$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft File: BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft (raw, json) Hash identifier: I4Nrgy6Gs2+G5TgeqQE7CzAvN9rb+08BULprw7HkZek= Subject key identifier: D0:B4:79:6F:A8:6F:DE:59:0D:BC:42:0E:EF:76:2F:09:7A:59:E5:1B Authority key identifier: 05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B Certificate issuer: /CN=A917E0A8/serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Certificate serial: 058A Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft Manifest number: 0577 Signing time: Wed 18 Jun 2025 19:30:36 +0000 Manifest this update: Wed 18 Jun 2025 19:30:36 +0000 Manifest next update: Wed 25 Jun 2025 19:30:36 +0000 Files and hashes: 1: BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl (hash: PsqdxiKIdMqzw9GMh+j1M9JdK4/e0TD8fpzFWRofzl8=) 2: 4793567206A211EEBDA4D34BC4F9AE02.roa (hash: hN1FG4yB+En2c4wj8yUNEIMBBFanGUa7r/bmCbomayU=) 3: 78D4FFEEEAB411EB95BFB566C4F9AE02.roa (hash: /T6Cx82NX6eIVhHP8WlrC3rkE3NEqsy8y14HZ45ur88=) 4: B9800BF82E9011ED96AE647FC4F9AE02.roa (hash: r9rxwsZy05OBv79BaleZs2CDNDVKsWtQPtZMqmB3o+8=) 5: FA82DFB83ACB11EC9FEBB367C4F9AE02.roa (hash: MEl6w5nE9WmS9IMiK++pW3U+fqzMAGds8O/KdUZBrWg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 19:30:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1418 (0x58a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=0508CBE9AB6EE7F629F1E17385F3E0FDEF8C3D3B Validity Not Before: Jun 18 19:30:36 2025 GMT Not After : Jun 25 19:30:36 2025 GMT Subject: CN=685313dc-6e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d2:66:c4:bb:41:3a:33:33:9e:57:38:4d:e6: 43:69:ae:58:ba:71:f1:d6:24:a3:48:08:21:e9:6d: d6:0f:34:0e:bc:d4:84:e7:cf:3d:ad:69:95:be:53: 93:d0:b4:74:e0:24:5a:a4:30:ce:44:8a:61:f1:cc: 7e:78:0b:f3:ed:e1:1f:30:1d:f7:ac:95:ca:b5:32: 18:05:49:81:15:91:ac:f5:d2:dc:c4:b5:a0:28:e9: 67:dc:1d:8a:3c:ad:cd:1e:a2:02:7f:43:42:e7:31: 25:9c:cd:bc:19:ba:f8:e3:f5:96:84:c1:48:b8:9a: 03:65:90:42:16:1f:7a:00:b3:71:e8:b5:d9:35:9f: f4:6c:8c:23:ba:66:9b:c4:3b:3c:23:1e:22:9e:7b: 98:99:63:02:f2:92:5d:8a:1d:1f:32:7c:77:0e:91: 73:b2:cf:fc:33:72:e0:e6:fc:bf:39:d5:ba:59:18: c5:9e:f9:08:09:be:51:7c:14:84:ff:ed:54:26:bd: c6:84:69:7f:71:10:06:ef:bb:23:27:60:2c:65:98: 7c:08:d3:d8:c4:ca:76:f9:8b:2b:f6:75:0b:57:99: 05:85:11:5a:aa:c8:1d:7f:ce:49:8c:4a:ff:92:11: f2:ad:83:05:04:40:41:b7:12:3c:55:33:4b:27:69: 7b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:B4:79:6F:A8:6F:DE:59:0D:BC:42:0E:EF:76:2F:09:7A:59:E5:1B X509v3 Authority Key Identifier: keyid:05:08:CB:E9:AB:6E:E7:F6:29:F1:E1:73:85:F3:E0:FD:EF:8C:3D:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BQjL6atu5_Yp8eFzhfPg_e-MPTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/0C47490AEAB311EB9811A465C4F9AE02/BQjL6atu5_Yp8eFzhfPg_e-MPTs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:b8:cb:78:c4:e8:a2:b5:c5:41:51:45:b3:57:f4:6a:cb:a1: d6:9a:93:bc:fe:32:a5:37:42:88:ab:6e:fa:b9:58:28:33:2a: 04:e7:30:1b:08:d0:ad:4c:ea:7c:63:19:5c:42:89:cf:60:b1: 9d:1e:0b:93:94:e5:df:8b:a8:2a:f3:c4:e2:94:fd:56:c0:c3: ff:9a:f4:af:cb:fe:50:52:9a:39:49:0b:0d:70:ec:c0:58:e6: 1c:ea:14:1f:6d:f8:e8:e4:40:73:cf:4e:b5:f9:fa:31:a4:69: 27:54:f9:27:b1:be:20:a3:0a:7e:d1:c1:9c:1c:c7:3f:c8:9a: ab:73:47:2a:76:30:28:7d:c2:54:04:59:1a:0f:ac:1b:cd:7a: 21:6c:6e:93:2b:cf:6e:94:4b:ac:df:37:73:e2:85:79:17:7d: 97:34:2a:7e:9a:3f:12:c4:96:0d:e6:dd:e3:32:fe:bf:00:06: fc:01:7c:1c:42:82:1b:dd:56:27:57:f1:21:29:73:a1:df:3a: e3:b7:e9:36:f0:64:10:f9:68:3d:9d:fa:dc:1b:21:18:85:53: 8f:c2:8f:33:3c:72:dc:b7:e7:c2:ea:0d:20:f0:6e:39:31:50: 0e:9b:01:52:07:a5:97:a0:74:69:14:07:38:f7:d2:8e:45:f7: a0:7b:8e:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDA1MDhDQkU5QUI2RUU3RjYyOUYxRTE3Mzg1RjNFMEZE RUY4QzNEM0IwHhcNMjUwNjE4MTkzMDM2WhcNMjUwNjI1MTkzMDM2WjAYMRYwFAYD VQQDEw02ODUzMTNkYy02ZTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApNJmxLtBOjMznlc4TeZDaa5YunHx1iSjSAgh6W3WDzQOvNSE5889rWmVvlOT 0LR04CRapDDORIph8cx+eAvz7eEfMB33rJXKtTIYBUmBFZGs9dLcxLWgKOln3B2K PK3NHqICf0NC5zElnM28Gbr44/WWhMFIuJoDZZBCFh96ALNx6LXZNZ/0bIwjumab xDs8Ix4innuYmWMC8pJdih0fMnx3DpFzss/8M3Lg5vy/OdW6WRjFnvkICb5RfBSE /+1UJr3GhGl/cRAG77sjJ2AsZZh8CNPYxMp2+Ysr9nULV5kFhRFaqsgdf85JjEr/ khHyrYMFBEBBtxI8VTNLJ2l7jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNC0eW+o b95ZDbxCDu92Lwl6WeUbMB8GA1UdIwQYMBaAFAUIy+mrbuf2KfHhc4Xz4P3vjD07 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC8wQzQ3NDkwQUVB QjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVfWXA4ZUZ6aGZQZ19lLU1Q VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JRakw2YXR1NV9ZcDhlRnpoZlBnX2UtTVBUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RTBBOC8wQzQ3NDkwQUVBQjMxMUVCOTgxMUE0NjVDNEY5QUUwMi9CUWpMNmF0dTVf WXA4ZUZ6aGZQZ19lLU1QVHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCuMt4xOiitcVBUUWzV/Rqy6HWmpO8/jKlN0KIq276uVgoMyoE5zAb CNCtTOp8YxlcQonPYLGdHguTlOXfi6gq88TilP1WwMP/mvSvy/5QUpo5SQsNcOzA WOYc6hQfbfjo5EBzz061+foxpGknVPknsb4gowp+0cGcHMc/yJqrc0cqdjAofcJU BFkaD6wbzXohbG6TK89ulEus3zdz4oV5F32XNCp+mj8SxJYN5t3jMv6/AAb8AXwc QoIb3VYnV/EhKXOh3zrjt+k28GQQ+Wg9nfrcGyEYhVOPwo8zPHLct+fC6g0g8G45 MVAOmwFSB6WXoHRpFAc499KORfege47c -----END CERTIFICATE-----Generated at Fri Jun 20 20:15:07 2025 by rpki-client