$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft File: Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft (raw, json) Hash identifier: 4/Asa4ksiCaQXMgRYQV1qbyh2FxtrAN11cjXLKkKqMU= Subject key identifier: 29:A5:63:A0:A2:F5:9D:E4:DF:D6:3B:3D:C3:44:14:1C:93:D4:21:AF Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 Certificate issuer: /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336 Certificate serial: 0151 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft Manifest number: 014F Signing time: Mon 21 Jul 2025 04:15:08 +0000 Manifest this update: Mon 21 Jul 2025 04:15:08 +0000 Manifest next update: Mon 28 Jul 2025 04:15:07 +0000 Files and hashes: 1: Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl (hash: /6bvZmUWWIfU28ausn3Xke3SmnrEPU/1ZvwinSzxgcI=) 2: 6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (hash: GWZ2MHtEWnxPiTCBVRb6cUY0T8WOEUXRXli5S8fNKVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 04:15:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37ED, serialNumber=071F8119171441802BE3261F15627DAF289DB336 Validity Not Before: Jul 21 04:15:08 2025 GMT Not After : Jul 28 04:15:07 2025 GMT Subject: CN=687dbecc-e95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:55:7d:22:eb:a4:da:89:c8:23:12:b8:36: aa:a9:40:68:4a:b2:a4:55:fd:7e:83:e3:c4:2d:96: 26:97:37:09:89:be:00:b3:19:06:75:03:8a:5a:4e: 59:c8:b3:43:89:f3:10:54:06:d0:75:5a:90:50:ed: e4:39:23:aa:31:80:fe:8e:25:5e:3a:9e:9a:bc:e2: a0:9f:24:ae:32:01:be:e7:af:0a:12:a6:1c:a8:cf: 46:01:e0:30:95:bd:e0:64:dd:29:d6:cf:81:db:3d: bf:b2:95:80:e5:d8:dc:1a:ee:e4:24:a3:51:6c:48: af:88:63:c9:a6:07:22:0d:ce:6e:c7:90:e3:13:8a: 1e:5d:05:53:53:4c:f8:7e:de:63:45:06:0e:7e:ed: 73:e9:1a:af:2c:50:76:2b:92:2e:bc:57:d5:4b:a6: 47:21:d2:fb:19:4e:d8:66:e3:3f:cf:bc:0d:da:78: 2e:18:18:dd:88:da:d6:a4:fc:7a:82:12:0b:7d:2e: db:a3:0d:65:ec:f6:57:62:a4:9c:f0:ce:6d:7c:1c: a5:e7:9b:19:a2:da:3d:22:ce:b0:06:e5:63:c3:96: 5d:cd:ae:f9:1e:13:12:70:05:11:23:bc:65:35:36: 0f:22:c8:6d:1e:e0:da:e7:55:8b:e7:7b:fd:c4:37: a9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A5:63:A0:A2:F5:9D:E4:DF:D6:3B:3D:C3:44:14:1C:93:D4:21:AF X509v3 Authority Key Identifier: keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:10:78:dd:81:95:72:cf:bf:2e:c3:ea:f2:30:36:aa:ae:16: 72:b1:86:b1:43:c4:48:6f:a8:21:cf:21:25:a0:f3:a0:59:36: 42:11:2f:ad:6f:f3:3d:18:06:9b:27:e0:8b:4c:80:be:6f:3e: f2:90:b2:fb:ff:16:01:01:d3:cb:b6:b2:5d:01:bc:27:ef:d9: c4:a7:9a:5e:8f:40:7b:99:c3:c6:cb:6c:83:ba:fb:f2:ab:85: 0a:8a:b0:66:ec:ea:24:c9:5d:89:a6:cf:50:a3:6d:ae:84:25: 5b:40:09:46:cd:d9:7d:34:07:f8:66:c5:bf:c5:6e:2c:e7:30: be:1b:9b:6d:70:8a:69:99:b3:8a:bb:ed:34:62:4c:73:1f:cc: ac:2e:b7:94:02:99:99:9e:37:1c:d0:d9:6a:ac:9e:ee:18:4c: a9:db:0b:67:d3:68:fc:55:24:e5:f0:d4:c6:94:2e:b8:06:38: 4c:10:d4:0c:c7:04:42:16:13:e3:db:62:15:a7:6a:82:74:51: 90:63:69:1f:33:95:f4:8a:a6:a5:77:2e:7b:ad:1f:59:2b:28: 5e:a7:c8:ca:a3:c3:51:4b:e4:58:8c:af:d4:92:1e:e3:ea:39: a6:b7:b8:2d:31:08:64:6b:d5:e4:c9:65:89:17:97:a8:0c:6b: 9e:b5:5e:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3RUQxMTAvBgNVBAUTKDA3MUY4MTE5MTcxNDQxODAyQkUzMjYxRjE1NjI3REFG Mjg5REIzMzYwHhcNMjUwNzIxMDQxNTA4WhcNMjUwNzI4MDQxNTA3WjAYMRYwFAYD VQQDEw02ODdkYmVjYy1lOTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6xVfSLrpNqJyCMSuDaqqUBoSrKkVf1+g+PELZYmlzcJib4AsxkGdQOKWk5Z yLNDifMQVAbQdVqQUO3kOSOqMYD+jiVeOp6avOKgnySuMgG+568KEqYcqM9GAeAw lb3gZN0p1s+B2z2/spWA5djcGu7kJKNRbEiviGPJpgciDc5ux5DjE4oeXQVTU0z4 ft5jRQYOfu1z6RqvLFB2K5IuvFfVS6ZHIdL7GU7YZuM/z7wN2nguGBjdiNrWpPx6 ghILfS7bow1l7PZXYqSc8M5tfByl55sZoto9Is6wBuVjw5Zdza75HhMScAURI7xl NTYPIshtHuDa51WL53v9xDep7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCmlY6Ci 9Z3k39Y7PcNEFByT1CGvMB8GA1UdIwQYMBaAFAcfgRkXFEGAK+MmHxVifa8onbM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdFRC82REI5NTRBMjYy QTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZQXI0eVlmRldKOXJ5aWRz elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J4LUJHUmNVUVlBcjR5WWZGV0o5cnlpZHN6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdFRC82REI5NTRBMjYyQTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZ QXI0eVlmRldKOXJ5aWRzelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLEHjdgZVyz78uw+ryMDaqrhZysYaxQ8RIb6ghzyEloPOgWTZCES+t b/M9GAabJ+CLTIC+bz7ykLL7/xYBAdPLtrJdAbwn79nEp5pej0B7mcPGy2yDuvvy q4UKirBm7OokyV2Jps9Qo22uhCVbQAlGzdl9NAf4ZsW/xW4s5zC+G5ttcIppmbOK u+00YkxzH8ysLreUApmZnjcc0NlqrJ7uGEyp2wtn02j8VSTl8NTGlC64BjhMENQM xwRCFhPj22IVp2qCdFGQY2kfM5X0iqaldy57rR9ZKyhep8jKo8NRS+RYjK/Ukh7j 6jmmt7gtMQhka9XkyWWJF5eoDGuetV6B -----END CERTIFICATE-----Generated at Mon Jul 21 09:09:41 2025 by rpki-client