$ rpki-client -vvf rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft File: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft (raw, json) Hash identifier: z1W6og8PRFCiKW3U6BXVJnwcY3D2kHAg26MPlo/J9ZQ= Subject key identifier: D7:EA:97:6D:1E:BE:FA:1A:1A:17:D0:34:9D:DE:5B:8A:7A:C2:49:4A Authority key identifier: 04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB Certificate issuer: /CN=A9196C96/serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB Certificate serial: 0653 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft Manifest number: 064E Signing time: Wed 02 Jul 2025 22:52:07 +0000 Manifest this update: Wed 02 Jul 2025 22:52:07 +0000 Manifest next update: Wed 09 Jul 2025 22:52:07 +0000 Files and hashes: 1: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl (hash: Xwkdw3zceq0AAyXVZkYwa5JWdS67Q+idV6lp7wx4GMM=) 2: D49D6040912311EB9DCD2A33C4F9AE02.roa (hash: aGdwS0nqIDPQmrDed9aL2d/6MVOmtEOC5VWnxIsYspE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1619 (0x653) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196C96, serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB Validity Not Before: Jul 2 22:52:07 2025 GMT Not After : Jul 9 22:52:07 2025 GMT Subject: CN=6865b817-97b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ea:4e:7e:ab:3b:70:b9:89:95:b3:bd:37:74: 2c:84:9d:3d:1a:c8:d5:5b:06:d1:a3:c1:69:78:63: a8:2a:44:c8:53:83:e1:6c:d9:b0:e7:e8:9e:15:02: 81:50:8b:20:69:be:bc:39:e2:41:31:eb:3b:ec:f2: e5:61:ae:83:e6:fc:f7:d3:40:17:d9:6b:d0:b7:89: 66:46:49:b2:ca:bc:98:01:7b:4d:a1:85:57:52:84: 02:00:35:8b:3d:a6:bf:1d:69:0f:84:e5:2f:85:1e: 96:33:97:e3:a8:ed:96:d0:30:b4:8f:a3:16:87:1c: 0e:f2:c3:50:1b:3d:80:66:15:6e:c3:0f:c5:4c:23: 8e:6f:e3:8a:ee:b2:25:a6:ad:a5:70:93:62:81:08: d1:2f:6e:0e:4a:25:5b:e4:c3:03:59:e3:f7:55:ca: 59:15:4e:f3:b8:58:fc:c8:b9:d4:11:37:eb:c1:37: f5:c6:31:9b:a0:ca:85:3b:17:a0:5f:52:1b:d8:27: c0:85:df:5d:bd:fc:98:3d:66:7b:66:7c:e2:87:07: c1:82:09:ba:7d:8f:d7:e5:ec:49:9c:1e:e7:46:a5: 01:db:99:a8:6a:c3:25:5a:88:c6:ab:52:52:ae:b8: 9f:d4:b0:a5:94:66:f8:5a:e0:87:7c:3a:58:3b:de: 62:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EA:97:6D:1E:BE:FA:1A:1A:17:D0:34:9D:DE:5B:8A:7A:C2:49:4A X509v3 Authority Key Identifier: keyid:04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:b6:dc:46:19:cf:da:02:b4:19:5f:f0:ca:88:b9:46:a7:01: c0:d5:b5:c2:fd:a2:d8:a1:e4:a9:40:97:12:08:07:6d:0b:69: a9:f2:5a:8a:6f:73:36:80:f4:61:62:4b:d7:a3:af:14:8e:7e: e5:11:19:f7:86:bc:e9:e4:26:cc:2e:86:d6:c8:50:4e:e5:1b: ed:0a:eb:f7:4e:f4:af:a4:87:03:c7:ee:45:a1:02:b7:88:3c: d4:29:92:30:d7:46:72:97:ea:59:6a:c2:c0:f6:de:07:13:a3: 0a:a2:f4:09:88:5e:51:3e:b5:fb:4e:3e:a6:2a:e8:67:72:19: 21:93:7d:fe:bd:8e:b0:4f:22:a9:73:f2:68:05:f7:c0:bf:01: f5:02:24:88:5f:f3:a3:b3:f0:99:e1:9c:a5:53:2f:87:b2:ae: bf:4f:1a:53:92:b3:94:30:94:cb:71:92:db:1f:9d:7f:71:ad: e1:c8:07:bc:64:22:3a:cf:55:8f:bf:ef:b6:d1:33:86:7c:25: cb:2c:13:77:5a:4e:4e:87:1c:d6:3b:4d:d7:47:8c:bf:15:cb: 79:65:4d:29:57:8b:72:8b:53:f8:13:ef:26:5e:6a:59:a6:fa: e7:b6:e4:c8:da:a6:d3:ea:3c:94:01:5e:48:bb:b9:05:8f:83: d9:cc:dc:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZDOTYxMTAvBgNVBAUTKDA0NjI3RENDOUI4MDg0MkQ0MzYzNzFDNENEQzczRDE5 QUI3RTVEQkIwHhcNMjUwNzAyMjI1MjA3WhcNMjUwNzA5MjI1MjA3WjAYMRYwFAYD VQQDEw02ODY1YjgxNy05N2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyepOfqs7cLmJlbO9N3QshJ09GsjVWwbRo8FpeGOoKkTIU4PhbNmw5+ieFQKB UIsgab68OeJBMes77PLlYa6D5vz300AX2WvQt4lmRkmyyryYAXtNoYVXUoQCADWL Paa/HWkPhOUvhR6WM5fjqO2W0DC0j6MWhxwO8sNQGz2AZhVuww/FTCOOb+OK7rIl pq2lcJNigQjRL24OSiVb5MMDWeP3VcpZFU7zuFj8yLnUETfrwTf1xjGboMqFOxeg X1Ib2CfAhd9dvfyYPWZ7ZnzihwfBggm6fY/X5exJnB7nRqUB25moasMlWojGq1JS rrif1LCllGb4WuCHfDpYO95iqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNfql20e vvoaGhfQNJ3eW4p6wklKMB8GA1UdIwQYMBaAFARifcybgIQtQ2NxxM3HPRmrfl27 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkM5Ni9BOEFFMEY5NDkw NDYxMUVCQkI4NEIyMjdDNEY5QUUwMi9CR0o5ekp1QWhDMURZM0hFemNjOUdhdC1Y YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JHSjl6SnVBaEMxRFkzSEV6Y2M5R2F0LVhicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkM5Ni9BOEFFMEY5NDkwNDYxMUVCQkI4NEIyMjdDNEY5QUUwMi9CR0o5ekp1QWhD MURZM0hFemNjOUdhdC1YYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3ttxGGc/aArQZX/DKiLlGpwHA1bXC/aLYoeSpQJcSCAdtC2mp8lqK b3M2gPRhYkvXo68Ujn7lERn3hrzp5CbMLobWyFBO5RvtCuv3TvSvpIcDx+5FoQK3 iDzUKZIw10Zyl+pZasLA9t4HE6MKovQJiF5RPrX7Tj6mKuhnchkhk33+vY6wTyKp c/JoBffAvwH1AiSIX/Ojs/CZ4ZylUy+Hsq6/TxpTkrOUMJTLcZLbH51/ca3hyAe8 ZCI6z1WPv++20TOGfCXLLBN3Wk5OhxzWO03XR4y/Fct5ZU0pV4tyi1P4E+8mXmpZ pvrntuTI2qbT6jyUAV5Iu7kFj4PZzNwV -----END CERTIFICATE-----Generated at Fri Jul 4 04:02:39 2025 by rpki-client