$ rpki-client -vvf rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft File: bqB70D6DR6gFulr0iLMrL5oULvk.mft (raw, json) Hash identifier: wlIHvckX/aTorEYbllDDEyX18CUPhuUrpWwGXO6fAZQ= Subject key identifier: C6:C9:B7:BF:7A:FE:3E:03:D3:B7:12:CF:60:68:16:2D:46:A1:A1:84 Authority key identifier: 6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9 Certificate issuer: /CN=A9150080/serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9 Certificate serial: 0498 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft Manifest number: 0490 Signing time: Thu 03 Jul 2025 00:22:57 +0000 Manifest this update: Thu 03 Jul 2025 00:22:56 +0000 Manifest next update: Thu 10 Jul 2025 00:22:56 +0000 Files and hashes: 1: bqB70D6DR6gFulr0iLMrL5oULvk.crl (hash: /YjAXolsqtvwHQUGkkmmcWF1dQA0s+st9FrNVLUIu6o=) 2: A29B8E5A46A911EC8F95FC6EC4F9AE02.roa (hash: eaIiY9RvMlvN9KkRdh0VxXvRbPe5lNuNtQtAJNjGWj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:22:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1176 (0x498) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9150080, serialNumber=6EA07BD03E8347A805BA5AF488B32B2F9A142EF9 Validity Not Before: Jul 3 00:22:56 2025 GMT Not After : Jul 10 00:22:56 2025 GMT Subject: CN=6865cd61-3b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3c:79:a6:2f:e1:64:d2:1c:fc:35:9c:de:d0: a8:f3:28:dc:be:02:4d:6f:7e:4c:13:d1:6e:58:f4: 60:a5:21:db:11:f1:f6:b8:86:f8:3b:8a:de:f7:e3: e9:c1:0c:e1:16:e5:71:fb:66:36:02:55:37:97:97: b9:ec:fd:01:ae:69:67:d7:d3:30:45:d6:93:c3:3f: ee:9a:8b:8b:da:c3:2e:a7:d8:55:e4:60:0b:bd:ec: 96:c5:34:f7:30:f8:6d:b1:2f:5b:e0:e2:b8:27:41: bd:92:d3:6f:b0:fa:44:9f:f9:b0:cc:c8:2d:1c:5d: e3:57:95:62:68:9c:10:c9:25:8a:bc:16:5a:3c:f8: cc:8a:47:e0:d7:94:f5:4c:f7:74:75:f3:d3:13:c1: fc:25:ae:78:6b:5d:8e:b0:73:7e:d1:13:85:63:16: a3:ac:67:ea:38:ab:b9:6e:c7:54:b4:df:8b:47:82: 50:be:c6:94:d9:04:49:02:6b:01:b5:b2:e3:2c:ac: e4:c0:f0:a7:e2:5c:f5:e5:0d:f2:33:b2:77:5f:72: 5a:d2:03:37:8c:07:66:84:45:44:ed:1c:ef:36:c6: ec:d0:f1:85:66:cf:9b:61:62:ff:0a:b1:03:61:23: 93:a7:fb:79:c7:ac:d6:0d:6d:b0:18:3b:0a:99:e1: 72:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C9:B7:BF:7A:FE:3E:03:D3:B7:12:CF:60:68:16:2D:46:A1:A1:84 X509v3 Authority Key Identifier: keyid:6E:A0:7B:D0:3E:83:47:A8:05:BA:5A:F4:88:B3:2B:2F:9A:14:2E:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bqB70D6DR6gFulr0iLMrL5oULvk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150080/223E3A50469A11ECBE81360FC4F9AE02/bqB70D6DR6gFulr0iLMrL5oULvk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:8a:15:da:c1:99:b7:47:ce:9d:32:16:47:c1:b2:0f:5d:0d: 67:e6:62:35:86:8b:a5:30:d6:07:89:4c:15:75:38:17:bf:74: 78:bc:3c:27:26:34:05:26:40:87:17:c4:2e:a5:e3:ca:ce:d4: e5:80:b7:05:32:8c:60:dd:44:f5:49:78:ea:64:db:51:6b:ce: f8:65:91:4e:69:95:9c:72:13:f1:ec:94:65:32:3c:ae:01:26: 10:b1:5d:5a:83:2b:17:1d:41:73:db:51:b2:95:5e:ff:84:94: b0:93:d3:aa:aa:62:2a:3b:a1:05:ff:5c:e0:d5:c1:d1:d6:71: 81:9e:dd:4a:13:8a:b8:fc:38:f8:1b:b7:56:4b:cd:e0:89:9f: 76:14:3c:53:03:41:9c:73:ec:18:98:0e:7c:52:f9:01:68:67: 8a:22:f7:c3:e2:c6:b8:88:21:1e:ca:6a:15:db:a4:09:bb:74: d1:da:f4:69:6a:bf:d7:89:00:c3:75:88:1b:93:25:77:86:f7: a1:bb:7e:2e:10:75:9c:ba:28:74:ef:fb:81:3a:17:ae:b5:56: 83:1a:32:49:a7:a8:77:ec:b0:db:1a:a1:86:f5:52:23:41:4a: 20:b5:37:e1:48:26:9e:fb:53:51:79:1b:29:3c:af:d5:b1:66: b2:a2:96:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTAwODAxMTAvBgNVBAUTKDZFQTA3QkQwM0U4MzQ3QTgwNUJBNUFGNDg4QjMyQjJG OUExNDJFRjkwHhcNMjUwNzAzMDAyMjU2WhcNMjUwNzEwMDAyMjU2WjAYMRYwFAYD VQQDEw02ODY1Y2Q2MS0zYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArzx5pi/hZNIc/DWc3tCo8yjcvgJNb35ME9FuWPRgpSHbEfH2uIb4O4re9+Pp wQzhFuVx+2Y2AlU3l5e57P0Brmln19MwRdaTwz/umouL2sMup9hV5GALveyWxTT3 MPhtsS9b4OK4J0G9ktNvsPpEn/mwzMgtHF3jV5ViaJwQySWKvBZaPPjMikfg15T1 TPd0dfPTE8H8Ja54a12OsHN+0ROFYxajrGfqOKu5bsdUtN+LR4JQvsaU2QRJAmsB tbLjLKzkwPCn4lz15Q3yM7J3X3Ja0gM3jAdmhEVE7RzvNsbs0PGFZs+bYWL/CrED YSOTp/t5x6zWDW2wGDsKmeFydQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbJt796 /j4D07cSz2BoFi1GoaGEMB8GA1UdIwQYMBaAFG6ge9A+g0eoBbpa9IizKy+aFC75 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDA4MC8yMjNFM0E1MDQ2 OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2Z0Z1bHIwaUxNckw1b1VM dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JxQjcwRDZEUjZnRnVscjBpTE1yTDVvVUx2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MDA4MC8yMjNFM0E1MDQ2OUExMUVDQkU4MTM2MEZDNEY5QUUwMi9icUI3MEQ2RFI2 Z0Z1bHIwaUxNckw1b1VMdmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWihXawZm3R86dMhZHwbIPXQ1n5mI1houlMNYHiUwVdTgXv3R4vDwn JjQFJkCHF8QupePKztTlgLcFMoxg3UT1SXjqZNtRa874ZZFOaZWcchPx7JRlMjyu ASYQsV1agysXHUFz21GylV7/hJSwk9OqqmIqO6EF/1zg1cHR1nGBnt1KE4q4/Dj4 G7dWS83giZ92FDxTA0Gcc+wYmA58UvkBaGeKIvfD4sa4iCEeymoV26QJu3TR2vRp ar/XiQDDdYgbkyV3hvehu34uEHWcuih07/uBOheutVaDGjJJp6h37LDbGqGG9VIj QUogtTfhSCae+1NReRspPK/VsWayopZ6 -----END CERTIFICATE-----Generated at Thu Jul 3 15:04:51 2025 by rpki-client