$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0C4/9180C822055711F09C6A8E49C4F9AE02/bpBL4FGCvLH29QXQowWJHm6NEDk.mft File: bpBL4FGCvLH29QXQowWJHm6NEDk.mft (raw, json) Hash identifier: iAVN0nVGGjvJ/qDYlX7IDokwY+ruPiAdmE+N1AGYyAU= Subject key identifier: 9D:9B:A6:97:C0:33:85:A7:D2:74:BD:02:43:C2:1D:55:19:9B:2A:5A Authority key identifier: 6E:90:4B:E0:51:82:BC:B1:F6:F5:05:D0:A3:05:89:1E:6E:8D:10:39 Certificate issuer: /CN=A917C0C4/serialNumber=6E904BE05182BCB1F6F505D0A305891E6E8D1039 Certificate serial: 49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpBL4FGCvLH29QXQowWJHm6NEDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0C4/9180C822055711F09C6A8E49C4F9AE02/bpBL4FGCvLH29QXQowWJHm6NEDk.mft Manifest number: 47 Signing time: Sat 19 Jul 2025 07:46:00 +0000 Manifest this update: Sat 19 Jul 2025 07:46:00 +0000 Manifest next update: Sat 26 Jul 2025 07:46:00 +0000 Files and hashes: 1: bpBL4FGCvLH29QXQowWJHm6NEDk.crl (hash: WFQxgpNaSLgJzaHpkmIpyqgG8aYayN/LixWrmmMLVGo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0C4/9180C822055711F09C6A8E49C4F9AE02/bpBL4FGCvLH29QXQowWJHm6NEDk.crl rsync://rpki.apnic.net/member_repository/A917C0C4/9180C822055711F09C6A8E49C4F9AE02/bpBL4FGCvLH29QXQowWJHm6NEDk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpBL4FGCvLH29QXQowWJHm6NEDk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0C4, serialNumber=6E904BE05182BCB1F6F505D0A305891E6E8D1039 Validity Not Before: Jul 19 07:46:00 2025 GMT Not After : Jul 26 07:46:00 2025 GMT Subject: CN=687b4d38-a324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:26:c2:88:12:85:b7:04:fe:3d:67:25:ba:99: 2a:38:ed:be:f8:ba:dc:2c:ad:86:eb:c2:8a:db:97: 4b:36:9c:93:96:05:ff:6a:44:92:cb:54:4d:d0:35: ed:ed:34:1a:da:41:0d:30:73:b3:2d:18:3d:9a:e9: 7a:18:6a:ce:59:82:e5:a1:e8:8c:b0:4f:26:3e:34: fa:f5:d2:54:6a:d4:46:23:e1:46:a8:8b:7f:bf:b0: 8f:1e:b2:95:fa:d4:e6:b1:b8:9d:eb:89:ab:c4:bc: 49:38:d0:b1:0b:67:8e:ec:d2:fa:71:a7:63:de:31: 13:42:71:55:94:2d:11:5a:b7:71:b2:8d:50:6e:ca: 67:97:18:ab:a2:ee:b6:9c:38:7a:f1:16:73:2d:b0: 73:6e:cc:1c:e6:7f:45:9e:d7:2b:32:01:4e:f3:c4: cd:a1:60:7e:29:fb:dd:71:3b:0a:85:dc:4d:3a:89: 3f:88:dc:83:8b:b8:61:bc:6d:71:fb:7a:b7:89:59: ef:71:ba:c0:d6:53:12:04:fb:ef:ac:9e:36:2a:5e: 1c:b6:c3:08:5f:a7:ab:fd:ef:9e:a9:2e:b7:1f:04: c1:92:52:0d:9e:47:7b:b2:43:77:32:06:b4:81:31: 83:a7:20:d1:8c:e4:70:45:5f:8a:9a:94:aa:c5:c0: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9B:A6:97:C0:33:85:A7:D2:74:BD:02:43:C2:1D:55:19:9B:2A:5A X509v3 Authority Key Identifier: keyid:6E:90:4B:E0:51:82:BC:B1:F6:F5:05:D0:A3:05:89:1E:6E:8D:10:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0C4/9180C822055711F09C6A8E49C4F9AE02/bpBL4FGCvLH29QXQowWJHm6NEDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpBL4FGCvLH29QXQowWJHm6NEDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0C4/9180C822055711F09C6A8E49C4F9AE02/bpBL4FGCvLH29QXQowWJHm6NEDk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 93:a0:e2:93:20:16:df:0e:7a:be:2c:0d:25:98:e8:3a:b7:56: d8:03:1f:bc:be:6f:31:69:51:af:8b:06:4d:a0:30:02:1f:81: 64:f8:a9:ae:ab:89:c1:9d:16:90:78:6b:17:37:5a:5a:55:35: 87:8f:6e:2a:01:63:2c:15:bb:13:ee:d0:8a:7e:f0:ff:ff:86: f1:92:80:de:91:cf:3e:02:48:95:17:ac:8d:60:79:d4:6c:6a: 87:2d:2f:dd:15:d1:de:20:c8:39:2c:f2:5b:aa:61:d5:a9:53: b5:f0:e7:5d:fc:5b:2e:38:08:36:7f:25:55:e5:12:9b:16:c4: 9b:d7:1a:1a:e9:31:ae:fd:3d:fc:83:92:76:84:dc:69:11:68: 27:21:f2:9f:d7:b9:b0:89:b4:eb:38:b9:ee:9c:f0:86:3c:34: 9c:c2:b3:cd:93:a1:9c:5c:0b:6f:a6:1f:96:44:94:74:45:66: 13:bc:34:b8:98:c6:95:c6:6f:30:4c:44:22:eb:fe:bc:1f:16: 7c:2e:e5:c6:1c:57:06:80:88:cd:59:8d:0c:dd:2c:7a:21:93: ca:af:4c:11:43:48:04:35:7b:58:d4:17:27:70:96:29:d1:54: 78:07:9a:08:e0:02:f5:7e:92:d1:17:59:13:8f:d1:e9:9c:55: 42:37:d0:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzBDNDExMC8GA1UEBRMoNkU5MDRCRTA1MTgyQkNCMUY2RjUwNUQwQTMwNTg5MUU2 RThEMTAzOTAeFw0yNTA3MTkwNzQ2MDBaFw0yNTA3MjYwNzQ2MDBaMBgxFjAUBgNV BAMTDTY4N2I0ZDM4LWEzMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRJsKIEoW3BP49ZyW6mSo47b74utwsrYbrworbl0s2nJOWBf9qRJLLVE3QNe3t NBraQQ0wc7MtGD2a6XoYas5ZguWh6IywTyY+NPr10lRq1EYj4Uaoi3+/sI8espX6 1OaxuJ3riavEvEk40LELZ47s0vpxp2PeMRNCcVWULRFat3GyjVBuymeXGKui7rac OHrxFnMtsHNuzBzmf0We1ysyAU7zxM2hYH4p+91xOwqF3E06iT+I3IOLuGG8bXH7 ereJWe9xusDWUxIE+++snjYqXhy2wwhfp6v9756pLrcfBMGSUg2eR3uyQ3cyBrSB MYOnINGM5HBFX4qalKrFwDHdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnZuml8Az hafSdL0CQ8IdVRmbKlowHwYDVR0jBBgwFoAUbpBL4FGCvLH29QXQowWJHm6NEDkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMEM0LzkxODBDODIyMDU1 NzExRjA5QzZBOEU0OUM0RjlBRTAyL2JwQkw0RkdDdkxIMjlRWFFvd1dKSG02TkVE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYnBCTDRGR0N2TEgyOVFYUW93V0pIbTZORURrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MEM0LzkxODBDODIyMDU1NzExRjA5QzZBOEU0OUM0RjlBRTAyL2JwQkw0RkdDdkxI MjlRWFFvd1dKSG02TkVEay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJOg4pMgFt8Oer4sDSWY6Dq3VtgDH7y+bzFpUa+LBk2gMAIfgWT4qa6r icGdFpB4axc3WlpVNYePbioBYywVuxPu0Ip+8P//hvGSgN6Rzz4CSJUXrI1gedRs aoctL90V0d4gyDks8luqYdWpU7Xw5138Wy44CDZ/JVXlEpsWxJvXGhrpMa79PfyD knaE3GkRaCch8p/XubCJtOs4ue6c8IY8NJzCs82ToZxcC2+mH5ZElHRFZhO8NLiY xpXGbzBMRCLr/rwfFnwu5cYcVwaAiM1ZjQzdLHohk8qvTBFDSAQ1e1jUFydwlinR VHgHmgjgAvV+ktEXWROP0emcVUI30Ho= -----END CERTIFICATE-----Generated at Sun Jul 20 03:37:17 2025 by rpki-client