$ rpki-client -vvf rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft File: BCkMsk7u8KOnhxh8tP_HR96GFzE.mft (raw, json) Hash identifier: j2EsKzUv1jxIwHcGSJzGCh40RbkfjYSUKET0FPxJook= Subject key identifier: CE:85:DF:AA:EE:73:7F:5E:EB:8A:A8:DB:B9:E2:07:8A:A0:6D:9D:A7 Authority key identifier: 04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 Certificate issuer: /CN=A915F316/serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Certificate serial: 07D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft Manifest number: 07C9 Signing time: Fri 30 May 2025 21:21:12 +0000 Manifest this update: Fri 30 May 2025 21:21:12 +0000 Manifest next update: Fri 06 Jun 2025 21:21:12 +0000 Files and hashes: 1: BCkMsk7u8KOnhxh8tP_HR96GFzE.crl (hash: 56oqTvgEqveUKFbQS/mwh6UgMW3OIdgOEOMSzMEE6/Y=) 2: 21A84DDAB4C811EE98BFC52CC4F9AE02.roa (hash: 7SByllehiBQ/m40nHfrULflQ9saC9b0OPbuO6uvzNcs=) 3: F72BF19CB4C711EE84AE602CC4F9AE02.roa (hash: UAlWYyICZSxgcc4gu4nDjPvk7Se5PSi+jbJb8ttieow=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2007 (0x7d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F316, serialNumber=04290CB24EEEF0A3A787187CB4FFC747DE861731 Validity Not Before: May 30 21:21:12 2025 GMT Not After : Jun 6 21:21:12 2025 GMT Subject: CN=683a2148-8b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a5:ae:79:17:66:d0:74:da:d2:24:dd:3d:b3: d4:1b:64:eb:b5:67:b7:1b:ec:a9:97:1f:05:b3:58: 32:73:30:e6:1b:2d:99:92:d3:a2:fe:e9:d5:4a:d1: df:7b:66:e2:0a:6e:41:b6:0a:b7:4d:a8:05:00:89: ca:e4:4e:c8:99:32:a4:0e:90:95:3f:50:c7:7a:b5: 91:ef:5f:c0:b2:69:e8:a2:6d:4b:72:a3:4e:2e:0d: 70:47:2d:53:18:da:c3:9b:87:09:8a:2b:62:1d:61: 76:86:8e:c1:a4:72:87:13:4d:86:85:1d:a5:1c:e0: 94:da:1d:0e:fe:bd:4d:86:50:2b:e9:1e:36:7f:e4: ea:28:6c:60:bb:2a:a9:6d:4c:7e:31:ae:7b:2c:f5: 12:da:03:91:79:0d:cd:1f:cb:75:94:c5:8b:87:06: cb:be:1b:98:25:99:36:6e:31:04:e1:c2:9a:0c:ad: c9:22:4d:3b:cf:2d:6f:52:bf:23:bb:e6:ad:d9:f5: d2:89:42:57:3b:09:02:54:8a:2d:ce:5f:00:5f:82: b1:d8:a9:30:7d:03:4b:f9:be:ef:f6:d1:63:4d:a7: 8a:52:cd:da:40:4b:e4:d7:83:bf:de:cd:8e:d8:92: 00:d6:eb:e7:d8:09:43:22:e8:ec:c7:85:bd:f1:db: f9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:85:DF:AA:EE:73:7F:5E:EB:8A:A8:DB:B9:E2:07:8A:A0:6D:9D:A7 X509v3 Authority Key Identifier: keyid:04:29:0C:B2:4E:EE:F0:A3:A7:87:18:7C:B4:FF:C7:47:DE:86:17:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BCkMsk7u8KOnhxh8tP_HR96GFzE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F316/281B9D60F6D111EAA69DE429C4F9AE02/BCkMsk7u8KOnhxh8tP_HR96GFzE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:4d:75:b5:6c:e0:ba:5a:6c:8e:02:04:8b:96:06:04:97:1f: 58:e3:f9:43:b0:12:d5:36:f4:53:ff:db:d1:b1:40:84:8f:41: 3c:ef:4e:b8:3d:20:4e:fe:5e:be:9b:b2:3c:f7:86:28:fb:58: 0d:f9:30:16:3d:fc:ca:ed:a4:58:55:a8:8e:37:cf:34:84:e2: db:30:99:d3:5d:b1:a3:aa:c9:c0:93:39:99:de:92:2e:46:72: 96:ec:5a:2a:9c:87:fd:3d:e2:90:29:f0:5e:98:40:3b:c1:b2: ff:35:bf:d6:a2:7b:49:9d:3c:5e:9b:ac:68:01:0c:2d:a8:6a: 43:e3:ec:3a:81:05:c4:ac:2c:ad:13:4e:56:27:30:d1:fb:59: 81:89:24:0b:47:c5:93:0c:3a:9a:61:ce:b7:8c:8b:95:da:d3: ff:3c:4a:fa:ae:82:26:c0:4e:eb:7a:c6:26:68:24:81:57:ca: 0e:5e:57:3e:94:8e:8c:03:3f:ed:2f:eb:4c:11:75:02:fb:8b: 6c:3f:84:24:74:e7:9f:79:36:b1:cc:13:f7:31:82:3a:1e:1d: 3a:8c:e4:0c:d6:37:bb:6f:c6:34:20:03:65:90:2b:4e:fb:d7: e9:07:5d:36:bd:79:25:85:bb:0b:9e:2f:35:b7:39:cf:09:cf: d2:18:3c:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUYzMTYxMTAvBgNVBAUTKDA0MjkwQ0IyNEVFRUYwQTNBNzg3MTg3Q0I0RkZDNzQ3 REU4NjE3MzEwHhcNMjUwNTMwMjEyMTEyWhcNMjUwNjA2MjEyMTEyWjAYMRYwFAYD VQQDEw02ODNhMjE0OC04YjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6WueRdm0HTa0iTdPbPUG2TrtWe3G+yplx8Fs1gyczDmGy2ZktOi/unVStHf e2biCm5Btgq3TagFAInK5E7ImTKkDpCVP1DHerWR71/Asmnoom1LcqNOLg1wRy1T GNrDm4cJiitiHWF2ho7BpHKHE02GhR2lHOCU2h0O/r1NhlAr6R42f+TqKGxguyqp bUx+Ma57LPUS2gOReQ3NH8t1lMWLhwbLvhuYJZk2bjEE4cKaDK3JIk07zy1vUr8j u+at2fXSiUJXOwkCVIotzl8AX4Kx2KkwfQNL+b7v9tFjTaeKUs3aQEvk14O/3s2O 2JIA1uvn2AlDIujsx4W98dv5+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM6F36ru c39e64qo27niB4qgbZ2nMB8GA1UdIwQYMBaAFAQpDLJO7vCjp4cYfLT/x0fehhcx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjMxNi8yODFCOUQ2MEY2 RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThLT25oeGg4dFBfSFI5NkdG ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JDa01zazd1OEtPbmh4aDh0UF9IUjk2R0Z6RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 RjMxNi8yODFCOUQ2MEY2RDExMUVBQTY5REU0MjlDNEY5QUUwMi9CQ2tNc2s3dThL T25oeGg4dFBfSFI5NkdGekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWTXW1bOC6WmyOAgSLlgYElx9Y4/lDsBLVNvRT/9vRsUCEj0E87064 PSBO/l6+m7I894Yo+1gN+TAWPfzK7aRYVaiON880hOLbMJnTXbGjqsnAkzmZ3pIu RnKW7FoqnIf9PeKQKfBemEA7wbL/Nb/WontJnTxem6xoAQwtqGpD4+w6gQXErCyt E05WJzDR+1mBiSQLR8WTDDqaYc63jIuV2tP/PEr6roImwE7resYmaCSBV8oOXlc+ lI6MAz/tL+tMEXUC+4tsP4QkdOefeTaxzBP3MYI6Hh06jOQM1je7b8Y0IANlkCtO +9fpB102vXklhbsLni81tznPCc/SGDwX -----END CERTIFICATE-----Generated at Sat May 31 17:58:41 2025 by rpki-client