$ rpki-client -vvf rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft File: BQFHuU3J1svowLDxrQwBg6YHfDQ.mft (raw, json) Hash identifier: o1RfT26xxVX0MIcDpn4bHi4Wq4og92sS0ealuD3j0eM= Subject key identifier: 0E:DE:8B:EC:54:81:B1:D6:A4:CA:DE:76:96:9D:75:78:1F:C1:84:30 Authority key identifier: 05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34 Certificate issuer: /CN=A91629AA/serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34 Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft Manifest number: E0 Signing time: Sat 31 May 2025 05:06:27 +0000 Manifest this update: Sat 31 May 2025 05:06:27 +0000 Manifest next update: Sat 07 Jun 2025 05:06:27 +0000 Files and hashes: 1: BQFHuU3J1svowLDxrQwBg6YHfDQ.crl (hash: jS4ZrKbOSdsazcFLtOiAFu6Jf1eH+Jd8DLqxSs9T8nI=) 2: 1E347CDCE74A11EE8602742BC4F9AE02.roa (hash: RDRsbI0QCe3WCyYIAxbPkTT+7Ici1TKwxRZtpP0NFiU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91629AA, serialNumber=050147B94DC9D6CBE8C0B0F1AD0C0183A6077C34 Validity Not Before: May 31 05:06:27 2025 GMT Not After : Jun 7 05:06:27 2025 GMT Subject: CN=683a8e53-9b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:27:a8:0b:10:f4:ba:94:b0:1e:12:cc:aa:15: 27:fa:e8:c0:d7:be:92:64:58:86:a1:32:b6:80:1c: 6b:4d:36:64:de:ee:2d:7d:7e:88:87:b1:a1:ad:e0: 47:db:a0:d1:a0:7e:5b:d0:9a:f4:e6:5d:77:b0:a9: 32:9a:03:1c:24:f8:6a:07:6e:a3:fe:a1:c2:3b:b2: 6c:aa:ef:ed:f1:1e:de:2c:60:8c:60:c4:a3:86:fd: 76:e4:f8:e5:10:82:59:99:9e:be:e7:35:d5:f4:05: 32:1d:3b:eb:5e:4f:b0:0d:b4:e6:a2:27:25:6d:19: 12:6e:99:51:a5:43:e7:0d:3d:e1:72:8c:93:7c:c9: 1e:c2:1b:e1:8c:af:da:be:6e:79:fc:8b:eb:50:76: 0b:2b:d8:bb:94:bf:3e:97:43:7a:01:4b:9f:f9:0d: cd:02:77:0e:e7:c5:66:cd:19:d4:bf:70:d3:82:99: 56:f9:d6:08:f1:bb:b6:b4:18:e9:6f:52:a6:60:80: a0:85:5b:3d:a4:a4:aa:d7:3c:b0:0e:00:13:91:14: 80:e1:ab:88:17:1e:57:ff:30:10:d7:14:0f:a1:b1: d9:8b:c9:07:2f:f7:01:e6:c1:de:7a:9d:dd:fe:3e: 3a:53:02:8e:4c:57:05:d6:08:4a:3f:59:3b:40:ac: 9c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:DE:8B:EC:54:81:B1:D6:A4:CA:DE:76:96:9D:75:78:1F:C1:84:30 X509v3 Authority Key Identifier: keyid:05:01:47:B9:4D:C9:D6:CB:E8:C0:B0:F1:AD:0C:01:83:A6:07:7C:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQFHuU3J1svowLDxrQwBg6YHfDQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91629AA/5F0693F4E74911EEBC526F29C4F9AE02/BQFHuU3J1svowLDxrQwBg6YHfDQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:1e:05:aa:ff:12:9e:2c:ab:70:11:1f:b9:9d:30:76:55:bd: c4:97:d0:2e:cb:36:a7:69:c1:b8:25:4f:9c:7a:28:e4:dc:cd: 36:6d:76:e4:2d:67:43:47:c4:9f:5a:b1:1d:bb:e3:6d:3f:d9: 4e:aa:72:6b:d7:a3:5c:2c:26:91:8e:e7:05:54:86:ab:77:8d: b2:b6:f0:7e:0a:b9:ca:09:18:52:45:69:5d:a4:20:c6:d7:e3: 21:f6:04:ae:26:ba:20:ea:2e:97:d1:86:28:10:8a:7d:dd:2a: 77:90:01:17:a5:1a:40:a0:25:c9:e2:b8:c4:c7:f9:9f:23:e0: 7f:6a:a7:38:b7:7a:03:19:6c:23:69:ae:9f:79:ed:f3:f7:57: ba:53:87:68:92:2b:dd:06:7e:4a:0b:9d:d8:4d:4c:dd:fb:a0: 18:94:45:c5:53:5c:23:97:ac:dc:8e:55:fb:da:90:80:46:1b: 05:32:db:3f:a1:04:54:e5:73:cb:95:55:39:52:12:fa:8e:6a: 70:3e:e9:37:cd:54:6f:d1:db:dc:92:1b:c8:74:8b:c0:38:39: e1:e0:16:c0:43:64:4e:c7:e4:fb:33:e7:fe:3e:46:2f:2a:af: 9a:43:b8:ae:ae:87:66:3a:73:1b:68:3f:be:bb:c1:fb:b2:35: 7b:d4:36:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjI5QUExMTAvBgNVBAUTKDA1MDE0N0I5NERDOUQ2Q0JFOEMwQjBGMUFEMEMwMTgz QTYwNzdDMzQwHhcNMjUwNTMxMDUwNjI3WhcNMjUwNjA3MDUwNjI3WjAYMRYwFAYD VQQDEw02ODNhOGU1My05YjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCeoCxD0upSwHhLMqhUn+ujA176SZFiGoTK2gBxrTTZk3u4tfX6Ih7GhreBH 26DRoH5b0Jr05l13sKkymgMcJPhqB26j/qHCO7Jsqu/t8R7eLGCMYMSjhv125Pjl EIJZmZ6+5zXV9AUyHTvrXk+wDbTmoiclbRkSbplRpUPnDT3hcoyTfMkewhvhjK/a vm55/IvrUHYLK9i7lL8+l0N6AUuf+Q3NAncO58VmzRnUv3DTgplW+dYI8bu2tBjp b1KmYICghVs9pKSq1zywDgATkRSA4auIFx5X/zAQ1xQPobHZi8kHL/cB5sHeep3d /j46UwKOTFcF1ghKP1k7QKychQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7ei+xU gbHWpMredpaddXgfwYQwMB8GA1UdIwQYMBaAFAUBR7lNydbL6MCw8a0MAYOmB3w0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MjlBQS81RjA2OTNGNEU3 NDkxMUVFQkM1MjZGMjlDNEY5QUUwMi9CUUZIdVUzSjFzdm93TER4clF3Qmc2WUhm RFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRRkh1VTNKMXN2b3dMRHhyUXdCZzZZSGZEUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MjlBQS81RjA2OTNGNEU3NDkxMUVFQkM1MjZGMjlDNEY5QUUwMi9CUUZIdVUzSjFz dm93TER4clF3Qmc2WUhmRFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsHgWq/xKeLKtwER+5nTB2Vb3El9AuyzanacG4JU+ceijk3M02bXbk LWdDR8SfWrEdu+NtP9lOqnJr16NcLCaRjucFVIard42ytvB+CrnKCRhSRWldpCDG 1+Mh9gSuJrog6i6X0YYoEIp93Sp3kAEXpRpAoCXJ4rjEx/mfI+B/aqc4t3oDGWwj aa6fee3z91e6U4dokivdBn5KC53YTUzd+6AYlEXFU1wjl6zcjlX72pCARhsFMts/ oQRU5XPLlVU5UhL6jmpwPuk3zVRv0dvckhvIdIvAODnh4BbAQ2ROx+T7M+f+PkYv Kq+aQ7iurodmOnMbaD++u8H7sjV71Da0 -----END CERTIFICATE-----Generated at Sat May 31 17:16:21 2025 by rpki-client