$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft File: BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json) Hash identifier: jfo70Q+iU9PCCyOZsmoOp6x8DTscf7d9R09uGMFZQYk= Subject key identifier: 9B:43:CF:68:14:F2:ED:A5:C8:45:36:BC:66:77:C7:5A:3A:4A:2D:D4 Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Certificate serial: 1CF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft Manifest number: 1CE1 Signing time: Mon 30 Jun 2025 16:19:22 +0000 Manifest this update: Mon 30 Jun 2025 16:19:22 +0000 Manifest next update: Mon 07 Jul 2025 16:19:22 +0000 Files and hashes: 1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: Yn0Yv52hvubX8YApKjm1GblfdS6FMi5poSjbD9xqspA=) 2: 8E652A7AC77611E68B1CDE6AC4F9AE02.roa (hash: nQvCGi6jeXRQddJ1rEuK0BsRcyU/PM81aNvBcFuVAoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 16:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7409 (0x1cf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Validity Not Before: Jun 30 16:19:22 2025 GMT Not After : Jul 7 16:19:22 2025 GMT Subject: CN=6862b90a-7480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6e:b3:b4:8c:d3:6c:fc:a6:87:d3:80:2f:fd: 4a:df:7e:b3:87:18:5b:b6:e7:66:78:a5:35:fe:b6: 1a:5c:43:19:67:20:46:83:b8:da:75:12:b2:2b:50: 5e:d1:6d:25:6b:cb:f8:54:3b:8f:98:50:57:06:ea: d0:5c:b4:4f:40:55:05:95:4c:f0:c4:3d:a3:bf:55: a3:8d:93:be:85:5f:03:49:54:66:a4:56:6f:99:13: 32:c4:37:56:c7:4e:9d:2e:19:e7:bd:90:5b:8e:40: df:6c:7f:3b:6f:50:2e:0a:43:24:9e:d1:6d:a4:b4: df:63:43:7a:3d:bb:54:09:70:59:32:77:0d:f0:ee: 9f:02:18:d1:c9:65:ff:e2:ec:bb:6f:c9:99:98:c9: 8d:c4:e0:82:40:61:bf:9c:95:02:40:ca:48:98:96: 71:26:3e:21:6b:e1:3e:e6:d0:b0:f2:2d:37:a6:9f: f6:49:fa:f8:12:8a:90:6d:09:ca:f4:a8:64:7f:05: 00:33:93:cc:0d:76:15:8c:97:d6:e9:82:b0:e3:ee: 2c:7e:b0:83:ab:d5:3b:1e:cd:78:4e:a1:5f:0c:16: 3e:25:3f:c0:2d:1b:44:19:a5:7c:d9:e5:24:65:94: 0c:e2:21:20:57:02:d8:81:c3:cf:a0:60:2a:28:df: 99:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:43:CF:68:14:F2:ED:A5:C8:45:36:BC:66:77:C7:5A:3A:4A:2D:D4 X509v3 Authority Key Identifier: keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b7:d1:21:64:a2:ba:5b:51:09:92:83:c6:31:c9:5d:e2:18:0b: 74:55:cf:96:40:ce:e2:ce:36:f8:88:d7:7e:d2:30:bd:81:d1: e1:7f:56:d1:23:88:43:98:4e:a2:31:92:3f:a8:24:8d:17:20: f7:be:70:60:c0:19:b1:70:fb:78:e8:b6:68:16:06:2f:fa:38: 67:98:45:0b:b5:87:36:3e:47:12:a4:4c:90:b2:d3:6c:48:9a: 03:4d:28:c3:21:25:e6:a2:3f:ae:64:21:26:a4:18:6b:7f:5f: 38:9a:74:73:5d:31:74:d5:33:a0:1f:2e:8c:42:a2:9f:06:11: 9d:7e:d9:e2:97:00:03:38:2a:9b:4f:e7:01:77:92:16:fc:1d: ed:35:f0:bd:68:e7:91:88:21:6c:79:b7:de:df:d1:6a:5f:17: b7:37:13:69:b9:87:e0:24:43:18:25:2d:b9:f0:3f:8c:5f:b4: 6f:8a:82:ce:fe:8d:24:f1:b5:4a:1d:af:2d:0c:75:4a:b5:fa: a1:f4:78:c7:18:4b:1e:62:1a:b3:19:23:2c:75:97:a6:89:b4: dc:5c:36:21:fe:e4:87:33:4c:7f:e7:b4:8d:a0:8b:bb:70:33: 50:d8:2a:c2:18:61:c3:f9:48:b5:ab:d8:c9:bc:bf:69:03:c8: ec:33:a8:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExNDAxMTAvBgNVBAUTKDA1MDIwRkJGMTAyMEZENjNCRTU3REExQjk3MDRCMEFB ODEwMzQ0NEEwHhcNMjUwNjMwMTYxOTIyWhcNMjUwNzA3MTYxOTIyWjAYMRYwFAYD VQQDEw02ODYyYjkwYS03NDgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsG6ztIzTbPymh9OAL/1K336zhxhbtudmeKU1/rYaXEMZZyBGg7jadRKyK1Be 0W0la8v4VDuPmFBXBurQXLRPQFUFlUzwxD2jv1WjjZO+hV8DSVRmpFZvmRMyxDdW x06dLhnnvZBbjkDfbH87b1AuCkMkntFtpLTfY0N6PbtUCXBZMncN8O6fAhjRyWX/ 4uy7b8mZmMmNxOCCQGG/nJUCQMpImJZxJj4ha+E+5tCw8i03pp/2Sfr4EoqQbQnK 9KhkfwUAM5PMDXYVjJfW6YKw4+4sfrCDq9U7Hs14TqFfDBY+JT/ALRtEGaV82eUk ZZQM4iEgVwLYgcPPoGAqKN+ZeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJtDz2gU 8u2lyEU2vGZ3x1o6Si3UMB8GA1UdIwQYMBaAFAUCD78QIP1jvlfaG5cEsKqBA0RK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE0MC9DQzFEQ0NFOEM3 NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19XTy1WOW9ibHdTd3FvRURS RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRSVB2eEFnX1dPLVY5b2Jsd1N3cW9FRFJFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTE0MC9DQzFEQ0NFOEM3NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19X Ty1WOW9ibHdTd3FvRURSRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC30SFkorpbUQmSg8YxyV3iGAt0Vc+WQM7izjb4iNd+0jC9gdHhf1bR I4hDmE6iMZI/qCSNFyD3vnBgwBmxcPt46LZoFgYv+jhnmEULtYc2PkcSpEyQstNs SJoDTSjDISXmoj+uZCEmpBhrf184mnRzXTF01TOgHy6MQqKfBhGdftnilwADOCqb T+cBd5IW/B3tNfC9aOeRiCFsebfe39FqXxe3NxNpuYfgJEMYJS258D+MX7RvioLO /o0k8bVKHa8tDHVKtfqh9HjHGEseYhqzGSMsdZemibTcXDYh/uSHM0x/57SNoIu7 cDNQ2CrCGGHD+Ui1q9jJvL9pA8jsM6iF -----END CERTIFICATE-----Generated at Wed Jul 2 11:40:07 2025 by rpki-client