$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json) Hash identifier: 03/RJFQ3+qkopxE74JJe7hHjdbl4rPjo5cwu7U/o1VA= Subject key identifier: 8C:83:88:DB:1F:3E:11:DA:48:34:60:B3:FB:89:46:0C:2D:0E:63:BF Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Certificate serial: 0583 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft Manifest number: 0570 Signing time: Wed 04 Jun 2025 19:34:44 +0000 Manifest this update: Wed 04 Jun 2025 19:34:44 +0000 Manifest next update: Wed 11 Jun 2025 19:34:44 +0000 Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: Km8SVWQLB3BphC0Ttw8pO/gjDzorTzdjEOm6mNH1jhY=) 2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: hN1FG4yB+En2c4wj8yUNEIMBBFanGUa7r/bmCbomayU=) 3: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: /T6Cx82NX6eIVhHP8WlrC3rkE3NEqsy8y14HZ45ur88=) 4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: r9rxwsZy05OBv79BaleZs2CDNDVKsWtQPtZMqmB3o+8=) 5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: MEl6w5nE9WmS9IMiK++pW3U+fqzMAGds8O/KdUZBrWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 19:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1411 (0x583) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Validity Not Before: Jun 4 19:34:44 2025 GMT Not After : Jun 11 19:34:44 2025 GMT Subject: CN=68409fd4-7afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:ea:7b:ad:d4:9d:dc:39:fb:e3:fe:d1:f8: 06:01:3a:22:b3:8e:b1:2b:89:14:3d:29:62:3a:f9: 49:f3:22:ae:b0:83:a6:75:77:8b:cf:b6:59:02:77: 30:a0:dc:a0:6c:ac:79:81:fb:37:34:31:42:70:1f: af:e9:8c:34:de:30:f2:9d:03:1e:a4:ac:7d:06:1d: 15:92:03:6e:d8:1b:de:81:35:f2:42:a6:0a:93:9a: 25:9d:e4:c4:cc:f4:f5:26:14:09:c1:da:73:e7:50: 62:2f:06:55:b8:46:34:6f:de:86:be:7b:d5:fe:f5: 9a:5f:b6:35:7e:b4:9c:df:93:ac:60:91:4e:c3:a6: e5:95:95:a5:f0:e4:84:c0:17:5a:21:25:3b:ef:f9: c2:97:1a:75:90:bc:58:5a:25:7d:a7:0c:b6:0e:16: 9d:94:2a:30:c3:f0:02:44:46:84:4c:6c:05:26:c5: ce:ff:aa:bf:67:9e:c1:08:3f:e7:e3:e8:e5:0d:89: 5d:0e:bb:da:89:ef:3a:f0:09:a8:3e:b4:01:6c:b2: ef:31:a0:10:99:6c:73:c0:5a:12:b3:d8:ea:e7:07: 92:41:47:0e:6f:98:59:10:f3:7d:39:0d:1e:72:f5: 84:0a:6c:18:17:bf:2b:51:47:0a:14:e6:41:35:19: 0f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:83:88:DB:1F:3E:11:DA:48:34:60:B3:FB:89:46:0C:2D:0E:63:BF X509v3 Authority Key Identifier: keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e1:56:05:36:59:5c:07:81:2a:22:fe:8f:22:66:cd:1f:b7: 6d:68:f3:95:57:f7:68:fc:1e:a0:b3:dc:8a:20:2d:d8:47:48: ce:80:7e:92:a7:07:04:e9:7f:c5:35:8b:eb:56:de:47:87:fc: dd:5c:ba:c1:91:07:bd:b7:59:9c:a7:e3:84:e9:fb:6d:fe:7e: 0d:be:65:da:1c:50:c2:cc:d1:52:c5:4c:67:14:10:14:c3:dc: 4a:36:0b:f5:c7:ee:79:9e:ee:77:a9:60:bd:00:c4:62:0a:ad: b8:71:bd:ae:8b:95:89:12:53:5d:66:f9:ae:e2:e7:3d:33:d2: 86:ea:33:6d:3b:71:d6:d7:4f:83:75:2c:ee:6e:47:66:41:3f: 16:5d:3d:e4:ef:ff:da:9b:4b:ec:c1:85:d5:da:e7:2a:4a:16: 7f:3d:fd:9d:9b:4d:66:3d:cf:67:72:93:7f:10:e5:e4:6c:7c: 39:fa:d5:12:9b:98:5d:f2:19:7b:c2:31:3e:45:fe:44:de:f5: 88:b7:d1:34:5f:f9:ee:41:0c:11:c6:c3:1a:a8:7e:6a:4d:93: 80:43:f8:fb:bc:5d:45:4c:3a:a4:61:14:3e:38:9c:7c:83:0b: e5:e6:c0:88:9c:b6:9a:7e:77:48:ee:ab:79:83:0e:5c:7f:5f: b7:74:a6:df -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE RUY4QzNEM0IwHhcNMjUwNjA0MTkzNDQ0WhcNMjUwNjExMTkzNDQ0WjAYMRYwFAYD VQQDEw02ODQwOWZkNC03YWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAur/qe63Undw5++P+0fgGATois46xK4kUPSliOvlJ8yKusIOmdXeLz7ZZAncw oNygbKx5gfs3NDFCcB+v6Yw03jDynQMepKx9Bh0VkgNu2BvegTXyQqYKk5olneTE zPT1JhQJwdpz51BiLwZVuEY0b96GvnvV/vWaX7Y1frSc35OsYJFOw6bllZWl8OSE wBdaISU77/nClxp1kLxYWiV9pwy2DhadlCoww/ACREaETGwFJsXO/6q/Z57BCD/n 4+jlDYldDrvaie868AmoPrQBbLLvMaAQmWxzwFoSs9jq5weSQUcOb5hZEPN9OQ0e cvWECmwYF78rUUcKFOZBNRkP7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyDiNsf PhHaSDRgs/uJRgwtDmO/MB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC8wQzQ3NDkwQUVBQjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVf WXA4ZUZ6aGZQZ19lLU1QVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBu4VYFNllcB4EqIv6PImbNH7dtaPOVV/do/B6gs9yKIC3YR0jOgH6S pwcE6X/FNYvrVt5Hh/zdXLrBkQe9t1mcp+OE6ftt/n4NvmXaHFDCzNFSxUxnFBAU w9xKNgv1x+55nu53qWC9AMRiCq24cb2ui5WJElNdZvmu4uc9M9KG6jNtO3HW10+D dSzubkdmQT8WXT3k7//am0vswYXV2ucqShZ/Pf2dm01mPc9ncpN/EOXkbHw5+tUS m5hd8hl7wjE+Rf5E3vWIt9E0X/nuQQwRxsMaqH5qTZOAQ/j7vF1FTDqkYRQ+OJx8 gwvl5sCInLaafndI7qt5gw5cf1+3dKbf -----END CERTIFICATE-----Generated at Thu Jun 5 19:54:52 2025 by rpki-client