$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft File: BQ5HmwmNZLazhlsr5GiFdeotTVE.mft (raw, json) Hash identifier: UB+01M/5YfCDIZQXWQT/fDdQ517Q5A9tyg3xrCJntsg= Subject key identifier: 41:50:1D:CB:F5:8B:8E:67:68:6A:61:66:B0:7C:00:8F:11:E3:68:35 Authority key identifier: 05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51 Certificate issuer: /CN=A91AB457/serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51 Certificate serial: 0BE5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft Manifest number: 0BE5 Signing time: Wed 06 Aug 2025 19:03:30 +0000 Manifest this update: Wed 06 Aug 2025 19:03:29 +0000 Manifest next update: Wed 13 Aug 2025 19:03:29 +0000 Files and hashes: 1: BQ5HmwmNZLazhlsr5GiFdeotTVE.crl (hash: Ez2wr0D8chgosg/UmOCKZQx9n0+X/V+Z6mQhASDwRTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3045 (0xbe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB457, serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51 Validity Not Before: Aug 6 19:03:29 2025 GMT Not After : Aug 13 19:03:29 2025 GMT Subject: CN=6893a701-deb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3b:90:b1:48:48:4c:e0:ab:b2:1d:25:f6:7e: c0:3f:90:8e:27:a2:dd:f9:e5:53:1b:98:65:b9:29: ef:c0:ae:29:81:8c:02:3d:c0:23:9e:81:9e:9a:33: d9:2f:14:57:bc:bf:92:b2:52:94:8a:64:77:d0:d5: 83:76:3e:cc:6b:d9:d2:95:6a:4c:79:cc:89:00:b6: 2a:39:9b:bb:d7:e1:bb:2b:6b:12:40:19:8c:b3:d0: f3:dd:5c:56:36:da:d1:53:cc:ed:3e:14:2b:d4:5b: ce:22:ba:07:2f:be:fc:98:39:e1:5b:b8:76:ab:a8: 1e:01:51:1d:36:64:f6:c8:e6:60:2f:c8:10:e0:b5: da:19:30:91:92:2e:20:54:10:be:92:5b:10:f4:cf: 70:5d:c3:58:d7:1b:a3:2e:20:20:60:d6:38:3a:29: a9:af:84:ad:68:01:32:40:e2:82:7d:59:f9:b2:f9: e5:e7:43:bf:e6:d4:55:54:79:02:ca:ef:9f:a3:b9: 96:e9:fb:61:99:6d:30:b0:4c:cb:64:4d:27:a8:4e: 2f:7b:2d:61:d0:fe:55:85:ca:4d:e2:f6:35:5d:b9: 91:18:8b:1b:73:75:72:97:a2:43:76:9a:99:6d:45: 35:bf:11:81:84:9d:e2:5f:cf:87:49:ea:46:d7:17: c1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:50:1D:CB:F5:8B:8E:67:68:6A:61:66:B0:7C:00:8F:11:E3:68:35 X509v3 Authority Key Identifier: keyid:05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:21:58:6d:66:0a:f0:70:41:98:2b:5a:86:23:8b:80:8a:23: 45:b2:44:9c:bd:d5:07:40:75:79:6a:3b:52:a6:d7:dc:c9:59: 3b:9b:49:5d:b7:6c:79:b3:9e:d8:e1:33:80:4f:45:a7:27:ac: 9f:fd:32:d4:86:db:a4:6d:65:42:dc:36:30:c4:16:97:7b:66: 29:9c:f5:9e:3a:9a:54:ab:52:8f:b0:3f:29:1d:60:f9:00:78: 7d:6b:40:27:35:e0:9e:78:c1:94:74:32:ba:c0:fa:b4:01:e1: 90:d0:6f:e6:f5:87:26:0a:7b:a2:8e:7f:11:a1:60:5c:fd:5b: ee:95:b5:a5:0b:b6:6d:74:4a:ba:38:07:4f:51:d7:94:6c:54: 10:6e:ed:2b:76:1e:b3:9e:89:cf:43:27:03:8d:8f:6a:a1:4e: 70:57:95:fb:ad:d0:92:78:4f:70:94:77:e9:7a:3f:1c:50:2d: ca:12:4f:e2:cc:4a:21:cb:77:2f:2a:8e:40:95:6b:2b:bc:d9: e5:95:65:d8:0c:12:43:05:08:60:2d:8d:c9:42:f4:41:a5:45: 0e:f2:86:5c:e5:e6:1f:22:b8:67:fb:ac:c6:0c:48:a5:50:74: 53:c7:04:c8:62:eb:d3:b9:c0:1f:59:1b:54:11:81:d0:b7:44: 78:d2:d6:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI0NTcxMTAvBgNVBAUTKDA1MEU0NzlCMDk4RDY0QjZCMzg2NUIyQkU0Njg4NTc1 RUEyRDRENTEwHhcNMjUwODA2MTkwMzI5WhcNMjUwODEzMTkwMzI5WjAYMRYwFAYD VQQDEw02ODkzYTcwMS1kZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzuQsUhITOCrsh0l9n7AP5COJ6Ld+eVTG5hluSnvwK4pgYwCPcAjnoGemjPZ LxRXvL+SslKUimR30NWDdj7Ma9nSlWpMecyJALYqOZu71+G7K2sSQBmMs9Dz3VxW NtrRU8ztPhQr1FvOIroHL778mDnhW7h2q6geAVEdNmT2yOZgL8gQ4LXaGTCRki4g VBC+klsQ9M9wXcNY1xujLiAgYNY4Oimpr4StaAEyQOKCfVn5svnl50O/5tRVVHkC yu+fo7mW6fthmW0wsEzLZE0nqE4vey1h0P5VhcpN4vY1XbmRGIsbc3Vyl6JDdpqZ bUU1vxGBhJ3iX8+HSepG1xfBtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFQHcv1 i45naGphZrB8AI8R42g1MB8GA1UdIwQYMBaAFAUOR5sJjWS2s4ZbK+RohXXqLU1R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjQ1Ny81QUY2NjEwMjFD OTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpMYXpobHNyNUdpRmRlb3RU VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRNUhtd21OWkxhemhsc3I1R2lGZGVvdFRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjQ1Ny81QUY2NjEwMjFDOTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpM YXpobHNyNUdpRmRlb3RUVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxIVhtZgrwcEGYK1qGI4uAiiNFskScvdUHQHV5ajtSptfcyVk7m0ld t2x5s57Y4TOAT0WnJ6yf/TLUhtukbWVC3DYwxBaXe2YpnPWeOppUq1KPsD8pHWD5 AHh9a0AnNeCeeMGUdDK6wPq0AeGQ0G/m9YcmCnuijn8RoWBc/VvulbWlC7ZtdEq6 OAdPUdeUbFQQbu0rdh6znonPQycDjY9qoU5wV5X7rdCSeE9wlHfpej8cUC3KEk/i zEohy3cvKo5AlWsrvNnllWXYDBJDBQhgLY3JQvRBpUUO8oZc5eYfIrhn+6zGDEil UHRTxwTIYuvTucAfWRtUEYHQt0R40tYI -----END CERTIFICATE-----Generated at Thu Aug 7 04:36:29 2025 by rpki-client