$ rpki-client -vvf rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft File: BQIPvxAg_WO-V9oblwSwqoEDREo.mft (raw, json) Hash identifier: +4PcpRSjNY79fAQTAapVi/Tr793n/x1bgRpMtsIYU2A= Subject key identifier: 98:0C:E7:2C:EE:1B:8E:E0:2F:0B:46:2B:97:E2:20:94:4F:C0:1E:C3 Authority key identifier: 05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A Certificate issuer: /CN=A914A140/serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Certificate serial: 1CFA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft Manifest number: 1CEA Signing time: Fri 18 Jul 2025 16:16:43 +0000 Manifest this update: Fri 18 Jul 2025 16:16:43 +0000 Manifest next update: Fri 25 Jul 2025 16:16:43 +0000 Files and hashes: 1: BQIPvxAg_WO-V9oblwSwqoEDREo.crl (hash: uMgCj22vEHMKdgyd4Hx6kjSMtgJlr6LQKuHA4zn8Tqk=) 2: 8E652A7AC77611E68B1CDE6AC4F9AE02.roa (hash: nQvCGi6jeXRQddJ1rEuK0BsRcyU/PM81aNvBcFuVAoE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 16:16:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7418 (0x1cfa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914A140, serialNumber=05020FBF1020FD63BE57DA1B9704B0AA8103444A Validity Not Before: Jul 18 16:16:43 2025 GMT Not After : Jul 25 16:16:43 2025 GMT Subject: CN=687a736b-8be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e9:ab:46:bd:d4:4a:ae:1a:01:b5:6a:af:e5: 2a:e9:01:79:e4:a5:55:16:3f:d9:e8:1a:64:4c:8b: 87:03:8e:54:c6:99:2f:a7:e0:71:77:e6:6c:80:ae: 82:ee:3c:95:8b:12:51:af:b2:3b:23:d8:24:f5:51: 58:f7:ba:e2:01:d2:a0:dd:e2:ad:5c:d5:48:f2:5c: 25:8c:97:bc:79:76:e4:ad:5e:d1:cc:a5:7f:c7:f1: 76:22:19:67:b4:2c:1c:b0:bd:45:b5:90:bc:0b:3c: c1:dd:1f:bb:24:fa:44:75:4c:05:88:83:ff:4b:03: 61:92:c6:e0:94:09:7a:ec:c2:9f:16:dc:85:a3:e2: 28:69:e4:35:62:ce:d4:27:25:63:33:a2:97:b9:33: 3e:d7:ba:3a:bf:e7:12:64:21:03:47:c2:7c:30:ea: 82:ac:49:74:29:b7:12:cc:e1:bf:1d:8f:d1:33:c4: 6d:08:45:44:25:56:96:12:39:1d:02:22:62:c3:1c: a6:03:8c:81:98:c1:17:6f:3a:63:b6:8c:c9:04:40: 16:06:8d:29:1e:b5:4e:52:ce:1f:74:f6:b6:5d:7d: 26:1c:5d:c5:79:3d:98:2a:4d:e5:8e:4b:46:03:f4: 07:5d:ba:32:2e:8f:6d:e8:62:25:84:30:16:5b:ab: d4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0C:E7:2C:EE:1B:8E:E0:2F:0B:46:2B:97:E2:20:94:4F:C0:1E:C3 X509v3 Authority Key Identifier: keyid:05:02:0F:BF:10:20:FD:63:BE:57:DA:1B:97:04:B0:AA:81:03:44:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQIPvxAg_WO-V9oblwSwqoEDREo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A140/CC1DCCE8C77411E69816B068C4F9AE02/BQIPvxAg_WO-V9oblwSwqoEDREo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:8e:6b:5c:e8:33:d5:bf:54:f3:d4:1c:f1:4f:52:9b:26:51: 6a:66:03:65:9e:cf:ee:50:ac:e2:5d:63:51:0b:96:57:31:d9: 78:1d:6f:89:f7:bc:74:30:08:30:ed:99:0d:ea:a1:aa:30:63: c8:88:19:8e:c0:8c:54:08:5c:d0:f7:9e:41:93:27:df:a4:3e: d4:1d:bc:a3:9d:0b:d1:e3:13:4f:87:f0:fb:ca:96:65:61:04: 8f:7e:76:90:7a:a9:4c:4d:c0:0a:ac:c4:05:79:73:c3:e6:e4: 13:da:9b:8b:8e:b0:ab:db:76:7e:ba:d5:6b:2a:6f:cb:1a:9a: 17:9f:99:0f:c9:e3:c0:7d:58:77:ea:cf:57:40:39:9e:7a:43: 96:43:14:22:80:cd:53:f3:db:b8:13:8d:a1:89:48:55:62:4d: b4:79:0c:ad:5b:84:39:0a:39:40:a0:cd:ff:37:bd:75:41:9c: 00:fa:75:96:0d:8c:01:78:9f:4d:45:ea:e7:26:41:73:43:28: 4d:8b:3a:20:f5:64:85:19:59:5f:79:c3:f2:9e:34:f5:68:7c: af:50:f0:d4:02:8a:78:71:0c:5b:bb:05:b4:22:25:da:da:cf: b2:2a:f5:04:ec:70:76:64:14:96:67:2b:f8:c9:06:bd:4c:1a: 32:93:e3:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEExNDAxMTAvBgNVBAUTKDA1MDIwRkJGMTAyMEZENjNCRTU3REExQjk3MDRCMEFB ODEwMzQ0NEEwHhcNMjUwNzE4MTYxNjQzWhcNMjUwNzI1MTYxNjQzWjAYMRYwFAYD VQQDEw02ODdhNzM2Yi04YmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoOmrRr3USq4aAbVqr+Uq6QF55KVVFj/Z6BpkTIuHA45Uxpkvp+Bxd+ZsgK6C 7jyVixJRr7I7I9gk9VFY97riAdKg3eKtXNVI8lwljJe8eXbkrV7RzKV/x/F2Ihln tCwcsL1FtZC8CzzB3R+7JPpEdUwFiIP/SwNhksbglAl67MKfFtyFo+IoaeQ1Ys7U JyVjM6KXuTM+17o6v+cSZCEDR8J8MOqCrEl0KbcSzOG/HY/RM8RtCEVEJVaWEjkd AiJiwxymA4yBmMEXbzpjtozJBEAWBo0pHrVOUs4fdPa2XX0mHF3FeT2YKk3ljktG A/QHXboyLo9t6GIlhDAWW6vUDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgM5yzu G47gLwtGK5fiIJRPwB7DMB8GA1UdIwQYMBaAFAUCD78QIP1jvlfaG5cEsKqBA0RK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTE0MC9DQzFEQ0NFOEM3 NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19XTy1WOW9ibHdTd3FvRURS RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRSVB2eEFnX1dPLVY5b2Jsd1N3cW9FRFJFby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QTE0MC9DQzFEQ0NFOEM3NzQxMUU2OTgxNkIwNjhDNEY5QUUwMi9CUUlQdnhBZ19X Ty1WOW9ibHdTd3FvRURSRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8jmtc6DPVv1Tz1BzxT1KbJlFqZgNlns/uUKziXWNRC5ZXMdl4HW+J 97x0MAgw7ZkN6qGqMGPIiBmOwIxUCFzQ955BkyffpD7UHbyjnQvR4xNPh/D7ypZl YQSPfnaQeqlMTcAKrMQFeXPD5uQT2puLjrCr23Z+utVrKm/LGpoXn5kPyePAfVh3 6s9XQDmeekOWQxQigM1T89u4E42hiUhVYk20eQytW4Q5CjlAoM3/N711QZwA+nWW DYwBeJ9NRernJkFzQyhNizog9WSFGVlfecPynjT1aHyvUPDUAop4cQxbuwW0IiXa 2s+yKvUE7HB2ZBSWZyv4yQa9TBoyk+Md -----END CERTIFICATE-----Generated at Sun Jul 20 16:27:16 2025 by rpki-client