$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json) Hash identifier: znpunGEJoOrXCWZE+4EN6MtIe0FHy9XRAF8CPOeDBO8= Subject key identifier: 99:F9:20:D7:C2:80:D6:66:26:B1:3B:49:76:78:BB:23:33:53:3E:42 Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Certificate serial: 05AB Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft Manifest number: 0598 Signing time: Fri 22 Aug 2025 19:42:31 +0000 Manifest this update: Fri 22 Aug 2025 19:42:31 +0000 Manifest next update: Fri 29 Aug 2025 19:42:31 +0000 Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: Bh6V+E3P8qm+b8YbsMIhZsNtUR8v9Bqb7Lwsz9wEx5g=) 2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: hN1FG4yB+En2c4wj8yUNEIMBBFanGUa7r/bmCbomayU=) 3: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: /T6Cx82NX6eIVhHP8WlrC3rkE3NEqsy8y14HZ45ur88=) 4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: r9rxwsZy05OBv79BaleZs2CDNDVKsWtQPtZMqmB3o+8=) 5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: MEl6w5nE9WmS9IMiK++pW3U+fqzMAGds8O/KdUZBrWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1451 (0x5ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Validity Not Before: Aug 22 19:42:31 2025 GMT Not After : Aug 29 19:42:31 2025 GMT Subject: CN=68a8c827-6160 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:13:23:da:8f:0d:b5:59:59:ae:51:1c:5e: e4:8d:d7:c8:28:19:e5:db:fa:94:59:11:2d:0d:5d: 1c:a5:35:ad:60:38:ae:99:02:bf:21:47:83:dc:1a: 16:fd:a7:88:1f:89:91:07:67:2c:2b:3f:24:13:82: b1:e2:7e:38:6f:22:ee:1a:eb:4a:4e:0a:3a:ca:80: f8:cc:32:6a:49:73:3f:9b:ac:26:ec:f2:46:23:f8: 7b:a3:10:38:38:fd:d6:4d:a1:f9:04:6e:19:8f:b7: 7f:d9:fc:7f:63:77:40:ee:ec:58:71:8f:7a:7f:a7: 85:a0:2d:08:e4:0c:ea:c2:b1:fb:5b:d7:a5:2e:ca: 96:f8:3e:02:6b:15:c1:1f:7f:15:9e:d1:f4:a6:5b: 0b:11:0d:05:dd:fc:ca:32:0a:6e:9f:4c:b1:bd:2e: 30:25:de:0d:ec:b2:56:34:1f:e4:48:cc:10:c5:f1: a2:9b:fc:00:cd:25:f3:36:2a:1a:f6:a4:73:d5:6f: 3d:12:b9:9e:24:05:f0:88:27:c0:a6:13:ab:03:bc: d2:8a:35:64:62:12:08:87:76:3a:36:bf:45:79:a5: 67:0d:6d:46:3f:47:b5:91:c1:af:29:f6:8e:be:02: 65:f1:d2:a0:1d:e6:94:62:c3:ac:29:08:38:67:f0: fd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F9:20:D7:C2:80:D6:66:26:B1:3B:49:76:78:BB:23:33:53:3E:42 X509v3 Authority Key Identifier: keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:fe:8e:93:6c:45:c5:2b:fd:5a:eb:b1:18:36:bd:88:e7:d2: 57:cb:ac:da:f8:f8:35:56:d4:d8:8f:46:1f:b7:8d:bc:5d:d7: 9b:6f:ea:96:ef:5c:5a:2b:b0:58:4e:68:e8:99:bc:18:49:14: 15:51:95:37:36:e7:b4:73:fc:48:48:9a:23:37:c9:9f:eb:d7: a6:c7:bd:b6:76:5d:fc:8b:5d:61:99:eb:c7:34:7a:d3:f7:e3: db:c2:39:f1:b4:9a:9c:5f:f6:e3:35:50:3e:7f:05:6b:a6:7a: e0:30:7a:af:4b:09:49:3c:f8:52:c3:59:02:af:71:01:86:54: 31:7f:2d:db:c6:6c:3a:00:cf:b2:2b:5a:ee:26:87:2f:55:09: af:fb:42:f2:7c:2d:e7:5a:8f:12:29:52:a6:cd:10:54:39:29: eb:db:eb:88:67:71:d4:ab:7d:96:b0:d6:84:ce:09:09:ef:15: 5b:da:fc:55:da:52:ab:2f:c8:7c:0d:36:be:95:29:cb:d6:72: 69:e7:1e:65:0b:cf:81:84:2c:a3:28:6e:66:9c:4e:dd:4b:fe: 9f:e8:29:6b:19:df:c5:ba:8e:cf:ab:10:27:33:66:38:c0:80: 1f:15:8b:1b:6f:ba:e8:ae:09:72:9e:e5:7d:74:03:c0:b1:ce: cf:98:b1:4a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE RUY4QzNEM0IwHhcNMjUwODIyMTk0MjMxWhcNMjUwODI5MTk0MjMxWjAYMRYwFAYD VQQDEw02OGE4YzgyNy02MTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwlETI9qPDbVZWa5RHF7kjdfIKBnl2/qUWREtDV0cpTWtYDiumQK/IUeD3BoW /aeIH4mRB2csKz8kE4Kx4n44byLuGutKTgo6yoD4zDJqSXM/m6wm7PJGI/h7oxA4 OP3WTaH5BG4Zj7d/2fx/Y3dA7uxYcY96f6eFoC0I5AzqwrH7W9elLsqW+D4CaxXB H38VntH0plsLEQ0F3fzKMgpun0yxvS4wJd4N7LJWNB/kSMwQxfGim/wAzSXzNioa 9qRz1W89ErmeJAXwiCfAphOrA7zSijVkYhIIh3Y6Nr9FeaVnDW1GP0e1kcGvKfaO vgJl8dKgHeaUYsOsKQg4Z/D9+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJn5INfC gNZmJrE7SXZ4uyMzUz5CMB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC8wQzQ3NDkwQUVBQjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVf WXA4ZUZ6aGZQZ19lLU1QVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA//o6TbEXFK/1a67EYNr2I59JXy6za+Pg1VtTYj0Yft428Xdebb+qW 71xaK7BYTmjombwYSRQVUZU3Nue0c/xISJojN8mf69emx722dl38i11hmevHNHrT 9+PbwjnxtJqcX/bjNVA+fwVrpnrgMHqvSwlJPPhSw1kCr3EBhlQxfy3bxmw6AM+y K1ruJocvVQmv+0LyfC3nWo8SKVKmzRBUOSnr2+uIZ3HUq32WsNaEzgkJ7xVb2vxV 2lKrL8h8DTa+lSnL1nJp5x5lC8+BhCyjKG5mnE7dS/6f6ClrGd/Fuo7PqxAnM2Y4 wIAfFYsbb7rorglynuV9dAPAsc7PmLFK -----END CERTIFICATE-----Generated at Sun Aug 24 00:20:59 2025 by rpki-client