$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft File: BNhIIeE7gDAzVMS-NDMdURHyvKY.mft (raw, json) Hash identifier: yyWQCxH3d9XBwRFwruKmmFqiWDJKxqLDTYmrPkYgiZQ= Subject key identifier: AF:43:57:6B:D7:BB:59:CD:DA:D9:16:56:D2:02:3F:5B:B1:23:D1:9F Authority key identifier: 04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6 Certificate issuer: /CN=A91F0721/serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6 Certificate serial: 01C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft Manifest number: 01C4 Signing time: Sat 19 Jul 2025 03:07:23 +0000 Manifest this update: Sat 19 Jul 2025 03:07:23 +0000 Manifest next update: Sat 26 Jul 2025 03:07:23 +0000 Files and hashes: 1: BNhIIeE7gDAzVMS-NDMdURHyvKY.crl (hash: hn5SvH1NFenM8WXGj+PFIQTwoA/VMWlVoRfdmWqJ+co=) 2: 7659B89AADCC11ED84051211C4F9AE02.roa (hash: S0QCets6nYQwhXbRnwnSRy3OBYGEXLOm6h5sFxoClJ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 455 (0x1c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0721, serialNumber=04D84821E13B80303354C4BE34331D5111F2BCA6 Validity Not Before: Jul 19 03:07:23 2025 GMT Not After : Jul 26 03:07:23 2025 GMT Subject: CN=687b0beb-2593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3f:f2:ec:86:de:46:1b:1e:eb:29:87:35:4f: 76:0c:b7:36:ec:6f:26:9d:f6:1f:18:84:d9:26:d5: d1:a0:63:3f:e1:02:80:0d:e3:5d:b7:50:b9:26:71: 45:1b:2b:b6:99:22:54:88:fa:fd:73:89:54:f0:5e: 5c:99:67:76:e4:f5:f7:a5:16:35:b0:d5:69:6a:20: 07:15:2d:23:b6:de:71:d8:5e:90:86:b5:ad:0a:d4: 35:77:e1:9f:25:6a:8a:3c:f5:4c:62:ba:af:49:d4: ec:5b:58:c1:d4:c2:bc:20:b8:62:eb:01:07:50:27: 3d:e6:d5:48:2f:f4:2b:74:0f:5f:c2:33:53:20:2b: 14:e6:a2:f1:71:d8:30:f9:ea:1b:f2:1b:cb:a0:5b: c7:7e:dd:19:df:6c:2b:df:51:69:a8:86:ec:57:1e: 4d:1e:56:e8:4c:69:75:ec:67:59:7c:e3:5c:99:68: 90:03:ef:6a:5f:15:5e:2f:85:f6:7e:f5:df:a3:44: 34:71:4f:ce:52:d4:e3:03:8b:44:0a:09:8f:ba:36: 78:0b:50:79:b3:b3:67:97:34:9d:c1:6e:47:7c:cd: 18:a4:c2:8d:52:85:ec:62:a3:b2:2c:0c:f4:2b:22: b4:a9:7e:47:1e:e3:2c:7a:12:a1:f4:ed:ee:d8:a3: f0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:43:57:6B:D7:BB:59:CD:DA:D9:16:56:D2:02:3F:5B:B1:23:D1:9F X509v3 Authority Key Identifier: keyid:04:D8:48:21:E1:3B:80:30:33:54:C4:BE:34:33:1D:51:11:F2:BC:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BNhIIeE7gDAzVMS-NDMdURHyvKY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0721/C9127B3EADC811ED9216220EC4F9AE02/BNhIIeE7gDAzVMS-NDMdURHyvKY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 48:8a:86:70:b1:56:85:97:9d:98:2a:d2:94:f2:ab:45:54:47: f6:ca:fc:87:92:78:80:a2:01:fe:1c:e0:26:7c:ee:a1:05:89: e2:e9:20:a2:32:04:e7:b5:b3:3f:04:8d:ad:93:7b:9e:d5:eb: 57:e3:46:35:9b:95:dd:dc:ca:dc:3e:f2:38:3d:87:2c:6f:99: 09:77:51:32:1a:ae:f4:e7:0a:a5:4c:4e:c3:39:65:52:72:11: 86:b0:a7:98:2b:fc:e5:7a:e0:da:78:f9:6f:c4:2e:36:df:44: fd:ec:f8:43:6c:aa:0d:30:b3:88:80:84:63:06:b5:75:79:22: 83:74:05:5c:42:1a:53:27:68:b8:5e:9d:49:85:2c:6d:77:97: 0b:8a:b8:51:5d:f0:78:95:49:a9:a6:75:ef:97:4a:3c:65:5c: a8:9d:52:7b:6a:cb:81:30:9d:f7:4f:8b:4a:81:35:29:60:48: 1d:7f:ec:16:ca:03:11:ca:d6:17:b3:af:13:3a:cb:b6:67:58: 8c:b7:63:0b:eb:fc:bc:fb:c0:8b:a4:67:85:f8:a7:c6:82:7f: 2a:59:bb:82:31:57:18:09:e6:78:a8:d6:06:6d:e2:96:ad:6b: dc:aa:6b:94:33:9b:a8:60:01:66:2c:a4:3e:f3:48:1c:09:8e: a5:51:35:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAccwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA3MjExMTAvBgNVBAUTKDA0RDg0ODIxRTEzQjgwMzAzMzU0QzRCRTM0MzMxRDUx MTFGMkJDQTYwHhcNMjUwNzE5MDMwNzIzWhcNMjUwNzI2MDMwNzIzWjAYMRYwFAYD VQQDEw02ODdiMGJlYi0yNTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyj/y7IbeRhse6ymHNU92DLc27G8mnfYfGITZJtXRoGM/4QKADeNdt1C5JnFF Gyu2mSJUiPr9c4lU8F5cmWd25PX3pRY1sNVpaiAHFS0jtt5x2F6QhrWtCtQ1d+Gf JWqKPPVMYrqvSdTsW1jB1MK8ILhi6wEHUCc95tVIL/QrdA9fwjNTICsU5qLxcdgw +eob8hvLoFvHft0Z32wr31FpqIbsVx5NHlboTGl17GdZfONcmWiQA+9qXxVeL4X2 fvXfo0Q0cU/OUtTjA4tECgmPujZ4C1B5s7NnlzSdwW5HfM0YpMKNUoXsYqOyLAz0 KyK0qX5HHuMsehKh9O3u2KPwswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9DV2vX u1nN2tkWVtICP1uxI9GfMB8GA1UdIwQYMBaAFATYSCHhO4AwM1TEvjQzHVER8rym MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDcyMS9DOTEyN0IzRUFE QzgxMUVEOTIxNjIyMEVDNEY5QUUwMi9CTmhJSWVFN2dEQXpWTVMtTkRNZFVSSHl2 S1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JOaElJZUU3Z0RBelZNUy1ORE1kVVJIeXZLWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MDcyMS9DOTEyN0IzRUFEQzgxMUVEOTIxNjIyMEVDNEY5QUUwMi9CTmhJSWVFN2dE QXpWTVMtTkRNZFVSSHl2S1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBIioZwsVaFl52YKtKU8qtFVEf2yvyHkniAogH+HOAmfO6hBYni6SCi MgTntbM/BI2tk3ue1etX40Y1m5Xd3MrcPvI4PYcsb5kJd1EyGq705wqlTE7DOWVS chGGsKeYK/zleuDaePlvxC4230T97PhDbKoNMLOIgIRjBrV1eSKDdAVcQhpTJ2i4 Xp1JhSxtd5cLirhRXfB4lUmppnXvl0o8ZVyonVJ7asuBMJ33T4tKgTUpYEgdf+wW ygMRytYXs68TOsu2Z1iMt2ML6/y8+8CLpGeF+KfGgn8qWbuCMVcYCeZ4qNYGbeKW rWvcqmuUM5uoYAFmLKQ+80gcCY6lUTX6 -----END CERTIFICATE-----Generated at Sun Jul 20 03:15:07 2025 by rpki-client