$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft File: BZ5vA652dqnQ8J1fbL25CGGFWlc.mft (raw, json) Hash identifier: 2IuoNEEAA72sQQgCeybc1NepaALsrs1mgFpQaFxmlvc= Subject key identifier: AB:68:58:9E:2A:44:CB:E8:F2:8A:AC:2A:E8:BD:24:9C:4C:3A:51:78 Authority key identifier: 05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57 Certificate issuer: /CN=A91FF74B/serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57 Certificate serial: 06DD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft Manifest number: 06C1 Signing time: Wed 02 Jul 2025 22:00:58 +0000 Manifest this update: Wed 02 Jul 2025 22:00:57 +0000 Manifest next update: Wed 09 Jul 2025 22:00:57 +0000 Files and hashes: 1: BZ5vA652dqnQ8J1fbL25CGGFWlc.crl (hash: Fh+gEaJYBBmRRWRWcGtVVqboWd6F4fFAI6UPKzkM7uc=) 2: 7E0AB01C782C11EBB0B71971C4F9AE02.roa (hash: k3Hyvnta3NTSihzOI6GhNOzxp4Li4ZxAgK0C//8NE4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 22:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1757 (0x6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=059E6F03AE7676A9D0F09D5F6CBDB90861855A57 Validity Not Before: Jul 2 22:00:57 2025 GMT Not After : Jul 9 22:00:57 2025 GMT Subject: CN=6865ac1a-eb87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:46:72:3a:c2:a8:03:2e:2b:a6:44:e0:56:b1: 70:c6:13:2a:ca:ba:7a:db:fc:bc:b5:a0:9c:bb:08: df:9b:29:8b:0c:61:66:53:11:79:fb:23:ef:01:ab: bc:06:57:dd:e6:4f:bc:3e:a5:93:92:86:51:31:b8: 77:6a:f7:c7:bd:5f:ee:18:03:f2:ad:a4:2f:7e:1c: 44:34:31:ae:89:81:3d:3c:10:8f:49:39:84:12:36: 5a:68:3e:37:9e:aa:f6:02:21:70:44:a2:e9:1e:63: 26:65:f3:2d:ab:d1:83:8b:c8:a8:0d:f4:8c:60:71: 8d:fa:d7:08:1b:64:06:f1:b6:69:84:91:36:76:92: 0b:0b:e4:73:b4:bb:44:26:cf:48:e4:65:5b:f3:c1: b1:3d:5c:cb:57:d0:eb:17:78:f4:6f:7f:84:05:5c: 17:36:bc:6e:75:4c:a6:87:a2:d6:7c:5e:7b:0b:71: 1f:bd:8c:25:90:b6:67:69:c8:ac:86:77:76:42:87: fc:b1:9e:95:08:1d:90:91:85:12:66:0c:39:1c:3f: 5e:78:f1:e5:64:4e:43:45:50:87:62:e7:85:4d:fc: 31:91:39:22:f2:fa:00:84:6d:b9:1c:fc:84:6d:7c: 71:95:10:e7:59:11:bb:0e:65:66:4d:90:2c:83:40: cc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:68:58:9E:2A:44:CB:E8:F2:8A:AC:2A:E8:BD:24:9C:4C:3A:51:78 X509v3 Authority Key Identifier: keyid:05:9E:6F:03:AE:76:76:A9:D0:F0:9D:5F:6C:BD:B9:08:61:85:5A:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BZ5vA652dqnQ8J1fbL25CGGFWlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/61A3384A782C11EBAC04F672C4F9AE02/BZ5vA652dqnQ8J1fbL25CGGFWlc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:f9:ed:99:c9:12:40:96:6f:c7:c6:2a:92:c2:ad:7c:52:f0: a4:9b:4d:2d:83:e1:80:ec:ed:93:62:ff:b2:a1:cc:01:b5:eb: df:ec:f4:58:c6:77:bf:43:74:23:c8:53:17:cc:80:47:60:9c: d5:b8:57:d5:4e:dd:bb:cf:52:68:be:7c:72:02:4f:db:70:83: ef:13:28:a2:4a:b7:fd:8a:98:bf:35:6a:5b:cd:0d:7d:0c:14: cf:de:d0:33:7b:e9:7c:26:7a:65:7e:30:56:09:9b:d4:ba:38: 86:ec:8a:7b:ae:db:4c:e5:1c:37:02:39:49:a6:13:9c:7e:1c: 37:71:d1:99:fd:59:52:72:7d:e5:b4:f8:46:f5:e6:41:e6:71: ca:3d:6a:68:ef:67:54:55:9a:ea:0e:03:5c:8b:c1:90:06:d6: 0d:84:1d:bb:ef:e3:0b:84:67:75:03:4a:54:ce:71:13:4b:91: 3a:b0:03:69:78:d8:ff:60:3a:0c:e6:7d:c2:e9:32:94:d8:ac: 68:4d:0a:fb:b1:25:2c:71:a6:8d:b4:cc:d0:a4:30:ef:04:4e: 54:41:92:7b:8b:94:95:19:78:ae:e7:8a:39:e4:58:5c:84:63: 90:4f:b3:44:05:43:8b:b0:43:db:e5:32:00:fb:67:9a:6b:ff: ed:64:31:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDA1OUU2RjAzQUU3Njc2QTlEMEYwOUQ1RjZDQkRCOTA4 NjE4NTVBNTcwHhcNMjUwNzAyMjIwMDU3WhcNMjUwNzA5MjIwMDU3WjAYMRYwFAYD VQQDEw02ODY1YWMxYS1lYjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy0ZyOsKoAy4rpkTgVrFwxhMqyrp62/y8taCcuwjfmymLDGFmUxF5+yPvAau8 Blfd5k+8PqWTkoZRMbh3avfHvV/uGAPyraQvfhxENDGuiYE9PBCPSTmEEjZaaD43 nqr2AiFwRKLpHmMmZfMtq9GDi8ioDfSMYHGN+tcIG2QG8bZphJE2dpILC+RztLtE Js9I5GVb88GxPVzLV9DrF3j0b3+EBVwXNrxudUymh6LWfF57C3EfvYwlkLZnacis hnd2Qof8sZ6VCB2QkYUSZgw5HD9eePHlZE5DRVCHYueFTfwxkTki8voAhG25HPyE bXxxlRDnWRG7DmVmTZAsg0DMGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKtoWJ4q RMvo8oqsKui9JJxMOlF4MB8GA1UdIwQYMBaAFAWebwOudnap0PCdX2y9uQhhhVpX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi82MUEzMzg0QTc4 MkMxMUVCQUMwNEY2NzJDNEY5QUUwMi9CWjV2QTY1MmRxblE4SjFmYkwyNUNHR0ZX bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JaNXZBNjUyZHFuUThKMWZiTDI1Q0dHRldsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Rjc0Qi82MUEzMzg0QTc4MkMxMUVCQUMwNEY2NzJDNEY5QUUwMi9CWjV2QTY1MmRx blE4SjFmYkwyNUNHR0ZXbGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCk+e2ZyRJAlm/HxiqSwq18UvCkm00tg+GA7O2TYv+yocwBtevf7PRY xne/Q3QjyFMXzIBHYJzVuFfVTt27z1JovnxyAk/bcIPvEyiiSrf9ipi/NWpbzQ19 DBTP3tAze+l8JnplfjBWCZvUujiG7Ip7rttM5Rw3AjlJphOcfhw3cdGZ/VlScn3l tPhG9eZB5nHKPWpo72dUVZrqDgNci8GQBtYNhB277+MLhGd1A0pUznETS5E6sANp eNj/YDoM5n3C6TKU2KxoTQr7sSUscaaNtMzQpDDvBE5UQZJ7i5SVGXiu54o55Fhc hGOQT7NEBUOLsEPb5TIA+2eaa//tZDFT -----END CERTIFICATE-----Generated at Thu Jul 3 21:09:47 2025 by rpki-client