$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft File: BZOGVctKEp6P3fsJQsICA-N-G8E.mft (raw, json) Hash identifier: tvaRBgcI1NdFI2LYsinCiagkajcQfJW5bKNO/Uv/WNg= Subject key identifier: E5:CB:71:C6:BE:FC:0A:22:62:6F:98:62:B2:DE:C5:94:0C:70:BF:CC Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1 Certificate issuer: /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1 Certificate serial: 03BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft Manifest number: 03B8 Signing time: Wed 23 Jul 2025 01:07:30 +0000 Manifest this update: Wed 23 Jul 2025 01:07:30 +0000 Manifest next update: Wed 30 Jul 2025 01:07:30 +0000 Files and hashes: 1: BZOGVctKEp6P3fsJQsICA-N-G8E.crl (hash: c5oGZ4DVjkBerNdGuEpZIAj8ynYI1tJf4MlGbw9XM+4=) 2: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (hash: IDcKfjrcD970kwyhuo4LacbpxchYwfNjnBXBdXrdXbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 01:07:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 957 (0x3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF5AE, serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1 Validity Not Before: Jul 23 01:07:30 2025 GMT Not After : Jul 30 01:07:30 2025 GMT Subject: CN=688035d2-228a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e7:2e:d2:58:82:29:77:c9:df:e1:48:a1:6d: 0c:84:b1:c4:54:06:70:b3:4a:69:bb:f5:cd:6c:21: 6e:d9:44:b7:a8:68:4c:5e:f9:46:33:68:63:42:b4: 42:31:43:85:f2:f2:0f:c1:d2:f1:6a:bc:85:55:1d: a8:1e:64:71:5c:f5:67:a5:6b:78:a1:c5:c4:60:7d: 5d:a9:b5:c5:ae:f2:88:63:bd:72:9e:ab:4f:59:0d: 26:8b:f5:13:9f:bf:32:c5:88:14:e9:9f:20:13:ad: 19:76:49:cc:a9:05:8c:8c:e7:ba:91:5f:d0:fd:c7: 12:6d:e1:08:6d:75:35:5a:29:78:c9:d8:6a:e0:c7: e0:4b:5d:40:83:14:c3:39:97:9d:05:ad:00:2e:1d: 11:c3:e7:e7:05:c7:6c:8c:44:9d:9a:08:ff:5d:c8: cd:31:2c:6e:05:e5:c5:ec:77:43:ad:25:43:74:f0: 42:0a:b1:3c:61:e3:6b:12:03:9e:b6:81:cc:57:5f: 3f:63:f3:dd:f3:f3:02:ab:37:08:63:bf:25:d0:67: fb:6e:08:e1:72:d7:83:59:75:03:07:2b:19:96:8d: 6a:62:1c:30:00:a1:24:6b:fa:e3:63:df:fc:4a:0a: bb:64:3b:55:f5:7e:01:ae:50:9a:71:9d:3e:aa:bc: b5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CB:71:C6:BE:FC:0A:22:62:6F:98:62:B2:DE:C5:94:0C:70:BF:CC X509v3 Authority Key Identifier: keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d5:ed:c6:9a:c2:e4:d7:bc:a4:a5:ac:f9:a7:00:67:4d:f8:a8: e4:8f:08:57:c6:df:8f:89:32:00:01:c6:0e:40:f4:92:44:77: 75:e9:87:47:71:bd:22:1e:4e:92:d2:59:fd:b1:25:ee:97:92: 8e:4d:09:0f:c8:ed:69:79:f7:34:e5:b4:9d:78:81:6f:db:bb: b5:fa:1c:29:81:6f:fe:6c:96:6f:14:12:8c:65:4c:46:b5:88: 23:d0:7f:cf:b1:59:e5:62:64:e3:33:61:14:51:3c:91:7f:24: 4b:62:09:f2:73:a2:b2:d4:d7:db:ca:f6:21:e8:90:17:f1:70: b0:65:83:dc:91:1b:89:40:24:27:0e:aa:8d:68:14:8b:83:e0: 06:7e:f1:83:ba:18:94:70:43:68:f2:f8:88:d9:d1:eb:c3:8f: 85:22:fe:d2:e6:6e:da:de:5d:78:42:f9:a0:ae:f6:4f:83:49: 43:cc:12:f5:01:2c:ae:41:ba:da:f9:ef:c2:b1:32:7a:5e:40: 98:94:bf:be:c5:77:11:a6:a2:47:1e:79:ea:ad:4d:e0:0c:40: d7:03:96:0f:bf:eb:96:60:1a:e8:7e:24:47:2d:4e:e0:e2:6d: b7:31:ce:d3:8e:53:20:d2:3c:4f:9f:a4:f2:5e:01:97:75:7c: b4:9a:1e:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1QUUxMTAvBgNVBAUTKDA1OTM4NjU1Q0I0QTEyOUU4RkRERkIwOTQyQzIwMjAz RTM3RTFCQzEwHhcNMjUwNzIzMDEwNzMwWhcNMjUwNzMwMDEwNzMwWjAYMRYwFAYD VQQDEw02ODgwMzVkMi0yMjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwucu0liCKXfJ3+FIoW0MhLHEVAZws0ppu/XNbCFu2US3qGhMXvlGM2hjQrRC MUOF8vIPwdLxaryFVR2oHmRxXPVnpWt4ocXEYH1dqbXFrvKIY71ynqtPWQ0mi/UT n78yxYgU6Z8gE60ZdknMqQWMjOe6kV/Q/ccSbeEIbXU1Wil4ydhq4MfgS11AgxTD OZedBa0ALh0Rw+fnBcdsjESdmgj/XcjNMSxuBeXF7HdDrSVDdPBCCrE8YeNrEgOe toHMV18/Y/Pd8/MCqzcIY78l0Gf7bgjhcteDWXUDBysZlo1qYhwwAKEka/rjY9/8 Sgq7ZDtV9X4BrlCacZ0+qry1wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOXLcca+ /AoiYm+YYrLexZQMcL/MMB8GA1UdIwQYMBaAFAWThlXLShKej937CULCAgPjfhvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjVBRS81RTZFMjA3ODlB QTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0VwNlAzZnNKUXNJQ0EtTi1H OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JaT0dWY3RLRXA2UDNmc0pRc0lDQS1OLUc4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjVBRS81RTZFMjA3ODlBQTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0Vw NlAzZnNKUXNJQ0EtTi1HOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDV7caawuTXvKSlrPmnAGdN+KjkjwhXxt+PiTIAAcYOQPSSRHd16YdH cb0iHk6S0ln9sSXul5KOTQkPyO1pefc05bSdeIFv27u1+hwpgW/+bJZvFBKMZUxG tYgj0H/PsVnlYmTjM2EUUTyRfyRLYgnyc6Ky1NfbyvYh6JAX8XCwZYPckRuJQCQn DqqNaBSLg+AGfvGDuhiUcENo8viI2dHrw4+FIv7S5m7a3l14QvmgrvZPg0lDzBL1 ASyuQbra+e/CsTJ6XkCYlL++xXcRpqJHHnnqrU3gDEDXA5YPv+uWYBrofiRHLU7g 4m23Mc7TjlMg0jxPn6TyXgGXdXy0mh5R -----END CERTIFICATE-----Generated at Wed Jul 23 12:19:24 2025 by rpki-client