$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft File: BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json) Hash identifier: AoJHTdttvR50VCeSdAJ4c1Ejpom47l0x1dQUIx7ifTM= Subject key identifier: 3E:82:BD:64:BD:8C:78:AE:69:54:BA:CE:D4:03:21:5B:F5:83:79:C4 Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12 Certificate issuer: /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712 Certificate serial: 063B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft Manifest number: 062F Signing time: Wed 02 Jul 2025 23:06:00 +0000 Manifest this update: Wed 02 Jul 2025 23:05:59 +0000 Manifest next update: Wed 09 Jul 2025 23:05:59 +0000 Files and hashes: 1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: qd7OziSnl3wDygG52kyGhgPwdRD6eLjJlxme+Lmo++c=) 2: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: NBdHfFLz3DL0xp9ly121d+fttg0f9aauvwFg8/4e9ds=) 3: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: LKITiJ4ISd4LnGgW0YqiQuvoGRC1GVrRJfh2GhffjxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 23:05:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1595 (0x63b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712 Validity Not Before: Jul 2 23:05:59 2025 GMT Not After : Jul 9 23:05:59 2025 GMT Subject: CN=6865bb57-3198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ef:a0:3d:f9:b4:0f:ad:c3:11:60:b0:ec:29: 30:09:da:c0:4b:d9:01:51:0d:f4:ed:c6:b9:04:f2: 17:66:7d:f8:0e:fd:04:6a:bb:b9:44:40:87:6a:69: 7d:2e:dd:3a:2f:d3:42:82:65:2f:af:0f:3b:57:9a: 12:c6:68:19:30:83:c0:a1:9e:09:00:dc:46:2e:20: ff:af:c9:a6:23:ad:05:97:f2:73:73:0c:0e:e0:9d: b5:2c:cb:5d:01:35:d5:7f:f9:29:7d:77:ec:7d:cc: 98:a7:dc:9a:48:ee:52:32:1e:08:b8:85:60:d2:57: 4a:f0:4c:57:77:87:bd:5b:23:79:6f:5c:bf:2d:8a: ee:af:3a:0f:d6:65:f1:83:6f:17:80:e5:55:82:17: 68:1f:04:1b:4e:f5:c2:83:d6:8a:73:4b:b5:87:8f: 81:46:2f:5f:26:51:72:95:b7:92:bd:72:cb:94:0a: 05:4e:54:b9:1b:10:0b:10:5e:8d:f9:f3:19:d8:83: fe:4b:c5:cb:4b:2a:7a:5e:ae:7b:2e:bf:58:f6:d8: 9d:a1:12:ac:77:b4:5b:f8:a6:d8:56:3b:c1:93:39: 0e:e3:18:f4:d6:af:74:84:ef:f4:45:ff:90:e5:01: 25:5d:df:8d:f6:ce:02:7f:69:d4:51:c6:7f:9e:f6: 5b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:82:BD:64:BD:8C:78:AE:69:54:BA:CE:D4:03:21:5B:F5:83:79:C4 X509v3 Authority Key Identifier: keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:29:aa:7e:a9:f7:5e:88:be:74:fd:cd:a4:01:e5:d5:8c:b6: 9a:90:f8:65:4a:41:7f:aa:30:42:82:80:e9:e8:5d:89:c8:9f: 1e:80:e8:e8:9e:12:e1:d7:e4:06:08:57:9a:f5:e5:df:2c:eb: 42:b1:9e:c7:75:6f:16:81:f7:de:e0:2b:50:5a:6c:1e:83:e5: 83:c5:10:ae:a4:ed:4d:de:37:16:b3:4e:a6:0e:8d:5a:5b:ff: 50:a5:3c:bd:07:3e:02:7f:32:3e:73:df:27:cd:9d:f6:4f:fb: 86:68:68:5b:bc:41:14:f8:74:55:04:ba:98:1d:43:8b:f4:5d: f6:64:4c:10:1d:cf:f4:6a:17:e9:26:3c:a1:f0:22:28:04:75: ee:69:a0:89:68:da:e5:c5:56:c5:a8:99:df:d8:7b:ef:e8:f5: be:3b:5a:27:1a:b1:7e:b3:2a:a3:e1:68:ac:d7:be:3d:74:78: 3e:1d:5d:eb:cc:42:48:36:8c:d9:0e:78:5d:c4:e0:8f:e4:57: 7a:8d:a4:e1:e1:ba:0d:d3:84:75:0d:48:07:01:ab:eb:b0:82: 7d:5a:3b:80:71:03:d9:aa:b2:fa:62:b5:a1:fc:69:6b:0e:38: a6:ba:81:47:42:27:44:76:4e:27:9e:09:e9:90:8e:25:75:02: 19:5f:a1:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RDMxMTAvBgNVBAUTKDA1QzMyRjVENkZEOTU2N0NCNzAwMDVCMUQ3NEE0MUE4 NUI1QkU3MTIwHhcNMjUwNzAyMjMwNTU5WhcNMjUwNzA5MjMwNTU5WjAYMRYwFAYD VQQDEw02ODY1YmI1Ny0zMTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0O+gPfm0D63DEWCw7CkwCdrAS9kBUQ307ca5BPIXZn34Dv0Earu5RECHaml9 Lt06L9NCgmUvrw87V5oSxmgZMIPAoZ4JANxGLiD/r8mmI60Fl/JzcwwO4J21LMtd ATXVf/kpfXfsfcyYp9yaSO5SMh4IuIVg0ldK8ExXd4e9WyN5b1y/LYrurzoP1mXx g28XgOVVghdoHwQbTvXCg9aKc0u1h4+BRi9fJlFylbeSvXLLlAoFTlS5GxALEF6N +fMZ2IP+S8XLSyp6Xq57Lr9Y9tidoRKsd7Rb+KbYVjvBkzkO4xj01q90hO/0Rf+Q 5QElXd+N9s4Cf2nUUcZ/nvZbPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD6CvWS9 jHiuaVS6ztQDIVv1g3nEMB8GA1UdIwQYMBaAFAXDL11v2VZ8twAFsddKQahbW+cS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVEMy82Q0E5RDY5MEEx QTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZueTNBQVd4MTBwQnFGdGI1 eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JjTXZYV19aVm55M0FBV3gxMHBCcUZ0YjV4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVEMy82Q0E5RDY5MEExQTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZu eTNBQVd4MTBwQnFGdGI1eEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPKap+qfdeiL50/c2kAeXVjLaakPhlSkF/qjBCgoDp6F2JyJ8egOjo nhLh1+QGCFea9eXfLOtCsZ7HdW8Wgffe4CtQWmweg+WDxRCupO1N3jcWs06mDo1a W/9QpTy9Bz4CfzI+c98nzZ32T/uGaGhbvEEU+HRVBLqYHUOL9F32ZEwQHc/0ahfp Jjyh8CIoBHXuaaCJaNrlxVbFqJnf2Hvv6PW+O1onGrF+syqj4Wis1749dHg+HV3r zEJINozZDnhdxOCP5Fd6jaTh4boN04R1DUgHAavrsIJ9WjuAcQPZqrL6YrWh/Glr DjimuoFHQidEdk4nngnpkI4ldQIZX6FR -----END CERTIFICATE-----Generated at Thu Jul 3 20:35:54 2025 by rpki-client