$ rpki-client -vvf rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.mft File: BfhBmvmqMYTqsf-HQkpq4zz3MsQ.mft (raw, json) Hash identifier: X4kvLRi18HppJliSUQpQSTO4vL65jjrUUXjXv+ezV9I= Subject key identifier: 71:90:C5:D6:6D:E9:6A:05:17:2D:B6:CE:7B:43:33:0D:E5:3D:72:47 Authority key identifier: 05:F8:41:9A:F9:AA:31:84:EA:B1:FF:87:42:4A:6A:E3:3C:F7:32:C4 Certificate issuer: /CN=A915E575/serialNumber=05F8419AF9AA3184EAB1FF87424A6AE33CF732C4 Certificate serial: 03CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.mft Manifest number: 03C9 Signing time: Sat 05 Jul 2025 01:08:41 +0000 Manifest this update: Sat 05 Jul 2025 01:08:41 +0000 Manifest next update: Sat 12 Jul 2025 01:08:41 +0000 Files and hashes: 1: BfhBmvmqMYTqsf-HQkpq4zz3MsQ.crl (hash: ZNRkn3X4fFzb/7uy8Z0D00YgN4JLrS7GOgPL8plGqaI=) 2: D86008008FAA11ECB0728B0FC4F9AE02.roa (hash: RsMIAFkbpydCDPohis69ldhzmBpnzB7IY6eRBCKfLas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.crl rsync://rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 973 (0x3cd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E575, serialNumber=05F8419AF9AA3184EAB1FF87424A6AE33CF732C4 Validity Not Before: Jul 5 01:08:41 2025 GMT Not After : Jul 12 01:08:41 2025 GMT Subject: CN=68687b19-c8e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ec:eb:67:7c:d8:30:fb:26:3f:0c:38:13:8a: 86:b7:74:5a:ae:4b:c2:b0:a5:31:67:17:66:3a:80: 9f:17:f3:ac:6d:06:b5:cc:01:bf:a8:30:f1:71:f2: 91:c9:35:34:25:89:37:5a:fc:24:1e:d8:ca:23:69: 5e:d3:ab:de:98:23:54:8b:03:9a:31:73:32:4a:00: 7f:ca:9c:76:6d:62:e5:b2:06:42:b8:63:33:c9:84: 24:2a:72:e5:48:1b:91:94:28:c1:33:9d:dc:c7:21: 13:5f:58:c5:69:df:09:9e:35:d3:0c:55:e5:18:99: 72:6c:14:f3:b6:6d:a7:ac:0e:64:d7:8a:86:25:c1: 07:28:9f:73:a8:aa:0a:77:a5:cd:7b:ab:71:55:29: 2e:f9:c6:b7:82:7d:2f:bb:e4:95:3c:7d:40:78:67: 73:1d:30:de:a9:42:9d:ed:24:20:f6:b4:f9:8f:da: 52:a9:3d:3f:56:6b:ad:21:6b:11:fb:af:8f:07:35: a5:74:1d:39:94:69:f7:54:9a:b3:d5:d4:0e:11:0b: 11:89:92:43:07:26:71:d4:8b:a0:4b:ec:3d:45:f1: d0:54:a1:b6:05:a5:94:c1:2b:69:4d:87:67:b7:89: 31:8b:7f:ae:f0:45:0a:c8:91:1f:85:54:36:90:fc: ed:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:90:C5:D6:6D:E9:6A:05:17:2D:B6:CE:7B:43:33:0D:E5:3D:72:47 X509v3 Authority Key Identifier: keyid:05:F8:41:9A:F9:AA:31:84:EA:B1:FF:87:42:4A:6A:E3:3C:F7:32:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E575/F0B242148FA611EC9C397762C4F9AE02/BfhBmvmqMYTqsf-HQkpq4zz3MsQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8d:72:7d:75:c0:54:82:d3:47:59:e5:4c:d7:31:df:d1:f7: 2d:87:31:48:a1:f3:58:8f:44:19:e2:bc:be:2c:ae:91:e1:30: 6a:35:9c:e7:df:c4:26:ee:e0:af:f9:20:51:22:84:c2:d9:04: 0b:33:84:85:ab:69:c0:d2:fe:fb:1c:c4:03:92:9d:de:9a:a4: ac:6f:db:82:86:05:85:8a:96:09:e7:c3:a5:f6:59:cd:b7:3b: 03:d3:34:e6:0a:69:68:50:a7:a1:9a:24:7c:15:ce:bf:d6:67: 74:03:52:34:51:f7:88:89:52:9f:96:51:cf:2b:1a:92:74:86: 9b:1a:f4:8a:16:71:db:ee:1c:af:42:5f:65:a1:e8:fb:e8:09: c7:30:2b:39:fc:06:f7:9f:47:bf:6d:eb:87:45:38:88:01:45: 6f:9d:99:01:ac:40:ae:31:57:3d:9f:38:f5:60:e2:55:f8:47: f3:19:12:fe:3a:6d:0f:ed:83:28:bd:73:7d:e3:72:53:91:d0: 4b:76:f4:fa:d5:c5:d7:0a:f6:5d:73:58:c8:97:88:e8:ac:d8: b7:e5:ee:af:40:92:7a:68:36:2a:b2:ae:00:43:5c:3b:0c:e1: 61:7c:2d:a1:48:fd:50:f7:5f:d9:cd:e8:8b:bd:ab:4d:9f:01: 32:c5:13:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUU1NzUxMTAvBgNVBAUTKDA1Rjg0MTlBRjlBQTMxODRFQUIxRkY4NzQyNEE2QUUz M0NGNzMyQzQwHhcNMjUwNzA1MDEwODQxWhcNMjUwNzEyMDEwODQxWjAYMRYwFAYD VQQDEw02ODY4N2IxOS1jOGU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3OzrZ3zYMPsmPww4E4qGt3RarkvCsKUxZxdmOoCfF/OsbQa1zAG/qDDxcfKR yTU0JYk3WvwkHtjKI2le06vemCNUiwOaMXMySgB/ypx2bWLlsgZCuGMzyYQkKnLl SBuRlCjBM53cxyETX1jFad8JnjXTDFXlGJlybBTztm2nrA5k14qGJcEHKJ9zqKoK d6XNe6txVSku+ca3gn0vu+SVPH1AeGdzHTDeqUKd7SQg9rT5j9pSqT0/VmutIWsR +6+PBzWldB05lGn3VJqz1dQOEQsRiZJDByZx1IugS+w9RfHQVKG2BaWUwStpTYdn t4kxi3+u8EUKyJEfhVQ2kPztzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGQxdZt 6WoFFy22zntDMw3lPXJHMB8GA1UdIwQYMBaAFAX4QZr5qjGE6rH/h0JKauM89zLE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTU3NS9GMEIyNDIxNDhG QTYxMUVDOUMzOTc3NjJDNEY5QUUwMi9CZmhCbXZtcU1ZVHFzZi1IUWtwcTR6ejNN c1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JmaEJtdm1xTVlUcXNmLUhRa3BxNHp6M01zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RTU3NS9GMEIyNDIxNDhGQTYxMUVDOUMzOTc3NjJDNEY5QUUwMi9CZmhCbXZtcU1Z VHFzZi1IUWtwcTR6ejNNc1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALjXJ9dcBUgtNHWeVM1zHf0fcthzFIofNYj0QZ4ry+LK6R4TBqNZzn 38Qm7uCv+SBRIoTC2QQLM4SFq2nA0v77HMQDkp3emqSsb9uChgWFipYJ58Ol9lnN tzsD0zTmCmloUKehmiR8Fc6/1md0A1I0UfeIiVKfllHPKxqSdIabGvSKFnHb7hyv Ql9loej76AnHMCs5/Ab3n0e/beuHRTiIAUVvnZkBrECuMVc9nzj1YOJV+EfzGRL+ Om0P7YMovXN943JTkdBLdvT61cXXCvZdc1jIl4jorNi35e6vQJJ6aDYqsq4AQ1w7 DOFhfC2hSP1Q91/ZzeiLvatNnwEyxRP/ -----END CERTIFICATE-----Generated at Sun Jul 6 00:48:08 2025 by rpki-client