$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft File: BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft (raw, json) Hash identifier: h8WQ0udCQultHRC+SXEy+W28R9CzwDtpV/To7ZyQNnY= Subject key identifier: 65:3B:DB:A9:B3:07:96:55:B7:0A:4B:0D:EE:10:05:59:E2:37:AB:F6 Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE Certificate issuer: /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE Certificate serial: 0670 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft Manifest number: 0655 Signing time: Wed 02 Jul 2025 23:01:15 +0000 Manifest this update: Wed 02 Jul 2025 23:01:14 +0000 Manifest next update: Wed 09 Jul 2025 23:01:14 +0000 Files and hashes: 1: BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl (hash: m7600g/nbAWideBvSGgxvr0Ssru5LnGjVoD23LZkZRs=) 2: BFC00D26D18011EEB673FD69C4F9AE02.roa (hash: Cvx2yiI1oVNG4J0lF2K+6YI8jeJN0PgnkGUOcXS5I48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184279, serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE Validity Not Before: Jul 2 23:01:14 2025 GMT Not After : Jul 9 23:01:14 2025 GMT Subject: CN=6865ba3b-33c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8f:21:92:49:66:1e:62:52:a2:cf:8d:01:f4: 17:1b:ef:1a:31:d1:cb:03:72:db:1c:5b:4e:66:fd: 32:82:d6:d6:14:7d:fc:f5:1c:8e:a3:8d:fc:ff:a3: ee:d0:20:78:87:99:42:f8:c3:65:3e:fa:28:63:65: 8e:44:1b:be:14:97:0e:fc:ff:d4:b0:f5:3d:f8:28: 63:f8:ff:26:ea:d3:dd:f8:f2:03:aa:85:c3:a6:75: c2:ee:09:1f:ca:bb:16:bd:a4:e7:5a:53:5b:be:66: 36:36:7d:33:27:04:26:3c:f9:52:30:37:87:85:43: 2f:2f:d9:e4:14:c6:1b:0d:64:fe:2c:8c:24:66:bb: 41:40:52:c5:2e:c2:a1:7c:71:7f:dd:f0:49:23:0c: 98:41:c9:b5:f3:4f:68:79:0a:2b:a8:88:4a:bb:18: 10:15:80:86:1a:45:b5:96:b8:ff:79:b1:30:ed:90: 54:8c:1a:3e:42:40:02:ca:e0:66:b2:07:22:07:ea: 53:78:6c:a2:a2:9a:7c:a6:90:e7:a0:14:91:2c:36: 88:9f:01:8a:84:c2:69:6b:11:f9:92:54:f6:4c:67: f4:af:a2:a9:c1:2d:b3:53:ef:a7:d3:3f:54:ab:a3: cc:59:66:3e:f1:c1:e1:64:fb:42:20:19:b4:b6:ad: a6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3B:DB:A9:B3:07:96:55:B7:0A:4B:0D:EE:10:05:59:E2:37:AB:F6 X509v3 Authority Key Identifier: keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:e6:c5:97:df:5f:3b:7a:2d:11:3b:ca:f8:b0:04:24:dd:5d: de:00:68:6f:a8:9f:f4:aa:fc:14:89:33:87:43:d0:40:19:8a: b9:8e:fe:9d:4b:3f:0d:13:8a:b6:77:28:54:d1:f6:12:b4:7b: 33:b3:40:3d:3c:41:c4:13:30:d0:f9:fe:a5:db:33:c8:f8:3a: c4:fa:17:47:dd:b6:3a:1c:c0:a0:be:aa:e9:6c:8d:69:39:18: 3f:54:4c:74:56:81:45:c5:ad:38:9f:f8:8b:e3:ed:5e:2d:9f: 11:d8:64:6a:69:27:e7:c3:ea:9b:af:30:d9:b4:c2:0a:ad:a4: e7:13:48:cd:4b:41:71:e9:31:82:eb:e3:b2:c3:33:4d:c5:02: c8:41:03:36:ee:32:51:be:65:76:c2:cb:6e:36:4c:6a:e5:2d: 7a:41:d8:c9:0c:f4:fe:6d:45:6d:dd:5c:75:74:3b:0a:02:f4: dc:ea:af:ed:a1:52:1c:a1:43:e3:73:07:73:ea:dc:87:a6:e1: 94:ea:54:0d:51:b9:60:f9:2a:a9:bd:3f:b9:99:93:a6:4d:3e: 06:e1:de:2d:34:40:d1:0b:bf:31:77:a0:12:f9:d1:17:65:0c: ff:f3:06:67:59:00:37:cf:91:20:1f:49:e1:51:a8:d1:f4:af: 5d:63:54:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyNzkxMTAvBgNVBAUTKDA2RDI4QzQzRUFFNDNGMUY1REE1NkM2QTIxRTZDQUJC RkNCODhEQkUwHhcNMjUwNzAyMjMwMTE0WhcNMjUwNzA5MjMwMTE0WjAYMRYwFAYD VQQDEw02ODY1YmEzYi0zM2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu48hkklmHmJSos+NAfQXG+8aMdHLA3LbHFtOZv0ygtbWFH389RyOo438/6Pu 0CB4h5lC+MNlPvooY2WORBu+FJcO/P/UsPU9+Chj+P8m6tPd+PIDqoXDpnXC7gkf yrsWvaTnWlNbvmY2Nn0zJwQmPPlSMDeHhUMvL9nkFMYbDWT+LIwkZrtBQFLFLsKh fHF/3fBJIwyYQcm1809oeQorqIhKuxgQFYCGGkW1lrj/ebEw7ZBUjBo+QkACyuBm sgciB+pTeGyiopp8ppDnoBSRLDaInwGKhMJpaxH5klT2TGf0r6KpwS2zU++n0z9U q6PMWWY+8cHhZPtCIBm0tq2m/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGU726mz B5ZVtwpLDe4QBVniN6v2MB8GA1UdIwQYMBaAFAbSjEPq5D8fXaVsaiHmyrv8uI2+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI3OS8wRTM2MUJCNjlD MTUxMUVCOTk3QUJENTlDNEY5QUUwMi9CdEtNUS1ya1B4OWRwV3hxSWViS3VfeTRq YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0S01RLXJrUHg5ZHBXeHFJZWJLdV95NGpiNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI3OS8wRTM2MUJCNjlDMTUxMUVCOTk3QUJENTlDNEY5QUUwMi9CdEtNUS1ya1B4 OWRwV3hxSWViS3VfeTRqYjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCO5sWX3187ei0RO8r4sAQk3V3eAGhvqJ/0qvwUiTOHQ9BAGYq5jv6d Sz8NE4q2dyhU0fYStHszs0A9PEHEEzDQ+f6l2zPI+DrE+hdH3bY6HMCgvqrpbI1p ORg/VEx0VoFFxa04n/iL4+1eLZ8R2GRqaSfnw+qbrzDZtMIKraTnE0jNS0Fx6TGC 6+OywzNNxQLIQQM27jJRvmV2wstuNkxq5S16QdjJDPT+bUVt3Vx1dDsKAvTc6q/t oVIcoUPjcwdz6tyHpuGU6lQNUblg+SqpvT+5mZOmTT4G4d4tNEDRC78xd6AS+dEX ZQz/8wZnWQA3z5EgH0nhUajR9K9dY1Qt -----END CERTIFICATE-----Generated at Thu Jul 3 04:26:15 2025 by rpki-client