$ rpki-client -vvf rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft File: BtehAtOMEJaAT42lLiz3jYkaxyE.mft (raw, json) Hash identifier: +pPH+LbzPFF0/iYCFsR01ND/qQliSLcfJWLfHupJVUk= Subject key identifier: 37:63:0C:2C:4F:8E:E6:F5:2A:0C:4B:F1:77:63:99:AE:48:FF:B8:0F Authority key identifier: 06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21 Certificate issuer: /CN=A916B2C1/serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721 Certificate serial: 04EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft Manifest number: 04EA Signing time: Sat 19 Jul 2025 00:05:06 +0000 Manifest this update: Sat 19 Jul 2025 00:05:05 +0000 Manifest next update: Sat 26 Jul 2025 00:05:05 +0000 Files and hashes: 1: BtehAtOMEJaAT42lLiz3jYkaxyE.crl (hash: DyZX5wpgIxFGkH4EqtSJz2zPjGRTdp/Kn2QAYfVp0G4=) 2: 551FA6B620DE11EC8CA3EC74C4F9AE02.roa (hash: sy0Mbt4ke59HBbem5DYUNkJ8NfZs0P/CrbYjmapjxqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 00:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1263 (0x4ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B2C1, serialNumber=06D7A102D38C1096804F8DA52E2CF78D891AC721 Validity Not Before: Jul 19 00:05:05 2025 GMT Not After : Jul 26 00:05:05 2025 GMT Subject: CN=687ae132-4093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:62:89:6a:d6:83:bd:1f:c5:ba:f6:47:44:8f: 07:0e:b7:b4:54:f0:99:be:a8:98:56:61:27:07:99: 5c:a8:18:53:f6:f3:81:70:27:83:2c:57:d1:00:f5: fc:a5:16:40:0d:76:f4:e3:e1:b3:8c:06:5f:4b:aa: 9f:94:b0:32:5b:e0:31:76:21:5a:51:a9:5e:7a:7d: e3:39:b9:e4:a4:d5:59:3f:bc:3f:ed:7c:b5:e5:1f: 61:3d:5e:5c:e6:36:7a:e3:93:68:a1:07:26:0e:fd: c7:c5:9e:81:76:5c:60:a9:b6:ff:c6:0c:99:39:d5: fe:b4:9a:ff:ba:ec:af:2a:5d:28:b3:c0:03:f9:ba: 2f:b4:38:71:c4:b1:45:c3:a5:aa:f2:54:ea:4c:e9: fc:f8:20:9a:8e:38:e5:2f:5f:48:1b:ad:8f:7e:0c: 99:e7:06:2f:fd:a1:d8:97:89:76:a2:b6:d3:69:6d: 87:ab:87:cf:13:56:c5:98:38:d8:29:cd:fb:56:18: 8e:3a:27:b4:a6:dc:3e:05:be:f3:f5:15:b3:50:70: 09:de:56:56:ea:91:ff:eb:21:24:d3:22:2f:36:77: eb:2c:9b:93:d6:78:33:72:c5:c5:a4:22:5c:24:37: 37:95:62:58:7b:a5:91:3c:6b:ec:68:42:d8:62:b1: 43:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:63:0C:2C:4F:8E:E6:F5:2A:0C:4B:F1:77:63:99:AE:48:FF:B8:0F X509v3 Authority Key Identifier: keyid:06:D7:A1:02:D3:8C:10:96:80:4F:8D:A5:2E:2C:F7:8D:89:1A:C7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtehAtOMEJaAT42lLiz3jYkaxyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B2C1/2EA51D5620DC11EC9B3CE973C4F9AE02/BtehAtOMEJaAT42lLiz3jYkaxyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:83:d2:5b:43:b8:d5:87:ef:bc:43:15:c0:34:e3:5c:c1:3d: 9e:cb:7a:97:74:bc:76:08:2a:45:a9:00:f0:ab:da:6f:d0:4c: ac:63:cd:28:26:5a:69:ad:d5:60:db:7d:66:76:c4:d0:bf:13: 31:da:aa:31:d4:5d:1a:84:08:09:e6:ac:d0:7f:20:57:c9:27: 58:a3:b3:ee:a5:d1:ee:54:c3:0b:f8:84:2a:c5:4d:ce:9c:18: 5b:72:64:19:6a:f5:79:0c:32:6d:25:5c:e4:ba:b5:e3:8a:29: 73:ef:e0:70:ed:07:95:5a:86:fb:ec:66:10:12:5a:2e:9e:7a: 62:ab:9c:a3:a7:97:8b:40:6c:bd:e0:30:80:db:98:aa:76:4b: 1a:41:1c:1c:f4:05:c0:f7:85:e2:70:f1:43:a4:61:42:b4:aa: 10:b4:d0:9e:d7:bd:10:76:ec:b0:98:16:1b:53:0f:f5:a7:1e: 36:c7:88:c8:7d:c6:c4:09:53:e8:f8:cc:10:11:64:b4:2c:1d: d9:8c:af:8d:04:66:c2:be:8b:a0:e5:f7:06:02:17:10:2f:8d: 88:47:01:74:5c:14:93:20:aa:70:fa:65:43:a4:b4:60:8c:32: 01:cb:c6:52:d8:81:e4:f3:98:13:d7:9c:5e:78:ed:3e:e5:a2: a4:e6:37:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkIyQzExMTAvBgNVBAUTKDA2RDdBMTAyRDM4QzEwOTY4MDRGOERBNTJFMkNGNzhE ODkxQUM3MjEwHhcNMjUwNzE5MDAwNTA1WhcNMjUwNzI2MDAwNTA1WjAYMRYwFAYD VQQDEw02ODdhZTEzMi00MDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4mKJataDvR/FuvZHRI8HDre0VPCZvqiYVmEnB5lcqBhT9vOBcCeDLFfRAPX8 pRZADXb04+GzjAZfS6qflLAyW+AxdiFaUaleen3jObnkpNVZP7w/7Xy15R9hPV5c 5jZ645NooQcmDv3HxZ6Bdlxgqbb/xgyZOdX+tJr/uuyvKl0os8AD+bovtDhxxLFF w6Wq8lTqTOn8+CCajjjlL19IG62PfgyZ5wYv/aHYl4l2orbTaW2Hq4fPE1bFmDjY Kc37VhiOOie0ptw+Bb7z9RWzUHAJ3lZW6pH/6yEk0yIvNnfrLJuT1ngzcsXFpCJc JDc3lWJYe6WRPGvsaELYYrFDdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdjDCxP jub1KgxL8Xdjma5I/7gPMB8GA1UdIwQYMBaAFAbXoQLTjBCWgE+NpS4s942JGsch MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjJDMS8yRUE1MUQ1NjIw REMxMUVDOUIzQ0U5NzNDNEY5QUUwMi9CdGVoQXRPTUVKYUFUNDJsTGl6M2pZa2F4 eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0ZWhBdE9NRUphQVQ0MmxMaXozallrYXh5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjJDMS8yRUE1MUQ1NjIwREMxMUVDOUIzQ0U5NzNDNEY5QUUwMi9CdGVoQXRPTUVK YUFUNDJsTGl6M2pZa2F4eUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1g9JbQ7jVh++8QxXANONcwT2ey3qXdLx2CCpFqQDwq9pv0EysY80o JlpprdVg231mdsTQvxMx2qox1F0ahAgJ5qzQfyBXySdYo7PupdHuVMML+IQqxU3O nBhbcmQZavV5DDJtJVzkurXjiilz7+Bw7QeVWob77GYQElounnpiq5yjp5eLQGy9 4DCA25iqdksaQRwc9AXA94XicPFDpGFCtKoQtNCe170QduywmBYbUw/1px42x4jI fcbECVPo+MwQEWS0LB3ZjK+NBGbCvoug5fcGAhcQL42IRwF0XBSTIKpw+mVDpLRg jDIBy8ZS2IHk85gT15xeeO0+5aKk5je6 -----END CERTIFICATE-----Generated at Sun Jul 20 18:59:50 2025 by rpki-client