$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json) Hash identifier: swmLr4lkdy952V4Kin3MvbfQDfyc5aWfZJSL24hC69M= Subject key identifier: 96:44:BA:B9:5C:A4:7A:68:C1:21:7D:21:E7:57:B4:FC:D2:20:54:A0 Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Certificate serial: 059A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft Manifest number: 0587 Signing time: Sun 20 Jul 2025 19:42:45 +0000 Manifest this update: Sun 20 Jul 2025 19:42:44 +0000 Manifest next update: Sun 27 Jul 2025 19:42:44 +0000 Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: Bt6dKqoIw0knvUL+Nq9yhNqOXhgujFlI5B2XjYL+XNM=) 2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: hN1FG4yB+En2c4wj8yUNEIMBBFanGUa7r/bmCbomayU=) 3: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: /T6Cx82NX6eIVhHP8WlrC3rkE3NEqsy8y14HZ45ur88=) 4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: r9rxwsZy05OBv79BaleZs2CDNDVKsWtQPtZMqmB3o+8=) 5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: MEl6w5nE9WmS9IMiK++pW3U+fqzMAGds8O/KdUZBrWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1434 (0x59a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Validity Not Before: Jul 20 19:42:44 2025 GMT Not After : Jul 27 19:42:44 2025 GMT Subject: CN=687d46b4-1984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:70:3f:78:5c:b0:4e:a4:b8:dd:63:51:95:29: 17:a6:79:5b:ee:0d:64:8b:11:e3:a4:ba:0b:95:ff: bd:b6:77:a9:a2:54:09:0a:92:a8:f5:fb:25:51:4d: 4c:ff:a8:41:f1:e9:19:a4:c1:cb:b6:2b:79:54:7c: 20:37:9c:65:cd:93:b0:aa:37:7f:5f:d0:15:29:f7: e1:62:e0:a6:f3:d7:c8:a5:86:79:f7:9e:e5:63:28: fe:b5:f2:8f:6e:3b:b1:3c:50:6d:f3:c2:1e:8c:27: d9:d3:81:bb:d9:10:02:1c:d4:dc:54:f4:66:80:67: 2a:e9:f1:22:86:5f:1f:20:0c:2a:c1:9c:7c:61:28: 44:c5:a5:43:7b:ad:11:23:ee:69:4b:67:d7:d1:de: ce:44:bc:91:75:cc:d8:c7:80:f3:73:bb:43:dc:f0: fa:9d:9e:41:ce:4a:89:c8:50:45:98:54:b7:e6:78: 51:26:e5:fc:1e:fe:1c:e6:90:d3:ce:4d:3a:b9:e4: 8f:49:60:e1:6e:9a:6d:0e:86:e7:32:60:35:2d:f4: d7:d6:59:21:36:1f:cc:0d:21:ef:03:80:e9:ac:c9: 40:24:0d:d6:f9:93:65:c1:4d:d0:c6:3c:bd:2b:2c: 54:7f:9a:87:78:58:0d:2f:db:3f:8f:72:80:35:c4: 16:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:44:BA:B9:5C:A4:7A:68:C1:21:7D:21:E7:57:B4:FC:D2:20:54:A0 X509v3 Authority Key Identifier: keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f2:a0:2e:b4:fe:63:05:e2:03:95:c5:87:49:7c:35:95:7a: 8b:d8:f4:92:f5:f7:5f:f8:a9:8b:07:ff:09:f8:12:40:13:d3: ec:1e:e8:1b:8e:4a:1c:61:37:ea:81:94:01:ed:e7:04:1c:73: 7c:60:13:fd:37:21:19:4c:d9:bf:4f:ac:bc:a0:eb:d5:48:1c: 4e:fc:54:1b:a5:dc:dc:7d:c2:62:d3:16:53:fc:c9:f2:14:7d: 80:6e:ff:40:80:95:5d:53:bf:1a:f9:03:82:83:85:27:46:fa: 89:1b:ad:19:06:6a:70:83:86:4f:99:ae:8c:d7:d7:00:4f:23: 83:ff:17:d2:4e:da:aa:0e:09:f8:80:dd:34:ff:e3:5b:2a:b1: d9:e6:03:2b:97:3d:8c:17:4e:38:0a:b1:0d:d6:bb:fa:97:5f: d3:eb:2c:63:72:89:ae:e3:33:28:50:09:ff:79:df:9f:31:ab: 3d:3e:41:33:17:39:39:7d:20:59:4b:d2:5d:50:7c:e7:d7:d2: f9:13:1c:b0:b9:f4:52:bc:fd:7f:09:a9:d8:50:65:26:3d:e3: 67:b8:88:32:39:cc:e8:23:a1:31:98:d4:a8:d6:ea:47:c7:8a: f6:11:0e:cd:50:3f:83:5a:8f:9b:6a:12:c0:36:6d:8d:d6:76: b3:88:30:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE RUY4QzNEM0IwHhcNMjUwNzIwMTk0MjQ0WhcNMjUwNzI3MTk0MjQ0WjAYMRYwFAYD VQQDEw02ODdkNDZiNC0xOTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz3A/eFywTqS43WNRlSkXpnlb7g1kixHjpLoLlf+9tnepolQJCpKo9fslUU1M /6hB8ekZpMHLtit5VHwgN5xlzZOwqjd/X9AVKffhYuCm89fIpYZ5957lYyj+tfKP bjuxPFBt88IejCfZ04G72RACHNTcVPRmgGcq6fEihl8fIAwqwZx8YShExaVDe60R I+5pS2fX0d7ORLyRdczYx4Dzc7tD3PD6nZ5BzkqJyFBFmFS35nhRJuX8Hv4c5pDT zk06ueSPSWDhbpptDobnMmA1LfTX1lkhNh/MDSHvA4DprMlAJA3W+ZNlwU3Qxjy9 KyxUf5qHeFgNL9s/j3KANcQW4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJZEurlc pHpowSF9IedXtPzSIFSgMB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC8wQzQ3NDkwQUVBQjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVf WXA4ZUZ6aGZQZ19lLU1QVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB68qAutP5jBeIDlcWHSXw1lXqL2PSS9fdf+KmLB/8J+BJAE9PsHugb jkocYTfqgZQB7ecEHHN8YBP9NyEZTNm/T6y8oOvVSBxO/FQbpdzcfcJi0xZT/Mny FH2Abv9AgJVdU78a+QOCg4UnRvqJG60ZBmpwg4ZPma6M19cATyOD/xfSTtqqDgn4 gN00/+NbKrHZ5gMrlz2MF044CrEN1rv6l1/T6yxjcomu4zMoUAn/ed+fMas9PkEz Fzk5fSBZS9JdUHzn19L5ExywufRSvP1/CanYUGUmPeNnuIgyOczoI6ExmNSo1upH x4r2EQ7NUD+DWo+bahLANm2N1naziDBW -----END CERTIFICATE-----Generated at Mon Jul 21 07:49:26 2025 by rpki-client