$ rpki-client -vvf rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft File: BSmF8r4ox5507_TbTHFCKEVHc1w.mft (raw, json) Hash identifier: NmyXNPrGGaWK3CYDmzo9Vt6dCPh9NxAbU1tO2r7LwqM= Subject key identifier: E5:80:09:30:C7:9D:86:EA:A9:AD:02:9A:C2:CC:2E:A0:78:68:7A:7F Authority key identifier: 05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C Certificate issuer: /CN=A9151A79/serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft Manifest number: 0186 Signing time: Thu 05 Jun 2025 03:01:22 +0000 Manifest this update: Thu 05 Jun 2025 03:01:22 +0000 Manifest next update: Thu 12 Jun 2025 03:01:21 +0000 Files and hashes: 1: BSmF8r4ox5507_TbTHFCKEVHc1w.crl (hash: FGUBXqxEXqCrALIkpYpNo2J2Wk7e5b9BaeYDvKp2EkE=) 2: A799F54AF1F111EE9D899046C4F9AE02.roa (hash: Q3/I4xZV8CvWyhr+A+P9zzW5K8pcc6S3V6pLPjC2BoQ=) 3: EA22589E373C11F0909EF25DC4F9AE02.roa (hash: pK7K0oDGB09OEHam5uLFYf312YyVDqFKY5nBRiwk3eo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 03:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9151A79, serialNumber=052985F2BE28C79E74EFF4DB4C7142284547735C Validity Not Before: Jun 5 03:01:22 2025 GMT Not After : Jun 12 03:01:21 2025 GMT Subject: CN=68410882-5126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:56:3a:45:eb:40:42:57:92:6f:ff:b9:7d:f4: 81:d1:12:7b:de:88:92:69:88:b6:17:08:cf:9d:09: e8:79:75:11:0a:a3:f7:32:b8:e0:23:ca:5b:78:87: a3:61:5d:ce:d0:c2:3e:58:7b:77:5a:3c:b2:d9:4d: f6:0e:b4:1c:65:0a:5b:86:f6:aa:e0:c0:7a:eb:76: 18:f8:4d:5d:34:f2:3e:d6:81:60:f6:e7:ac:d3:26: 23:22:23:04:f3:3f:45:2d:d4:a8:1c:db:d8:52:c8: 27:c9:13:3b:3a:89:58:fa:56:e2:3e:73:34:6c:ed: 40:8a:13:86:8c:bc:7f:81:7f:16:14:95:75:46:d0: 87:c7:1f:e7:3f:c9:86:1a:80:fe:a2:1e:bd:9b:8f: c1:62:13:65:4c:dd:ff:00:c6:8a:3b:ab:05:82:08: 69:fa:e7:be:09:e9:2e:a6:05:95:9b:e9:80:b8:b5: c3:5c:cb:6a:b1:a4:e7:cc:5a:23:29:78:99:95:b2: 04:2f:b0:9e:cd:a1:f5:36:61:77:68:de:4d:96:65: 48:10:72:65:1a:64:44:c2:22:ca:ac:68:78:ff:d8: 23:3b:b5:8a:c5:af:f4:94:52:67:ad:c8:03:6b:9d: 36:54:4a:50:46:85:d8:fc:72:fc:17:30:61:59:b6: 8a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:80:09:30:C7:9D:86:EA:A9:AD:02:9A:C2:CC:2E:A0:78:68:7A:7F X509v3 Authority Key Identifier: keyid:05:29:85:F2:BE:28:C7:9E:74:EF:F4:DB:4C:71:42:28:45:47:73:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BSmF8r4ox5507_TbTHFCKEVHc1w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151A79/D4CA15C0F94711ED88C18746C4F9AE02/BSmF8r4ox5507_TbTHFCKEVHc1w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:e8:55:99:20:28:d5:36:95:50:4c:ca:bf:09:53:29:eb:93: 6b:ee:dd:34:ef:8e:1b:43:b9:a0:f5:5d:41:d3:3b:6d:b0:2d: a7:70:98:d9:74:74:de:40:8b:8e:b6:1e:a0:1e:e3:b6:3c:8a: 32:a4:54:86:46:80:8d:8b:b2:df:88:48:5f:4e:06:7e:1e:0e: 8b:38:35:8b:8a:80:06:fe:83:ad:dd:23:19:e9:4c:f1:2c:d2: 52:26:47:77:ed:08:8d:ab:c5:e7:b6:39:40:44:1f:c1:86:c7: 78:04:ef:3a:dc:b8:ab:2e:77:a1:b1:a4:14:bb:7e:c3:ee:7d: 18:e3:2d:12:1e:49:b3:67:df:6f:b1:1b:2e:b2:08:6f:74:60: 2d:86:f5:d9:39:16:6a:7a:63:77:11:42:05:ae:8d:69:2e:a0: 89:77:57:11:ed:78:69:fb:58:f7:a4:57:42:a0:4a:ab:1a:1b: 37:47:d4:69:9b:d5:c0:08:7b:64:e8:2d:e4:12:c5:21:42:eb: 51:6c:25:ec:8e:84:78:30:42:b0:63:6c:1a:26:88:46:46:e5: 4c:2f:ac:50:2a:55:e3:f8:a4:80:31:76:e6:aa:dd:38:3a:5b: 72:7f:98:0e:76:4d:75:a0:59:10:ca:2e:d4:1d:17:a4:12:1f: f6:b9:0d:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTFBNzkxMTAvBgNVBAUTKDA1Mjk4NUYyQkUyOEM3OUU3NEVGRjREQjRDNzE0MjI4 NDU0NzczNUMwHhcNMjUwNjA1MDMwMTIyWhcNMjUwNjEyMDMwMTIxWjAYMRYwFAYD VQQDEw02ODQxMDg4Mi01MTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1VY6RetAQleSb/+5ffSB0RJ73oiSaYi2FwjPnQnoeXURCqP3MrjgI8pbeIej YV3O0MI+WHt3Wjyy2U32DrQcZQpbhvaq4MB663YY+E1dNPI+1oFg9ues0yYjIiME 8z9FLdSoHNvYUsgnyRM7OolY+lbiPnM0bO1AihOGjLx/gX8WFJV1RtCHxx/nP8mG GoD+oh69m4/BYhNlTN3/AMaKO6sFgghp+ue+CekupgWVm+mAuLXDXMtqsaTnzFoj KXiZlbIEL7CezaH1NmF3aN5NlmVIEHJlGmREwiLKrGh4/9gjO7WKxa/0lFJnrcgD a502VEpQRoXY/HL8FzBhWbaKaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWACTDH nYbqqa0CmsLMLqB4aHp/MB8GA1UdIwQYMBaAFAUphfK+KMeedO/020xxQihFR3Nc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MUE3OS9ENENBMTVDMEY5 NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1NTA3X1RiVEhGQ0tFVkhj MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JTbUY4cjRveDU1MDdfVGJUSEZDS0VWSGMxdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 MUE3OS9ENENBMTVDMEY5NDcxMUVEODhDMTg3NDZDNEY5QUUwMi9CU21GOHI0b3g1 NTA3X1RiVEhGQ0tFVkhjMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB06FWZICjVNpVQTMq/CVMp65Nr7t00744bQ7mg9V1B0zttsC2ncJjZ dHTeQIuOth6gHuO2PIoypFSGRoCNi7LfiEhfTgZ+Hg6LODWLioAG/oOt3SMZ6Uzx LNJSJkd37QiNq8XntjlARB/Bhsd4BO863LirLnehsaQUu37D7n0Y4y0SHkmzZ99v sRsusghvdGAthvXZORZqemN3EUIFro1pLqCJd1cR7Xhp+1j3pFdCoEqrGhs3R9Rp m9XACHtk6C3kEsUhQutRbCXsjoR4MEKwY2waJohGRuVML6xQKlXj+KSAMXbmqt04 Oltyf5gOdk11oFkQyi7UHRekEh/2uQ1f -----END CERTIFICATE-----Generated at Thu Jun 5 19:53:48 2025 by rpki-client