$ rpki-client -vvf rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft File: bAgKK6farJXU2TSIqQAVGuOlnfg.mft (raw, json) Hash identifier: 9xm9Tc7tzV6YjJP+qlVgpnzeCz2BH2Yqr/FVm6qUo6E= Subject key identifier: 06:01:37:CE:23:AB:E2:C1:44:8F:21:23:E0:83:E1:35:97:A9:2A:A3 Authority key identifier: 6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 Certificate issuer: /CN=A91B74E8/serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Certificate serial: 04BF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft Manifest number: 04A5 Signing time: Thu 03 Jul 2025 00:22:08 +0000 Manifest this update: Thu 03 Jul 2025 00:22:07 +0000 Manifest next update: Thu 10 Jul 2025 00:22:07 +0000 Files and hashes: 1: bAgKK6farJXU2TSIqQAVGuOlnfg.crl (hash: S4zGUHlIJu03N/HcTwDBaJL8/YeS9rOUp/qRLa1eQ8E=) 2: 51FD604CE08711EFA06D6434C4F9AE02.roa (hash: doR4Y7/9fJwk4I8rzXTdhySC0dSmOygHgP5L2cehpw4=) 3: CCF1692CC85111EFAEC7B83FC4F9AE02.roa (hash: YNmXXeohBLlW644lJk9sQ0wTlKH8+7poI39Ki1Khyx0=) 4: AD5EE696C0A711EE97A2E984C4F9AE02.roa (hash: 8jti7DRjplfPDOWY06XiRJGfKvNLpJCDztlNbOL025A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1215 (0x4bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B74E8, serialNumber=6C080A2BA7DAAC95D4D93488A900151AE3A59DF8 Validity Not Before: Jul 3 00:22:07 2025 GMT Not After : Jul 10 00:22:07 2025 GMT Subject: CN=6865cd30-f143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:43:bd:f7:9b:d6:e5:e0:13:14:c5:25:c3:dd: e9:39:54:35:05:82:0b:ff:b3:dc:6a:8b:a7:de:5c: 6d:be:bb:53:c3:c5:4e:24:83:ac:11:ff:54:37:51: fb:37:ec:de:83:c9:5e:f1:8e:fc:43:43:ae:4e:ac: 07:88:fc:05:e7:be:e9:52:0d:2b:1c:97:92:46:e7: c8:6f:7c:19:e1:8f:ad:2b:09:3a:5c:58:29:0d:90: 74:66:46:88:81:f2:f5:4c:ce:27:1d:e1:04:81:9c: 4a:f6:2a:e6:aa:28:c4:02:f6:5a:8f:e2:e4:11:cb: 58:1a:d9:27:b2:fd:3d:11:4d:30:a5:35:da:e6:dd: d3:8b:14:57:ac:1d:2d:07:2a:a5:ec:2a:e4:3c:b3: c6:32:56:11:c0:3e:68:52:8c:cd:6c:d7:1a:1a:87: f7:4b:cc:13:4f:e3:38:6c:58:50:1a:72:83:10:0b: 7c:8f:fd:ff:4f:54:4e:c1:0b:d9:21:91:f1:30:75: b6:96:01:cc:2d:9b:08:0a:78:4a:46:a8:ef:ec:6e: 9e:63:27:f6:0b:51:bf:4a:f0:8d:63:80:db:f8:f3: 7f:18:13:79:96:6a:1e:bc:ac:d9:9d:89:aa:ce:d0: 69:48:d1:7e:2f:63:bb:22:8c:0c:35:4c:a1:9e:70: 4b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:01:37:CE:23:AB:E2:C1:44:8F:21:23:E0:83:E1:35:97:A9:2A:A3 X509v3 Authority Key Identifier: keyid:6C:08:0A:2B:A7:DA:AC:95:D4:D9:34:88:A9:00:15:1A:E3:A5:9D:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAgKK6farJXU2TSIqQAVGuOlnfg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B74E8/47F6201243EA11EC84AB6347C4F9AE02/bAgKK6farJXU2TSIqQAVGuOlnfg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:2b:c3:c1:94:bf:c8:32:f4:ba:d8:b0:a6:c8:d2:ba:2c:99: fb:41:a4:4d:a3:1a:49:2f:43:28:63:e1:07:56:fe:04:23:ef: 61:c4:ae:01:bf:b4:da:c9:0d:a1:7c:97:3d:e8:c6:5d:99:c4: fd:de:df:4e:cd:b2:6b:95:a0:7b:ee:87:76:89:7f:5a:6c:b3: c8:22:72:83:a1:8a:65:8b:06:fa:4c:fa:80:df:30:a3:f3:dd: 24:56:9d:54:f0:15:3e:6a:0f:87:f7:80:95:0e:56:30:d0:86: 18:39:be:ee:a9:a4:9a:5f:a1:4b:c1:35:c2:89:a3:8f:be:a3: 5c:97:34:6c:6d:b6:bd:cb:2c:5d:c5:7e:dc:a0:33:8b:da:a2: a1:61:45:0a:62:78:77:ac:3c:62:23:bf:3c:6a:f4:b3:02:02: 7a:23:b4:06:31:4e:cd:bc:26:bd:25:53:0d:9a:70:34:e8:1d: 18:90:84:2d:cf:ed:35:65:66:a7:98:93:61:bf:f4:39:0d:e6: 96:be:20:04:cc:36:e9:58:98:d1:4d:3b:79:21:b1:c9:0f:29: 39:23:3a:64:09:32:b0:a3:00:9a:bb:9f:e1:4f:77:76:b9:03: 1f:93:7a:05:0b:ea:77:74:ea:49:3e:27:6d:9b:25:d8:80:65: a9:54:ea:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc0RTgxMTAvBgNVBAUTKDZDMDgwQTJCQTdEQUFDOTVENEQ5MzQ4OEE5MDAxNTFB RTNBNTlERjgwHhcNMjUwNzAzMDAyMjA3WhcNMjUwNzEwMDAyMjA3WjAYMRYwFAYD VQQDEw02ODY1Y2QzMC1mMTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyUO995vW5eATFMUlw93pOVQ1BYIL/7Pcaoun3lxtvrtTw8VOJIOsEf9UN1H7 N+zeg8le8Y78Q0OuTqwHiPwF577pUg0rHJeSRufIb3wZ4Y+tKwk6XFgpDZB0ZkaI gfL1TM4nHeEEgZxK9irmqijEAvZaj+LkEctYGtknsv09EU0wpTXa5t3TixRXrB0t Byql7CrkPLPGMlYRwD5oUozNbNcaGof3S8wTT+M4bFhQGnKDEAt8j/3/T1ROwQvZ IZHxMHW2lgHMLZsICnhKRqjv7G6eYyf2C1G/SvCNY4Db+PN/GBN5lmoevKzZnYmq ztBpSNF+L2O7IowMNUyhnnBLbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYBN84j q+LBRI8hI+CD4TWXqSqjMB8GA1UdIwQYMBaAFGwICiun2qyV1Nk0iKkAFRrjpZ34 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzRFOC80N0Y2MjAxMjQz RUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJKWFUyVFNJcVFBVkd1T2xu ZmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBZ0tLNmZhckpYVTJUU0lxUUFWR3VPbG5mZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzRFOC80N0Y2MjAxMjQzRUExMUVDODRBQjYzNDdDNEY5QUUwMi9iQWdLSzZmYXJK WFUyVFNJcVFBVkd1T2xuZmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqK8PBlL/IMvS62LCmyNK6LJn7QaRNoxpJL0MoY+EHVv4EI+9hxK4B v7TayQ2hfJc96MZdmcT93t9OzbJrlaB77od2iX9abLPIInKDoYpliwb6TPqA3zCj 890kVp1U8BU+ag+H94CVDlYw0IYYOb7uqaSaX6FLwTXCiaOPvqNclzRsbba9yyxd xX7coDOL2qKhYUUKYnh3rDxiI788avSzAgJ6I7QGMU7NvCa9JVMNmnA06B0YkIQt z+01ZWanmJNhv/Q5DeaWviAEzDbpWJjRTTt5IbHJDyk5IzpkCTKwowCau5/hT3d2 uQMfk3oFC+p3dOpJPidtmyXYgGWpVOo/ -----END CERTIFICATE-----Generated at Thu Jul 3 10:37:48 2025 by rpki-client