$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft File: BO4Hal36lIw4-DyMrCD-Do6G2As.mft (raw, json) Hash identifier: T8xZDsjWgERZ1PnIvRw3VPBm8gkK9GKVDcpAo3XOHTU= Subject key identifier: B0:2A:88:63:DC:03:D6:99:B5:B3:FA:AB:06:F5:7A:F2:58:FF:CC:39 Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Certificate serial: 03C8 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft Manifest number: 03BF Signing time: Thu 03 Jul 2025 01:01:55 +0000 Manifest this update: Thu 03 Jul 2025 01:01:54 +0000 Manifest next update: Thu 10 Jul 2025 01:01:54 +0000 Files and hashes: 1: BO4Hal36lIw4-DyMrCD-Do6G2As.crl (hash: qPVgG5ZreGI9A3FhVUPP5LlX8N+yCKi5WOLMdxfH0wA=) 2: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (hash: pTLG0WiZ5krYcSGHfWJAPWz+llPAx5qbifmNwzqhPMM=) 3: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (hash: /9wYxqntRiGnvgXxlBbc4/94IQMO4HOR9thkiSTkR6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 968 (0x3c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Validity Not Before: Jul 3 01:01:54 2025 GMT Not After : Jul 10 01:01:54 2025 GMT Subject: CN=6865d682-aa62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8c:04:ea:17:e7:d1:55:71:59:d6:87:ef:7a: 04:ba:de:75:4a:84:4c:a4:72:bd:a1:fc:bb:96:07: 41:cf:73:22:64:fe:6b:f0:13:20:e0:b9:6e:5a:8c: 8d:53:e7:dd:c1:74:72:c8:ba:35:49:e4:bf:b4:99: 7f:b7:da:ee:a0:3d:1f:35:c0:0c:97:1f:dc:69:e5: 4f:f4:f3:31:dd:32:16:57:b0:73:b3:5a:b6:c2:2e: a0:64:93:51:cf:01:ca:3c:87:7f:5a:7f:53:3b:50: dc:e4:ad:65:21:42:28:d0:ec:37:69:fc:d6:bc:73: 34:88:d7:14:39:1f:ed:b6:e1:fa:7c:eb:6b:7b:7d: 5e:66:b0:80:b8:fc:1b:1b:25:78:eb:3c:c0:39:e7: 3d:20:38:23:30:48:3e:c4:0b:5d:89:8a:74:31:60: 3e:b3:6c:08:f8:5a:71:79:24:6a:73:62:85:cf:29: 4d:48:f9:52:99:cc:6b:21:d2:b8:2e:60:64:1a:85: cb:72:92:14:03:fc:0b:60:76:3c:2b:0a:c6:5d:f9: a1:88:06:1c:bf:d4:bc:f3:c8:f3:9b:3f:b7:52:d8: 52:fb:7e:53:01:54:8e:cd:29:25:a6:8b:05:ed:1e: af:5d:72:f8:91:12:df:28:b8:e0:46:11:93:c5:35: 13:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:2A:88:63:DC:03:D6:99:B5:B3:FA:AB:06:F5:7A:F2:58:FF:CC:39 X509v3 Authority Key Identifier: keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:cd:9c:77:b0:cc:8d:7a:35:98:71:81:08:14:4b:83:4c:40: fb:53:b4:c0:44:fd:0d:4b:4d:25:0a:c5:a9:e8:33:e6:db:89: 3b:b5:fa:5a:35:74:79:52:48:e5:87:50:48:d5:b6:fa:05:32: 10:db:1f:16:ad:ca:c3:8c:ab:7f:c3:52:9a:be:b1:59:20:f5: 16:1f:ae:c4:2e:a8:33:ad:c0:55:f8:7e:12:33:67:92:0c:2b: ff:c7:41:8c:7b:bc:33:3c:89:e4:80:bb:42:b4:4f:22:8b:79: 26:1c:01:39:da:4b:a6:c5:7f:2a:82:11:1f:5e:b1:06:1c:74: 78:c6:e7:e1:e2:32:a8:50:f5:c1:61:d0:e0:5f:20:12:8c:25: 02:41:eb:30:50:3a:36:61:a0:fc:64:81:df:7f:17:0e:5e:c0: b6:27:d1:6a:7d:ed:26:6f:a1:8e:b1:27:5a:0a:24:07:b8:60: bb:d3:96:67:9e:42:0f:1d:85:c1:23:06:33:4c:5e:ef:63:87: da:7f:61:af:f9:35:36:47:a6:43:b7:4a:f2:6a:54:1c:b1:2e: 4c:de:f4:9a:c5:9a:01:e4:3b:dd:f2:ee:f5:09:3a:a1:df:48: 35:6d:c2:b9:42:a1:00:bd:53:e1:c6:8d:45:57:d4:2b:42:ab: 53:08:3b:e5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF OEU4NkQ4MEIwHhcNMjUwNzAzMDEwMTU0WhcNMjUwNzEwMDEwMTU0WjAYMRYwFAYD VQQDEw02ODY1ZDY4Mi1hYTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIwE6hfn0VVxWdaH73oEut51SoRMpHK9ofy7lgdBz3MiZP5r8BMg4LluWoyN U+fdwXRyyLo1SeS/tJl/t9ruoD0fNcAMlx/caeVP9PMx3TIWV7Bzs1q2wi6gZJNR zwHKPId/Wn9TO1Dc5K1lIUIo0Ow3afzWvHM0iNcUOR/ttuH6fOtre31eZrCAuPwb GyV46zzAOec9IDgjMEg+xAtdiYp0MWA+s2wI+FpxeSRqc2KFzylNSPlSmcxrIdK4 LmBkGoXLcpIUA/wLYHY8KwrGXfmhiAYcv9S888jzmz+3UthS+35TAVSOzSklposF 7R6vXXL4kRLfKLjgRhGTxTUTCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLAqiGPc A9aZtbP6qwb1evJY/8w5MB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTA0RS80NEE1MTk0ODk2MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJ dzQtRHlNckNELURvNkcyQXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBwzZx3sMyNejWYcYEIFEuDTED7U7TARP0NS00lCsWp6DPm24k7tfpa NXR5Ukjlh1BI1bb6BTIQ2x8WrcrDjKt/w1KavrFZIPUWH67ELqgzrcBV+H4SM2eS DCv/x0GMe7wzPInkgLtCtE8ii3kmHAE52kumxX8qghEfXrEGHHR4xufh4jKoUPXB YdDgXyASjCUCQeswUDo2YaD8ZIHffxcOXsC2J9Fqfe0mb6GOsSdaCiQHuGC705Zn nkIPHYXBIwYzTF7vY4faf2Gv+TU2R6ZDt0ryalQcsS5M3vSaxZoB5Dvd8u71CTqh 30g1bcK5QqEAvVPhxo1FV9QrQqtTCDvl -----END CERTIFICATE-----Generated at Thu Jul 3 06:54:15 2025 by rpki-client