$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft File: BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft (raw, json) Hash identifier: X47bAdYPKRQMy7+QalTtuo+GhPJwbOZoYNtFekvjQ/E= Subject key identifier: 3D:9C:09:3C:F0:A3:AD:B5:E5:0F:F9:53:A7:52:15:CE:17:0D:E4:CC Authority key identifier: 04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 Certificate issuer: /CN=A91B4AA0/serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Certificate serial: 081D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft Manifest number: 0812 Signing time: Mon 30 Jun 2025 21:05:55 +0000 Manifest this update: Mon 30 Jun 2025 21:05:54 +0000 Manifest next update: Mon 07 Jul 2025 21:05:54 +0000 Files and hashes: 1: BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl (hash: aEDg7Izzo/L1wY69QqdEhluWtJKvZnMUjQsmZcLVbPk=) 2: 02F863F6C09211EC8950E57AC4F9AE02.roa (hash: YNUo90dPfw7aNa6aT24Mb69b4ZpufKscErkIIX/bwoA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 21:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4AA0, serialNumber=04CF57F2A7FFCA72C07468A8C6D5F24517FF46B9 Validity Not Before: Jun 30 21:05:54 2025 GMT Not After : Jul 7 21:05:54 2025 GMT Subject: CN=6862fc32-fb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:08:f8:af:b6:78:b2:bd:f5:af:96:2d:73:d2: b4:f4:d5:6d:86:a9:b5:36:65:74:fb:48:19:ed:b7: 59:f9:08:81:c5:05:7f:36:59:5c:e1:89:4c:86:bf: f6:5a:3c:dc:8c:95:30:01:fa:d4:c7:f8:37:20:55: 86:8e:b1:62:4f:63:c9:d8:90:26:31:eb:50:c4:22: e5:d5:8f:3b:77:11:a9:81:13:99:95:db:b7:96:ef: 24:ae:01:76:f4:24:71:cd:1b:78:cf:47:66:53:58: 00:e7:16:2d:1a:57:e2:60:00:bb:d1:63:74:9b:af: d7:bc:cb:be:b2:a2:01:30:78:7e:11:b7:84:7e:b4: c7:fa:cc:3b:d3:cd:d4:32:14:51:d7:d2:58:f8:a3: fc:9d:16:59:8b:90:07:0c:84:bc:25:11:76:04:dd: ba:39:f9:dc:9f:7f:08:41:13:6f:a3:ba:79:7f:88: 09:ae:5d:82:19:f2:a7:d0:03:ea:77:de:7d:a4:45: d2:4d:7f:34:ff:e3:f5:ec:29:b0:3b:1f:89:8b:ff: a8:38:28:22:e9:1f:c4:18:3d:f2:35:12:09:20:25: b7:33:93:9f:41:b0:86:18:68:21:fa:eb:0b:f9:5b: 9a:54:7d:af:e8:77:75:43:3e:01:e0:ee:d8:29:d2: 2f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9C:09:3C:F0:A3:AD:B5:E5:0F:F9:53:A7:52:15:CE:17:0D:E4:CC X509v3 Authority Key Identifier: keyid:04:CF:57:F2:A7:FF:CA:72:C0:74:68:A8:C6:D5:F2:45:17:FF:46:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BM9X8qf_ynLAdGioxtXyRRf_Rrk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4AA0/1041E5EAE2C311EAB818D17FC4F9AE02/BM9X8qf_ynLAdGioxtXyRRf_Rrk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:73:51:b8:70:82:73:da:cc:86:2c:4a:63:63:da:eb:75:f2: 4a:07:38:15:31:5d:46:2e:35:f2:29:11:9c:c1:3c:a8:4b:f2: 1c:ae:70:21:ba:52:fe:65:8f:51:5f:4d:35:12:7f:43:d2:8f: 6b:54:d6:be:d6:93:3d:3d:bc:66:8d:34:4f:b0:31:34:78:af: 05:6c:1d:3d:39:90:c3:a1:c3:69:ce:c4:f2:89:53:aa:53:02: d2:a6:9f:fd:a2:7e:32:35:0e:90:bc:ac:5c:8e:e3:b6:50:8b: d2:a3:c6:7e:f7:32:61:7c:e1:fc:70:ce:d4:4f:bd:8d:e3:b0: f8:8a:7e:59:8f:53:b5:ef:ff:bc:6d:b7:86:01:7a:c4:33:38: a2:bc:73:c1:85:14:f5:9b:ff:7e:42:dc:ed:73:a0:44:ba:6b: 52:53:31:47:cb:88:41:a2:d3:58:e2:00:fe:09:84:8e:7a:26: e1:f2:a0:36:a6:65:e9:f5:c0:f7:e7:db:b5:81:59:7a:90:57: be:32:f2:dd:4f:f5:5c:bf:df:96:20:96:61:35:a3:ee:8b:f2: cb:05:9b:66:79:7a:e4:1b:b8:54:c4:9f:88:21:55:cd:d8:f7: 63:81:9a:37:c0:74:a8:42:53:8f:04:15:67:62:da:63:2c:0a: 91:e3:f1:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRBQTAxMTAvBgNVBAUTKDA0Q0Y1N0YyQTdGRkNBNzJDMDc0NjhBOEM2RDVGMjQ1 MTdGRjQ2QjkwHhcNMjUwNjMwMjEwNTU0WhcNMjUwNzA3MjEwNTU0WjAYMRYwFAYD VQQDEw02ODYyZmMzMi1mYjNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQj4r7Z4sr31r5Ytc9K09NVthqm1NmV0+0gZ7bdZ+QiBxQV/Nllc4YlMhr/2 WjzcjJUwAfrUx/g3IFWGjrFiT2PJ2JAmMetQxCLl1Y87dxGpgROZldu3lu8krgF2 9CRxzRt4z0dmU1gA5xYtGlfiYAC70WN0m6/XvMu+sqIBMHh+EbeEfrTH+sw7083U MhRR19JY+KP8nRZZi5AHDIS8JRF2BN26Ofncn38IQRNvo7p5f4gJrl2CGfKn0APq d959pEXSTX80/+P17CmwOx+Ji/+oOCgi6R/EGD3yNRIJICW3M5OfQbCGGGgh+usL +VuaVH2v6Hd1Qz4B4O7YKdIvOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD2cCTzw o6215Q/5U6dSFc4XDeTMMB8GA1UdIwQYMBaAFATPV/Kn/8pywHRoqMbV8kUX/0a5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEFBMC8xMDQxRTVFQUUy QzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3luTEFkR2lveHRYeVJSZl9S cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JNOVg4cWZfeW5MQWRHaW94dFh5UlJmX1Jyay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEFBMC8xMDQxRTVFQUUyQzMxMUVBQjgxOEQxN0ZDNEY5QUUwMi9CTTlYOHFmX3lu TEFkR2lveHRYeVJSZl9ScmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCjc1G4cIJz2syGLEpjY9rrdfJKBzgVMV1GLjXyKRGcwTyoS/IcrnAh ulL+ZY9RX001En9D0o9rVNa+1pM9PbxmjTRPsDE0eK8FbB09OZDDocNpzsTyiVOq UwLSpp/9on4yNQ6QvKxcjuO2UIvSo8Z+9zJhfOH8cM7UT72N47D4in5Zj1O17/+8 bbeGAXrEMziivHPBhRT1m/9+Qtztc6BEumtSUzFHy4hBotNY4gD+CYSOeibh8qA2 pmXp9cD359u1gVl6kFe+MvLdT/Vcv9+WIJZhNaPui/LLBZtmeXrkG7hUxJ+IIVXN 2PdjgZo3wHSoQlOPBBVnYtpjLAqR4/F4 -----END CERTIFICATE-----Generated at Tue Jul 1 09:02:21 2025 by rpki-client