmY95VaQYQvc8wNOq+oW0O4533c5mNs3/FNM9NjR2j5ST2ly KolxyoFRvLlcsSk6sjWbPlzyO8vEuojOwTK/IT/1sEyFZi98HTJlUFrv99XP+4kA dTJOXttBp5vdZAbjcxf7mmpByR6fxvI= -----END CERTIFICATE-----Generated at Fri Jul 4 11:37:46 2025 by rpki-client