$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft File: Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft (raw, json) Hash identifier: inAUmXQkRPWQujGqT6lMHWI2MKVz4EE4mN4mtOcWaeM= Subject key identifier: 30:74:0F:4F:DD:46:69:51:92:3D:B9:CA:A1:5B:76:3E:CB:65:D1:49 Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 Certificate issuer: /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336 Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft Manifest number: 0146 Signing time: Thu 03 Jul 2025 04:22:35 +0000 Manifest this update: Thu 03 Jul 2025 04:22:34 +0000 Manifest next update: Thu 10 Jul 2025 04:22:34 +0000 Files and hashes: 1: Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl (hash: emSJCJdJYj+KSBD0OK40nONO7O7+QyS0g2kW78PUvnI=) 2: 6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (hash: GWZ2MHtEWnxPiTCBVRb6cUY0T8WOEUXRXli5S8fNKVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37ED, serialNumber=071F8119171441802BE3261F15627DAF289DB336 Validity Not Before: Jul 3 04:22:34 2025 GMT Not After : Jul 10 04:22:34 2025 GMT Subject: CN=6866058b-4804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d1:98:b1:4c:ec:70:5f:b7:c3:6a:3e:5c:96: 7e:69:36:e1:ef:b1:95:88:84:44:cc:54:31:c1:30: 4e:c6:68:0f:d1:a5:e6:e8:38:f2:49:a1:d9:a5:2b: cd:d4:68:47:d2:23:92:53:71:f2:98:8b:7c:72:b1: 82:7b:1a:f4:48:91:99:3b:d6:84:f8:eb:1d:3b:d1: 93:53:7c:31:ba:f6:56:16:4d:ee:1d:f6:98:46:fa: 7b:48:ac:46:7e:79:e1:91:bd:b1:67:a0:15:6e:6b: 14:c5:b8:e1:ea:2f:85:71:9e:34:10:30:42:d4:2b: 97:9b:37:dc:be:53:4f:a4:78:b7:c1:47:93:e5:7e: c3:75:cc:e9:bc:94:e2:2f:e2:d2:7a:1a:cd:b3:12: 77:b8:db:da:b6:17:cc:a1:a1:a1:d3:71:ca:a9:23: 76:d0:b0:2c:1f:c5:aa:71:f3:47:16:ef:a0:64:f8: 2a:cc:57:c7:17:ac:d0:7e:50:51:01:c0:fb:45:8c: e2:48:1f:9a:2a:21:e0:95:c8:a0:cd:dd:79:f2:7a: 7f:16:ff:28:32:26:0a:06:c3:45:a6:e8:66:dc:93: db:98:46:a2:03:ca:86:c4:9c:ca:47:b5:6d:b3:81: 35:1c:91:93:aa:ae:82:26:56:e6:0d:36:76:01:df: 96:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:74:0F:4F:DD:46:69:51:92:3D:B9:CA:A1:5B:76:3E:CB:65:D1:49 X509v3 Authority Key Identifier: keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ef:5b:03:9c:69:07:91:f8:4b:4f:6e:18:2b:51:7e:69:0f: ac:d9:36:45:9f:68:df:77:3c:63:a5:c9:fb:87:f1:f1:06:16: 61:cc:78:e3:10:6e:88:85:1f:39:32:f7:a4:7a:e5:6c:28:f9: 6e:26:e8:70:b5:e9:7c:96:da:1d:6c:96:14:03:2c:46:6b:97: b6:ee:5e:ba:72:b1:82:f8:3a:e5:3a:b4:a9:dc:cc:22:04:e5: 65:4b:69:d6:b1:92:87:41:3c:fd:dd:d3:66:bb:73:85:83:cd: fb:88:7a:e0:63:51:29:49:a9:44:d8:50:3d:c6:97:42:5d:30: 5c:be:eb:f4:21:d0:e6:b4:cb:91:f2:b3:c7:0e:18:d0:b8:f2: 89:ff:05:0f:49:60:5f:90:a3:c4:57:67:7f:99:00:36:db:9c: 12:7a:23:56:83:b3:5a:78:e6:90:30:e1:dd:26:3e:c2:47:6a: fa:af:e7:0c:ed:9c:39:fa:42:aa:36:a5:fa:dd:be:06:91:eb: 91:d3:f9:d8:a0:50:85:f4:29:bf:13:58:f8:47:03:94:43:7a: 21:64:4d:2d:5b:07:14:61:7c:c9:4e:ba:58:c1:c5:dc:9a:88: 8e:c4:bd:9a:fc:02:9a:a7:42:d6:28:e8:60:12:58:83:64:07: 80:66:03:3f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3RUQxMTAvBgNVBAUTKDA3MUY4MTE5MTcxNDQxODAyQkUzMjYxRjE1NjI3REFG Mjg5REIzMzYwHhcNMjUwNzAzMDQyMjM0WhcNMjUwNzEwMDQyMjM0WjAYMRYwFAYD VQQDEw02ODY2MDU4Yi00ODA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9GYsUzscF+3w2o+XJZ+aTbh77GViIREzFQxwTBOxmgP0aXm6DjySaHZpSvN 1GhH0iOSU3HymIt8crGCexr0SJGZO9aE+OsdO9GTU3wxuvZWFk3uHfaYRvp7SKxG fnnhkb2xZ6AVbmsUxbjh6i+FcZ40EDBC1CuXmzfcvlNPpHi3wUeT5X7DdczpvJTi L+LSehrNsxJ3uNvathfMoaGh03HKqSN20LAsH8WqcfNHFu+gZPgqzFfHF6zQflBR AcD7RYziSB+aKiHglcigzd158np/Fv8oMiYKBsNFpuhm3JPbmEaiA8qGxJzKR7Vt s4E1HJGTqq6CJlbmDTZ2Ad+WxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDB0D0/d RmlRkj25yqFbdj7LZdFJMB8GA1UdIwQYMBaAFAcfgRkXFEGAK+MmHxVifa8onbM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdFRC82REI5NTRBMjYy QTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZQXI0eVlmRldKOXJ5aWRz elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J4LUJHUmNVUVlBcjR5WWZGV0o5cnlpZHN6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdFRC82REI5NTRBMjYyQTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZ QXI0eVlmRldKOXJ5aWRzelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAG71sDnGkHkfhLT24YK1F+aQ+s2TZFn2jfdzxjpcn7h/HxBhZhzHjj EG6IhR85MvekeuVsKPluJuhwtel8ltodbJYUAyxGa5e27l66crGC+DrlOrSp3Mwi BOVlS2nWsZKHQTz93dNmu3OFg837iHrgY1EpSalE2FA9xpdCXTBcvuv0IdDmtMuR 8rPHDhjQuPKJ/wUPSWBfkKPEV2d/mQA225wSeiNWg7NaeOaQMOHdJj7CR2r6r+cM 7Zw5+kKqNqX63b4GkeuR0/nYoFCF9Cm/E1j4RwOUQ3ohZE0tWwcUYXzJTrpYwcXc moiOxL2a/AKap0LWKOhgEliDZAeAZgM/ -----END CERTIFICATE-----Generated at Thu Jul 3 10:18:09 2025 by rpki-client