$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json) Hash identifier: PTBhvWwxy56UmhH7OhlFwRQJ12kQR4bERJMTEY47j1w= Subject key identifier: A7:11:CB:65:72:D8:38:75:43:92:15:AE:CF:2B:61:A4:23:B1:94:80 Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Certificate serial: 127A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft Manifest number: 1268 Signing time: Sat 14 Jun 2025 17:03:05 +0000 Manifest this update: Sat 14 Jun 2025 17:03:05 +0000 Manifest next update: Sat 21 Jun 2025 17:03:05 +0000 Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: cTrBnFFZuqrkWgbIT4EB6HHL568Jdj0iO/g9bv1Id3U=) 2: 3489528EC84511ED90A61540C4F9AE02.roa (hash: 0GBU9clR4v/kv/m8Iw+tpC8pBR8oX1ZqIKf4DgtvCco=) 3: 35615A30C84511ED90A61540C4F9AE02.roa (hash: CfO3CZyouhq3VXYxiVm5tnc8saneiKp2zLb93JcMMQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:03:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4730 (0x127a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Validity Not Before: Jun 14 17:03:05 2025 GMT Not After : Jun 21 17:03:05 2025 GMT Subject: CN=684dab49-0b67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0b:75:5b:2d:32:d9:01:e7:03:f3:a0:07:35: e9:41:0c:b4:43:3f:ca:84:05:aa:4b:14:f7:e2:17: b7:f4:17:df:d5:96:c4:87:03:22:be:9d:0b:d2:12: 69:81:03:bf:6b:1a:e0:36:29:b0:92:4c:05:68:5b: f2:47:87:79:ee:b1:bd:0b:bc:b6:78:1f:85:63:76: 1d:08:00:aa:8b:ad:08:a3:32:62:7d:8d:44:41:53: 33:f9:47:ec:5a:84:97:8e:b8:f4:57:b5:b3:d7:9c: 72:20:81:bb:03:c3:6c:cb:a0:07:2a:f1:03:56:fc: 47:db:2d:b7:90:ce:64:81:e4:7b:35:2f:1d:aa:a7: 61:27:d3:d9:a3:5c:bd:86:60:f0:d2:90:48:94:f2: a9:6e:67:ef:ba:8f:cb:5e:60:80:dd:e9:27:e9:fa: 6b:18:47:66:3a:ee:dc:b3:ad:f3:e1:8e:79:1d:84: 61:c9:3a:bd:16:77:e5:f1:21:0a:e2:96:6b:fd:b8: d5:74:f7:41:33:60:d9:69:98:ee:49:c0:b9:1a:48: 9b:0f:1f:4c:d8:bb:70:25:0f:e8:23:ba:be:54:38: 24:51:cb:87:34:e0:52:b4:4b:7d:12:0f:be:f3:09: 38:d0:db:07:94:3f:ca:3c:b6:9c:4c:20:46:be:51: 61:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:11:CB:65:72:D8:38:75:43:92:15:AE:CF:2B:61:A4:23:B1:94:80 X509v3 Authority Key Identifier: keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:17:27:87:7b:46:b4:e9:58:ac:0d:43:66:c6:2d:a7:03:f9: 90:c2:51:5e:0c:0a:71:3e:9a:48:54:19:16:b2:ed:e6:5b:05: 64:bd:5b:0e:64:be:b7:67:8f:1c:18:4e:29:53:fc:aa:5d:22: 39:db:fb:86:9c:94:43:57:08:33:65:aa:46:b0:f7:66:03:e1: 33:2f:7a:21:06:15:77:e8:65:2c:d6:dd:67:db:55:a6:49:57: 9f:ac:3a:0c:3a:56:e1:c6:9b:30:fa:4c:aa:5e:70:1a:9f:9a: e1:a2:17:31:06:c7:21:9e:e6:3d:80:35:ac:54:d5:c9:a2:58: ee:ce:84:f0:1e:8e:48:30:1f:4f:0f:e2:a8:5c:a0:f7:07:31: b7:f4:d1:f4:30:88:d3:7b:6d:03:9e:ee:60:9e:b1:6f:3c:59: 19:e9:9a:85:04:af:56:9b:96:8b:d1:ae:75:4b:76:0f:01:35: cf:f5:b5:59:c3:97:b6:3c:09:67:a6:0b:57:b7:25:5b:66:e2: 19:00:d4:5f:13:8d:38:0b:50:88:e8:1d:91:11:e0:cf:cb:15: dd:ca:5f:22:28:8a:70:b7:3b:d7:b2:1f:22:2b:6c:8f:40:ca: ed:87:2d:4f:88:f4:69:ce:6a:30:a0:25:a0:d3:8e:37:d4:80: 2c:3c:6a:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5 Mzk3N0M1QUYwHhcNMjUwNjE0MTcwMzA1WhcNMjUwNjIxMTcwMzA1WjAYMRYwFAYD VQQDEw02ODRkYWI0OS0wYjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsgt1Wy0y2QHnA/OgBzXpQQy0Qz/KhAWqSxT34he39Bff1ZbEhwMivp0L0hJp gQO/axrgNimwkkwFaFvyR4d57rG9C7y2eB+FY3YdCACqi60IozJifY1EQVMz+Ufs WoSXjrj0V7Wz15xyIIG7A8Nsy6AHKvEDVvxH2y23kM5kgeR7NS8dqqdhJ9PZo1y9 hmDw0pBIlPKpbmfvuo/LXmCA3ekn6fprGEdmOu7cs63z4Y55HYRhyTq9Fnfl8SEK 4pZr/bjVdPdBM2DZaZjuScC5GkibDx9M2LtwJQ/oI7q+VDgkUcuHNOBStEt9Eg++ 8wk40NsHlD/KPLacTCBGvlFhAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKcRy2Vy 2Dh1Q5IVrs8rYaQjsZSAMB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RThFQi9EMDM5RjhENkQxQkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVy RmNWMWh0MEFUcmlUbDN4YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+FyeHe0a06VisDUNmxi2nA/mQwlFeDApxPppIVBkWsu3mWwVkvVsO ZL63Z48cGE4pU/yqXSI52/uGnJRDVwgzZapGsPdmA+EzL3ohBhV36GUs1t1n21Wm SVefrDoMOlbhxpsw+kyqXnAan5rhohcxBschnuY9gDWsVNXJoljuzoTwHo5IMB9P D+KoXKD3BzG39NH0MIjTe20Dnu5gnrFvPFkZ6ZqFBK9Wm5aL0a51S3YPATXP9bVZ w5e2PAlnpgtXtyVbZuIZANRfE404C1CI6B2REeDPyxXdyl8iKIpwtzvXsh8iK2yP QMrthy1PiPRpzmowoCWg04431IAsPGpE -----END CERTIFICATE-----Generated at Sat Jun 14 19:31:32 2025 by rpki-client