$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft File: BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json) Hash identifier: dDausP7seaIUYn8hxYLck/neeJBIeWaS7xB/G/xS2QU= Subject key identifier: F9:6E:21:35:42:4B:EA:95:78:B9:C7:35:1C:E5:D9:1C:72:4F:CB:04 Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Certificate serial: 1D0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft Manifest number: 1CFC Signing time: Fri 22 Aug 2025 16:14:18 +0000 Manifest this update: Fri 22 Aug 2025 16:14:18 +0000 Manifest next update: Fri 29 Aug 2025 16:14:18 +0000 Files and hashes: 1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: yeZdM8oe5vh40AslNRW8R95bIfVNsL8aBF202KulYdw=) 2: 8E652A7AC77611E68B1CDE6AC4F9AE02.roa (hash: nQvCGi6jeXRQddJ1rEuK0BsRcyU/PM81aNvBcFuVAoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7436 (0x1d0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Validity Not Before: Aug 22 16:14:18 2025 GMT Not After : Aug 29 16:14:18 2025 GMT Subject: CN=68a8975a-d58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4f:70:62:22:08:70:75:26:a7:65:8d:f4:c2: aa:a1:87:d4:e3:56:8b:e4:05:f3:bf:d5:a0:64:39: 18:af:0b:7f:89:d5:2e:89:ca:07:9c:20:03:8c:0e: 38:91:d6:2c:38:8b:eb:9e:d1:65:e4:44:55:a9:83: 85:43:ac:87:54:82:28:d3:61:c6:fc:0a:f1:b1:4a: 19:bd:20:61:ab:b4:ad:af:3d:5e:51:8b:0b:ad:84: 96:d8:c0:24:4a:6a:2d:4b:07:66:2b:2d:b2:a8:7c: 77:e3:da:16:c0:fb:a1:f9:05:dd:fc:5d:17:59:bc: 37:72:08:f8:0b:70:f6:f4:e6:88:0f:8d:1b:b8:44: d9:1a:33:88:15:f5:33:cf:df:7a:f0:b3:09:bc:be: ca:8f:e2:be:a1:ba:31:45:76:81:e3:e9:b2:b1:1d: 51:e9:6c:5e:88:ba:bc:fb:37:39:a1:63:1a:ce:f1: f4:bc:5e:59:15:00:f9:9c:99:85:c7:75:99:87:61: 3a:66:93:4f:95:2e:5f:d3:f7:b5:c9:06:62:ea:c7: 70:09:84:28:1e:d9:08:cc:37:1a:e9:6f:70:36:c7: 6e:b4:f7:43:e8:26:02:c4:2d:59:4d:10:9f:3e:af: 81:30:c1:15:05:81:02:57:0a:3b:e9:2a:8e:12:e0: 40:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:6E:21:35:42:4B:EA:95:78:B9:C7:35:1C:E5:D9:1C:72:4F:CB:04 X509v3 Authority Key Identifier: keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5a:19:10:92:e9:e1:86:76:cb:d7:8c:03:dd:2c:dc:6e:a2: 36:31:ca:16:3b:db:01:3a:a3:c5:45:07:2b:56:c4:b7:dd:af: 45:1f:f5:1c:a3:ac:9a:62:7f:9d:aa:c4:b2:fb:17:af:ea:8c: d5:26:81:48:83:26:bb:50:49:5c:eb:be:f8:a2:40:4e:f1:60: 8a:35:b2:a1:d0:be:4e:ee:ee:4a:10:77:3c:46:31:ad:7d:81: 0a:6d:81:73:2a:e4:8d:40:d6:db:2b:84:4f:65:98:64:b3:eb: fa:50:c6:b1:8b:4a:db:ae:a4:70:73:ec:24:04:08:1d:d1:6d: 81:d8:bc:05:58:d0:37:92:fd:24:c8:58:b9:90:70:df:22:88: 5b:b1:c9:3f:6d:70:53:c8:07:5e:6f:58:ad:8d:3b:72:d3:c4: 3b:d1:26:9c:9a:f8:71:cd:34:e6:2d:88:9d:65:0e:ea:45:15: 6b:c1:f4:00:7e:21:b8:40:1b:d0:6f:78:58:25:61:15:ec:f6: 3a:da:49:53:6e:f8:31:f0:79:55:a5:ab:93:2e:9e:71:22:f5: 0e:fb:55:8f:00:6e:dd:a2:9a:9c:fb:77:5e:d5:b4:dd:0e:da: 59:b6:42:05:a2:43:80:be:1f:1d:11:77:da:bc:a5:ae:71:dc: c3:9c:38:a9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExNDAxMTAvBgNVBAUTKDA1MDIwRkJGMTAyMEZENjNCRTU3REExQjk3MDRCMEFB ODEwMzQ0NEEwHhcNMjUwODIyMTYxNDE4WhcNMjUwODI5MTYxNDE4WjAYMRYwFAYD VQQDEw02OGE4OTc1YS1kNThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr09wYiIIcHUmp2WN9MKqoYfU41aL5AXzv9WgZDkYrwt/idUuicoHnCADjA44 kdYsOIvrntFl5ERVqYOFQ6yHVIIo02HG/ArxsUoZvSBhq7Strz1eUYsLrYSW2MAk SmotSwdmKy2yqHx349oWwPuh+QXd/F0XWbw3cgj4C3D29OaID40buETZGjOIFfUz z9968LMJvL7Kj+K+oboxRXaB4+mysR1R6WxeiLq8+zc5oWMazvH0vF5ZFQD5nJmF x3WZh2E6ZpNPlS5f0/e1yQZi6sdwCYQoHtkIzDca6W9wNsdutPdD6CYCxC1ZTRCf Pq+BMMEVBYECVwo76SqOEuBAoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPluITVC S+qVeLnHNRzl2RxyT8sEMB8GA1UdIwQYMBaAFAUCD78QIP1jvlfaG5cEsKqBA0RK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE0MC9DQzFEQ0NFOEM3 NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19XTy1WOW9ibHdTd3FvRURS RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRSVB2eEFnX1dPLVY5b2Jsd1N3cW9FRFJFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTE0MC9DQzFEQ0NFOEM3NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19X Ty1WOW9ibHdTd3FvRURSRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8WhkQkunhhnbL14wD3SzcbqI2McoWO9sBOqPFRQcrVsS33a9FH/Uc o6yaYn+dqsSy+xev6ozVJoFIgya7UElc6774okBO8WCKNbKh0L5O7u5KEHc8RjGt fYEKbYFzKuSNQNbbK4RPZZhks+v6UMaxi0rbrqRwc+wkBAgd0W2B2LwFWNA3kv0k yFi5kHDfIohbsck/bXBTyAdeb1itjTty08Q70SacmvhxzTTmLYidZQ7qRRVrwfQA fiG4QBvQb3hYJWEV7PY62klTbvgx8HlVpauTLp5xIvUO+1WPAG7dopqc+3de1bTd DtpZtkIFokOAvh8dEXfavKWucdzDnDip -----END CERTIFICATE-----Generated at Sat Aug 23 22:34:28 2025 by rpki-client