$ rpki-client -vvf rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft File: -bspsKvoSef-GA4znkscKCNoxSE.mft (raw, json) Hash identifier: e6SrXie6AIMJb4UXEeNJLAofhDYjSKL/5dLuYrPFPuE= Subject key identifier: DB:5C:45:37:C3:43:DA:B1:F3:76:89:E8:F3:B9:FC:17:71:4E:B4:05 Authority key identifier: F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 Certificate issuer: /CN=A913E8F3/serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Certificate serial: 100D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft Manifest number: 0FF5 Signing time: Wed 02 Jul 2025 17:41:24 +0000 Manifest this update: Wed 02 Jul 2025 17:41:24 +0000 Manifest next update: Wed 09 Jul 2025 17:41:24 +0000 Files and hashes: 1: -bspsKvoSef-GA4znkscKCNoxSE.crl (hash: heMr/61F0XSaAK4X887XQ5Tf3f5GcO3CNfckeCrmPYU=) 2: F7F18D8C2BA711F09514D439C4F9AE02.roa (hash: RQ31QQqNnbR7hUGab4NBe2n82ZvCRfsZ20QWiB5eLdE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4109 (0x100d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E8F3, serialNumber=F9BB29B0ABE849E7FE180E339E4B1C282368C521 Validity Not Before: Jul 2 17:41:24 2025 GMT Not After : Jul 9 17:41:24 2025 GMT Subject: CN=68656f44-2741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c0:97:d6:38:12:32:68:d8:29:d4:f8:a6:94: d1:68:7f:57:b2:b6:06:2f:aa:a5:22:60:28:f0:91: ba:30:28:8b:62:d4:79:ba:de:97:36:75:e1:07:b4: 47:12:1f:39:8e:f9:ea:82:18:ee:5c:a5:53:5e:de: be:2b:80:39:5e:41:3b:3f:4a:47:75:ab:2b:51:f6: 9f:6f:50:9d:58:0c:fc:84:87:73:fc:fe:f4:a2:8f: 71:9e:9c:30:b1:e7:38:79:54:80:1b:bf:a4:2b:67: 52:b7:b5:21:ae:74:9e:3d:0f:53:6b:f6:f7:8d:21: 10:9a:b2:df:b7:da:99:42:d0:17:c6:65:92:eb:9d: 2c:5c:7e:f5:00:43:cc:5c:aa:52:be:a2:d8:31:d2: 23:eb:78:4d:57:a6:9c:a0:c9:11:53:98:9b:c2:a3: f5:c1:78:c2:11:37:60:b6:af:c9:32:05:51:6d:a3: bd:81:ad:fd:a2:6a:3d:91:5c:de:8c:ae:f9:5d:80: 2f:96:5d:c1:1f:2f:65:92:2b:60:a6:d9:58:a7:ea: 70:2c:f8:d1:e2:2a:51:b4:8b:77:46:1d:93:4e:88: 8c:50:ff:78:5e:cd:c7:7a:c3:02:8a:45:71:cd:10: 83:3a:b5:4d:ff:90:ef:58:a7:d4:dd:98:b7:72:8d: f3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5C:45:37:C3:43:DA:B1:F3:76:89:E8:F3:B9:FC:17:71:4E:B4:05 X509v3 Authority Key Identifier: keyid:F9:BB:29:B0:AB:E8:49:E7:FE:18:0E:33:9E:4B:1C:28:23:68:C5:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-bspsKvoSef-GA4znkscKCNoxSE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E8F3/0A04F4E2549411E9B597E571C4F9AE02/-bspsKvoSef-GA4znkscKCNoxSE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:29:43:11:0e:ff:b9:fc:c5:b9:97:e9:4a:c4:7a:2a:81:02: 4b:bb:e8:55:b5:51:cf:fe:5a:6d:97:47:b0:ad:61:6a:69:51: 17:ea:7a:38:70:ec:84:bc:38:f1:81:a3:ba:95:44:c2:29:9c: fd:55:a2:1d:b6:57:89:6a:5b:9d:5e:e4:5e:bb:4e:87:7d:2e: 65:49:13:02:14:26:de:88:ed:56:d3:bf:29:04:ae:f4:5c:8f: a2:ad:7e:e8:b2:f0:f1:ff:c6:bb:72:b1:aa:f4:eb:c1:8f:48: 4c:a2:20:d2:6f:1d:6b:16:81:9d:31:db:d6:f2:b3:c0:e1:7f: 41:5b:4a:c9:5a:03:b1:a6:2e:d7:cf:50:47:70:5b:b9:58:a6: 85:5b:67:83:ea:48:e6:b8:7a:ba:28:0b:88:f6:2b:a5:d7:eb: 51:65:1b:59:f1:c0:8a:f2:38:22:fa:91:74:c9:32:d6:04:ee: 49:c5:bb:26:5a:69:b9:65:08:01:3c:54:9e:2c:98:36:a5:53: 40:d3:68:0a:2b:55:52:1c:f6:31:d1:bc:6d:bd:1c:50:c5:a5: 97:13:63:2b:7a:46:5f:10:23:db:bc:74:f6:72:c4:80:c4:2f: 9d:ff:f9:2e:37:b1:12:3e:16:ec:15:d6:6a:b4:0d:e8:cb:1e: 1e:09:8e:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0U4RjMxMTAvBgNVBAUTKEY5QkIyOUIwQUJFODQ5RTdGRTE4MEUzMzlFNEIxQzI4 MjM2OEM1MjEwHhcNMjUwNzAyMTc0MTI0WhcNMjUwNzA5MTc0MTI0WjAYMRYwFAYD VQQDEw02ODY1NmY0NC0yNzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAysCX1jgSMmjYKdT4ppTRaH9XsrYGL6qlImAo8JG6MCiLYtR5ut6XNnXhB7RH Eh85jvnqghjuXKVTXt6+K4A5XkE7P0pHdasrUfafb1CdWAz8hIdz/P70oo9xnpww sec4eVSAG7+kK2dSt7UhrnSePQ9Ta/b3jSEQmrLft9qZQtAXxmWS650sXH71AEPM XKpSvqLYMdIj63hNV6acoMkRU5ibwqP1wXjCETdgtq/JMgVRbaO9ga39omo9kVze jK75XYAvll3BHy9lkitgptlYp+pwLPjR4ipRtIt3Rh2TToiMUP94Xs3HesMCikVx zRCDOrVN/5DvWKfU3Zi3co3zcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNtcRTfD Q9qx83aJ6PO5/BdxTrQFMB8GA1UdIwQYMBaAFPm7KbCr6Enn/hgOM55LHCgjaMUh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRThGMy8wQTA0RjRFMjU0 OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1NlZi1HQTR6bmtzY0tDTm94 U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1ic3BzS3ZvU2VmLUdBNHpua3NjS0NOb3hTRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RThGMy8wQTA0RjRFMjU0OTQxMUU5QjU5N0U1NzFDNEY5QUUwMi8tYnNwc0t2b1Nl Zi1HQTR6bmtzY0tDTm94U0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJKUMRDv+5/MW5l+lKxHoqgQJLu+hVtVHP/lptl0ewrWFqaVEX6no4 cOyEvDjxgaO6lUTCKZz9VaIdtleJaludXuReu06HfS5lSRMCFCbeiO1W078pBK70 XI+irX7osvDx/8a7crGq9OvBj0hMoiDSbx1rFoGdMdvW8rPA4X9BW0rJWgOxpi7X z1BHcFu5WKaFW2eD6kjmuHq6KAuI9iul1+tRZRtZ8cCK8jgi+pF0yTLWBO5Jxbsm Wmm5ZQgBPFSeLJg2pVNA02gKK1VSHPYx0bxtvRxQxaWXE2MrekZfECPbvHT2csSA xC+d//kuN7ESPhbsFdZqtA3oyx4eCY7z -----END CERTIFICATE-----Generated at Thu Jul 3 21:48:56 2025 by rpki-client