$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft File: bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft (raw, json) Hash identifier: nmhhpfEEz/K3CeW0FPWCa6vZ1nrGT0xyYZywEJkEvhM= Subject key identifier: 38:FF:3C:54:1F:99:58:15:96:AA:90:AA:34:F0:07:D3:8D:E3:08:98 Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91 Certificate issuer: /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91 Certificate serial: 0189 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft Manifest number: 017F Signing time: Thu 03 Jul 2025 03:49:37 +0000 Manifest this update: Thu 03 Jul 2025 03:49:37 +0000 Manifest next update: Thu 10 Jul 2025 03:49:37 +0000 Files and hashes: 1: bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl (hash: IIFeQyXKXQJQO8kQBYho08S+sk7vkLJzpIKSyvUgSjw=) 2: 62A9A9AC240A11F0A6893962C4F9AE02.roa (hash: LvnWXi9L3u+fKG77QzH6WnEL9Cc/sS3Yn7M7dhZqrvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 393 (0x189) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F69, serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91 Validity Not Before: Jul 3 03:49:37 2025 GMT Not After : Jul 10 03:49:37 2025 GMT Subject: CN=6865fdd1-dcee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:79:a4:f0:f3:62:33:36:ab:8f:33:6e:f3: f2:b0:3b:83:e6:c3:f9:52:99:01:4d:2e:62:96:3d: 2d:e6:76:ec:05:c2:5d:a7:cf:ff:2b:1b:17:06:7a: eb:56:db:14:07:8e:c1:3d:d8:83:2d:f6:42:68:05: dd:82:e1:12:ef:00:f3:df:ec:78:92:3a:ab:aa:54: 2d:ad:51:c8:1a:cb:7b:75:f4:98:f5:3b:c4:ab:a2: d7:de:8c:e4:1b:83:6a:18:97:56:95:c5:fd:14:74: 83:a5:45:7a:60:27:0f:19:56:5d:c2:d2:bc:c3:69: 1e:09:09:97:f4:14:85:3d:26:24:ca:28:59:2f:6e: 1e:93:c8:27:06:06:6c:98:ae:6c:7e:39:1b:b7:fa: e7:60:be:e0:f6:ae:94:92:ce:3d:23:26:56:7e:2c: 4c:a5:cf:a2:7a:83:2f:1c:2f:21:07:96:fe:3f:12: ec:b2:17:08:68:f8:1d:19:76:bf:68:f7:76:b5:8f: 40:86:93:a2:96:a3:46:94:3c:3b:68:18:64:30:d6: 0e:31:48:4f:27:3c:ec:ac:7e:f2:e3:d1:9a:80:32: 38:bf:ff:1c:88:00:47:65:b4:99:66:47:16:04:44: 7b:ed:ce:48:83:51:47:e9:25:51:fc:af:ca:5e:34: d1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FF:3C:54:1F:99:58:15:96:AA:90:AA:34:F0:07:D3:8D:E3:08:98 X509v3 Authority Key Identifier: keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c0:56:f6:0a:5c:ba:c5:f3:f4:ac:8e:a8:56:1d:5a:c6:38:d2: 65:f5:db:2f:62:8b:45:93:8b:6c:e8:f0:9b:f4:ec:17:f2:be: f0:d0:30:e5:b3:ef:4e:d5:63:f6:8b:9a:2c:02:a0:8f:b9:9f: 06:a2:03:43:1c:12:cd:d4:04:7b:6c:c7:d2:5d:77:63:bf:eb: 0f:22:f9:c2:5a:25:65:e1:a0:9a:82:77:c8:d6:41:22:3a:ed: c1:6a:f5:a3:07:d6:3a:b7:56:27:12:90:68:f2:f9:df:de:8a: 6c:d3:c9:2d:3d:e1:ea:58:e8:6b:f0:5f:55:73:47:9f:a2:fd: fd:a3:d8:de:7f:e8:68:6a:43:2f:99:33:10:20:65:aa:50:56: 49:0b:97:5b:98:aa:d5:96:96:3c:16:5f:7d:35:43:d9:dd:15: 94:6c:e9:77:9c:8f:0e:cf:db:0b:c4:6a:e2:1a:00:4d:c4:57: e8:23:ab:de:f7:f2:74:24:23:ab:5c:51:b0:3d:f4:f2:9f:d7: 81:1b:38:69:c4:d0:6b:b9:73:08:57:08:bc:aa:5c:58:19:f4: ff:f7:26:ed:8a:02:48:ec:d2:72:99:21:87:cc:9e:59:4b:83: 14:fb:37:4a:8c:00:e6:82:55:ac:e2:5c:9b:fa:47:6c:ad:a6: 22:16:cc:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGNjkxMTAvBgNVBAUTKDZFOTVBNjg5MjIwOTdFNzZDNERCMTI0N0VFQ0VFMUEz QjExRjhFOTEwHhcNMjUwNzAzMDM0OTM3WhcNMjUwNzEwMDM0OTM3WjAYMRYwFAYD VQQDEw02ODY1ZmRkMS1kY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvON5pPDzYjM2q48zbvPysDuD5sP5UpkBTS5ilj0t5nbsBcJdp8//KxsXBnrr VtsUB47BPdiDLfZCaAXdguES7wDz3+x4kjqrqlQtrVHIGst7dfSY9TvEq6LX3ozk G4NqGJdWlcX9FHSDpUV6YCcPGVZdwtK8w2keCQmX9BSFPSYkyihZL24ek8gnBgZs mK5sfjkbt/rnYL7g9q6Uks49IyZWfixMpc+ieoMvHC8hB5b+PxLsshcIaPgdGXa/ aPd2tY9AhpOilqNGlDw7aBhkMNYOMUhPJzzsrH7y49GagDI4v/8ciABHZbSZZkcW BER77c5Ig1FH6SVR/K/KXjTRawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDj/PFQf mVgVlqqQqjTwB9ON4wiYMB8GA1UdIwQYMBaAFG6VpokiCX52xNsSR+7O4aOxH46R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEY2OS9EQ0Y1QzNEMjFB NUYxMUVFOUFBQUIzODZDNEY5QUUwMi9icFdtaVNJSmZuYkUyeEpIN3M3aG83RWZq cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwV21pU0lKZm5iRTJ4Skg3czdobzdFZmpwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEY2OS9EQ0Y1QzNEMjFBNUYxMUVFOUFBQUIzODZDNEY5QUUwMi9icFdtaVNJSmZu YkUyeEpIN3M3aG83RWZqcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDAVvYKXLrF8/SsjqhWHVrGONJl9dsvYotFk4ts6PCb9OwX8r7w0DDl s+9O1WP2i5osAqCPuZ8GogNDHBLN1AR7bMfSXXdjv+sPIvnCWiVl4aCagnfI1kEi Ou3BavWjB9Y6t1YnEpBo8vnf3ops08ktPeHqWOhr8F9Vc0efov39o9jef+hoakMv mTMQIGWqUFZJC5dbmKrVlpY8Fl99NUPZ3RWUbOl3nI8Oz9sLxGriGgBNxFfoI6ve 9/J0JCOrXFGwPfTyn9eBGzhpxNBruXMIVwi8qlxYGfT/9ybtigJI7NJymSGHzJ5Z S4MU+zdKjADmglWs4lyb+kdsraYiFsxW -----END CERTIFICATE-----Generated at Thu Jul 3 18:07:21 2025 by rpki-client