$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft File: BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json) Hash identifier: qkei6hWoOYmPbKee1Pn71gYjXXhPweidXjLJx8VMh2Q= Subject key identifier: 2A:5F:50:F1:5C:01:AA:DD:07:E0:8A:58:E7:96:A6:75:F8:21:16:18 Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Certificate serial: 07E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft Manifest number: 07DA Signing time: Wed 02 Jul 2025 21:20:26 +0000 Manifest this update: Wed 02 Jul 2025 21:20:26 +0000 Manifest next update: Wed 09 Jul 2025 21:20:26 +0000 Files and hashes: 1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: NWVBxvCQ+OdYe/NtxTNbp3A3ju+bJXOU3YXk76hVfRQ=) 2: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: 7SByllehiBQ/m40nHfrULflQ9saC9b0OPbuO6uvzNcs=) 3: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: UAlWYyICZSxgcc4gu4nDjPvk7Se5PSi+jbJb8ttieow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2024 (0x7e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Validity Not Before: Jul 2 21:20:26 2025 GMT Not After : Jul 9 21:20:26 2025 GMT Subject: CN=6865a29a-e21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:4a:a6:69:39:c3:bf:ec:e7:5d:5a:19:55: 64:ec:00:8e:cd:be:90:49:c4:b1:53:77:7e:08:fe: 83:8a:bb:19:26:42:bb:c3:17:93:d9:f4:95:ce:85: 7c:76:4b:c0:b7:74:f1:0b:af:6c:10:e8:c1:11:4f: 75:a4:a0:16:dd:be:98:2c:a3:28:6b:94:8e:e8:6b: 5c:80:28:8a:b9:4c:38:b1:d9:5f:57:3e:32:6c:af: be:b8:63:43:64:2a:3b:4e:3b:24:4f:2d:2d:30:4d: a8:f1:35:61:92:f6:1a:0e:eb:e4:f3:af:81:2d:0d: b1:1a:c7:11:17:19:38:ed:e0:ac:09:b0:83:b1:61: 45:96:58:d0:4e:d1:04:4a:e4:30:24:2a:58:85:23: 2c:09:d0:58:f7:d0:cb:fe:2e:e5:26:7b:c7:cb:ec: ff:e8:ef:0a:39:d0:86:51:a1:9b:a8:e2:a1:92:85: 12:67:b4:c6:e8:9a:41:00:2a:0b:d4:e3:d0:64:28: f1:50:56:64:fe:52:d3:11:e3:0f:ed:a8:24:1d:55: 59:32:ab:72:47:7f:d2:06:fb:5e:db:75:9a:d0:25: 1f:9f:ac:e4:d6:86:f8:f4:73:f7:53:7d:65:f6:8b: fa:8c:75:92:19:3c:c2:7e:f1:b8:17:1c:fd:42:84: ab:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5F:50:F1:5C:01:AA:DD:07:E0:8A:58:E7:96:A6:75:F8:21:16:18 X509v3 Authority Key Identifier: keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:19:f3:3b:c8:73:bf:cb:0a:b3:3d:0b:7a:70:fe:83:7f:7d: ca:1c:b4:e0:1f:f9:30:be:4a:48:2e:63:3a:91:bd:f3:5a:41: 80:51:d2:68:e2:95:8d:9a:cf:a2:88:f3:b5:36:63:c6:c5:1a: b2:24:41:1e:05:7d:98:b6:35:29:1b:b5:e0:99:ad:38:83:e9: 67:5e:cc:ae:f0:51:53:e7:dc:86:cc:62:e9:3f:59:5f:e7:7e: 6f:ff:76:d3:57:2b:8a:2f:13:32:9d:ba:e8:53:4e:ec:fb:a1: 2c:39:b5:58:44:f8:f5:04:2b:23:4f:19:cc:a8:29:54:cd:a3: a3:1e:64:bf:82:23:07:4b:96:0e:d6:84:2d:e9:23:24:19:24: 98:28:1c:64:a6:9c:4c:68:2e:40:c3:41:b6:41:71:24:d2:0e: 6f:c9:ab:5d:da:de:12:85:9b:17:d5:8a:87:bd:c5:34:60:11: a5:38:ae:f9:b4:19:25:0d:a0:88:64:7b:2b:8a:dd:ab:f3:c2: 87:47:ae:3c:e3:ee:d2:51:3f:13:35:cf:23:a0:6c:73:64:32: 7d:78:60:d4:c0:da:a8:c1:38:c4:69:ed:d5:00:c3:b3:65:48: 32:7f:d0:65:98:a9:84:a5:92:57:e2:b0:21:d6:9b:76:02:45: 7e:ff:5e:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYzMTYxMTAvBgNVBAUTKDA0MjkwQ0IyNEVFRUYwQTNBNzg3MTg3Q0I0RkZDNzQ3 REU4NjE3MzEwHhcNMjUwNzAyMjEyMDI2WhcNMjUwNzA5MjEyMDI2WjAYMRYwFAYD VQQDEw02ODY1YTI5YS1lMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvldKpmk5w7/s511aGVVk7ACOzb6QScSxU3d+CP6DirsZJkK7wxeT2fSVzoV8 dkvAt3TxC69sEOjBEU91pKAW3b6YLKMoa5SO6GtcgCiKuUw4sdlfVz4ybK++uGND ZCo7TjskTy0tME2o8TVhkvYaDuvk86+BLQ2xGscRFxk47eCsCbCDsWFFlljQTtEE SuQwJCpYhSMsCdBY99DL/i7lJnvHy+z/6O8KOdCGUaGbqOKhkoUSZ7TG6JpBACoL 1OPQZCjxUFZk/lLTEeMP7agkHVVZMqtyR3/SBvte23Wa0CUfn6zk1ob49HP3U31l 9ov6jHWSGTzCfvG4Fxz9QoSrowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCpfUPFc AardB+CKWOeWpnX4IRYYMB8GA1UdIwQYMBaAFAQpDLJO7vCjp4cYfLT/x0fehhcx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjMxNi8yODFCOUQ2MEY2 RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThLT25oeGg4dFBfSFI5NkdG ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JDa01zazd1OEtPbmh4aDh0UF9IUjk2R0Z6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjMxNi8yODFCOUQ2MEY2RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThL T25oeGg4dFBfSFI5NkdGekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApGfM7yHO/ywqzPQt6cP6Df33KHLTgH/kwvkpILmM6kb3zWkGAUdJo 4pWNms+iiPO1NmPGxRqyJEEeBX2YtjUpG7Xgma04g+lnXsyu8FFT59yGzGLpP1lf 535v/3bTVyuKLxMynbroU07s+6EsObVYRPj1BCsjTxnMqClUzaOjHmS/giMHS5YO 1oQt6SMkGSSYKBxkppxMaC5Aw0G2QXEk0g5vyatd2t4ShZsX1YqHvcU0YBGlOK75 tBklDaCIZHsrit2r88KHR6484+7SUT8TNc8joGxzZDJ9eGDUwNqowTjEae3VAMOz ZUgyf9BlmKmEpZJX4rAh1pt2AkV+/151 -----END CERTIFICATE-----Generated at Fri Jul 4 13:01:02 2025 by rpki-client