$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json) Hash identifier: c+oOITVPF16gWhmHSm7+rmr82nyuE1WkYJmgmzLM+5k= Subject key identifier: B5:73:BA:7B:56:CB:64:F1:E2:58:19:29:4B:70:8B:09:B6:85:7F:F8 Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft Manifest number: CE Signing time: Tue 15 Jul 2025 05:55:35 +0000 Manifest this update: Tue 15 Jul 2025 05:55:35 +0000 Manifest next update: Tue 22 Jul 2025 05:55:35 +0000 Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: 541iaMite00gxzV8oCeB4oPzHkCWJ8l5/X3GLjFwmKI=) 2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: dk/mJ6WLbx1un0lM/kEaDG7s+C714fNxg9o9daVbyM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 05:55:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Validity Not Before: Jul 15 05:55:35 2025 GMT Not After : Jul 22 05:55:35 2025 GMT Subject: CN=6875ed57-be89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5d:5e:fb:c5:ae:41:ad:a1:5e:55:ee:61:5e: 55:a6:e4:32:bf:dc:0b:3b:0f:98:94:1c:3a:fd:5e: 13:5d:29:df:c1:4e:64:24:55:a0:17:51:0e:84:8d: 2c:5e:97:36:99:7c:1d:81:ea:91:18:03:84:25:3e: 0b:c9:79:b6:78:c7:9a:7f:45:92:1e:e3:8f:a1:2b: 3e:59:67:31:6c:60:b4:e5:8b:f8:c4:72:80:ee:22: 0e:86:cb:25:21:6b:e2:05:49:e6:b6:0b:ec:12:25: 00:49:49:8a:bd:15:f4:db:20:7a:11:f1:e3:56:fb: 68:52:20:50:3f:ea:39:c4:71:e3:5f:36:a3:8b:9a: 87:35:54:ba:c5:e7:9c:19:02:c2:fb:03:80:24:69: fe:2e:df:66:11:61:ff:79:84:fa:9f:3d:db:ab:19: d3:27:c9:f0:db:58:c3:ac:cd:15:52:cb:52:72:98: cf:25:4b:e7:46:3b:98:66:e8:d3:97:c0:33:52:7e: 37:99:4b:96:f4:8b:22:22:b9:5a:f2:68:cc:ae:10: f3:ea:8a:27:60:43:3c:85:ac:7c:7a:4a:99:fa:9c: 17:3b:f2:7e:7e:73:fe:92:17:1d:e5:82:ed:47:86: c4:3a:02:a3:93:60:63:bb:85:fe:fb:dc:d9:9d:45: f2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:73:BA:7B:56:CB:64:F1:E2:58:19:29:4B:70:8B:09:B6:85:7F:F8 X509v3 Authority Key Identifier: keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:3b:d5:4d:c4:f8:43:c4:c2:e4:1e:e8:10:df:39:4b:e8:2e: df:30:7d:b1:db:07:6e:7c:55:a8:8e:3a:a9:8f:c5:a5:bb:3f: 86:94:24:a1:50:a2:f4:bd:56:61:56:3d:32:95:93:7e:b3:7a: 94:0c:66:79:44:f1:fb:8f:8d:e3:90:a4:61:1a:84:d0:db:d2: ba:6d:2b:f5:d7:5b:5a:46:d1:f9:ab:71:83:9b:0b:5a:bc:15: de:66:69:e1:86:5b:7f:d5:3f:03:41:00:85:54:ee:09:57:e7: 9c:c9:72:2c:f1:ad:4d:99:79:09:6b:6e:c1:cc:2b:1b:64:0a: e2:4b:2b:07:3f:9c:24:f0:06:31:33:3c:f3:c1:2e:9a:11:93: e1:66:2f:2d:ee:19:54:e5:97:7d:70:61:9a:c0:ce:59:39:5e: 12:9e:be:d2:14:d5:4c:77:70:a2:83:b5:c6:27:07:ea:61:ea: 62:2b:38:95:3b:f9:1f:69:c5:2d:1d:8d:54:2b:1c:4d:78:d5: 7b:e5:92:4e:3d:92:7b:91:89:f9:3f:f4:01:4c:16:47:43:fa: e6:13:64:16:2b:d8:9a:eb:66:8b:ba:07:9a:ff:e9:23:cc:05: 24:2c:55:d6:04:a6:c7:3e:18:01:1d:b5:5a:ca:65:bf:e4:d1: 1a:ab:c5:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKDA0NzRGNDA2QTE3OEQyMkM1NEQ1RUY3MjRDNkIyQzJD OUEzQjZCOTgwHhcNMjUwNzE1MDU1NTM1WhcNMjUwNzIyMDU1NTM1WjAYMRYwFAYD VQQDEw02ODc1ZWQ1Ny1iZTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2F1e+8WuQa2hXlXuYV5VpuQyv9wLOw+YlBw6/V4TXSnfwU5kJFWgF1EOhI0s Xpc2mXwdgeqRGAOEJT4LyXm2eMeaf0WSHuOPoSs+WWcxbGC05Yv4xHKA7iIOhssl IWviBUnmtgvsEiUASUmKvRX02yB6EfHjVvtoUiBQP+o5xHHjXzaji5qHNVS6xeec GQLC+wOAJGn+Lt9mEWH/eYT6nz3bqxnTJ8nw21jDrM0VUstScpjPJUvnRjuYZujT l8AzUn43mUuW9IsiIrla8mjMrhDz6oonYEM8hax8ekqZ+pwXO/J+fnP+khcd5YLt R4bEOgKjk2Bju4X++9zZnUXySQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLVzuntW y2Tx4lgZKUtwiwm2hX/4MB8GA1UdIwQYMBaAFAR09AaheNIsVNXvckxrLCyaO2uY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FNTM2MDhGMDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBpeFUxZTl5VEdzc0xKbzdh NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FNTM2MDhGMDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBp eFUxZTl5VEdzc0xKbzdhNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5O9VNxPhDxMLkHugQ3zlL6C7fMH2x2wdufFWojjqpj8Wluz+GlCSh UKL0vVZhVj0ylZN+s3qUDGZ5RPH7j43jkKRhGoTQ29K6bSv111taRtH5q3GDmwta vBXeZmnhhlt/1T8DQQCFVO4JV+ecyXIs8a1NmXkJa27BzCsbZAriSysHP5wk8AYx MzzzwS6aEZPhZi8t7hlU5Zd9cGGawM5ZOV4Snr7SFNVMd3Cig7XGJwfqYepiKziV O/kfacUtHY1UKxxNeNV75ZJOPZJ7kYn5P/QBTBZHQ/rmE2QWK9ia62aLugea/+kj zAUkLFXWBKbHPhgBHbVaymW/5NEaq8XR -----END CERTIFICATE-----Generated at Wed Jul 16 23:09:45 2025 by rpki-client