$ rpki-client -vvf rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft File: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft (raw, json) Hash identifier: 8g5oa78UTnzWQUPENcE/8VANFKgpCGJ3nL04pzAxALw= Subject key identifier: 2C:7C:28:BE:97:E6:20:81:C5:C8:4F:D7:A1:4B:8E:E7:58:D9:B6:AE Authority key identifier: 04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB Certificate issuer: /CN=A9196C96/serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB Certificate serial: 0645 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft Manifest number: 0640 Signing time: Wed 04 Jun 2025 22:28:35 +0000 Manifest this update: Wed 04 Jun 2025 22:28:35 +0000 Manifest next update: Wed 11 Jun 2025 22:28:35 +0000 Files and hashes: 1: BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl (hash: 37Sb9Z58koLIS4Q9FGEc65wlu21S/SG1xjkXX9a/mE0=) 2: D49D6040912311EB9DCD2A33C4F9AE02.roa (hash: aGdwS0nqIDPQmrDed9aL2d/6MVOmtEOC5VWnxIsYspE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 22:28:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1605 (0x645) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196C96, serialNumber=04627DCC9B80842D436371C4CDC73D19AB7E5DBB Validity Not Before: Jun 4 22:28:35 2025 GMT Not After : Jun 11 22:28:35 2025 GMT Subject: CN=6840c893-e1a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f9:bd:fc:c7:68:6e:4d:ad:92:93:09:53:2d: 31:24:74:2f:54:ff:ef:14:1b:75:e0:8c:6f:29:a7: 63:5f:e1:8f:14:6c:f2:ee:f4:a8:85:84:a8:10:6e: fe:6f:6f:59:4a:3c:3e:78:f6:0a:c7:e6:97:1b:79: c5:b1:b9:41:cb:64:b0:a3:d1:02:7a:b9:a2:7c:f1: d4:4c:c1:6a:ad:ac:3d:70:0a:d5:a8:b3:57:3a:a1: 19:d1:bc:83:b4:16:6c:80:d2:4c:9d:0a:cb:63:79: 03:24:dc:ba:8a:e8:f8:c2:a1:40:e8:fe:8c:2c:89: 07:f7:2c:25:6d:a0:31:bc:26:16:ea:48:d6:d2:7b: 0c:07:b8:5b:f5:88:2d:8b:7a:f0:c7:3a:72:fb:1b: 04:93:cd:a5:e9:14:cc:a9:91:06:8d:0c:f1:17:dd: 42:48:85:f3:0e:b5:39:af:86:be:3b:6f:2a:82:98: cd:b1:4e:04:44:59:61:e7:36:07:e4:3b:31:df:99: 9f:2f:a7:0d:37:ac:78:20:28:1e:97:32:40:83:0d: ee:06:ff:46:5e:5f:4a:26:e9:52:03:e3:a6:b9:f1: 03:68:2f:b0:d5:3b:24:4c:02:fc:91:35:d4:e8:5b: 71:15:76:e9:8e:df:78:13:74:92:e1:ee:63:58:86: 0f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:7C:28:BE:97:E6:20:81:C5:C8:4F:D7:A1:4B:8E:E7:58:D9:B6:AE X509v3 Authority Key Identifier: keyid:04:62:7D:CC:9B:80:84:2D:43:63:71:C4:CD:C7:3D:19:AB:7E:5D:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196C96/A8AE0F94904611EBBB84B227C4F9AE02/BGJ9zJuAhC1DY3HEzcc9Gat-Xbs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 03:6a:92:53:be:05:ee:be:2c:ff:14:1a:10:ec:f7:30:3a:54: 99:79:6f:9f:df:14:7b:5f:99:49:33:f3:fa:66:01:3f:e1:78: 84:1d:1a:27:09:90:14:b0:41:5e:63:4c:32:90:bd:a1:42:61: 9a:0f:52:78:60:40:04:2f:7b:28:85:43:3f:b0:45:fa:0e:8a: 80:e4:05:f7:1d:33:2a:16:4c:ff:8b:7e:24:9f:71:b6:cb:08: 91:b9:f6:ca:c3:94:fe:fc:bb:79:d5:89:fe:14:bf:24:35:31: a1:da:95:73:15:67:92:29:6a:34:e4:a8:ef:68:45:23:84:6f: 9e:31:33:54:58:55:bc:ba:a1:46:73:9b:e6:a0:dd:10:a0:2d: bf:2c:24:68:62:bf:3a:07:3f:ef:23:29:a1:76:37:43:62:cf: bf:70:72:6c:32:fa:c6:66:3c:8b:20:cc:a6:a5:48:b5:70:16: 4a:db:fc:b0:4c:45:f5:e9:35:05:2b:1f:52:ff:c6:bc:a9:77: c4:7e:39:04:df:55:91:83:e5:9a:d9:48:c2:1e:b9:ac:5d:b5: 4f:b4:3b:72:be:1a:2c:90:a5:00:1a:6c:d5:a5:bc:92:d6:31: 99:ba:80:10:17:08:41:80:c7:54:01:de:8d:26:96:96:da:0a: d9:a7:e4:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTZDOTYxMTAvBgNVBAUTKDA0NjI3RENDOUI4MDg0MkQ0MzYzNzFDNENEQzczRDE5 QUI3RTVEQkIwHhcNMjUwNjA0MjIyODM1WhcNMjUwNjExMjIyODM1WjAYMRYwFAYD VQQDEw02ODQwYzg5My1lMWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Pm9/Mdobk2tkpMJUy0xJHQvVP/vFBt14IxvKadjX+GPFGzy7vSohYSoEG7+ b29ZSjw+ePYKx+aXG3nFsblBy2Swo9ECermifPHUTMFqraw9cArVqLNXOqEZ0byD tBZsgNJMnQrLY3kDJNy6iuj4wqFA6P6MLIkH9ywlbaAxvCYW6kjW0nsMB7hb9Ygt i3rwxzpy+xsEk82l6RTMqZEGjQzxF91CSIXzDrU5r4a+O28qgpjNsU4ERFlh5zYH 5Dsx35mfL6cNN6x4ICgelzJAgw3uBv9GXl9KJulSA+OmufEDaC+w1TskTAL8kTXU 6FtxFXbpjt94E3SS4e5jWIYPiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCx8KL6X 5iCBxchP16FLjudY2bauMB8GA1UdIwQYMBaAFARifcybgIQtQ2NxxM3HPRmrfl27 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NkM5Ni9BOEFFMEY5NDkw NDYxMUVCQkI4NEIyMjdDNEY5QUUwMi9CR0o5ekp1QWhDMURZM0hFemNjOUdhdC1Y YnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JHSjl6SnVBaEMxRFkzSEV6Y2M5R2F0LVhicy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NkM5Ni9BOEFFMEY5NDkwNDYxMUVCQkI4NEIyMjdDNEY5QUUwMi9CR0o5ekp1QWhD MURZM0hFemNjOUdhdC1YYnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQADapJTvgXuviz/FBoQ7PcwOlSZeW+f3xR7X5lJM/P6ZgE/4XiEHRon CZAUsEFeY0wykL2hQmGaD1J4YEAEL3sohUM/sEX6DoqA5AX3HTMqFkz/i34kn3G2 ywiRufbKw5T+/Lt51Yn+FL8kNTGh2pVzFWeSKWo05KjvaEUjhG+eMTNUWFW8uqFG c5vmoN0QoC2/LCRoYr86Bz/vIymhdjdDYs+/cHJsMvrGZjyLIMympUi1cBZK2/yw TEX16TUFKx9S/8a8qXfEfjkE31WRg+Wa2UjCHrmsXbVPtDtyvhoskKUAGmzVpbyS 1jGZuoAQFwhBgMdUAd6NJpaW2grZp+Qq -----END CERTIFICATE-----Generated at Thu Jun 5 20:06:45 2025 by rpki-client