$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft File: BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft (raw, json) Hash identifier: R+jqA0DXUs+T3ywDgojMhSZrMKCUb11LTcQH7mDgYl8= Subject key identifier: B9:CB:28:C8:1B:53:81:9B:86:30:EE:A6:FD:91:78:49:1B:5D:02:3F Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE Certificate issuer: /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE Certificate serial: 0667 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft Manifest number: 064C Signing time: Sat 14 Jun 2025 22:28:15 +0000 Manifest this update: Sat 14 Jun 2025 22:28:14 +0000 Manifest next update: Sat 21 Jun 2025 22:28:14 +0000 Files and hashes: 1: BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl (hash: 3LyrrFDmkvkjabN5+bfQtVSq6lITVIBOtXZIimRu1mw=) 2: BFC00D26D18011EEB673FD69C4F9AE02.roa (hash: Cvx2yiI1oVNG4J0lF2K+6YI8jeJN0PgnkGUOcXS5I48=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 22:28:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1639 (0x667) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9184279, serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE Validity Not Before: Jun 14 22:28:14 2025 GMT Not After : Jun 21 22:28:14 2025 GMT Subject: CN=684df77f-8697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:89:8b:cc:4f:e0:af:b5:e3:11:5b:df:97:40: 5b:c1:cd:77:11:1d:1b:37:f6:e4:78:63:24:ef:b4: c5:d5:b8:fe:d6:a1:48:e3:db:93:1e:91:e4:e4:9a: ce:17:26:61:41:3c:7c:95:5d:19:37:51:60:c2:fb: 7b:81:3c:3e:3d:da:73:e9:02:0b:b5:ad:c5:3f:66: f6:2c:64:51:4a:d2:2d:c9:a1:fd:6b:9b:cd:7d:9a: e9:7f:ec:5b:85:c9:6b:9f:ac:af:2d:ea:df:20:82: cc:08:be:33:3e:9a:2f:2c:03:13:e3:5b:6f:06:ce: 5f:84:43:58:93:73:cf:e8:63:c6:b9:e6:22:39:f4: 48:bc:45:8f:b6:0b:01:37:10:93:c2:67:79:6f:8f: f1:c7:93:e1:1d:b3:3c:c2:9f:34:97:ac:a3:fc:4d: 5e:60:21:3d:57:fc:8b:a1:ba:46:b2:9c:68:c9:28: ba:d2:37:08:51:cb:0d:7e:a4:a0:05:29:ef:39:0a: af:81:6b:85:06:f0:d8:ee:a4:ae:48:1f:2e:1c:5d: 17:c2:6e:69:7f:ed:e2:39:87:9a:4a:64:de:77:b8: d9:1d:1d:68:6f:08:66:ea:03:0a:44:54:f1:cd:c4: 91:0c:13:5c:61:33:74:e5:31:24:79:b5:f1:0e:d1: 08:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CB:28:C8:1B:53:81:9B:86:30:EE:A6:FD:91:78:49:1B:5D:02:3F X509v3 Authority Key Identifier: keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:d7:62:e1:2f:75:76:c2:b3:91:8b:f7:87:5e:ef:15:80:93: e3:85:b4:e6:41:74:77:ff:d3:b6:02:dc:03:fa:74:e6:fd:30: 56:eb:67:98:92:a3:b8:3a:0b:7d:6e:19:6f:79:bb:d1:89:96: a5:26:28:f8:37:46:b0:e5:20:3b:4e:41:28:6b:e5:6d:65:9d: d0:71:8c:e0:f6:f4:bc:ad:62:21:db:86:51:87:71:3a:bb:03: 6b:8b:b6:b4:ec:f5:3c:55:ab:31:a1:4c:92:7a:bb:85:42:26: 71:23:fc:d2:b7:18:2b:93:42:2c:da:77:1e:e1:22:56:e6:9f: 0b:97:33:c2:ac:d3:9a:2b:1b:85:da:9b:d3:75:07:74:3e:55: 9a:7b:c4:50:ff:d3:d1:41:45:1f:8b:12:c0:7b:5c:68:8f:f0: ad:ed:c0:06:ea:f3:cd:12:02:8e:ef:f0:af:7f:d6:16:9b:c7: 69:52:d1:63:6f:8f:bf:e8:f4:3b:f3:0b:41:ae:d4:01:cd:e9: b0:8a:1a:99:03:81:d7:9f:8d:80:2f:fa:32:56:3d:1e:f9:dd: cf:63:e9:4d:27:6d:f7:14:a8:57:ad:4b:dd:09:b4:74:8b:ce: 0c:8c:1b:ff:f5:0c:c1:27:3d:dd:fc:32:35:29:73:ca:aa:3a: 76:ee:0a:f2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQyNzkxMTAvBgNVBAUTKDA2RDI4QzQzRUFFNDNGMUY1REE1NkM2QTIxRTZDQUJC RkNCODhEQkUwHhcNMjUwNjE0MjIyODE0WhcNMjUwNjIxMjIyODE0WjAYMRYwFAYD VQQDEw02ODRkZjc3Zi04Njk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmYmLzE/gr7XjEVvfl0Bbwc13ER0bN/bkeGMk77TF1bj+1qFI49uTHpHk5JrO FyZhQTx8lV0ZN1Fgwvt7gTw+Pdpz6QILta3FP2b2LGRRStItyaH9a5vNfZrpf+xb hclrn6yvLerfIILMCL4zPpovLAMT41tvBs5fhENYk3PP6GPGueYiOfRIvEWPtgsB NxCTwmd5b4/xx5PhHbM8wp80l6yj/E1eYCE9V/yLobpGspxoySi60jcIUcsNfqSg BSnvOQqvgWuFBvDY7qSuSB8uHF0Xwm5pf+3iOYeaSmTed7jZHR1obwhm6gMKRFTx zcSRDBNcYTN05TEkebXxDtEIzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLnLKMgb U4GbhjDupv2ReEkbXQI/MB8GA1UdIwQYMBaAFAbSjEPq5D8fXaVsaiHmyrv8uI2+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDI3OS8wRTM2MUJCNjlD MTUxMUVCOTk3QUJENTlDNEY5QUUwMi9CdEtNUS1ya1B4OWRwV3hxSWViS3VfeTRq YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J0S01RLXJrUHg5ZHBXeHFJZWJLdV95NGpiNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NDI3OS8wRTM2MUJCNjlDMTUxMUVCOTk3QUJENTlDNEY5QUUwMi9CdEtNUS1ya1B4 OWRwV3hxSWViS3VfeTRqYjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBh12LhL3V2wrORi/eHXu8VgJPjhbTmQXR3/9O2AtwD+nTm/TBW62eY kqO4Ogt9bhlvebvRiZalJij4N0aw5SA7TkEoa+VtZZ3QcYzg9vS8rWIh24ZRh3E6 uwNri7a07PU8VasxoUySeruFQiZxI/zStxgrk0Is2nce4SJW5p8LlzPCrNOaKxuF 2pvTdQd0PlWae8RQ/9PRQUUfixLAe1xoj/Ct7cAG6vPNEgKO7/Cvf9YWm8dpUtFj b4+/6PQ78wtBrtQBzemwihqZA4HXn42AL/oyVj0e+d3PY+lNJ233FKhXrUvdCbR0 i84MjBv/9QzBJz3d/DI1KXPKqjp27gry -----END CERTIFICATE-----Generated at Sun Jun 15 08:45:01 2025 by rpki-client