$ rpki-client -vvf rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft File: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft (raw, json) Hash identifier: 7t4HLkiophKUyAyOmgdBb/4S0sLGPjd9dLN7s3imuzQ= Subject key identifier: A7:6C:47:9A:F5:90:D4:A3:1F:69:C1:B3:F0:A4:4F:D7:C1:B0:46:2E Authority key identifier: 04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1 Certificate issuer: /CN=A9160244/serialNumber=0434017186DB84CA89477570DDA10AD731597FF1 Certificate serial: 24E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft Manifest number: 24D3 Signing time: Mon 04 Aug 2025 15:52:53 +0000 Manifest this update: Mon 04 Aug 2025 15:52:53 +0000 Manifest next update: Mon 11 Aug 2025 15:52:53 +0000 Files and hashes: 1: BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl (hash: KMZfmZBWL4EfQk/0Nu1QMKzdcy1Y6ZHkRdrq4xRYLTE=) 2: E1FACBC0B10D11E5894F4D1CC4F9AE02.roa (hash: FvWwS3Spm+rRrjY0/JRXkfVlZov8/+1jHfihNOtR95E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 15:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9442 (0x24e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160244, serialNumber=0434017186DB84CA89477570DDA10AD731597FF1 Validity Not Before: Aug 4 15:52:53 2025 GMT Not After : Aug 11 15:52:53 2025 GMT Subject: CN=6890d755-96af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:3e:73:86:85:d8:83:6d:52:2b:bf:2e:dc: 4b:37:dc:b3:97:09:8f:56:75:20:5f:1c:fc:61:74: 84:94:d0:1e:c0:80:4b:35:2e:41:1a:c9:d9:ad:7f: 99:29:d4:17:97:8b:c6:41:68:24:72:1c:52:d4:d1: 07:12:7f:c9:d2:c4:c9:5f:7c:7c:02:e1:18:1d:48: ab:cf:b6:e5:83:12:b9:f3:b3:19:98:d7:a3:a9:7e: b5:34:37:0e:ae:6e:d1:78:43:d1:6f:d4:c3:6f:aa: d4:16:e7:44:64:1e:df:83:e6:b1:3c:bd:e9:aa:f8: be:c3:51:8d:b5:87:ab:60:85:c6:fb:9b:7a:e5:f5: 17:68:2e:3d:f1:75:b1:3c:ef:fe:4a:46:da:a0:a2: e4:6c:ab:30:06:90:f7:2d:a1:55:a6:60:0d:08:90: fd:30:a1:d9:e3:e5:89:b2:75:9e:49:0d:0a:6e:9b: 2b:d7:1d:02:b5:14:99:83:3f:51:fc:dd:dd:cf:c6: 3d:3b:36:2f:b2:a1:54:c7:06:5b:0b:f9:ad:31:b7: ea:af:fb:3b:89:4b:a3:11:77:2c:94:8b:13:2c:3c: 41:4e:79:93:42:fc:79:65:1d:76:45:91:4b:d0:63: 31:0d:84:8e:08:df:63:ca:f8:17:c1:0d:c4:46:7f: 2d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:6C:47:9A:F5:90:D4:A3:1F:69:C1:B3:F0:A4:4F:D7:C1:B0:46:2E X509v3 Authority Key Identifier: keyid:04:34:01:71:86:DB:84:CA:89:47:75:70:DD:A1:0A:D7:31:59:7F:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160244/7EAFECB03C0711E5B16CEF63C4F9AE02/BDQBcYbbhMqJR3Vw3aEK1zFZf_E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:44:c5:90:5e:1b:15:39:81:35:c2:4d:c3:07:14:15:a2:8b: bf:97:62:29:e2:94:21:e5:3a:ee:b8:8f:ab:e6:3e:0d:6b:82: 2e:e5:b3:a2:47:6f:be:f6:47:16:98:c3:3d:5b:37:a9:31:a7: fc:c0:cd:63:1d:e7:57:63:c9:e9:25:f5:21:16:e4:38:12:a2: e8:a9:ee:0a:20:29:40:4a:bf:b6:85:f8:10:ff:a4:ea:7d:99: 3e:7a:88:76:4c:8b:2b:5e:15:d5:17:bf:78:cd:39:b5:d2:b8: 7c:58:90:83:69:d7:9e:dd:3f:40:6f:c5:47:ae:52:cd:f3:32: d6:f7:05:d2:68:9d:89:99:2d:68:10:e2:36:6d:3f:2d:ac:aa: a8:5f:dc:e7:95:ae:da:13:fc:38:14:27:2d:21:e9:c2:bc:68: a1:6f:88:34:9b:65:ff:21:2e:7b:96:90:7e:80:55:4c:56:a5: 53:e5:a2:73:96:2d:74:4a:55:38:53:b7:87:69:71:69:b4:14: 9e:49:e0:25:2f:16:6c:bf:ae:14:9b:33:d5:29:53:36:a0:6e: 6a:6c:b5:d0:e7:d0:3d:fb:68:18:91:27:f9:8b:ff:64:2e:12: 75:4c:62:f0:8f:8e:3c:56:bc:e0:52:79:66:d3:9f:7b:d3:46: a0:15:cb:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICJOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjAyNDQxMTAvBgNVBAUTKDA0MzQwMTcxODZEQjg0Q0E4OTQ3NzU3MEREQTEwQUQ3 MzE1OTdGRjEwHhcNMjUwODA0MTU1MjUzWhcNMjUwODExMTU1MjUzWjAYMRYwFAYD VQQDEw02ODkwZDc1NS05NmFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbM+c4aF2INtUiu/LtxLN9yzlwmPVnUgXxz8YXSElNAewIBLNS5BGsnZrX+Z KdQXl4vGQWgkchxS1NEHEn/J0sTJX3x8AuEYHUirz7blgxK587MZmNejqX61NDcO rm7ReEPRb9TDb6rUFudEZB7fg+axPL3pqvi+w1GNtYerYIXG+5t65fUXaC498XWx PO/+SkbaoKLkbKswBpD3LaFVpmANCJD9MKHZ4+WJsnWeSQ0Kbpsr1x0CtRSZgz9R /N3dz8Y9OzYvsqFUxwZbC/mtMbfqr/s7iUujEXcslIsTLDxBTnmTQvx5ZR12RZFL 0GMxDYSOCN9jyvgXwQ3ERn8tTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKdsR5r1 kNSjH2nBs/CkT9fBsEYuMB8GA1UdIwQYMBaAFAQ0AXGG24TKiUd1cN2hCtcxWX/x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDI0NC83RUFGRUNCMDND MDcxMUU1QjE2Q0VGNjNDNEY5QUUwMi9CRFFCY1liYmhNcUpSM1Z3M2FFSzF6Rlpm X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JEUUJjWWJiaE1xSlIzVnczYUVLMXpGWmZfRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MDI0NC83RUFGRUNCMDNDMDcxMUU1QjE2Q0VGNjNDNEY5QUUwMi9CRFFCY1liYmhN cUpSM1Z3M2FFSzF6RlpmX0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFRMWQXhsVOYE1wk3DBxQVoou/l2Ip4pQh5TruuI+r5j4Na4Iu5bOi R2++9kcWmMM9WzepMaf8wM1jHedXY8npJfUhFuQ4EqLoqe4KIClASr+2hfgQ/6Tq fZk+eoh2TIsrXhXVF794zTm10rh8WJCDadee3T9Ab8VHrlLN8zLW9wXSaJ2JmS1o EOI2bT8trKqoX9znla7aE/w4FCctIenCvGihb4g0m2X/IS57lpB+gFVMVqVT5aJz li10SlU4U7eHaXFptBSeSeAlLxZsv64UmzPVKVM2oG5qbLXQ59A9+2gYkSf5i/9k LhJ1TGLwj448VrzgUnlm059700agFcub -----END CERTIFICATE-----Generated at Wed Aug 6 14:11:59 2025 by rpki-client