$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json) Hash identifier: pARgsPI0eYlHjw4E6BmnQj3bgvk810olGOyUmjH0dxw= Subject key identifier: 19:60:79:A6:36:24:DB:0D:24:AF:B1:5D:A3:8F:E4:C0:B5:AA:EC:9A Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0C49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft Manifest number: 0C2C Signing time: Mon 30 Jun 2025 18:50:00 +0000 Manifest this update: Mon 30 Jun 2025 18:50:00 +0000 Manifest next update: Mon 07 Jul 2025 18:50:00 +0000 Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: MSUv8hgCkAEI3EJ0FbwU/tRkInEdmvHmEt6jJmnquHg=) 2: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: 6O0VKauTuWTfzmPjcovFKdSm/+YMqCBqWG3p+BX8OSE=) 3: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: YvJPp5TLJmmNMFrXdStXJanbJJfuz5ICtmKerDM4nQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 18:49:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3145 (0xc49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Validity Not Before: Jun 30 18:50:00 2025 GMT Not After : Jul 7 18:50:00 2025 GMT Subject: CN=6862dc58-00aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:23:92:1f:a4:34:da:28:80:30:d6:5b:43:d3: 36:22:6f:20:1f:6c:32:7f:bf:ff:d1:9d:f9:d2:69: 07:59:d1:0c:4e:b4:42:2c:58:1a:cb:78:20:89:f1: 12:64:2d:00:e1:ad:ba:49:51:76:2f:25:69:0c:b2: b3:24:a9:b6:84:77:ba:a8:bd:3e:b8:f7:ee:1b:1e: 2e:b8:74:32:24:11:a9:38:e9:88:9f:42:c8:da:e8: 8c:44:aa:5c:06:38:d5:0e:d7:ea:e5:2a:4e:f6:73: 99:6f:7a:77:f6:76:46:09:a4:06:bd:f3:91:d3:73: 93:ad:02:9d:53:49:22:b9:1d:5f:b0:ba:aa:ec:41: 18:a8:96:17:a8:0b:6b:09:1b:6e:80:5c:d5:b4:07: a6:cb:de:ec:01:78:8e:02:32:14:ca:bb:82:85:4c: ed:e5:8c:bd:2f:7d:98:e8:0f:c6:91:5e:ee:9d:91: bf:d9:4f:7d:13:83:b6:6c:30:bc:90:83:4d:aa:cc: d7:49:4c:28:ff:f3:33:76:97:d9:73:a7:4c:dd:e9: 29:4c:c6:92:0d:24:01:84:d9:b1:cf:fd:1a:d8:d8: ab:93:3f:d4:af:ac:49:8a:8c:1e:36:8e:50:a8:26: bc:33:1c:94:e3:5f:12:f2:fb:b7:44:c6:0b:06:9d: 69:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:60:79:A6:36:24:DB:0D:24:AF:B1:5D:A3:8F:E4:C0:B5:AA:EC:9A X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:3d:ed:02:4b:eb:7e:38:1c:ec:81:8d:4f:7b:1f:77:bf:3e: bb:21:f5:70:5a:00:9f:a2:10:94:8c:50:1a:0e:99:a7:df:ff: 3f:14:ab:35:50:bd:7a:a5:6f:5b:f6:28:c3:f2:2f:16:ce:38: 82:f1:7a:9d:0e:92:78:e3:fc:22:ee:14:19:2a:95:08:63:2f: b1:b2:f2:07:8b:67:8d:b5:75:53:6f:75:ca:f4:77:9e:34:ea: 89:17:bd:0f:64:f4:c7:f7:b6:cc:49:58:32:96:94:02:d2:5c: f5:dd:71:ce:e4:00:fa:2c:85:00:0a:13:14:9e:3b:b8:d1:48: d6:b6:16:3f:50:16:0a:e2:7f:85:0b:fb:f4:45:50:a6:98:35: cd:98:fb:f9:73:f3:fd:cd:82:bc:60:3f:f1:24:20:fb:10:03: 58:de:5e:48:e7:98:fe:4f:25:ef:67:f5:fc:a3:4c:86:fa:c9: cb:fe:df:a7:a8:09:82:22:2b:b2:f7:f6:7b:08:aa:81:f8:ab: 02:fd:49:dc:fb:9f:b6:63:d4:04:2d:fd:93:73:c6:66:34:f1: 52:b6:e6:9c:7b:c2:8e:84:4c:b3:ce:59:3c:82:91:98:aa:8b: c5:0b:29:73:fb:ed:44:e1:2b:7b:67:99:89:79:ea:4e:12:72: 8b:38:bf:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjUwNjMwMTg1MDAwWhcNMjUwNzA3MTg1MDAwWjAYMRYwFAYD VQQDEw02ODYyZGM1OC0wMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7COSH6Q02iiAMNZbQ9M2Im8gH2wyf7//0Z350mkHWdEMTrRCLFgay3ggifES ZC0A4a26SVF2LyVpDLKzJKm2hHe6qL0+uPfuGx4uuHQyJBGpOOmIn0LI2uiMRKpc BjjVDtfq5SpO9nOZb3p39nZGCaQGvfOR03OTrQKdU0kiuR1fsLqq7EEYqJYXqAtr CRtugFzVtAemy97sAXiOAjIUyruChUzt5Yy9L32Y6A/GkV7unZG/2U99E4O2bDC8 kINNqszXSUwo//MzdpfZc6dM3ekpTMaSDSQBhNmxz/0a2Nirkz/Ur6xJioweNo5Q qCa8MxyU418S8vu3RMYLBp1p7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlgeaY2 JNsNJK+xXaOP5MC1quyaMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMxMi84NTkyRTQ4ODBGNjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJF bjdPMm00YVJ6eURBRW5lYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtPe0CS+t+OBzsgY1Pex93vz67IfVwWgCfohCUjFAaDpmn3/8/FKs1 UL16pW9b9ijD8i8WzjiC8XqdDpJ44/wi7hQZKpUIYy+xsvIHi2eNtXVTb3XK9Hee NOqJF70PZPTH97bMSVgylpQC0lz13XHO5AD6LIUAChMUnju40UjWthY/UBYK4n+F C/v0RVCmmDXNmPv5c/P9zYK8YD/xJCD7EANY3l5I55j+TyXvZ/X8o0yG+snL/t+n qAmCIiuy9/Z7CKqB+KsC/Unc+5+2Y9QELf2Tc8ZmNPFStuace8KOhEyzzlk8gpGY qovFCylz++1E4St7Z5mJeepOEnKLOL+T -----END CERTIFICATE-----Generated at Tue Jul 1 20:36:15 2025 by rpki-client