$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: kCxmKdaFeQFwYs4w9lCE7ex9zSid++GFBf6kdXi7iZs= Subject key identifier: 72:9B:B0:8E:BA:DA:A2:56:02:FE:9A:00:9D:09:5A:7C:1A:C8:E5:4C Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: 59 Signing time: Mon 21 Jul 2025 07:25:46 +0000 Manifest this update: Mon 21 Jul 2025 07:25:46 +0000 Manifest next update: Mon 28 Jul 2025 07:25:46 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: cjSStWzFwd3yRXrjRBedPkUDdiHOvC/gMYaU0qWYudA=) 2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: /RmfZz46so9ge+fbPNaFv77MZSPZTzTOQnyx59sNwag=) 3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: b+8Vf+1PI1yNyvvstVRxJPifoMZ8KqBIQc0NBIzO5qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Validity Not Before: Jul 21 07:25:46 2025 GMT Not After : Jul 28 07:25:46 2025 GMT Subject: CN=687deb7a-b382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6a:70:d7:46:12:5d:2b:38:40:ff:4d:7d:4c: 48:59:00:62:40:18:a7:4c:e6:af:c0:b1:ac:d7:d9: 4b:35:6f:da:af:aa:96:00:5e:fc:69:69:00:e8:db: 97:b7:7d:3a:e5:0f:67:6b:ca:da:c6:3e:de:d4:e8: 67:2d:c0:c5:c2:40:a3:b7:07:5c:4e:02:65:cf:ef: f1:dd:f2:67:43:b2:30:18:67:8f:98:37:2d:59:45: 07:ec:ea:3b:ce:5b:16:1b:9d:ad:a5:20:e3:36:e2: eb:ec:af:bf:1c:73:98:dc:58:66:c4:e1:08:15:a8: df:81:3b:1d:0f:ae:14:2e:fe:f9:21:0d:ae:37:5d: 53:87:ce:4d:f3:eb:25:ef:2d:17:22:bb:05:49:75: f1:89:82:be:3f:31:f1:f6:94:89:bf:80:2b:88:cb: b9:b9:79:0a:2f:da:d9:38:2c:eb:ba:c0:4d:90:15: d3:51:05:7d:25:e6:91:22:5b:1e:9d:da:c1:ed:d9: 55:f3:44:70:51:49:b9:74:c3:e3:27:36:fb:ed:08: 50:de:48:d2:94:f9:ec:55:84:57:b9:3c:f3:a4:5f: 07:d6:cb:b5:ad:57:69:84:21:08:86:dd:18:f3:bc: 6b:9c:fe:52:5c:df:97:bc:a4:29:e0:65:82:00:a2: 2d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9B:B0:8E:BA:DA:A2:56:02:FE:9A:00:9D:09:5A:7C:1A:C8:E5:4C X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:87:f7:b1:56:f5:1c:83:86:fa:1b:cd:7f:79:e2:b4:73:98: c4:f7:f7:0c:11:d2:c3:5e:81:f6:3f:15:92:80:5b:73:ee:e2: 3d:2f:f7:1c:c6:23:0b:3a:50:c2:e6:e1:83:15:57:79:c0:2b: c2:44:51:d7:77:fd:66:2d:82:74:39:3c:8d:22:62:f4:b4:b1: a7:4f:1b:9d:a6:38:b3:c1:ad:ad:07:10:e5:79:b4:f9:73:d2: 50:dd:e3:b4:92:8e:d1:59:5d:2d:8e:78:cc:65:b5:51:4d:d4: c5:e1:08:0e:d0:77:fd:a3:78:bc:25:27:21:d9:0f:a4:9d:4a: 5c:96:77:68:72:3f:4e:01:d3:a0:3f:39:ca:4a:4e:24:ec:b0: 2b:48:7f:f4:2b:43:22:0f:9c:f7:29:15:db:df:e0:c6:b9:07: ae:c2:24:78:24:9b:42:40:79:cb:f2:0c:c0:10:9c:a3:b8:da: a0:5a:c8:d4:c9:1e:f3:74:4b:00:2c:c8:a5:9e:3d:9c:52:25: c5:c4:82:10:5c:b3:86:4b:9f:85:f5:81:4a:18:30:83:62:3c: 6a:84:38:e3:34:73:30:fb:74:70:74:33:11:88:5d:ac:cb:8e: 43:fd:71:4b:3c:61:06:35:fa:72:af:61:c8:93:9f:b2:a1:09: a0:e8:51:9d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTRDMTExMC8GA1UEBRMoMDQ3RUYxQTFDRjY1OTY2MzQ5ODY2NzY3NjU1NjQ4RUVG OTExMEM1QTAeFw0yNTA3MjEwNzI1NDZaFw0yNTA3MjgwNzI1NDZaMBgxFjAUBgNV BAMTDTY4N2RlYjdhLWIzODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIanDXRhJdKzhA/019TEhZAGJAGKdM5q/AsazX2Us1b9qvqpYAXvxpaQDo25e3 fTrlD2drytrGPt7U6GctwMXCQKO3B1xOAmXP7/Hd8mdDsjAYZ4+YNy1ZRQfs6jvO WxYbna2lIOM24uvsr78cc5jcWGbE4QgVqN+BOx0PrhQu/vkhDa43XVOHzk3z6yXv LRciuwVJdfGJgr4/MfH2lIm/gCuIy7m5eQov2tk4LOu6wE2QFdNRBX0l5pEiWx6d 2sHt2VXzRHBRSbl0w+MnNvvtCFDeSNKU+exVhFe5PPOkXwfWy7WtV2mEIQiG3Rjz vGuc/lJc35e8pCngZYIAoi1rAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcpuwjrra olYC/poAnQlafBrI5UwwHwYDVR0jBBgwFoAUBH7xoc9llmNJhmdnZVZI7vkRDFow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFNEMxLzM2NDQ4ODdBRTlC QjExRUZCQUFDOUQ3MEM0RjlBRTAyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRG by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQkg3eG9jOWxsbU5KaG1kblpWWkk3dmtSREZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF NEMxLzM2NDQ4ODdBRTlCQjExRUZCQUFDOUQ3MEM0RjlBRTAyL0JIN3hvYzlsbG1O SmhtZG5aVlpJN3ZrUkRGby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABGH97FW9RyDhvobzX954rRzmMT39wwR0sNegfY/FZKAW3Pu4j0v9xzG Iws6UMLm4YMVV3nAK8JEUdd3/WYtgnQ5PI0iYvS0sadPG52mOLPBra0HEOV5tPlz 0lDd47SSjtFZXS2OeMxltVFN1MXhCA7Qd/2jeLwlJyHZD6SdSlyWd2hyP04B06A/ OcpKTiTssCtIf/QrQyIPnPcpFdvf4Ma5B67CJHgkm0JAecvyDMAQnKO42qBayNTJ HvN0SwAsyKWePZxSJcXEghBcs4ZLn4X1gUoYMINiPGqEOOM0czD7dHB0MxGIXazL jkP9cUs8YQY1+nKvYciTn7KhCaDoUZ0= -----END CERTIFICATE-----Generated at Tue Jul 22 05:52:51 2025 by rpki-client