$ rpki-client -vvf rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft File: bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft (raw, json) Hash identifier: S/ore7pyTbOdlL+jdTKUfif4ZnBDEPQWVNfPTXMfECM= Subject key identifier: 2E:65:6C:20:F1:49:D8:D5:67:84:62:A7:FA:31:F8:2B:D5:55:C6:7E Authority key identifier: 6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91 Certificate issuer: /CN=A9198F69/serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft Manifest number: 0187 Signing time: Sat 19 Jul 2025 03:50:20 +0000 Manifest this update: Sat 19 Jul 2025 03:50:20 +0000 Manifest next update: Sat 26 Jul 2025 03:50:20 +0000 Files and hashes: 1: bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl (hash: YXm3vvWQLVPpozXFP0rX0xE1Ie/odzsKuAvRMoy1+sI=) 2: 62A9A9AC240A11F0A6893962C4F9AE02.roa (hash: LvnWXi9L3u+fKG77QzH6WnEL9Cc/sS3Yn7M7dhZqrvM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9198F69, serialNumber=6E95A68922097E76C4DB1247EECEE1A3B11F8E91 Validity Not Before: Jul 19 03:50:20 2025 GMT Not After : Jul 26 03:50:20 2025 GMT Subject: CN=687b15fc-73dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3b:9e:62:0d:59:38:a9:0c:80:fd:df:4a:94: a1:ae:6a:e0:5b:f5:2b:3d:73:eb:24:7a:30:18:b4: a8:0e:d7:1d:59:2a:a2:32:87:c2:0d:a7:e9:0b:05: 7c:bd:29:32:5b:4e:e0:3d:19:7d:8e:d5:68:c2:54: 8c:51:4c:fb:2b:ea:8b:a8:a4:a1:28:df:a0:ed:bd: d9:fb:4f:56:3d:68:42:c1:f3:11:33:86:73:90:51: 07:96:42:c2:b2:97:a5:87:12:b3:dd:e7:70:7b:6e: 16:e0:32:53:2a:66:41:4e:9f:0d:cc:b6:b5:99:e9: 70:ef:70:4b:8a:d4:f8:26:d6:64:19:c9:7c:3b:56: 8b:31:00:72:07:1b:e3:37:1c:7c:94:d2:d1:08:2d: 18:ae:d5:26:82:f1:9f:86:80:39:19:b6:79:f6:e1: 16:ff:24:8f:77:57:8e:4c:17:91:5b:cf:8b:d7:a9: 68:14:9d:23:ab:13:5d:b7:ca:e9:2a:49:14:a8:a4: 1f:70:d8:60:eb:27:0e:8e:b6:71:91:90:6b:cb:2c: b3:41:e9:53:59:18:f0:51:2a:e9:2d:63:2e:66:ec: 90:1a:11:a1:5c:b6:18:e1:d8:66:84:52:9b:ed:a2: 35:5f:c2:8e:64:ef:03:c6:d3:e9:ce:f8:10:9a:88: 0e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:65:6C:20:F1:49:D8:D5:67:84:62:A7:FA:31:F8:2B:D5:55:C6:7E X509v3 Authority Key Identifier: keyid:6E:95:A6:89:22:09:7E:76:C4:DB:12:47:EE:CE:E1:A3:B1:1F:8E:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpWmiSIJfnbE2xJH7s7ho7EfjpE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198F69/DCF5C3D21A5F11EE9AAAB386C4F9AE02/bpWmiSIJfnbE2xJH7s7ho7EfjpE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:07:f5:97:6b:e8:f3:1d:9a:b1:80:0d:fa:e5:24:ce:be:73: e0:9e:6d:cc:d8:b8:cc:56:7d:08:d4:13:ac:b3:ed:0b:0c:4a: f0:a5:1c:d8:f9:ae:c7:17:6a:9a:ad:70:b4:17:6b:d8:2a:7f: d5:3f:2a:cc:c1:43:83:ff:9c:79:af:95:a9:89:a9:ff:1d:5e: 5a:5c:4d:16:42:79:00:cd:a9:1c:0c:bb:70:de:1c:1c:74:32: 6d:7d:e7:86:d7:39:85:48:61:f7:44:7b:aa:6a:fc:32:15:11: 03:4b:f2:ea:6c:de:80:7d:7e:4f:87:79:46:ec:ad:3c:ea:18: 92:1a:7c:ef:f9:6a:7a:48:82:91:9c:4d:5e:12:3e:1f:b5:59: d5:e0:4e:42:b4:68:19:29:37:c5:9c:75:e7:75:63:a3:08:c6: c4:55:a0:32:7f:cb:ce:8c:78:83:84:39:20:58:b2:6a:60:e0: 86:7e:ae:d9:c0:75:de:68:c5:44:16:36:7c:43:1d:90:66:c5: 3a:66:dc:40:24:f9:c6:0a:b7:ab:33:74:0e:1f:30:07:8b:12: 8f:5c:f0:ad:de:7d:99:86:14:ca:f5:8c:28:34:5b:53:ca:66: 2f:ac:33:72:5a:9c:c7:d5:db:e9:ce:3c:10:00:33:92:0f:cc: 72:c4:21:7a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OThGNjkxMTAvBgNVBAUTKDZFOTVBNjg5MjIwOTdFNzZDNERCMTI0N0VFQ0VFMUEz QjExRjhFOTEwHhcNMjUwNzE5MDM1MDIwWhcNMjUwNzI2MDM1MDIwWjAYMRYwFAYD VQQDEw02ODdiMTVmYy03M2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zueYg1ZOKkMgP3fSpShrmrgW/UrPXPrJHowGLSoDtcdWSqiMofCDafpCwV8 vSkyW07gPRl9jtVowlSMUUz7K+qLqKShKN+g7b3Z+09WPWhCwfMRM4ZzkFEHlkLC spelhxKz3edwe24W4DJTKmZBTp8NzLa1melw73BLitT4JtZkGcl8O1aLMQByBxvj Nxx8lNLRCC0YrtUmgvGfhoA5GbZ59uEW/ySPd1eOTBeRW8+L16loFJ0jqxNdt8rp KkkUqKQfcNhg6ycOjrZxkZBryyyzQelTWRjwUSrpLWMuZuyQGhGhXLYY4dhmhFKb 7aI1X8KOZO8DxtPpzvgQmogOHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5lbCDx SdjVZ4Rip/ox+CvVVcZ+MB8GA1UdIwQYMBaAFG6VpokiCX52xNsSR+7O4aOxH46R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OEY2OS9EQ0Y1QzNEMjFB NUYxMUVFOUFBQUIzODZDNEY5QUUwMi9icFdtaVNJSmZuYkUyeEpIN3M3aG83RWZq cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JwV21pU0lKZm5iRTJ4Skg3czdobzdFZmpwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 OEY2OS9EQ0Y1QzNEMjFBNUYxMUVFOUFBQUIzODZDNEY5QUUwMi9icFdtaVNJSmZu YkUyeEpIN3M3aG83RWZqcEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFB/WXa+jzHZqxgA365STOvnPgnm3M2LjMVn0I1BOss+0LDErwpRzY +a7HF2qarXC0F2vYKn/VPyrMwUOD/5x5r5Wpian/HV5aXE0WQnkAzakcDLtw3hwc dDJtfeeG1zmFSGH3RHuqavwyFREDS/LqbN6AfX5Ph3lG7K086hiSGnzv+Wp6SIKR nE1eEj4ftVnV4E5CtGgZKTfFnHXndWOjCMbEVaAyf8vOjHiDhDkgWLJqYOCGfq7Z wHXeaMVEFjZ8Qx2QZsU6ZtxAJPnGCrerM3QOHzAHixKPXPCt3n2ZhhTK9YwoNFtT ymYvrDNyWpzH1dvpzjwQADOSD8xyxCF6 -----END CERTIFICATE-----Generated at Sun Jul 20 19:07:35 2025 by rpki-client