$ rpki-client -vvf rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft File: BgI9tGNNXG41YYCoL7vPgLlHir4.mft (raw, json) Hash identifier: 62u4BYzH0WCyQappTRBv8z4US8qXISPhsdK7e3SAeEU= Subject key identifier: 5C:62:A5:E5:D0:F4:09:16:AD:A2:35:3F:C5:D6:DB:87:5D:9D:82:6E Authority key identifier: 06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE Certificate issuer: /CN=A91490F7/serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft Manifest number: 015D Signing time: Sun 15 Jun 2025 03:14:32 +0000 Manifest this update: Sun 15 Jun 2025 03:14:32 +0000 Manifest next update: Sun 22 Jun 2025 03:14:32 +0000 Files and hashes: 1: BgI9tGNNXG41YYCoL7vPgLlHir4.crl (hash: 0W2kzMpRA37aZCKGsQ/Q8JxGxMTcfzErKaWbVkQSpwQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91490F7, serialNumber=06023DB4634D5C6E356180A82FBBCF80B9478ABE Validity Not Before: Jun 15 03:14:32 2025 GMT Not After : Jun 22 03:14:32 2025 GMT Subject: CN=684e3a98-5d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:da:15:12:c7:98:ad:9f:b4:62:8c:42:92:aa: 07:4a:18:e7:85:c0:ba:28:b4:95:f5:d1:3b:96:16: e6:ec:32:fc:9c:aa:d7:29:54:78:1f:5c:58:24:98: 13:04:22:e2:63:d9:82:f1:3b:f7:c5:e6:1f:32:4c: ad:a6:64:bd:17:e7:f0:45:1b:ad:61:c1:34:5e:bd: c1:d2:ca:cc:d4:45:b7:22:85:2a:f9:18:39:03:d8: c7:b2:47:27:a1:64:6d:bb:53:e5:22:04:2e:92:0a: c7:cb:80:ad:7b:cf:71:df:e7:9a:d8:c9:96:16:50: 7a:e9:78:f4:e1:96:96:5b:37:a2:9f:f7:f0:f0:f7: 51:5d:7e:ff:e4:c1:15:7c:8b:1e:e8:53:d6:20:c4: 88:8b:e2:9f:b6:2e:c3:e9:c8:c3:f2:68:39:3e:aa: c1:37:02:5e:c7:89:8e:9c:7e:26:41:a1:af:49:da: cc:0e:2a:0b:fa:9d:ad:26:e2:06:f9:82:8d:89:99: cc:8f:b3:e5:99:f9:43:68:04:6f:39:85:5f:f5:41: 47:62:df:7f:e0:a8:a5:06:77:b3:44:a7:87:29:12: b8:08:9c:88:93:8f:6e:b8:a6:d3:32:02:dc:bb:3f: 22:83:46:1d:87:b4:19:97:1d:7e:1d:94:88:eb:18: b7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:62:A5:E5:D0:F4:09:16:AD:A2:35:3F:C5:D6:DB:87:5D:9D:82:6E X509v3 Authority Key Identifier: keyid:06:02:3D:B4:63:4D:5C:6E:35:61:80:A8:2F:BB:CF:80:B9:47:8A:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BgI9tGNNXG41YYCoL7vPgLlHir4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91490F7/D8D3B4F235A911EE94B48D57C4F9AE02/BgI9tGNNXG41YYCoL7vPgLlHir4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:64:fb:f6:35:d3:7a:92:9a:dd:48:1a:6e:b8:fa:d8:0f:56: cf:ba:97:b5:b9:8e:4a:08:3b:8d:b8:ef:ae:ba:ee:fb:42:70: f6:44:a2:81:ee:74:18:44:2a:17:33:76:e9:92:a1:79:df:68: 4c:1a:3b:90:cd:3d:80:aa:21:17:9d:9f:4e:bf:24:af:f7:6a: b2:8f:33:72:8d:33:cd:bc:16:4c:dd:12:c2:ed:ff:8e:d6:d2: 0e:ad:ff:41:4e:7a:52:bc:32:b8:b3:0f:46:10:a0:3e:13:59: 2e:8a:a4:13:46:54:40:33:87:b9:58:22:59:3c:13:09:46:41: 3d:9a:43:9a:03:ea:a6:7e:81:7a:4f:b2:99:6d:68:79:f7:12: 3d:bb:bb:19:5b:95:ae:13:1e:61:88:d9:dd:c7:8a:1a:e4:2b: c8:40:fe:8a:32:10:a0:b4:9a:25:cd:65:67:41:e0:6c:81:c2: 40:24:4a:e5:5a:11:2b:00:ba:0c:66:90:92:75:31:30:e9:37: de:23:8f:f0:0b:6b:18:69:3d:e1:59:2b:f4:62:f4:18:64:6d: 2b:fa:dc:81:46:a7:69:57:89:25:de:6c:a1:19:6c:f0:a3:ab: ae:58:2f:07:b5:5a:28:0c:a2:32:fa:80:44:a2:22:16:ea:2b: e8:2c:ee:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDkwRjcxMTAvBgNVBAUTKDA2MDIzREI0NjM0RDVDNkUzNTYxODBBODJGQkJDRjgw Qjk0NzhBQkUwHhcNMjUwNjE1MDMxNDMyWhcNMjUwNjIyMDMxNDMyWjAYMRYwFAYD VQQDEw02ODRlM2E5OC01ZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2toVEseYrZ+0YoxCkqoHShjnhcC6KLSV9dE7lhbm7DL8nKrXKVR4H1xYJJgT BCLiY9mC8Tv3xeYfMkytpmS9F+fwRRutYcE0Xr3B0srM1EW3IoUq+Rg5A9jHskcn oWRtu1PlIgQukgrHy4Cte89x3+ea2MmWFlB66Xj04ZaWWzein/fw8PdRXX7/5MEV fIse6FPWIMSIi+Kfti7D6cjD8mg5PqrBNwJex4mOnH4mQaGvSdrMDioL+p2tJuIG +YKNiZnMj7PlmflDaARvOYVf9UFHYt9/4KilBnezRKeHKRK4CJyIk49uuKbTMgLc uz8ig0Ydh7QZlx1+HZSI6xi3twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFxipeXQ 9AkWraI1P8XW24ddnYJuMB8GA1UdIwQYMBaAFAYCPbRjTVxuNWGAqC+7z4C5R4q+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OTBGNy9EOEQzQjRGMjM1 QTkxMUVFOTRCNDhENTdDNEY5QUUwMi9CZ0k5dEdOTlhHNDFZWUNvTDd2UGdMbEhp cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnSTl0R05OWEc0MVlZQ29MN3ZQZ0xsSGlyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OTBGNy9EOEQzQjRGMjM1QTkxMUVFOTRCNDhENTdDNEY5QUUwMi9CZ0k5dEdOTlhH NDFZWUNvTDd2UGdMbEhpcjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaZPv2NdN6kprdSBpuuPrYD1bPupe1uY5KCDuNuO+uuu77QnD2RKKB 7nQYRCoXM3bpkqF532hMGjuQzT2AqiEXnZ9OvySv92qyjzNyjTPNvBZM3RLC7f+O 1tIOrf9BTnpSvDK4sw9GEKA+E1kuiqQTRlRAM4e5WCJZPBMJRkE9mkOaA+qmfoF6 T7KZbWh59xI9u7sZW5WuEx5hiNndx4oa5CvIQP6KMhCgtJolzWVnQeBsgcJAJErl WhErALoMZpCSdTEw6TfeI4/wC2sYaT3hWSv0YvQYZG0r+tyBRqdpV4kl3myhGWzw o6uuWC8HtVooDKIy+oBEoiIW6ivoLO65 -----END CERTIFICATE-----Generated at Sun Jun 15 09:32:52 2025 by rpki-client