$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft File: BXOVtIePsaZ_y61YJhe3uq8sMf8.mft (raw, json) Hash identifier: a/z6rCB4IrhLZF8/Wtg5J7ruRKkeXuBbtL/epRUW1Mc= Subject key identifier: 26:98:CC:BE:7A:3E:61:6B:1A:98:9F:F7:CA:18:1A:C0:69:15:28:ED Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF Certificate issuer: /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft Manifest number: CB Signing time: Mon 21 Jul 2025 06:22:39 +0000 Manifest this update: Mon 21 Jul 2025 06:22:38 +0000 Manifest next update: Mon 28 Jul 2025 06:22:38 +0000 Files and hashes: 1: BXOVtIePsaZ_y61YJhe3uq8sMf8.crl (hash: kOEkXLTNRzRFzhJHMwSKLknflrirMXIUcDAXjZQQqVs=) 2: 7EFD7D08A10211EFBF75467FC4F9AE02.roa (hash: mGmTdvdeQ6LXmazTZifM5k7qicxGPPhPxrXFLCv01wE=) 3: E0CDA376596E11F0B19AF24BC4F9AE02.roa (hash: Yc5RdLatSvuN/6oZ4bXQpO1X0GtJ7ECPoWHn98lkgO8=) 4: A8F83B2E202911F08EABDC87C4F9AE02.roa (hash: au4wObG66n+FNIJhrBPi+a9u77dosecOMM31PZwhHNs=) 5: B0D3DA64107B11F097717C77C4F9AE02.roa (hash: cHwQ63Z60E3TtJaa+ceKddkbgrqHWoaCrkF7NGBCHAg=) 6: FA414880107B11F09A6AF277C4F9AE02.roa (hash: BsQbSnrdZpeuIwgJSimif1Dp6ijeFhRf56GJivVGuBg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF Validity Not Before: Jul 21 06:22:38 2025 GMT Not After : Jul 28 06:22:38 2025 GMT Subject: CN=687ddcae-6436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:b5:14:6f:68:c1:5e:a9:e5:4c:6c:40:29: ba:61:cd:82:ca:6e:23:14:56:be:45:26:28:ee:f2: 82:07:2b:c3:ef:36:d3:54:e1:1d:4a:d5:49:3a:e9: 06:14:d7:23:08:76:eb:5b:0d:0f:0c:bb:e1:19:a2: 6b:54:b5:98:5a:ba:57:91:82:09:b2:d8:3e:fc:b8: 20:7a:8c:5f:8b:54:99:15:ae:9a:44:85:e3:bb:85: 1f:4f:1a:69:93:98:b4:b5:ec:2a:04:34:92:64:a5: 40:6b:c1:1b:99:84:bc:d3:0a:90:e0:40:cc:f1:d0: 21:94:2f:89:e5:a1:cc:4c:06:6f:3e:92:1b:d5:e3: e7:f6:f3:af:11:25:89:bf:ea:06:1c:af:94:28:27: 6d:50:1f:1a:a7:f2:17:d9:3d:d9:20:e5:3c:46:54: 9c:fc:4d:e5:c9:90:d7:8a:62:41:28:a0:be:f1:b9: a7:69:e1:bc:7e:6b:cc:21:95:1b:2a:0f:18:43:de: a2:99:6a:99:a6:52:8c:03:97:c2:6c:c3:00:87:f8: 8c:43:47:0e:d9:1d:8c:22:d7:c9:3d:44:d6:4d:da: 52:e4:83:5e:79:f1:34:a2:09:41:3a:63:e6:5c:e8: 72:b6:e0:2f:2a:75:cd:d4:03:59:d0:0a:10:0c:6c: 2b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:98:CC:BE:7A:3E:61:6B:1A:98:9F:F7:CA:18:1A:C0:69:15:28:ED X509v3 Authority Key Identifier: keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:b8:64:32:75:63:e4:84:60:02:c9:ca:79:43:f2:50:ac:7d: 2d:04:0f:94:88:a3:c3:19:24:aa:bd:82:7b:dd:aa:f8:92:27: 1a:39:3d:52:f4:2c:76:f1:fe:40:38:37:9d:dd:c2:83:dc:76: f2:0f:e0:e7:10:02:ed:27:67:75:37:96:eb:a6:a1:b0:38:bd: d8:ff:21:18:82:3e:36:d8:b9:5d:69:b9:48:15:29:b5:c4:74: 6b:1c:67:1a:5e:cd:8c:99:74:42:e8:99:37:1b:50:f7:22:b2: 52:b4:bb:9d:07:15:aa:76:8b:d7:e2:54:59:5e:ec:4a:a1:8a: 76:f3:40:a1:41:44:aa:cf:a7:dc:4c:95:5c:fe:8b:e5:a8:ee: 86:51:32:03:44:9c:43:c1:45:bc:51:be:d0:b6:34:6a:73:83: ab:c6:5d:24:8a:11:84:86:b5:ef:66:9b:0a:22:0d:22:2b:06: fb:fd:e6:ca:2c:de:1e:68:8e:5b:55:9b:28:75:34:64:03:62: 6a:0c:a7:5b:1d:2d:5a:85:75:26:19:b3:34:0f:2d:d1:42:e9: 06:14:e9:f2:98:74:ab:54:7c:7c:8e:b4:c7:9c:6b:ad:61:f2: 3b:0f:06:e8:9a:21:61:2d:30:25:78:1e:19:22:67:d9:f5:70: 77:d4:b1:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzZDOEYxMTAvBgNVBAUTKDA1NzM5NUI0ODc4RkIxQTY3RkNCQUQ1ODI2MTdCN0JB QUYyQzMxRkYwHhcNMjUwNzIxMDYyMjM4WhcNMjUwNzI4MDYyMjM4WjAYMRYwFAYD VQQDEw02ODdkZGNhZS02NDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+e1FG9owV6p5UxsQCm6Yc2Cym4jFFa+RSYo7vKCByvD7zbTVOEdStVJOukG FNcjCHbrWw0PDLvhGaJrVLWYWrpXkYIJstg+/Lggeoxfi1SZFa6aRIXju4UfTxpp k5i0tewqBDSSZKVAa8EbmYS80wqQ4EDM8dAhlC+J5aHMTAZvPpIb1ePn9vOvESWJ v+oGHK+UKCdtUB8ap/IX2T3ZIOU8RlSc/E3lyZDXimJBKKC+8bmnaeG8fmvMIZUb Kg8YQ96imWqZplKMA5fCbMMAh/iMQ0cO2R2MItfJPUTWTdpS5INeefE0oglBOmPm XOhytuAvKnXN1ANZ0AoQDGwr+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCaYzL56 PmFrGpif98oYGsBpFSjtMB8GA1UdIwQYMBaAFAVzlbSHj7Gmf8utWCYXt7qvLDH/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GQTBFMDVBNDZC NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNhWl95NjFZSmhlM3VxOHNN ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JYT1Z0SWVQc2FaX3k2MVlKaGUzdXE4c01mOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NkM4Ri9GQTBFMDVBNDZCNUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNh Wl95NjFZSmhlM3VxOHNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAluGQydWPkhGACycp5Q/JQrH0tBA+UiKPDGSSqvYJ73ar4kicaOT1S 9Cx28f5AODed3cKD3HbyD+DnEALtJ2d1N5brpqGwOL3Y/yEYgj422LldablIFSm1 xHRrHGcaXs2MmXRC6Jk3G1D3IrJStLudBxWqdovX4lRZXuxKoYp280ChQUSqz6fc TJVc/ovlqO6GUTIDRJxDwUW8Ub7QtjRqc4Orxl0kihGEhrXvZpsKIg0iKwb7/ebK LN4eaI5bVZsodTRkA2JqDKdbHS1ahXUmGbM0Dy3RQukGFOnymHSrVHx8jrTHnGut YfI7DwbomiFhLTAleB4ZImfZ9XB31LGX -----END CERTIFICATE-----Generated at Mon Jul 21 07:49:16 2025 by rpki-client