$ rpki-client -vvf rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft File: BgI9tGNNXG41YYCoL7vPgLlHir4.mft (raw, json) Hash identifier: QkquI7n9U5noM23Dub7m+hLNb2qSzF3BDmeTx0+SNuM= Subject key identifier: DA:BF:E5:10:62:46:00:89:41:2A:BF:4D:B8:DF:49:76:ED:0B:10:1B Authority key identifier: 06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE Certificate issuer: /CN=A91490F7/serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft Manifest number: 0165 Signing time: Tue 01 Jul 2025 04:25:14 +0000 Manifest this update: Tue 01 Jul 2025 04:25:13 +0000 Manifest next update: Tue 08 Jul 2025 04:25:13 +0000 Files and hashes: 1: BgI9tGNNXG41YYCoL7vPgLlHir4.crl (hash: DbJY1WriPCq0HwTfFlCDN4+Dw0r0E19/dLapNRM/1zY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 04:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91490F7, serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE Validity Not Before: Jul 1 04:25:13 2025 GMT Not After : Jul 8 04:25:13 2025 GMT Subject: CN=6863632a-9999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:25:07:b8:30:65:6c:4b:bd:44:0b:28:0f: 12:96:d5:43:df:08:67:05:f3:f3:98:8a:db:4c:53: 60:2e:5c:a7:b4:60:ed:ed:43:6e:62:eb:7f:de:b7: 63:75:4b:f6:68:c5:af:27:3f:47:0e:15:60:90:a9: 38:b8:54:f3:ee:1b:17:0d:b4:84:b0:55:02:fd:63: 1c:45:64:73:32:fa:1f:ce:7e:24:4c:89:23:15:49: ba:cc:25:8f:a1:e7:12:6e:f4:12:46:90:8f:e3:31: b2:c6:2a:4a:0f:00:2e:17:7c:83:6d:2d:f9:e0:18: a9:a0:da:32:50:8c:a1:df:88:f4:01:2a:14:cc:b2: d6:2b:2f:c4:02:37:a9:ee:04:4d:c9:19:44:a8:76: 88:81:1d:e5:01:1a:37:c5:45:0c:73:64:4d:db:c0: 71:93:aa:71:50:c1:35:43:6d:e8:37:b1:8a:0e:d8: f3:95:6e:82:77:b6:8a:bd:3e:b7:fb:78:98:d5:bd: c4:a6:c3:20:1e:97:17:ad:55:b8:a5:e2:1f:61:f5: 9a:4b:0f:9e:4c:de:ab:ce:77:df:87:22:b6:bd:d7: 32:e0:13:26:e3:f4:fe:59:d6:a6:21:5d:19:ae:6a: 28:b9:68:57:83:d2:5c:6f:aa:9d:11:65:63:27:a9: a0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:BF:E5:10:62:46:00:89:41:2A:BF:4D:B8:DF:49:76:ED:0B:10:1B X509v3 Authority Key Identifier: keyid:06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:3f:d9:dd:64:49:d2:5d:b1:dd:65:8d:ce:d4:90:0c:30:f9: 58:25:de:a0:40:32:da:c1:51:9a:dc:1a:49:05:45:97:f5:a6: 07:8c:e6:96:01:77:6a:67:d5:2e:1d:cf:ae:e6:7a:f0:4d:42: b4:df:31:ec:8a:3e:ea:6d:d7:a8:a3:34:4c:69:bf:14:72:1f: 65:03:57:ed:e6:2b:f1:bc:4d:53:5e:07:31:9f:8f:d0:93:60: a8:61:e2:d7:55:e4:a6:58:1e:c0:70:ac:da:76:09:ca:a9:ca: 41:36:44:f0:55:7d:6c:4a:14:96:e6:9d:3f:ad:ec:b8:0f:a5: f2:eb:f2:c2:75:19:ff:cc:25:ae:cc:33:28:fc:08:7f:a1:4c: fa:4f:11:91:0c:90:cc:22:f3:97:f3:f5:7b:28:ea:1c:71:e7: 9e:78:38:3c:fe:5e:b7:61:a0:e5:2a:cd:cf:ba:6c:d9:97:83: ed:b4:38:68:39:2d:40:21:5f:f3:f2:31:ca:5d:08:a2:fb:c0: f1:3e:cc:f1:e2:8b:22:44:c6:bc:19:c1:53:f9:61:5a:57:61: 66:54:b0:c9:ee:36:02:78:ff:b4:2e:1e:03:38:51:b7:af:ab: 8c:91:6e:7d:e2:3d:54:b5:b0:e9:48:b7:af:fb:e2:81:57:6d: 37:d8:f6:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwRjcxMTAvBgNVBAUTKDA2MDIzREI0NjM0RDVDNkUzNTYxODBBODJGQkJDRjgw Qjk0NzhBQkUwHhcNMjUwNzAxMDQyNTEzWhcNMjUwNzA4MDQyNTEzWjAYMRYwFAYD VQQDEw02ODYzNjMyYS05OTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7QlB7gwZWxLvUQLKA8SltVD3whnBfPzmIrbTFNgLlyntGDt7UNuYut/3rdj dUv2aMWvJz9HDhVgkKk4uFTz7hsXDbSEsFUC/WMcRWRzMvofzn4kTIkjFUm6zCWP oecSbvQSRpCP4zGyxipKDwAuF3yDbS354BipoNoyUIyh34j0ASoUzLLWKy/EAjep 7gRNyRlEqHaIgR3lARo3xUUMc2RN28Bxk6pxUME1Q23oN7GKDtjzlW6Cd7aKvT63 +3iY1b3EpsMgHpcXrVW4peIfYfWaSw+eTN6rznffhyK2vdcy4BMm4/T+WdamIV0Z rmoouWhXg9Jcb6qdEWVjJ6mgnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNq/5RBi RgCJQSq/TbjfSXbtCxAbMB8GA1UdIwQYMBaAFAYCPbRjTVxuNWGAqC+7z4C5R4q+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTBGNy9EOEQzQjRGMjM1 QTkxMUVFOTRCNDhENTdDNEY5QUUwMi9CZ0k5dEdOTlhHNDFZWUNvTDd2UGdMbEhp cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnSTl0R05OWEc0MVlZQ29MN3ZQZ0xsSGlyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTBGNy9EOEQzQjRGMjM1QTkxMUVFOTRCNDhENTdDNEY5QUUwMi9CZ0k5dEdOTlhH NDFZWUNvTDd2UGdMbEhpcjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+P9ndZEnSXbHdZY3O1JAMMPlYJd6gQDLawVGa3BpJBUWX9aYHjOaW AXdqZ9UuHc+u5nrwTUK03zHsij7qbdeoozRMab8Uch9lA1ft5ivxvE1TXgcxn4/Q k2CoYeLXVeSmWB7AcKzadgnKqcpBNkTwVX1sShSW5p0/rey4D6Xy6/LCdRn/zCWu zDMo/Ah/oUz6TxGRDJDMIvOX8/V7KOocceeeeDg8/l63YaDlKs3PumzZl4PttDho OS1AIV/z8jHKXQii+8DxPszx4osiRMa8GcFT+WFaV2FmVLDJ7jYCeP+0Lh4DOFG3 r6uMkW594j1UtbDpSLev++KBV2032Pb9 -----END CERTIFICATE-----Generated at Thu Jul 3 05:03:37 2025 by rpki-client