$ rpki-client -vvf rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft File: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft (raw, json) Hash identifier: jBsJjxVnwmJ2DqTneXhl8Z459g2ARd25x5pA0g9EBxk= Subject key identifier: B8:F9:7B:A5:6B:65:9C:00:D8:AD:62:9F:B5:95:CB:19:BB:8A:4C:C8 Authority key identifier: 04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 Certificate issuer: /CN=A91D425A/serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Certificate serial: 0B23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft Manifest number: 0B1C Signing time: Mon 30 Jun 2025 19:23:43 +0000 Manifest this update: Mon 30 Jun 2025 19:23:42 +0000 Manifest next update: Mon 07 Jul 2025 19:23:42 +0000 Files and hashes: 1: BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl (hash: LX78vWBZw7UZU7kfcffiRRegkiLkykDaE8Gr4Spn818=) 2: 494B4070419C11EAAE836772C4F9AE02.roa (hash: Y3JTz6x7Gh76YU/+03lkuBO3MY94CeW1sP7iPG9gZfk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 19:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2851 (0xb23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D425A, serialNumber=048AA98F3EC54A9060E5BC30059D5C4220D7C2F7 Validity Not Before: Jun 30 19:23:42 2025 GMT Not After : Jul 7 19:23:42 2025 GMT Subject: CN=6862e43f-2053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7e:ee:b9:fd:00:68:72:09:ca:ff:ba:dc:4b: 5b:b8:25:40:ac:37:49:4b:f6:2d:2d:f2:4e:b2:bf: 6f:32:10:99:5b:e6:f6:c2:05:fa:aa:76:0d:c3:ac: 19:5e:6e:67:82:7f:a8:0d:57:20:07:4f:ac:0c:39: 7a:fe:5a:8b:4d:72:b2:1b:6c:1e:e9:f1:f2:f4:36: 84:0f:77:01:bd:3d:3f:a9:62:e4:94:ee:11:22:97: de:81:2b:c0:fb:b8:2f:e4:e6:95:80:f9:34:9c:05: fb:15:83:73:d6:c1:0b:8b:1e:20:3d:52:87:29:53: 0a:51:cd:96:c6:5b:4c:2d:1a:04:a7:1a:ee:37:a9: 87:c1:51:01:29:06:9f:aa:da:c3:b7:8d:88:07:49: 19:51:2b:50:75:ce:00:0b:bf:fc:54:73:89:ee:3b: b5:23:a3:01:33:63:f5:d4:63:fc:89:94:9d:d3:92: e7:38:2f:ec:8b:99:c1:79:e8:b0:e3:9b:8a:f4:00: e7:b0:9e:8f:76:65:4b:a3:53:6c:34:da:32:3c:f5: 11:a4:ba:57:60:e9:6f:3b:11:77:37:30:f0:6c:4e: a6:e5:b8:0e:a7:94:85:fb:a2:4e:a7:46:ea:e1:7b: 07:57:3c:43:ea:cf:2e:b4:b5:bf:5f:bd:92:85:aa: 4e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F9:7B:A5:6B:65:9C:00:D8:AD:62:9F:B5:95:CB:19:BB:8A:4C:C8 X509v3 Authority Key Identifier: keyid:04:8A:A9:8F:3E:C5:4A:90:60:E5:BC:30:05:9D:5C:42:20:D7:C2:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D425A/024C24F8416C11EA83C3EF5AC4F9AE02/BIqpjz7FSpBg5bwwBZ1cQiDXwvc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:09:dd:dc:fc:de:85:fd:10:10:47:c7:08:31:8d:f7:f2:f2: b7:0b:fe:9d:4a:5f:c1:45:1d:9f:15:ca:20:e5:b2:58:0b:00: ab:0c:08:e6:3d:4c:7a:09:d4:89:7d:ae:81:07:0e:46:6a:b4: b1:75:15:36:b3:17:e3:12:8a:71:3d:e1:8d:ad:b3:3b:a1:63: 00:1d:65:ec:26:e1:5b:62:de:fd:7e:47:db:95:74:6a:7f:da: df:dd:6c:93:91:06:a8:da:8c:6d:53:ad:7b:b5:13:31:83:6d: 5e:29:03:85:58:e4:4c:4f:55:47:0d:69:a7:e2:c6:23:9b:67: 17:7f:6b:b3:1c:27:67:06:26:b7:f0:44:a1:ef:04:6c:64:a7: fd:5d:16:45:b1:d7:79:9a:4e:5e:b7:c2:d0:73:eb:b6:5d:5e: de:ae:50:7a:f0:fc:52:17:71:fd:0d:0d:e2:3a:1e:8f:8c:36: 7f:35:0a:09:f8:0b:76:07:ce:d8:4f:b4:93:15:6d:d8:b6:52: 8f:1a:18:15:9e:9c:47:8d:45:ec:43:24:68:6c:29:3f:10:c7: 59:fa:d3:c7:80:f5:40:ef:90:0d:be:cf:6c:f2:cd:87:fc:27: 01:88:51:af:db:3e:40:27:9f:a5:eb:92:13:e5:b2:db:b9:64: 64:75:da:dd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQyNUExMTAvBgNVBAUTKDA0OEFBOThGM0VDNTRBOTA2MEU1QkMzMDA1OUQ1QzQy MjBEN0MyRjcwHhcNMjUwNjMwMTkyMzQyWhcNMjUwNzA3MTkyMzQyWjAYMRYwFAYD VQQDEw02ODYyZTQzZi0yMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApn7uuf0AaHIJyv+63EtbuCVArDdJS/YtLfJOsr9vMhCZW+b2wgX6qnYNw6wZ Xm5ngn+oDVcgB0+sDDl6/lqLTXKyG2we6fHy9DaED3cBvT0/qWLklO4RIpfegSvA +7gv5OaVgPk0nAX7FYNz1sELix4gPVKHKVMKUc2WxltMLRoEpxruN6mHwVEBKQaf qtrDt42IB0kZUStQdc4AC7/8VHOJ7ju1I6MBM2P11GP8iZSd05LnOC/si5nBeeiw 45uK9ADnsJ6PdmVLo1NsNNoyPPURpLpXYOlvOxF3NzDwbE6m5bgOp5SF+6JOp0bq 4XsHVzxD6s8utLW/X72ShapOxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLj5e6Vr ZZwA2K1in7WVyxm7ikzIMB8GA1UdIwQYMBaAFASKqY8+xUqQYOW8MAWdXEIg18L3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDI1QS8wMjRDMjRGODQx NkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNwQmc1Ynd3QloxY1FpRFh3 dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JJcXBqejdGU3BCZzVid3dCWjFjUWlEWHd2Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDI1QS8wMjRDMjRGODQxNkMxMUVBODNDM0VGNUFDNEY5QUUwMi9CSXFwano3RlNw Qmc1Ynd3QloxY1FpRFh3dmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsCd3c/N6F/RAQR8cIMY338vK3C/6dSl/BRR2fFcog5bJYCwCrDAjm PUx6CdSJfa6BBw5GarSxdRU2sxfjEopxPeGNrbM7oWMAHWXsJuFbYt79fkfblXRq f9rf3WyTkQao2oxtU617tRMxg21eKQOFWORMT1VHDWmn4sYjm2cXf2uzHCdnBia3 8ESh7wRsZKf9XRZFsdd5mk5et8LQc+u2XV7erlB68PxSF3H9DQ3iOh6PjDZ/NQoJ +At2B87YT7STFW3YtlKPGhgVnpxHjUXsQyRobCk/EMdZ+tPHgPVA75ANvs9s8s2H /CcBiFGv2z5AJ5+l65IT5bLbuWRkddrd -----END CERTIFICATE-----Generated at Wed Jul 2 05:12:34 2025 by rpki-client