$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft File: BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft (raw, json) Hash identifier: dQ6e5K84nj1vl1riw2ln1R8JhwhmgBL3J+M54qHbMKY= Subject key identifier: 7B:E7:87:5F:A5:39:8E:F9:59:26:29:7E:B3:CA:15:F4:66:15:BC:FC Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE Certificate issuer: /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE Certificate serial: 0665 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft Manifest number: 064A Signing time: Tue 10 Jun 2025 22:39:56 +0000 Manifest this update: Tue 10 Jun 2025 22:39:55 +0000 Manifest next update: Tue 17 Jun 2025 22:39:55 +0000 Files and hashes: 1: BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl (hash: CpbYJPpIckPuN8PUWfcx8XfmX0C1vP4no3Obtcf9Cok=) 2: BFC00D26D18011EEB673FD69C4F9AE02.roa (hash: Cvx2yiI1oVNG4J0lF2K+6YI8jeJN0PgnkGUOcXS5I48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 22:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1637 (0x665) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184279, serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE Validity Not Before: Jun 10 22:39:55 2025 GMT Not After : Jun 17 22:39:55 2025 GMT Subject: CN=6848b43b-974a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a2:c9:52:c2:53:d2:44:ca:9c:d1:19:5e:59: 70:1d:aa:12:8d:1d:4f:41:04:ef:38:67:8a:bb:a6: 0a:ba:bd:e5:65:16:3e:25:50:92:a1:4e:58:ba:ce: 7b:d0:e1:5a:08:e2:07:ba:51:8d:0a:9b:25:0b:a0: 67:ed:09:75:c3:38:9d:68:7a:17:40:7e:99:93:5d: 69:e5:41:c1:63:83:be:42:2d:78:47:0b:17:67:4d: af:a6:97:26:b5:61:96:32:94:be:cb:1a:fb:b6:b8: e4:9e:0d:73:79:a4:24:80:99:57:a6:e8:be:8e:8f: dc:9b:1e:fd:b1:a8:7b:e7:f2:ea:f9:28:42:06:33: 94:fe:7b:3d:e7:ea:28:51:98:a5:01:6c:8b:7e:8b: 66:6f:c4:96:62:1a:07:79:14:45:38:b4:6a:01:3d: a3:5b:ac:6c:a9:36:97:bc:90:ac:bc:ab:ff:7a:97: 02:ea:2d:4e:f9:25:fd:d5:57:02:6e:39:87:29:36: b0:59:31:d2:f7:52:44:cb:b8:49:0e:df:93:87:cf: 17:e0:24:2e:cf:bb:bd:1e:5f:0d:f8:c8:e5:3d:be: 87:66:e0:6d:db:c9:59:20:9e:76:80:30:cb:e6:2d: ec:48:b4:c6:54:4c:6f:e5:14:f4:74:4e:dc:7a:17: 3b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E7:87:5F:A5:39:8E:F9:59:26:29:7E:B3:CA:15:F4:66:15:BC:FC X509v3 Authority Key Identifier: keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:48:8c:00:28:42:c3:2f:87:36:cb:6b:52:44:05:9c:c2:a4: d9:96:f2:1a:ca:5e:32:b7:85:93:87:6d:73:cb:9c:ad:61:d8: 59:ad:7e:82:e0:0f:a5:cc:69:fa:4c:d2:cb:01:a5:fa:c4:b7: 91:3c:d6:04:58:02:d8:10:e6:ae:0a:59:e6:5c:3b:4c:ec:78: 18:c3:ed:30:57:4a:ff:f7:30:56:52:c9:72:af:ba:63:a1:70: 00:1c:8f:f1:2f:32:f4:df:3c:08:a2:2e:e3:2e:d3:44:60:b1: 4d:61:b8:5d:1a:cb:31:d1:cc:c9:8b:a1:6c:87:f4:a5:da:a7: d1:07:b0:c2:da:92:19:d9:20:91:88:f3:63:fb:50:17:1a:2c: 2c:49:48:c3:d2:91:1d:b0:c9:1b:9f:80:db:20:ef:ce:44:46: a1:7c:79:29:f8:72:c8:2d:f0:eb:e7:6e:4d:36:7e:e1:1e:f4: 9e:e6:a2:46:bb:e9:3e:e3:63:eb:b8:a4:98:de:0b:50:7c:f7: be:20:a0:42:7f:93:d8:00:0d:a6:8d:dd:6b:48:db:02:ad:45: 2c:15:d3:7c:05:54:9c:69:93:ec:3e:c0:82:3d:3e:85:c1:79: f4:99:86:6a:23:34:e7:0a:a4:a8:d9:3d:02:4e:fb:47:9b:03: 8b:2f:31:47 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyNzkxMTAvBgNVBAUTKDA2RDI4QzQzRUFFNDNGMUY1REE1NkM2QTIxRTZDQUJC RkNCODhEQkUwHhcNMjUwNjEwMjIzOTU1WhcNMjUwNjE3MjIzOTU1WjAYMRYwFAYD VQQDEw02ODQ4YjQzYi05NzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5qLJUsJT0kTKnNEZXllwHaoSjR1PQQTvOGeKu6YKur3lZRY+JVCSoU5Yus57 0OFaCOIHulGNCpslC6Bn7Ql1wzidaHoXQH6Zk11p5UHBY4O+Qi14RwsXZ02vppcm tWGWMpS+yxr7trjkng1zeaQkgJlXpui+jo/cmx79sah75/Lq+ShCBjOU/ns95+oo UZilAWyLfotmb8SWYhoHeRRFOLRqAT2jW6xsqTaXvJCsvKv/epcC6i1O+SX91VcC bjmHKTawWTHS91JEy7hJDt+Th88X4CQuz7u9Hl8N+MjlPb6HZuBt28lZIJ52gDDL 5i3sSLTGVExv5RT0dE7cehc7NwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHvnh1+l OY75WSYpfrPKFfRmFbz8MB8GA1UdIwQYMBaAFAbSjEPq5D8fXaVsaiHmyrv8uI2+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI3OS8wRTM2MUJCNjlD MTUxMUVCOTk3QUJENTlDNEY5QUUwMi9CdEtNUS1ya1B4OWRwV3hxSWViS3VfeTRq YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0S01RLXJrUHg5ZHBXeHFJZWJLdV95NGpiNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI3OS8wRTM2MUJCNjlDMTUxMUVCOTk3QUJENTlDNEY5QUUwMi9CdEtNUS1ya1B4 OWRwV3hxSWViS3VfeTRqYjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdSIwAKELDL4c2y2tSRAWcwqTZlvIayl4yt4WTh21zy5ytYdhZrX6C 4A+lzGn6TNLLAaX6xLeRPNYEWALYEOauClnmXDtM7HgYw+0wV0r/9zBWUslyr7pj oXAAHI/xLzL03zwIoi7jLtNEYLFNYbhdGssx0czJi6Fsh/Sl2qfRB7DC2pIZ2SCR iPNj+1AXGiwsSUjD0pEdsMkbn4DbIO/OREahfHkp+HLILfDr525NNn7hHvSe5qJG u+k+42PruKSY3gtQfPe+IKBCf5PYAA2mjd1rSNsCrUUsFdN8BVScaZPsPsCCPT6F wXn0mYZqIzTnCqSo2T0CTvtHmwOLLzFH -----END CERTIFICATE-----Generated at Wed Jun 11 23:47:21 2025 by rpki-client