$ rpki-client -vvf rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft File: BhgYSeLF-TE-pgozl9xhRyrBGw0.mft (raw, json) Hash identifier: 9gqSxJ76ctCg1tDXqfC5aFEdSJhz72JbHwOSFo4PhpY= Subject key identifier: 42:1C:AD:72:BF:79:35:6F:D3:47:08:B2:9E:66:3F:7A:2D:FC:54:4B Authority key identifier: 06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D Certificate issuer: /CN=A9183BBC/serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D Certificate serial: 068A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft Manifest number: 0678 Signing time: Fri 18 Jul 2025 22:44:41 +0000 Manifest this update: Fri 18 Jul 2025 22:44:40 +0000 Manifest next update: Fri 25 Jul 2025 22:44:40 +0000 Files and hashes: 1: BhgYSeLF-TE-pgozl9xhRyrBGw0.crl (hash: 5KhkcS2EEs8PNjUuBh3rj2r58FWLwU0n+lgypcEWFPA=) 2: 4F1694B4C87B11ED981CC523C4F9AE02.roa (hash: FWRlVE7qxAGVhNJeQGVLW3KvlIyEGk0A9fnepbZFOKE=) 3: E4205416B2F111EFBB14DE0FC4F9AE02.roa (hash: u41x8Ny1raTvp1vwnGwm7MW/cINQCDMdw5LO04vaVeU=) 4: C18726F486D711EBA06B0E64C4F9AE02.roa (hash: 46EUYT6r3IQXKkQnGUbOAbbi8lZTq+8CIfeQWVvyW6o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:44:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1674 (0x68a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9183BBC, serialNumber=06181849E2C5F9313EA60A3397DC61472AC11B0D Validity Not Before: Jul 18 22:44:40 2025 GMT Not After : Jul 25 22:44:40 2025 GMT Subject: CN=687ace58-5256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:39:6b:e2:25:41:b2:30:cc:13:cb:27:44: fa:75:96:67:a1:ef:27:37:b3:fb:c1:33:95:b4:9f: bc:33:f9:85:11:f3:55:43:61:08:25:89:b6:b5:45: 5a:34:0f:fb:8e:99:88:17:e4:75:2d:99:6b:b2:cb: e1:f1:63:f5:cd:fe:47:35:ac:29:aa:da:ff:e5:ae: 27:1a:dc:3b:49:df:f4:6e:11:bd:81:ff:79:d9:ad: 99:ec:a1:9b:c5:1c:4a:db:d6:57:04:48:60:d6:f6: 85:89:33:20:d3:69:c5:dd:83:33:fc:40:23:6d:14: 73:d7:a5:3e:be:63:ad:29:c4:8d:b8:f0:2e:98:93: ef:84:0b:43:1c:84:b4:93:b5:92:79:50:ad:0d:f1: 01:af:38:cc:0c:c5:09:21:05:10:d8:05:91:47:89: 99:86:95:48:1b:51:45:e7:fa:30:73:b0:58:06:bd: c5:6d:1e:0e:0f:22:ba:65:0f:b1:77:9e:06:d6:03: 05:eb:ff:2e:88:c0:c0:8e:e9:ef:16:69:00:02:72: 54:a8:96:f0:02:d3:1e:dd:18:1e:20:d9:63:87:61: 11:b4:a0:de:09:0e:72:25:7c:4f:a4:28:f7:e5:97: 82:90:39:ee:50:d6:ba:3b:4c:db:d9:cb:e9:b1:33: 78:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1C:AD:72:BF:79:35:6F:D3:47:08:B2:9E:66:3F:7A:2D:FC:54:4B X509v3 Authority Key Identifier: keyid:06:18:18:49:E2:C5:F9:31:3E:A6:0A:33:97:DC:61:47:2A:C1:1B:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BhgYSeLF-TE-pgozl9xhRyrBGw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183BBC/140C175686D611EBB7B39C62C4F9AE02/BhgYSeLF-TE-pgozl9xhRyrBGw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:1e:5c:39:39:42:bb:ea:28:4a:7d:a1:98:e2:a2:cc:e0:6e: 3a:d0:fb:ca:73:32:13:db:bc:b0:73:df:17:be:f8:5b:6c:53: 43:10:7d:d4:33:4a:f9:d5:80:e2:6d:aa:96:b3:c0:1e:44:36: a0:8d:c8:a3:01:25:d3:74:44:00:fa:79:72:80:ad:88:8c:b2: bc:45:85:c6:b1:6c:26:e3:8e:86:5b:67:a9:c9:29:eb:a3:30: 75:b7:2b:ef:c6:e3:53:80:37:1c:40:68:64:74:a0:d0:c7:e3: 10:52:30:f1:49:18:99:bc:f6:86:16:7f:03:97:cd:6e:4b:f9: e9:fb:29:c6:ff:e9:ca:04:91:df:ea:52:d9:10:91:8b:b1:92: 27:e4:62:3d:b9:c6:bf:a6:26:fb:7b:b5:ef:53:6a:df:a8:e5: a0:a8:b5:ac:f3:40:1d:72:95:9c:45:c2:7f:52:9e:1c:21:19: 97:b5:82:59:58:9e:b7:52:ca:a9:4f:10:b8:83:42:f6:2b:7f: a9:a4:f3:46:cd:9b:90:1a:c2:1f:2b:20:fc:3d:3f:a7:bc:22: 1e:6f:1f:bb:77:09:76:90:a6:36:47:2e:ef:e2:ba:e7:3c:0b: 76:c2:34:ca:ed:88:7d:7b:6e:9a:cf:c2:8f:68:26:67:5b:8e: ea:8c:30:61 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODNCQkMxMTAvBgNVBAUTKDA2MTgxODQ5RTJDNUY5MzEzRUE2MEEzMzk3REM2MTQ3 MkFDMTFCMEQwHhcNMjUwNzE4MjI0NDQwWhcNMjUwNzI1MjI0NDQwWjAYMRYwFAYD VQQDEw02ODdhY2U1OC01MjU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAve85a+IlQbIwzBPLJ0T6dZZnoe8nN7P7wTOVtJ+8M/mFEfNVQ2EIJYm2tUVa NA/7jpmIF+R1LZlrssvh8WP1zf5HNawpqtr/5a4nGtw7Sd/0bhG9gf952a2Z7KGb xRxK29ZXBEhg1vaFiTMg02nF3YMz/EAjbRRz16U+vmOtKcSNuPAumJPvhAtDHIS0 k7WSeVCtDfEBrzjMDMUJIQUQ2AWRR4mZhpVIG1FF5/owc7BYBr3FbR4ODyK6ZQ+x d54G1gMF6/8uiMDAjunvFmkAAnJUqJbwAtMe3RgeINljh2ERtKDeCQ5yJXxPpCj3 5ZeCkDnuUNa6O0zb2cvpsTN40wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEIcrXK/ eTVv00cIsp5mP3ot/FRLMB8GA1UdIwQYMBaAFAYYGEnixfkxPqYKM5fcYUcqwRsN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4M0JCQy8xNDBDMTc1Njg2 RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VMRi1URS1wZ296bDl4aFJ5ckJH dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JoZ1lTZUxGLVRFLXBnb3psOXhoUnlyQkd3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 M0JCQy8xNDBDMTc1Njg2RDYxMUVCQjdCMzlDNjJDNEY5QUUwMi9CaGdZU2VMRi1U RS1wZ296bDl4aFJ5ckJHdzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgHlw5OUK76ihKfaGY4qLM4G460PvKczIT27ywc98XvvhbbFNDEH3U M0r51YDibaqWs8AeRDagjcijASXTdEQA+nlygK2IjLK8RYXGsWwm446GW2epySnr ozB1tyvvxuNTgDccQGhkdKDQx+MQUjDxSRiZvPaGFn8Dl81uS/np+ynG/+nKBJHf 6lLZEJGLsZIn5GI9uca/pib7e7XvU2rfqOWgqLWs80AdcpWcRcJ/Up4cIRmXtYJZ WJ63UsqpTxC4g0L2K3+ppPNGzZuQGsIfKyD8PT+nvCIebx+7dwl2kKY2Ry7v4rrn PAt2wjTK7Yh9e26az8KPaCZnW47qjDBh -----END CERTIFICATE-----Generated at Sun Jul 20 11:32:59 2025 by rpki-client