$ rpki-client -vvf rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft File: BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft (raw, json) Hash identifier: 9oL/MgX704T8xPusDwRW0BDg9FmmZiVmf+JZPcqVOLQ= Subject key identifier: 34:F5:0E:EA:39:7F:FB:BC:8F:7E:DA:0C:18:34:55:D3:96:CB:54:87 Authority key identifier: 06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24 Certificate issuer: /CN=A9122905/serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324 Certificate serial: 022A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft Manifest number: 0227 Signing time: Tue 01 Jul 2025 02:37:35 +0000 Manifest this update: Tue 01 Jul 2025 02:37:34 +0000 Manifest next update: Tue 08 Jul 2025 02:37:34 +0000 Files and hashes: 1: BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl (hash: IpIadOeF41k/QvlW0IjKHJi3MB8gyKZhMbB8oymLYRI=) 2: 8BFE9EA6335911EDBC60AC44C4F9AE02.roa (hash: PkaRAOyxeuH2U7UkwpCaJHtr/yLJ/iuQhH7B44HKa84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 02:37:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 554 (0x22a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9122905, serialNumber=0646C52291D5CD4DF4A0FF786784FCF528346324 Validity Not Before: Jul 1 02:37:34 2025 GMT Not After : Jul 8 02:37:34 2025 GMT Subject: CN=686349ef-17c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:40:36:23:09:ca:a7:ae:6f:0a:76:f5:f4:94: 45:e2:21:ae:66:0c:cc:53:05:8a:c2:9d:3b:25:70: 86:54:5e:de:84:b1:ab:7c:0c:0c:1a:0b:0a:82:f7: 3d:c7:29:82:22:7c:72:e6:0e:ed:e2:c0:27:a2:ca: 2d:32:3c:91:8d:8a:91:00:9c:af:36:d8:39:1c:d8: 5a:58:36:18:67:ef:cb:9e:ce:51:ee:7a:cd:06:62: 17:d5:bd:6a:d2:1a:08:1e:05:25:4f:25:56:a5:f4: 38:25:1c:36:08:e9:6e:9d:88:44:f2:de:c4:4c:aa: 97:c2:66:e9:53:59:06:5d:2a:5f:e4:66:c7:a5:5e: 93:df:09:65:2b:49:32:d7:60:c9:cc:3e:c7:91:61: fc:3a:aa:01:9e:08:42:de:ad:f9:75:87:58:6e:e6: 05:50:39:e2:5b:d3:f4:84:4f:b2:96:df:31:0e:dc: 6d:ef:98:e0:62:3a:0e:13:c8:64:fc:1e:a4:21:c7: 1d:bb:c9:cb:96:1f:67:ca:1c:3c:74:db:0b:47:8b: 7f:67:86:9c:e1:d8:ca:8e:f9:20:65:49:53:91:ed: f1:56:48:b0:be:42:8f:e5:4b:84:61:50:01:3d:52: b6:7f:6e:f0:3d:78:f5:91:4e:0a:4a:96:e6:66:77: 03:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F5:0E:EA:39:7F:FB:BC:8F:7E:DA:0C:18:34:55:D3:96:CB:54:87 X509v3 Authority Key Identifier: keyid:06:46:C5:22:91:D5:CD:4D:F4:A0:FF:78:67:84:FC:F5:28:34:63:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BkbFIpHVzU30oP94Z4T89Sg0YyQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122905/11EB086A335511ED943FA53BC4F9AE02/BkbFIpHVzU30oP94Z4T89Sg0YyQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fd:a6:c2:c0:5a:a7:08:07:41:bc:11:a5:39:a0:8e:0b:b0: 95:76:42:2a:f4:e8:af:ce:e3:4c:be:f7:f0:d8:ce:ec:89:cc: 68:cc:4f:3e:27:a8:b5:76:e4:ae:58:23:f6:02:49:7d:50:f9: 45:5b:53:2b:4c:d0:08:02:fb:d9:e2:fb:21:01:27:ae:eb:15: 88:17:cb:ab:67:33:4c:db:6c:bd:ea:45:61:07:d7:40:df:f4: 1f:95:42:ac:9e:2f:02:a2:f9:bc:eb:f5:0b:64:e4:40:b9:55: a8:af:3e:70:98:0f:db:a4:cd:a5:0b:ad:8e:cf:41:16:b6:55: f9:1d:7b:ad:32:b0:0a:e4:4f:15:a6:47:af:94:da:03:73:45: 31:80:ef:f4:93:b2:04:6d:8e:b0:4c:a4:79:6e:40:0a:67:5c: 01:b2:8a:e2:a5:7c:93:9c:b2:42:35:fc:e1:c1:a4:d6:49:c2: 7c:8e:b9:e5:17:3e:56:7c:fe:36:84:39:d0:39:78:d1:ab:d6: d5:31:ad:8b:1f:40:0f:f6:ea:9a:80:89:64:d2:04:ad:20:7b: b4:f6:5b:eb:8b:69:8f:9d:8d:ae:8b:37:6e:a3:2b:f9:ff:89: d6:db:12:7f:2d:30:dd:fd:b7:1b:f4:ba:fb:4c:1c:ee:c2:28: 5e:e8:5c:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjI5MDUxMTAvBgNVBAUTKDA2NDZDNTIyOTFENUNENERGNEEwRkY3ODY3ODRGQ0Y1 MjgzNDYzMjQwHhcNMjUwNzAxMDIzNzM0WhcNMjUwNzA4MDIzNzM0WjAYMRYwFAYD VQQDEw02ODYzNDllZi0xN2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0A2IwnKp65vCnb19JRF4iGuZgzMUwWKwp07JXCGVF7ehLGrfAwMGgsKgvc9 xymCInxy5g7t4sAnosotMjyRjYqRAJyvNtg5HNhaWDYYZ+/Lns5R7nrNBmIX1b1q 0hoIHgUlTyVWpfQ4JRw2COlunYhE8t7ETKqXwmbpU1kGXSpf5GbHpV6T3wllK0ky 12DJzD7HkWH8OqoBnghC3q35dYdYbuYFUDniW9P0hE+ylt8xDtxt75jgYjoOE8hk /B6kIccdu8nLlh9nyhw8dNsLR4t/Z4ac4djKjvkgZUlTke3xVkiwvkKP5UuEYVAB PVK2f27wPXj1kU4KSpbmZncDjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDT1Duo5 f/u8j37aDBg0VdOWy1SHMB8GA1UdIwQYMBaAFAZGxSKR1c1N9KD/eGeE/PUoNGMk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMjkwNS8xMUVCMDg2QTMz NTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpVMzBvUDk0WjRUODlTZzBZ eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JrYkZJcEhWelUzMG9QOTRaNFQ4OVNnMFl5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy MjkwNS8xMUVCMDg2QTMzNTUxMUVEOTQzRkE1M0JDNEY5QUUwMi9Ca2JGSXBIVnpV MzBvUDk0WjRUODlTZzBZeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb/abCwFqnCAdBvBGlOaCOC7CVdkIq9OivzuNMvvfw2M7sicxozE8+ J6i1duSuWCP2Akl9UPlFW1MrTNAIAvvZ4vshASeu6xWIF8urZzNM22y96kVhB9dA 3/QflUKsni8Covm86/ULZORAuVWorz5wmA/bpM2lC62Oz0EWtlX5HXutMrAK5E8V pkevlNoDc0UxgO/0k7IEbY6wTKR5bkAKZ1wBsoripXyTnLJCNfzhwaTWScJ8jrnl Fz5WfP42hDnQOXjRq9bVMa2LH0AP9uqagIlk0gStIHu09lvri2mPnY2uizduoyv5 /4nW2xJ/LTDd/bcb9Lr7TBzuwihe6FyH -----END CERTIFICATE-----Generated at Tue Jul 1 19:37:16 2025 by rpki-client