$ rpki-client -vvf rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft File: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft (raw, json) Hash identifier: VSalCWtKcTtbpMY+wyebwWI3H8Z+tNK/ed6CSlsU8OQ= Subject key identifier: 5B:2E:06:E6:C6:E1:79:BE:79:43:B2:C0:4A:59:87:B3:D0:6F:A3:57 Authority key identifier: 04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 Certificate issuer: /CN=A9126B7C/serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Certificate serial: 01AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft Manifest number: 01A4 Signing time: Sat 19 Jul 2025 03:28:01 +0000 Manifest this update: Sat 19 Jul 2025 03:28:00 +0000 Manifest next update: Sat 26 Jul 2025 03:28:00 +0000 Files and hashes: 1: BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl (hash: D37pWu7plos5pdVs3CEv/63H/LvpjuIM2qC7u1/H4aY=) 2: F57CB8F6DF8C11ED9EAE5884C4F9AE02.roa (hash: 5VwQvP2fVpjZvZxgLpSBhfWvfSymTIgG5SpcIoI9Jnk=) 3: F607A6C8DF8C11ED9EAE5884C4F9AE02.roa (hash: OJOp4QsqdIdHyogZJwwwl2CA1RHQVKJeYLhatS2OCss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 426 (0x1aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9126B7C, serialNumber=04F074A0BA87805C50FC7993D40410B84A11D2F6 Validity Not Before: Jul 19 03:28:00 2025 GMT Not After : Jul 26 03:28:00 2025 GMT Subject: CN=687b10c1-ed1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:44:bd:b6:c3:de:63:89:44:29:ac:5c:30:01: 14:39:f2:d8:78:93:46:43:88:25:07:d3:5a:5c:b5: 2f:a0:6d:ba:5b:57:f3:1d:71:10:d3:92:26:04:fd: 2e:26:b8:d6:1c:f3:ce:34:96:da:9e:62:c6:e4:f9: 98:ea:0a:71:1b:73:ad:d1:e5:40:fa:b9:84:40:d5: 7b:19:64:e4:03:ae:67:0a:33:92:50:41:bb:c2:50: ed:a4:bc:38:8a:0e:c9:8d:d6:98:78:93:e8:b1:e3: 3d:7e:aa:27:9b:26:7d:07:72:1c:2e:8a:3d:7e:1e: e9:7d:b4:48:9e:f9:9e:d4:ba:fc:50:6d:ed:9b:a8: cd:14:c1:8c:78:33:6e:90:de:ff:e2:48:1b:1f:45: f0:a4:70:d8:bc:5f:aa:7c:23:8d:80:06:f9:a7:c2: d7:6c:4b:1a:96:96:74:f0:5d:51:a6:ea:43:fb:94: 05:a8:c3:cb:06:ec:a0:33:1d:d9:75:e8:69:57:6a: 3d:98:dc:db:36:6c:e5:c4:56:20:27:3f:a8:0a:66: 9f:6f:ad:04:65:27:5f:72:7d:1d:c4:b5:eb:c0:d0: ba:3b:4e:dc:6c:bf:36:1a:db:bc:a7:6f:bc:97:06: 96:43:a2:91:1c:79:c9:62:d4:9d:c8:ab:e1:c7:d3: 12:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:2E:06:E6:C6:E1:79:BE:79:43:B2:C0:4A:59:87:B3:D0:6F:A3:57 X509v3 Authority Key Identifier: keyid:04:F0:74:A0:BA:87:80:5C:50:FC:79:93:D4:04:10:B8:4A:11:D2:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126B7C/51A9445ADF8811EDAFBF2B7FC4F9AE02/BPB0oLqHgFxQ_HmT1AQQuEoR0vY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:72:f7:21:24:d8:1b:21:04:aa:68:95:82:3c:3a:c1:da:39: e3:6e:f3:06:70:bc:40:01:ad:10:16:d3:2d:f1:55:f5:a5:78: 77:5e:96:8c:81:84:e1:62:a2:43:6e:aa:94:64:c7:0d:db:9e: 41:5d:6c:e4:c0:cc:d5:93:66:75:0c:10:36:6b:70:91:d8:8f: b9:0b:97:5b:66:b9:ce:0f:41:2c:d6:ad:5f:f2:07:0f:43:e2: ca:53:ff:e8:bf:fb:7b:2c:d3:25:73:d5:2a:78:27:27:38:4f: e6:76:8f:b1:59:b5:7e:46:73:9e:7b:5c:af:44:c7:be:4d:a0: be:ca:17:43:eb:bf:e8:43:d0:43:a3:d3:83:8f:3a:a1:d7:02: d4:18:44:68:e4:6a:71:da:8d:fd:9a:65:d7:5d:d0:4b:e4:66: 23:71:25:06:9c:43:c1:0a:b8:1f:e8:49:08:9b:f8:5b:80:4f: 6f:d2:df:b2:20:c6:84:78:5c:1b:d5:6d:a6:0b:1c:af:f1:1c: 7f:27:96:d2:01:b1:6c:f9:c3:07:cd:dc:83:fe:13:fd:a1:37: e7:2b:70:db:04:9f:a2:cb:fe:da:4c:12:f8:97:98:99:23:0c: ae:be:76:a2:69:e1:61:24:a2:1a:13:9c:37:9e:41:18:13:56: 76:05:ab:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjZCN0MxMTAvBgNVBAUTKDA0RjA3NEEwQkE4NzgwNUM1MEZDNzk5M0Q0MDQxMEI4 NEExMUQyRjYwHhcNMjUwNzE5MDMyODAwWhcNMjUwNzI2MDMyODAwWjAYMRYwFAYD VQQDEw02ODdiMTBjMS1lZDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoES9tsPeY4lEKaxcMAEUOfLYeJNGQ4glB9NaXLUvoG26W1fzHXEQ05ImBP0u JrjWHPPONJbanmLG5PmY6gpxG3Ot0eVA+rmEQNV7GWTkA65nCjOSUEG7wlDtpLw4 ig7JjdaYeJPoseM9fqonmyZ9B3IcLoo9fh7pfbRInvme1Lr8UG3tm6jNFMGMeDNu kN7/4kgbH0XwpHDYvF+qfCONgAb5p8LXbEsalpZ08F1RpupD+5QFqMPLBuygMx3Z dehpV2o9mNzbNmzlxFYgJz+oCmafb60EZSdfcn0dxLXrwNC6O07cbL82Gtu8p2+8 lwaWQ6KRHHnJYtSdyKvhx9MSfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFsuBubG 4Xm+eUOywEpZh7PQb6NXMB8GA1UdIwQYMBaAFATwdKC6h4BcUPx5k9QEELhKEdL2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNkI3Qy81MUE5NDQ1QURG ODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdGeFFfSG1UMUFRUXVFb1Iw dlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JQQjBvTHFIZ0Z4UV9IbVQxQVFRdUVvUjB2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NkI3Qy81MUE5NDQ1QURGODgxMUVEQUZCRjJCN0ZDNEY5QUUwMi9CUEIwb0xxSGdG eFFfSG1UMUFRUXVFb1IwdlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5cvchJNgbIQSqaJWCPDrB2jnjbvMGcLxAAa0QFtMt8VX1pXh3XpaM gYThYqJDbqqUZMcN255BXWzkwMzVk2Z1DBA2a3CR2I+5C5dbZrnOD0Es1q1f8gcP Q+LKU//ov/t7LNMlc9UqeCcnOE/mdo+xWbV+RnOee1yvRMe+TaC+yhdD67/oQ9BD o9ODjzqh1wLUGERo5Gpx2o39mmXXXdBL5GYjcSUGnEPBCrgf6EkIm/hbgE9v0t+y IMaEeFwb1W2mCxyv8Rx/J5bSAbFs+cMHzdyD/hP9oTfnK3DbBJ+iy/7aTBL4l5iZ IwyuvnaiaeFhJKIaE5w3nkEYE1Z2Bau0 -----END CERTIFICATE-----Generated at Sun Jul 20 19:00:13 2025 by rpki-client