$ rpki-client -vvf rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft File: BPDYqTArIrYOMPRlG4KumZ_3TJs.mft (raw, json) Hash identifier: QHyJEirHFqnSNuJtvxx0uvzXidUqTBvBY0PhDd1PF9s= Subject key identifier: 94:F4:58:B7:69:E8:67:C4:CF:11:6A:99:F9:74:10:1F:83:37:02:2D Authority key identifier: 04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B Certificate issuer: /CN=A9171882/serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B Certificate serial: E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft Manifest number: E1 Signing time: Tue 17 Jun 2025 04:26:32 +0000 Manifest this update: Tue 17 Jun 2025 04:26:32 +0000 Manifest next update: Tue 24 Jun 2025 04:26:32 +0000 Files and hashes: 1: BPDYqTArIrYOMPRlG4KumZ_3TJs.crl (hash: rWyfTw+ljBzsgKsRfRX2yI1FRBwTP9AkvW5Ddm8/Jxc=) 2: 08D1870EF0B411EE962EE784C4F9AE02.roa (hash: nrFzYe2K6I+fVS0WsJAv1h0mXVgQBFKENnTmsnUT3Jo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:26:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171882, serialNumber=04F0D8A9302B22B60E30F4651B82AE999FF74C9B Validity Not Before: Jun 17 04:26:32 2025 GMT Not After : Jun 24 04:26:32 2025 GMT Subject: CN=6850ee78-3679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a0:d6:b8:66:9a:a4:75:7b:35:82:60:50:21: 33:df:f6:63:06:90:6f:d1:6a:fb:1e:da:0e:db:1f: 58:d1:71:bd:ed:de:a9:72:9a:5a:ce:27:36:d3:8a: 1b:ba:c7:4b:02:f7:08:a8:a2:bc:c5:c0:4d:e4:ee: d8:98:a5:06:f0:c1:44:50:2d:18:8c:13:ea:3d:15: 48:ff:6d:64:6c:e6:11:12:d8:bc:4c:ed:98:18:40: 93:a1:f8:9b:96:0a:ae:01:f1:d5:bb:12:db:7d:d0: da:37:7c:c2:74:7b:15:ab:1b:48:24:59:17:3b:f9: 60:fa:18:52:ad:35:fc:ea:92:72:9e:78:e3:0e:6d: 7a:a8:06:75:2b:53:9d:54:cd:cb:f6:91:1e:ca:0b: a7:2a:45:ce:79:de:51:9c:26:f1:f3:06:63:1e:58: 18:19:2a:a2:0b:4e:0b:ae:de:36:a6:1a:f0:1f:25: 63:55:9b:d3:14:86:e0:61:3f:a1:c4:74:e3:12:68: 95:80:c4:4b:09:ec:41:52:1b:c4:89:0c:cc:9e:d4: 7b:f5:48:6d:b3:d9:d4:01:83:a0:27:e8:5e:5a:0f: 2d:9b:ee:ab:1b:8c:e4:52:53:92:10:cb:dc:0d:64: 22:30:e7:59:b3:49:82:95:16:67:31:e6:3d:cc:e7: ed:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F4:58:B7:69:E8:67:C4:CF:11:6A:99:F9:74:10:1F:83:37:02:2D X509v3 Authority Key Identifier: keyid:04:F0:D8:A9:30:2B:22:B6:0E:30:F4:65:1B:82:AE:99:9F:F7:4C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BPDYqTArIrYOMPRlG4KumZ_3TJs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171882/B238A184F0B311EEA4C72F84C4F9AE02/BPDYqTArIrYOMPRlG4KumZ_3TJs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:9c:5e:b2:c3:3a:b7:bf:6c:a7:3c:fb:8d:d3:3a:d9:12:cf: fe:33:aa:75:93:7a:40:52:b6:5e:89:23:92:98:a6:90:dd:26: 86:88:df:0d:b3:32:f6:61:92:b8:e7:fd:ac:5d:93:2e:96:31: 64:b1:6d:2a:eb:01:46:1b:8b:bd:9b:b6:ed:2a:b2:3f:a4:61: 79:2e:63:b3:ce:13:3b:69:6f:34:54:64:23:48:1c:de:b0:dd: 34:f8:3d:76:ad:0d:a9:5e:69:7f:29:81:1f:80:d1:58:29:0e: 33:fa:52:b5:17:e8:2e:32:1f:40:f0:a2:43:af:5e:9a:44:d1: e6:02:2d:d1:78:97:12:89:68:00:7b:ac:8c:3a:15:6f:07:13: 75:bb:3c:ca:54:ff:b3:b9:66:f8:d0:fe:8a:3b:e9:e5:bc:92: 99:7d:f0:3e:d4:f0:88:3c:e9:0a:d0:f7:a0:d8:9c:19:a7:80: 45:35:5f:91:e5:23:80:a1:43:05:ac:5f:b2:44:2c:f3:85:e5: 36:9a:11:00:2b:90:9c:04:11:99:13:31:e4:4a:45:76:7e:b3: 12:2e:c5:1b:d6:84:78:ff:0d:48:25:7f:c0:61:e5:78:b7:1a: 26:e8:2a:b3:aa:b3:62:f6:3c:8c:41:45:40:a1:d9:a4:43:e8: 3f:09:49:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE4ODIxMTAvBgNVBAUTKDA0RjBEOEE5MzAyQjIyQjYwRTMwRjQ2NTFCODJBRTk5 OUZGNzRDOUIwHhcNMjUwNjE3MDQyNjMyWhcNMjUwNjI0MDQyNjMyWjAYMRYwFAYD VQQDEw02ODUwZWU3OC0zNjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6KDWuGaapHV7NYJgUCEz3/ZjBpBv0Wr7HtoO2x9Y0XG97d6pcppazic204ob usdLAvcIqKK8xcBN5O7YmKUG8MFEUC0YjBPqPRVI/21kbOYREti8TO2YGECTofib lgquAfHVuxLbfdDaN3zCdHsVqxtIJFkXO/lg+hhSrTX86pJynnjjDm16qAZ1K1Od VM3L9pEeygunKkXOed5RnCbx8wZjHlgYGSqiC04Lrt42phrwHyVjVZvTFIbgYT+h xHTjEmiVgMRLCexBUhvEiQzMntR79Uhts9nUAYOgJ+heWg8tm+6rG4zkUlOSEMvc DWQiMOdZs0mClRZnMeY9zOft9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJT0WLdp 6GfEzxFqmfl0EB+DNwItMB8GA1UdIwQYMBaAFATw2KkwKyK2DjD0ZRuCrpmf90yb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTg4Mi9CMjM4QTE4NEYw QjMxMUVFQTRDNzJGODRDNEY5QUUwMi9CUERZcVRBcklyWU9NUFJsRzRLdW1aXzNU SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JQRFlxVEFySXJZT01QUmxHNEt1bVpfM1RKcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTg4Mi9CMjM4QTE4NEYwQjMxMUVFQTRDNzJGODRDNEY5QUUwMi9CUERZcVRBckly WU9NUFJsRzRLdW1aXzNUSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYnF6ywzq3v2ynPPuN0zrZEs/+M6p1k3pAUrZeiSOSmKaQ3SaGiN8N szL2YZK45/2sXZMuljFksW0q6wFGG4u9m7btKrI/pGF5LmOzzhM7aW80VGQjSBze sN00+D12rQ2pXml/KYEfgNFYKQ4z+lK1F+guMh9A8KJDr16aRNHmAi3ReJcSiWgA e6yMOhVvBxN1uzzKVP+zuWb40P6KO+nlvJKZffA+1PCIPOkK0Peg2JwZp4BFNV+R 5SOAoUMFrF+yRCzzheU2mhEAK5CcBBGZEzHkSkV2frMSLsUb1oR4/w1IJX/AYeV4 txom6CqzqrNi9jyMQUVAodmkQ+g/CUlm -----END CERTIFICATE-----Generated at Wed Jun 18 18:52:19 2025 by rpki-client