$ rpki-client -vvf rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft File: Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft (raw, json) Hash identifier: fvgyDo9PA863xgDZrcfgHTYtnUG1Nii+b4XnSgAppyk= Subject key identifier: 35:8C:03:EB:B4:D3:FB:F6:B3:FB:A7:B7:F3:9E:98:50:A8:23:98:29 Authority key identifier: 07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 Certificate issuer: /CN=A91C37ED/serialNumber=071F8119171441802BE3261F15627DAF289DB336 Certificate serial: 0141 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft Manifest number: 013F Signing time: Thu 19 Jun 2025 03:45:41 +0000 Manifest this update: Thu 19 Jun 2025 03:45:40 +0000 Manifest next update: Thu 26 Jun 2025 03:45:40 +0000 Files and hashes: 1: Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl (hash: dyP7K5PgCljx5ZyBuHYXGmAH6xlTY99Gd0p0vfgf9Kc=) 2: 6CE66CFC630E11EEA9EDC20FC4F9AE02.roa (hash: GWZ2MHtEWnxPiTCBVRb6cUY0T8WOEUXRXli5S8fNKVc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 03:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C37ED, serialNumber=071F8119171441802BE3261F15627DAF289DB336 Validity Not Before: Jun 19 03:45:40 2025 GMT Not After : Jun 26 03:45:40 2025 GMT Subject: CN=685387e4-705f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6c:55:fd:81:54:a1:ca:c3:f6:12:fb:a4:9f: 63:dd:aa:ab:5f:d4:3a:d7:03:55:ea:e2:a8:bc:a1: 38:64:11:b9:b2:bd:6a:4a:69:b7:e4:a1:c2:06:fc: 91:bf:05:2e:78:ff:43:23:d7:e3:19:9e:1c:bf:25: 7c:4d:d3:64:2a:91:b6:a0:9d:06:ce:10:26:9c:dc: b6:0b:3d:1a:33:ec:42:57:42:6a:b3:92:41:3b:0b: ca:3f:d1:4b:9b:51:d6:a9:e5:f8:9e:10:e1:31:29: 1f:4e:ec:95:30:c0:b5:4b:03:70:35:a1:c4:24:22: b5:5e:69:16:0d:bc:df:1d:dd:42:fc:70:11:fd:47: 48:6c:f9:ee:da:22:2c:15:57:a5:05:50:88:61:65: 76:33:89:b6:3f:13:04:b3:b7:4a:dd:e7:e0:ab:8d: a1:09:5a:77:b5:bb:e9:ea:1a:68:c3:47:7b:15:b2: 7d:9c:0f:db:22:f5:ac:fe:21:3e:5e:3b:a7:a5:8d: 57:88:ef:2f:38:81:2c:ba:4e:74:80:e3:4d:e1:1f: 52:a7:e8:75:aa:2f:eb:e0:b2:23:30:b1:b2:07:b2: f3:f7:77:cd:b6:db:88:db:aa:bd:99:e7:28:fd:8a: b5:a4:35:01:8a:77:20:de:c6:8a:a0:ef:33:b6:ab: 0f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:8C:03:EB:B4:D3:FB:F6:B3:FB:A7:B7:F3:9E:98:50:A8:23:98:29 X509v3 Authority Key Identifier: keyid:07:1F:81:19:17:14:41:80:2B:E3:26:1F:15:62:7D:AF:28:9D:B3:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx-BGRcUQYAr4yYfFWJ9ryidszY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C37ED/6DB954A262A311EE82B90074C4F9AE02/Bx-BGRcUQYAr4yYfFWJ9ryidszY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:28:24:6e:8c:55:64:7f:65:4b:fd:d3:e3:fb:67:b0:2f:9c: 20:59:ac:04:0a:15:03:48:b0:df:92:5a:22:ff:2e:0e:cc:26: 91:40:bd:b9:43:22:69:ac:84:d8:a5:71:88:70:b4:fb:e8:6e: 53:d8:58:77:70:9c:c9:1e:16:a4:77:26:08:36:f9:20:19:4a: b3:5f:83:2d:76:33:d5:01:28:d8:cc:e8:7a:95:32:54:c9:7d: ec:e0:6b:88:53:9e:ae:78:08:4f:ce:05:4b:ae:d5:eb:51:8e: 79:8c:4a:76:54:85:4b:3d:f1:45:96:8e:de:53:81:28:65:32: 24:0b:50:31:3b:5c:22:0b:19:56:36:f8:00:f1:f0:97:36:9a: c1:6b:50:f6:88:60:0a:e2:e8:e3:e5:b8:3b:6d:92:58:cf:f7: e1:1e:14:23:50:dc:be:c4:7c:0e:fb:e3:e0:08:f3:ce:3a:0d: 42:34:e4:0d:02:bf:b8:8f:11:d3:7e:c4:f0:2f:45:a6:f3:f9: 2e:3e:9d:a6:33:10:54:21:6b:af:0f:ef:61:57:1a:ba:65:77: 45:91:ae:1f:b3:36:c8:46:e6:ca:d3:ae:05:22:22:61:b0:01: ba:97:3e:1b:81:25:eb:7a:13:ef:c8:53:d5:95:dd:b9:3f:1e: 41:2f:5e:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzM3RUQxMTAvBgNVBAUTKDA3MUY4MTE5MTcxNDQxODAyQkUzMjYxRjE1NjI3REFG Mjg5REIzMzYwHhcNMjUwNjE5MDM0NTQwWhcNMjUwNjI2MDM0NTQwWjAYMRYwFAYD VQQDEw02ODUzODdlNC03MDVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2WxV/YFUocrD9hL7pJ9j3aqrX9Q61wNV6uKovKE4ZBG5sr1qSmm35KHCBvyR vwUueP9DI9fjGZ4cvyV8TdNkKpG2oJ0GzhAmnNy2Cz0aM+xCV0Jqs5JBOwvKP9FL m1HWqeX4nhDhMSkfTuyVMMC1SwNwNaHEJCK1XmkWDbzfHd1C/HAR/UdIbPnu2iIs FVelBVCIYWV2M4m2PxMEs7dK3efgq42hCVp3tbvp6hpow0d7FbJ9nA/bIvWs/iE+ XjunpY1XiO8vOIEsuk50gONN4R9Sp+h1qi/r4LIjMLGyB7Lz93fNttuI26q9meco /Yq1pDUBincg3saKoO8ztqsPMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWMA+u0 0/v2s/unt/OemFCoI5gpMB8GA1UdIwQYMBaAFAcfgRkXFEGAK+MmHxVifa8onbM2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzdFRC82REI5NTRBMjYy QTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZQXI0eVlmRldKOXJ5aWRz elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J4LUJHUmNVUVlBcjR5WWZGV0o5cnlpZHN6WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MzdFRC82REI5NTRBMjYyQTMxMUVFODJCOTAwNzRDNEY5QUUwMi9CeC1CR1JjVVFZ QXI0eVlmRldKOXJ5aWRzelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/KCRujFVkf2VL/dPj+2ewL5wgWawEChUDSLDfkloi/y4OzCaRQL25 QyJprITYpXGIcLT76G5T2Fh3cJzJHhakdyYINvkgGUqzX4MtdjPVASjYzOh6lTJU yX3s4GuIU56ueAhPzgVLrtXrUY55jEp2VIVLPfFFlo7eU4EoZTIkC1AxO1wiCxlW NvgA8fCXNprBa1D2iGAK4ujj5bg7bZJYz/fhHhQjUNy+xHwO++PgCPPOOg1CNOQN Ar+4jxHTfsTwL0Wm8/kuPp2mMxBUIWuvD+9hVxq6ZXdFka4fszbIRubK064FIiJh sAG6lz4bgSXrehPvyFPVld25Px5BL16W -----END CERTIFICATE-----Generated at Fri Jun 20 05:38:42 2025 by rpki-client