$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft File: BQ5HmwmNZLazhlsr5GiFdeotTVE.mft (raw, json) Hash identifier: HDcdQpFx2hikzvYf7bWkGE2h4M9jt+6rlrR65plddFY= Subject key identifier: 5C:B2:77:04:B0:9C:C9:AC:6D:8C:4A:51:8B:BE:9C:0A:44:C5:57:0A Authority key identifier: 05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51 Certificate issuer: /CN=A91AB457/serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51 Certificate serial: 0BC9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft Manifest number: 0BC9 Signing time: Thu 12 Jun 2025 18:41:01 +0000 Manifest this update: Thu 12 Jun 2025 18:41:01 +0000 Manifest next update: Thu 19 Jun 2025 18:41:01 +0000 Files and hashes: 1: BQ5HmwmNZLazhlsr5GiFdeotTVE.crl (hash: k+tCDimT4quTdkwD/aztyD+yEIgA1vzcNJWqrLDhyLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:41:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3017 (0xbc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB457, serialNumber=050E479B098D64B6B3865B2BE4688575EA2D4D51 Validity Not Before: Jun 12 18:41:01 2025 GMT Not After : Jun 19 18:41:01 2025 GMT Subject: CN=684b1f3d-4a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ae:76:57:d6:99:c3:5e:30:79:3a:ca:a7:93: 12:e6:63:c9:92:db:49:67:1d:23:80:83:9d:19:e4: bc:61:89:7f:16:0e:94:10:ce:61:83:02:a7:ff:b3: 78:a2:97:42:88:e3:da:52:1a:e3:5d:4e:f2:d8:54: 32:a0:78:a0:e3:f0:06:d9:cf:5a:9c:01:6b:65:99: ae:5b:c0:fc:7d:91:9e:cb:82:5c:84:9e:93:7e:3b: 79:ec:8b:2c:c4:89:c8:66:f1:5b:5f:7f:dc:0e:c5: 66:2f:d0:e8:ed:73:e0:44:a0:b6:8b:b7:49:e3:27: 53:ff:ce:85:c0:ad:e1:80:db:c2:f4:6f:d3:a3:fb: a3:ba:53:ee:d2:55:2c:af:fc:b5:9a:b2:6f:1a:47: fc:b7:5a:82:06:13:d3:8a:f7:47:0d:ec:40:bb:c7: 21:32:ae:36:2d:4f:dd:70:3b:f4:be:2a:58:0d:13: 0e:9f:96:62:69:5a:42:e0:19:8b:ed:62:9a:a1:f8: 61:52:3b:32:e7:8b:69:21:d4:cd:a2:55:3b:e8:a4: 6d:8d:3f:52:83:51:42:90:5b:ce:7a:ae:6e:ea:0d: 79:26:ba:c1:d8:94:19:7b:64:6b:47:c6:96:3a:40: 91:09:17:45:34:30:63:f9:b8:94:a0:4f:d5:e8:ea: 35:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:B2:77:04:B0:9C:C9:AC:6D:8C:4A:51:8B:BE:9C:0A:44:C5:57:0A X509v3 Authority Key Identifier: keyid:05:0E:47:9B:09:8D:64:B6:B3:86:5B:2B:E4:68:85:75:EA:2D:4D:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQ5HmwmNZLazhlsr5GiFdeotTVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB457/5AF661021C9811EAB4743F0FC4F9AE02/BQ5HmwmNZLazhlsr5GiFdeotTVE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:44:8a:22:8b:01:bf:1a:4c:a7:60:8a:b4:22:19:dd:d1:25: 19:25:9c:0b:8a:a3:e6:44:84:be:b0:d3:8f:f6:bc:7d:28:a8: 99:59:60:0c:58:67:18:cd:fb:55:4b:20:3c:38:d8:4e:a2:ed: 3f:5f:f2:06:95:cd:a9:c3:51:6f:c6:3b:08:98:c0:64:e3:6f: 7e:14:90:ec:5e:51:5b:a4:9d:d9:ff:a9:94:e1:1d:b2:36:8a: 7e:f0:a2:01:89:52:6f:5b:a0:80:07:db:27:7e:9b:ea:68:35: ae:61:60:7a:c2:d5:f1:94:a2:2f:f3:ec:50:86:e8:9f:db:31: 1f:1c:6d:0c:0a:d6:d9:36:7e:b6:18:e6:ba:88:3e:d2:cb:6e: 49:ad:8f:eb:af:2d:ee:83:8e:2c:5b:fd:a9:55:73:43:ca:a7: 66:fb:f6:c0:ae:aa:b2:c8:d8:24:6d:11:d9:f8:12:f6:9f:e2: 5c:32:2c:42:e8:42:29:46:60:e3:ea:0e:e2:bd:fc:45:8a:67: 18:83:4e:ea:05:45:cc:25:56:fb:14:17:5a:f6:bf:a2:7f:21: bf:ea:25:aa:07:09:65:e2:3a:02:47:8a:98:cd:bd:d7:90:2e: ea:4a:62:0a:fa:89:35:ce:c7:8b:40:3f:e3:ef:4c:48:d4:96: e2:d5:22:c0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI0NTcxMTAvBgNVBAUTKDA1MEU0NzlCMDk4RDY0QjZCMzg2NUIyQkU0Njg4NTc1 RUEyRDRENTEwHhcNMjUwNjEyMTg0MTAxWhcNMjUwNjE5MTg0MTAxWjAYMRYwFAYD VQQDEw02ODRiMWYzZC00YTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyK52V9aZw14weTrKp5MS5mPJkttJZx0jgIOdGeS8YYl/Fg6UEM5hgwKn/7N4 opdCiOPaUhrjXU7y2FQyoHig4/AG2c9anAFrZZmuW8D8fZGey4JchJ6Tfjt57Iss xInIZvFbX3/cDsVmL9Do7XPgRKC2i7dJ4ydT/86FwK3hgNvC9G/To/ujulPu0lUs r/y1mrJvGkf8t1qCBhPTivdHDexAu8chMq42LU/dcDv0vipYDRMOn5ZiaVpC4BmL 7WKaofhhUjsy54tpIdTNolU76KRtjT9Sg1FCkFvOeq5u6g15JrrB2JQZe2RrR8aW OkCRCRdFNDBj+biUoE/V6Oo1UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyydwSw nMmsbYxKUYu+nApExVcKMB8GA1UdIwQYMBaAFAUOR5sJjWS2s4ZbK+RohXXqLU1R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjQ1Ny81QUY2NjEwMjFD OTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpMYXpobHNyNUdpRmRlb3RU VkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRNUhtd21OWkxhemhsc3I1R2lGZGVvdFRWRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjQ1Ny81QUY2NjEwMjFDOTgxMUVBQjQ3NDNGMEZDNEY5QUUwMi9CUTVIbXdtTlpM YXpobHNyNUdpRmRlb3RUVkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKRIoiiwG/GkynYIq0Ihnd0SUZJZwLiqPmRIS+sNOP9rx9KKiZWWAM WGcYzftVSyA8ONhOou0/X/IGlc2pw1FvxjsImMBk429+FJDsXlFbpJ3Z/6mU4R2y Nop+8KIBiVJvW6CAB9snfpvqaDWuYWB6wtXxlKIv8+xQhuif2zEfHG0MCtbZNn62 GOa6iD7Sy25JrY/rry3ug44sW/2pVXNDyqdm+/bArqqyyNgkbRHZ+BL2n+JcMixC 6EIpRmDj6g7ivfxFimcYg07qBUXMJVb7FBda9r+ifyG/6iWqBwll4joCR4qYzb3X kC7qSmIK+ok1zseLQD/j70xI1Jbi1SLA -----END CERTIFICATE-----Generated at Sat Jun 14 18:54:00 2025 by rpki-client