$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft File: bkWq8A0m8fB31nRzkUTUuMOU87g.mft (raw, json) Hash identifier: Bx6JStDJWuTSdefHgv1nn+k12XSBxDkCXZ/ziX5EFa0= Subject key identifier: F6:C4:AE:3C:84:17:A9:98:00:3D:F1:C6:79:F1:4B:E6:F2:6E:A7:33 Authority key identifier: 6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8 Certificate issuer: /CN=A919F0DA/serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8 Certificate serial: 23EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft Manifest number: 6063 Signing time: Wed 02 Jul 2025 14:15:26 +0000 Manifest this update: Wed 02 Jul 2025 14:15:26 +0000 Manifest next update: Wed 09 Jul 2025 14:15:26 +0000 Files and hashes: 1: bkWq8A0m8fB31nRzkUTUuMOU87g.crl (hash: ekNNHGDH6iW6O4tnLCKk7GVQ7mOEy9zjxzxbyIKISi0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9199 (0x23ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F0DA, serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8 Validity Not Before: Jul 2 14:15:26 2025 GMT Not After : Jul 9 14:15:26 2025 GMT Subject: CN=68653efe-9b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:21:58:4e:43:20:04:e6:e2:6a:72:4e:d9:90: 97:68:aa:f3:7a:63:53:b9:8a:a7:ce:42:9b:a2:77: d6:77:f0:fa:4b:e1:48:fc:13:46:f0:5b:96:c7:d6: 64:aa:81:9b:94:57:36:71:e6:03:ff:81:60:7c:4c: 5c:2e:27:59:ee:22:a8:7d:af:03:eb:89:d7:5f:ac: 1d:48:a6:01:cf:24:d7:df:c8:41:ae:ac:84:ae:0e: eb:9e:02:c6:60:3f:76:e5:8f:fd:7e:ac:7e:22:64: 2e:0c:be:0e:ea:b3:88:19:31:ea:8b:c3:65:2a:56: 77:45:6f:0a:7e:32:2b:bf:f7:91:a7:52:b7:5a:7c: c5:49:f4:a5:f8:26:89:78:1a:48:59:1f:71:81:d1: 55:b1:48:ff:37:d1:f4:c1:1f:a7:7f:e0:16:53:b7: 55:54:c4:5a:ba:e7:20:7b:ab:d2:cb:93:5a:65:5c: 29:c7:e5:6a:e9:66:17:f9:8b:5c:af:91:87:5b:d0: 77:ea:7e:6e:f9:10:da:1a:4f:61:8b:c9:4e:9c:0d: c1:a6:e0:a9:97:8f:ad:fa:1b:38:2f:5a:4b:84:f8: cc:a9:57:d8:03:60:fd:a0:88:d6:9e:59:5f:29:4f: cf:f9:5a:e7:5f:b8:52:67:49:e4:33:3c:1e:e1:22: 02:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:C4:AE:3C:84:17:A9:98:00:3D:F1:C6:79:F1:4B:E6:F2:6E:A7:33 X509v3 Authority Key Identifier: keyid:6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:7f:c2:82:a4:4c:33:90:7a:23:0e:7f:10:fd:40:74:7d:df: df:6d:27:57:a6:3b:48:6c:e8:7a:6a:05:80:ee:d2:49:b8:56: 85:fd:c3:50:ab:0b:5a:74:2d:6a:ce:d6:6c:65:90:9e:33:97: 7a:ce:72:27:fd:9c:97:57:1c:30:49:ae:f0:77:0b:5a:ff:fd: 64:00:79:a2:bb:da:d0:46:2a:b2:e8:27:de:1c:4b:4c:0b:a3: 22:58:d3:53:39:48:87:bd:7f:7d:0c:f8:66:9a:36:b0:59:a3: 48:c0:e7:55:d3:82:76:b6:0d:73:52:1d:e8:2f:e3:2a:21:8e: a4:b8:5c:00:d7:80:72:56:b3:f8:09:63:00:67:bb:60:d8:4e: 84:1b:cc:20:0f:f2:a6:20:fa:0a:82:4a:fc:e4:ee:ba:0f:de: b2:ed:41:70:b2:2b:07:a3:2b:df:59:8e:67:3e:18:d3:16:06: b0:fd:30:3d:73:7b:b0:fc:22:48:b3:1d:64:c2:6b:e4:fc:1c: d9:6c:e0:56:a2:25:ab:02:ec:d0:22:07:45:2a:c7:48:03:c1: 44:fc:e8:e8:03:64:d2:35:c8:52:4a:ec:70:e6:8f:c5:45:b6: 15:ce:83:a1:c7:b8:92:77:57:4e:05:d3:02:74:ed:17:76:9b: 14:97:82:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICI+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYwREExMTAvBgNVBAUTKDZFNDVBQUYwMEQyNkYxRjA3N0Q2NzQ3MzkxNDRENEI4 QzM5NEYzQjgwHhcNMjUwNzAyMTQxNTI2WhcNMjUwNzA5MTQxNTI2WjAYMRYwFAYD VQQDEw02ODY1M2VmZS05YjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yFYTkMgBObianJO2ZCXaKrzemNTuYqnzkKbonfWd/D6S+FI/BNG8FuWx9Zk qoGblFc2ceYD/4FgfExcLidZ7iKofa8D64nXX6wdSKYBzyTX38hBrqyErg7rngLG YD925Y/9fqx+ImQuDL4O6rOIGTHqi8NlKlZ3RW8KfjIrv/eRp1K3WnzFSfSl+CaJ eBpIWR9xgdFVsUj/N9H0wR+nf+AWU7dVVMRauucge6vSy5NaZVwpx+Vq6WYX+Ytc r5GHW9B36n5u+RDaGk9hi8lOnA3BpuCpl4+t+hs4L1pLhPjMqVfYA2D9oIjWnllf KU/P+VrnX7hSZ0nkMzwe4SICqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPbErjyE F6mYAD3xxnnxS+bybqczMB8GA1UdIwQYMBaAFG5FqvANJvHwd9Z0c5FE1LjDlPO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS8xNTBEM0VGNDFE NjgxMUUyOEMxODI4QTQwOEIwMkNEMi9ia1dxOEEwbThmQjMxblJ6a1VUVXVNT1U4 N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JrV3E4QTBtOGZCMzFuUnprVVRVdU1PVTg3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjBEQS8xNTBEM0VGNDFENjgxMUUyOEMxODI4QTQwOEIwMkNEMi9ia1dxOEEwbThm QjMxblJ6a1VUVXVNT1U4N2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjf8KCpEwzkHojDn8Q/UB0fd/fbSdXpjtIbOh6agWA7tJJuFaF/cNQ qwtadC1qztZsZZCeM5d6znIn/ZyXVxwwSa7wdwta//1kAHmiu9rQRiqy6CfeHEtM C6MiWNNTOUiHvX99DPhmmjawWaNIwOdV04J2tg1zUh3oL+MqIY6kuFwA14ByVrP4 CWMAZ7tg2E6EG8wgD/KmIPoKgkr85O66D96y7UFwsisHoyvfWY5nPhjTFgaw/TA9 c3uw/CJIsx1kwmvk/BzZbOBWoiWrAuzQIgdFKsdIA8FE/OjoA2TSNchSSuxw5o/F RbYVzoOhx7iSd1dOBdMCdO0XdpsUl4JQ -----END CERTIFICATE-----Generated at Thu Jul 3 23:15:18 2025 by rpki-client