$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft File: BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json) Hash identifier: BCbnwmANE1Dp7wg7cP1lA8Z996t437OGzG7yYwc1E58= Subject key identifier: D1:E2:0E:AE:82:77:F1:EA:31:F6:3D:5F:54:9E:49:3D:47:52:94:6B Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12 Certificate issuer: /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712 Certificate serial: 064A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft Manifest number: 063E Signing time: Thu 31 Jul 2025 23:46:50 +0000 Manifest this update: Thu 31 Jul 2025 23:46:49 +0000 Manifest next update: Thu 07 Aug 2025 23:46:49 +0000 Files and hashes: 1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: qc0wQnnV0AUqRRsf386BMRKoNOGPdplJCQ79rd6RgRU=) 2: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: NBdHfFLz3DL0xp9ly121d+fttg0f9aauvwFg8/4e9ds=) 3: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: LKITiJ4ISd4LnGgW0YqiQuvoGRC1GVrRJfh2GhffjxY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 23:46:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1610 (0x64a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712 Validity Not Before: Jul 31 23:46:49 2025 GMT Not After : Aug 7 23:46:49 2025 GMT Subject: CN=688c006a-016b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:95:61:a2:bd:a9:bc:51:0d:cd:db:d0:aa:60: 32:8a:0f:89:9d:d8:b1:a8:15:50:f0:55:dd:33:25: f3:33:f6:97:a2:35:fc:8f:16:d0:19:3b:31:10:73: 9d:ff:b3:41:0a:fa:68:b7:84:ae:06:95:40:86:8b: bc:82:19:3d:d8:79:1e:0c:32:2a:c9:ec:f7:3a:8c: 68:8e:52:59:09:79:0e:1f:c9:46:c1:bf:e1:77:c4: fb:a5:7a:f8:f8:42:37:ef:73:e2:d0:32:d7:0c:88: 1c:98:ed:00:31:7a:d6:6f:e3:f3:dc:9e:04:68:ad: 59:9d:0f:6c:e2:98:20:83:7d:46:70:4b:a8:0f:df: 45:6c:cd:7c:e6:5c:ed:d1:ba:b7:ae:89:ad:fa:c7: 3d:fa:37:a5:a6:51:cc:13:a7:a6:6d:8e:b5:02:ac: 91:16:94:73:31:8f:97:10:5e:8e:86:d8:d8:de:85: 2a:0f:6c:cd:cd:97:90:58:09:77:df:2c:70:6f:d8: 53:f3:f2:e5:1a:4a:1d:3d:48:49:66:c8:3a:9f:5f: 1d:08:8b:70:77:77:57:cb:16:bc:ad:99:31:54:69: 9e:85:08:5d:bd:90:ee:21:bd:4d:2b:56:ab:99:2d: c6:a8:b7:f2:5a:f1:d6:14:22:7a:9b:de:bd:f0:2a: e8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E2:0E:AE:82:77:F1:EA:31:F6:3D:5F:54:9E:49:3D:47:52:94:6B X509v3 Authority Key Identifier: keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:eb:8d:f8:e0:ae:8d:78:bf:97:52:9e:ab:48:5f:7e:30:47: 4f:3f:31:85:65:96:70:4d:4e:fb:d7:73:47:a7:63:89:54:54: 7c:ec:b7:66:1c:ae:37:da:65:9a:08:f0:d7:f3:9a:7b:48:8c: 0b:b9:41:12:22:c4:6f:9e:bb:7b:98:dd:a9:67:ca:8c:e4:16: 46:96:be:25:c6:b7:5d:b1:71:5b:44:e2:cd:f9:36:89:95:f0: ec:75:42:72:68:82:ca:6e:22:55:a7:cc:e5:00:e4:3d:6c:16: 17:c9:22:f8:95:6a:1d:d0:3b:be:c4:c7:5d:6c:ff:32:f1:ec: a3:d3:f7:c6:99:37:f5:e5:cd:9b:08:7f:1a:57:68:ea:85:66: 73:c9:a0:a8:e0:d0:0e:a8:7b:69:1f:6d:4d:c4:88:a2:03:ac: 3d:fc:62:d9:2b:29:33:43:63:83:e3:62:5c:03:1c:7d:81:e8: 84:7a:5f:dc:c7:a1:2e:37:1f:0c:50:29:ab:53:aa:67:27:2a: 83:73:00:38:b8:4d:8b:17:19:cc:84:04:73:8d:e2:32:1a:84: c2:91:95:f9:6d:a4:5b:6d:18:04:57:62:43:ef:b1:51:29:c1: 2b:ef:41:10:95:66:38:96:57:2b:51:40:e4:82:0a:54:c2:e7: 33:7f:92:33 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI1RDMxMTAvBgNVBAUTKDA1QzMyRjVENkZEOTU2N0NCNzAwMDVCMUQ3NEE0MUE4 NUI1QkU3MTIwHhcNMjUwNzMxMjM0NjQ5WhcNMjUwODA3MjM0NjQ5WjAYMRYwFAYD VQQDEw02ODhjMDA2YS0wMTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAupVhor2pvFENzdvQqmAyig+JndixqBVQ8FXdMyXzM/aXojX8jxbQGTsxEHOd /7NBCvpot4SuBpVAhou8ghk92HkeDDIqyez3OoxojlJZCXkOH8lGwb/hd8T7pXr4 +EI373Pi0DLXDIgcmO0AMXrWb+Pz3J4EaK1ZnQ9s4pggg31GcEuoD99FbM185lzt 0bq3romt+sc9+jelplHME6embY61AqyRFpRzMY+XEF6OhtjY3oUqD2zNzZeQWAl3 3yxwb9hT8/LlGkodPUhJZsg6n18dCItwd3dXyxa8rZkxVGmehQhdvZDuIb1NK1ar mS3GqLfyWvHWFCJ6m9698CrokQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNHiDq6C d/HqMfY9X1SeST1HUpRrMB8GA1UdIwQYMBaAFAXDL11v2VZ8twAFsddKQahbW+cS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVEMy82Q0E5RDY5MEEx QTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZueTNBQVd4MTBwQnFGdGI1 eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JjTXZYV19aVm55M0FBV3gxMHBCcUZ0YjV4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjVEMy82Q0E5RDY5MEExQTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZu eTNBQVd4MTBwQnFGdGI1eEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBC64344K6NeL+XUp6rSF9+MEdPPzGFZZZwTU7713NHp2OJVFR87Ldm HK432mWaCPDX85p7SIwLuUESIsRvnrt7mN2pZ8qM5BZGlr4lxrddsXFbROLN+TaJ lfDsdUJyaILKbiJVp8zlAOQ9bBYXySL4lWod0Du+xMddbP8y8eyj0/fGmTf15c2b CH8aV2jqhWZzyaCo4NAOqHtpH21NxIiiA6w9/GLZKykzQ2OD42JcAxx9geiEel/c x6EuNx8MUCmrU6pnJyqDcwA4uE2LFxnMhARzjeIyGoTCkZX5baRbbRgEV2JD77FR KcEr70EQlWY4llcrUUDkggpUwuczf5Iz -----END CERTIFICATE-----Generated at Sat Aug 2 06:56:58 2025 by rpki-client