$ rpki-client -vvf rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft File: BXtTd0A4JnigePW_KExyZ5S50TQ.mft (raw, json) Hash identifier: 6K5maBU8rbCj2jPR84oyG80yZTdxuJOMfFyKqUQqnV4= Subject key identifier: 2F:AF:F8:E5:4C:38:9E:5D:B0:C7:20:72:C5:63:C4:7E:E8:0B:07:EF Authority key identifier: 05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34 Certificate issuer: /CN=A91992FA/serialNumber=057B537740382678A078F5BF284C726794B9D134 Certificate serial: 47 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft Manifest number: 46 Signing time: Thu 03 Jul 2025 07:38:32 +0000 Manifest this update: Thu 03 Jul 2025 07:38:32 +0000 Manifest next update: Thu 10 Jul 2025 07:38:32 +0000 Files and hashes: 1: BXtTd0A4JnigePW_KExyZ5S50TQ.crl (hash: MKzYp9KpOwFb0GsNsmn5yTBR/Q7PAvajtw+CtPt9IeU=) 2: 44A28FACEFEC11EF80EC123DC4F9AE02.roa (hash: kIHtM5yk/7E77z9qFDfBUJpQm2RMukSPxAc1zKCnuxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71 (0x47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91992FA, serialNumber=057B537740382678A078F5BF284C726794B9D134 Validity Not Before: Jul 3 07:38:32 2025 GMT Not After : Jul 10 07:38:32 2025 GMT Subject: CN=68663378-1c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:93:6a:21:dc:01:d5:92:30:d0:26:36:65:00: 37:a1:51:29:be:c5:84:2a:75:39:e6:c2:3f:ae:32: 7c:f6:94:fd:87:1d:56:1b:84:8e:5b:dc:3a:09:e7: bc:6b:c0:38:8a:0c:0d:73:9f:ea:b1:a7:6c:81:6e: ec:6b:f0:ee:5e:44:5d:f5:74:14:66:b4:ad:c7:22: 8f:0d:8d:66:4f:b9:9d:4b:c1:48:7c:18:c4:19:4f: 85:6f:8b:bd:6d:b9:0a:68:ef:65:11:63:93:30:62: ce:2e:9f:a5:51:03:1a:b7:2b:00:b7:e5:0b:62:18: f2:f6:41:53:37:41:a5:d6:1a:42:17:3a:72:43:35: 3f:da:f6:59:2b:08:df:e8:ed:d8:f3:2f:10:b3:26: bd:2e:db:f8:cc:1a:42:a8:ba:9e:eb:ff:c2:66:3a: c0:96:dc:35:2a:70:d1:47:32:ae:52:50:15:60:11: 3b:5d:ec:43:e1:d6:f7:cb:6a:02:ab:6a:40:08:c0: d3:45:c0:f1:31:48:e7:93:a7:ec:13:de:d2:62:62: f8:03:dc:9b:46:56:8b:29:b6:8a:0e:2b:9b:50:09: e9:63:80:b1:0f:cd:a3:4a:6f:e3:9b:bd:f7:2b:3c: 77:2a:18:2d:54:48:c8:69:93:b9:7f:d1:18:0d:97: bf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AF:F8:E5:4C:38:9E:5D:B0:C7:20:72:C5:63:C4:7E:E8:0B:07:EF X509v3 Authority Key Identifier: keyid:05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:f4:cb:88:23:f6:c5:2d:9e:0e:17:b2:d9:ed:66:6e:38:70: f1:0f:b2:f6:af:ee:40:49:42:d4:5f:49:e8:21:aa:26:3a:7a: f2:4b:4e:4b:01:c8:23:ea:02:1f:78:e1:c6:f1:70:07:49:51: dd:06:17:6f:ce:4a:be:32:57:27:f8:ec:ae:bc:a4:2c:05:19: cd:ca:3a:86:90:aa:ab:d4:8f:51:9a:14:55:fd:68:58:06:df: 95:2a:4a:89:8e:9b:78:5f:47:a4:f4:c0:ad:97:56:77:24:b4: c0:48:8a:1d:6a:44:0a:be:43:c5:2c:ea:82:ea:16:e3:73:5e: 02:6c:4b:71:16:e1:fd:b4:63:1e:f4:86:31:07:84:8f:21:99: 45:35:7e:2f:1f:3b:8c:b9:86:61:e3:dc:d9:60:1f:51:22:3e: 3a:25:f9:7b:7b:54:82:3a:cd:30:bd:f0:82:16:44:ee:aa:43: e6:ff:14:5f:a2:c5:0d:cb:2e:8a:18:2d:69:e0:e1:a8:08:69: 36:b5:bb:b7:26:d7:83:a1:bd:d6:bb:12:55:1f:50:42:a2:bf: d3:cd:b4:bf:bc:94:bd:eb:c8:5b:ad:44:c8:b5:dc:1e:7d:fc: 7c:1e:27:1b:ff:39:fb:5f:74:eb:3d:97:d4:47:bd:03:e5:b6: 99:84:2c:07 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTJGQTExMC8GA1UEBRMoMDU3QjUzNzc0MDM4MjY3OEEwNzhGNUJGMjg0QzcyNjc5 NEI5RDEzNDAeFw0yNTA3MDMwNzM4MzJaFw0yNTA3MTAwNzM4MzJaMBgxFjAUBgNV BAMTDTY4NjYzMzc4LTFjMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9k2oh3AHVkjDQJjZlADehUSm+xYQqdTnmwj+uMnz2lP2HHVYbhI5b3DoJ57xr wDiKDA1zn+qxp2yBbuxr8O5eRF31dBRmtK3HIo8NjWZPuZ1LwUh8GMQZT4Vvi71t uQpo72URY5MwYs4un6VRAxq3KwC35QtiGPL2QVM3QaXWGkIXOnJDNT/a9lkrCN/o 7djzLxCzJr0u2/jMGkKoup7r/8JmOsCW3DUqcNFHMq5SUBVgETtd7EPh1vfLagKr akAIwNNFwPExSOeTp+wT3tJiYvgD3JtGVosptooOK5tQCeljgLEPzaNKb+Obvfcr PHcqGC1USMhpk7l/0RgNl799AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUL6/45Uw4 nl2wxyByxWPEfugLB+8wHwYDVR0jBBgwFoAUBXtTd0A4JnigePW/KExyZ5S50TQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5MkZBL0ZBNDZFMEQyRUUw MzExRUY5QzJCOEE0OUM0RjlBRTAyL0JYdFRkMEE0Sm5pZ2VQV19LRXh5WjVTNTBU US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQlh0VGQwQTRKbmlnZVBXX0tFeHlaNVM1MFRRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 MkZBL0ZBNDZFMEQyRUUwMzExRUY5QzJCOEE0OUM0RjlBRTAyL0JYdFRkMEE0Sm5p Z2VQV19LRXh5WjVTNTBUUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGD0y4gj9sUtng4XstntZm44cPEPsvav7kBJQtRfSeghqiY6evJLTksB yCPqAh944cbxcAdJUd0GF2/OSr4yVyf47K68pCwFGc3KOoaQqqvUj1GaFFX9aFgG 35UqSomOm3hfR6T0wK2XVncktMBIih1qRAq+Q8Us6oLqFuNzXgJsS3EW4f20Yx70 hjEHhI8hmUU1fi8fO4y5hmHj3NlgH1EiPjol+Xt7VII6zTC98IIWRO6qQ+b/FF+i xQ3LLooYLWng4agIaTa1u7cm14Ohvda7ElUfUEKiv9PNtL+8lL3ryFutRMi13B59 /HweJxv/OftfdOs9l9RHvQPltpmELAc= -----END CERTIFICATE-----Generated at Sat Jul 5 03:58:06 2025 by rpki-client