$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json) Hash identifier: 6OU+QOsKnWVF11dzY0ABSKwxZHfQeXaQ3E4vDk4kIPU= Subject key identifier: 46:0E:4C:3B:AA:38:A3:1E:36:BB:8B:22:1F:BD:BA:AC:65:2C:94:89 Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Certificate serial: 05A5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft Manifest number: 0592 Signing time: Sun 10 Aug 2025 19:36:38 +0000 Manifest this update: Sun 10 Aug 2025 19:36:37 +0000 Manifest next update: Sun 17 Aug 2025 19:36:37 +0000 Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: iQXxrIA/DCt+let1h2OLshvh+HDJ74rqys0YS3g2FyE=) 2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: hN1FG4yB+En2c4wj8yUNEIMBBFanGUa7r/bmCbomayU=) 3: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: /T6Cx82NX6eIVhHP8WlrC3rkE3NEqsy8y14HZ45ur88=) 4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: r9rxwsZy05OBv79BaleZs2CDNDVKsWtQPtZMqmB3o+8=) 5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: MEl6w5nE9WmS9IMiK++pW3U+fqzMAGds8O/KdUZBrWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1445 (0x5a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Validity Not Before: Aug 10 19:36:37 2025 GMT Not After : Aug 17 19:36:37 2025 GMT Subject: CN=6898f4c6-ccd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:21:0f:54:e0:cd:90:b9:e5:5e:d1:7f:53:3c: 9a:1a:d7:ab:e7:99:d8:7a:0e:1b:66:52:60:a3:55: 84:38:b4:bd:61:6d:a6:fc:30:e4:bb:62:d6:c9:47: 6a:f2:b7:b4:b1:b2:4a:97:64:15:f7:82:53:15:85: e2:fa:55:90:58:09:dd:77:6b:99:db:5d:c0:43:2e: f6:2f:94:77:f0:b4:57:3b:c4:e8:81:f2:cc:03:2d: 6f:d8:4c:4a:a2:fc:05:43:b0:45:ca:93:ff:31:da: c4:af:05:d8:7c:c5:9c:88:7d:d0:7e:15:f9:3d:db: c7:4f:c7:59:35:4e:d2:67:09:3f:c3:c6:aa:4a:91: 20:ce:84:bf:59:7e:61:89:85:d2:38:28:4a:ed:63: 72:76:8d:c0:79:21:6e:15:f1:ce:ae:08:f8:a0:c5: 48:0d:56:0d:1d:cc:e2:cc:6b:ea:d8:33:93:ad:e8: 46:31:fc:6c:16:87:0a:e5:ca:46:fe:fd:66:ee:44: 44:49:c2:b8:4a:7d:8d:19:34:9a:5f:5e:2b:e2:97: 4a:b5:fd:54:be:b4:40:c4:66:13:4c:6e:64:33:5f: 37:2c:58:22:f7:8c:c8:e1:06:05:20:e0:fa:28:11: 3e:58:64:ed:c4:77:fd:1b:24:82:8d:31:69:8b:ce: 51:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0E:4C:3B:AA:38:A3:1E:36:BB:8B:22:1F:BD:BA:AC:65:2C:94:89 X509v3 Authority Key Identifier: keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0f:03:c5:63:d5:fa:98:5d:f6:c8:a2:52:6c:9c:69:09:a4:7b: 17:62:64:b3:a8:11:dc:0b:e7:20:5a:73:d0:57:5f:a9:af:5e: 61:f4:32:42:6a:b2:fe:d5:1e:63:ae:35:0e:e5:97:a0:bc:e0: e8:54:b6:75:f9:3f:73:d2:64:15:b5:66:9a:38:d5:ac:1b:75: 0b:eb:42:44:47:59:e2:66:bd:ef:bc:2b:0e:80:1c:23:6c:c9: aa:09:a9:a6:d2:34:cf:00:43:24:00:38:50:23:e2:69:bd:2f: f6:e1:06:f5:5a:6a:1d:28:80:c6:ea:65:93:f7:61:7a:0c:c6: 10:b0:b1:4e:8d:b0:ee:4d:6c:70:60:01:c0:e8:9f:78:cc:c3: 63:2b:7e:c7:d1:70:59:dd:32:c2:b1:89:0e:f3:3a:69:66:60: 0d:c3:c1:10:37:84:ea:d4:83:4a:79:8c:4d:09:de:85:bb:07: 69:0d:04:85:f0:e9:b9:b5:e4:29:a7:73:80:95:ec:e5:3b:d0: 81:b6:63:46:af:5c:6e:1a:5c:54:bd:b7:55:9f:64:9a:2f:09: 5b:18:ed:7d:f2:99:95:f8:bb:98:1a:91:41:a0:bc:bf:ed:15: 8e:2e:2f:a4:d8:46:16:44:a2:80:b6:f1:19:ac:0a:28:2e:81: dc:d4:e1:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBaUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE RUY4QzNEM0IwHhcNMjUwODEwMTkzNjM3WhcNMjUwODE3MTkzNjM3WjAYMRYwFAYD VQQDEw02ODk4ZjRjNi1jY2Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCEPVODNkLnlXtF/UzyaGter55nYeg4bZlJgo1WEOLS9YW2m/DDku2LWyUdq 8re0sbJKl2QV94JTFYXi+lWQWAndd2uZ213AQy72L5R38LRXO8TogfLMAy1v2ExK ovwFQ7BFypP/MdrErwXYfMWciH3QfhX5PdvHT8dZNU7SZwk/w8aqSpEgzoS/WX5h iYXSOChK7WNydo3AeSFuFfHOrgj4oMVIDVYNHczizGvq2DOTrehGMfxsFocK5cpG /v1m7kREScK4Sn2NGTSaX14r4pdKtf1UvrRAxGYTTG5kM183LFgi94zI4QYFIOD6 KBE+WGTtxHf9GySCjTFpi85RwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEYOTDuq OKMeNruLIh+9uqxlLJSJMB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC8wQzQ3NDkwQUVBQjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVf WXA4ZUZ6aGZQZ19lLU1QVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAPA8Vj1fqYXfbIolJsnGkJpHsXYmSzqBHcC+cgWnPQV1+pr15h9DJC arL+1R5jrjUO5ZegvODoVLZ1+T9z0mQVtWaaONWsG3UL60JER1niZr3vvCsOgBwj bMmqCamm0jTPAEMkADhQI+JpvS/24Qb1WmodKIDG6mWT92F6DMYQsLFOjbDuTWxw YAHA6J94zMNjK37H0XBZ3TLCsYkO8zppZmANw8EQN4Tq1INKeYxNCd6FuwdpDQSF 8Om5teQpp3OAlezlO9CBtmNGr1xuGlxUvbdVn2SaLwlbGO198pmV+LuYGpFBoLy/ 7RWOLi+k2EYWRKKAtvEZrAooLoHc1OHz -----END CERTIFICATE-----Generated at Mon Aug 11 04:12:41 2025 by rpki-client