$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json) Hash identifier: g2MqfaEAjqcHnHXiOnUa2VAV58HaA6DRusfGQzni+qo= Subject key identifier: 1C:6A:1F:6A:7D:8C:2B:29:5D:C8:4E:1C:77:92:83:15:84:81:A9:2E Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Certificate serial: 0591 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft Manifest number: 057E Signing time: Wed 02 Jul 2025 19:50:53 +0000 Manifest this update: Wed 02 Jul 2025 19:50:52 +0000 Manifest next update: Wed 09 Jul 2025 19:50:52 +0000 Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: nO35Ad+enpH3HghDRzK8Q1rQnXWrXMKbwEXkP9TP3Yk=) 2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: hN1FG4yB+En2c4wj8yUNEIMBBFanGUa7r/bmCbomayU=) 3: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: /T6Cx82NX6eIVhHP8WlrC3rkE3NEqsy8y14HZ45ur88=) 4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: r9rxwsZy05OBv79BaleZs2CDNDVKsWtQPtZMqmB3o+8=) 5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: MEl6w5nE9WmS9IMiK++pW3U+fqzMAGds8O/KdUZBrWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 19:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1425 (0x591) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Validity Not Before: Jul 2 19:50:52 2025 GMT Not After : Jul 9 19:50:52 2025 GMT Subject: CN=68658d9c-e415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:67:c9:95:ae:1e:c8:12:c3:de:c2:ff:3f:f7: c7:df:1f:32:fc:90:bd:c7:b4:89:dd:59:b9:58:03: 60:00:63:6f:64:23:b5:d9:74:29:79:8c:49:66:69: e7:92:24:82:eb:c8:aa:6a:66:83:47:92:c6:e9:67: 35:93:52:1f:13:7b:a9:22:d9:53:47:66:75:a9:03: eb:11:79:1a:0d:ad:12:8a:09:fd:cc:2f:ca:f8:56: ae:f3:b2:e3:2a:72:85:fe:41:2c:88:df:b9:ff:45: 26:7e:13:a6:96:6a:31:61:72:99:97:06:08:46:20: e5:82:a6:69:98:bb:fc:33:cf:4f:d7:b3:dd:ba:ae: c5:00:bb:22:51:cc:47:e8:bc:88:de:62:61:8f:e9: f9:8c:34:38:26:2c:56:d8:93:bf:6c:d5:90:73:dd: a3:ab:26:47:df:f6:ff:81:1e:18:6b:01:de:ab:5b: 82:21:1a:41:44:60:23:4f:43:19:d3:08:da:7e:14: a5:bc:9b:64:60:25:32:f5:9e:83:a3:7e:05:51:6a: af:04:5c:d7:c4:e6:35:51:1a:ec:dc:21:36:03:4a: 17:3e:98:9b:1e:03:f9:d6:98:a1:b4:8b:9a:1c:3b: 14:a8:fc:58:1b:13:cf:83:6b:e3:52:0e:03:7f:7a: 99:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6A:1F:6A:7D:8C:2B:29:5D:C8:4E:1C:77:92:83:15:84:81:A9:2E X509v3 Authority Key Identifier: keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:72:29:e2:00:a2:dc:2a:55:37:55:1d:bb:9c:9b:cf:d2:cb: ea:cb:b8:a1:4f:b2:61:16:58:67:33:b1:fd:d6:20:41:d9:44: 69:9c:0f:49:97:47:81:06:53:ea:34:50:e8:2a:6f:96:7b:d6: 6d:4f:04:0a:49:18:eb:dc:42:7e:df:9b:5a:66:79:48:e1:b1: b5:06:46:35:2f:40:22:58:07:c4:41:f0:27:c8:7e:f2:80:ad: 48:c7:c7:d3:2e:4e:7b:0b:82:b6:d4:fc:ea:b5:81:c2:09:c0: 57:ce:03:3b:e9:05:8c:63:06:03:f4:66:77:99:9f:ba:b7:77: 18:14:be:8b:2e:d2:0c:2e:46:ad:7e:7e:a3:a2:3d:a7:d0:63: b4:57:69:70:7a:34:20:f7:5b:3d:e8:13:ad:66:16:ac:d4:28: 7c:3d:a4:a4:46:a9:b1:78:64:3c:8b:13:36:cc:1a:b1:1f:bd: 22:f0:cc:73:c9:de:b3:c8:d9:45:86:ee:65:3f:a6:00:1e:aa: ad:78:06:4d:f2:22:99:25:ad:60:4f:42:16:49:f8:a8:55:f5: 94:c5:b9:b3:c4:2a:94:ff:9b:71:28:24:2b:cb:d6:1a:9c:55: c4:8c:08:ad:c8:e7:07:69:9c:fc:ce:ff:33:d8:8a:ef:67:38: ab:e0:94:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE RUY4QzNEM0IwHhcNMjUwNzAyMTk1MDUyWhcNMjUwNzA5MTk1MDUyWjAYMRYwFAYD VQQDEw02ODY1OGQ5Yy1lNDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGfJla4eyBLD3sL/P/fH3x8y/JC9x7SJ3Vm5WANgAGNvZCO12XQpeYxJZmnn kiSC68iqamaDR5LG6Wc1k1IfE3upItlTR2Z1qQPrEXkaDa0Sign9zC/K+Fau87Lj KnKF/kEsiN+5/0UmfhOmlmoxYXKZlwYIRiDlgqZpmLv8M89P17Pduq7FALsiUcxH 6LyI3mJhj+n5jDQ4JixW2JO/bNWQc92jqyZH3/b/gR4YawHeq1uCIRpBRGAjT0MZ 0wjafhSlvJtkYCUy9Z6Do34FUWqvBFzXxOY1URrs3CE2A0oXPpibHgP51pihtIua HDsUqPxYGxPPg2vjUg4Df3qZfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBxqH2p9 jCspXchOHHeSgxWEgakuMB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC8wQzQ3NDkwQUVBQjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVf WXA4ZUZ6aGZQZ19lLU1QVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1ciniAKLcKlU3VR27nJvP0svqy7ihT7JhFlhnM7H91iBB2URpnA9J l0eBBlPqNFDoKm+We9ZtTwQKSRjr3EJ+35taZnlI4bG1BkY1L0AiWAfEQfAnyH7y gK1Ix8fTLk57C4K21PzqtYHCCcBXzgM76QWMYwYD9GZ3mZ+6t3cYFL6LLtIMLkat fn6joj2n0GO0V2lwejQg91s96BOtZhas1Ch8PaSkRqmxeGQ8ixM2zBqxH70i8Mxz yd6zyNlFhu5lP6YAHqqteAZN8iKZJa1gT0IWSfioVfWUxbmzxCqU/5txKCQry9Ya nFXEjAityOcHaZz8zv8z2IrvZzir4JRM -----END CERTIFICATE-----Generated at Thu Jul 3 08:06:10 2025 by rpki-client