$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: qNlu7NpVciJ+lMNw/J4wvIR0d+AZ2dMcqOQ0druSc5Q= Subject key identifier: 10:98:CF:91:C7:F1:C5:B1:F7:D2:3B:EC:61:38:20:20:9D:67:35:39 Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: 63 Signing time: Sat 09 Aug 2025 07:36:33 +0000 Manifest this update: Sat 09 Aug 2025 07:36:32 +0000 Manifest next update: Sat 16 Aug 2025 07:36:31 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: gOzN9eWCEiDLZchwU7NzpixGnM8wX56bemFcyrgVLpQ=) 2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: /RmfZz46so9ge+fbPNaFv77MZSPZTzTOQnyx59sNwag=) 3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: b+8Vf+1PI1yNyvvstVRxJPifoMZ8KqBIQc0NBIzO5qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Validity Not Before: Aug 9 07:36:32 2025 GMT Not After : Aug 16 07:36:31 2025 GMT Subject: CN=6896fa80-72b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e5:42:cf:92:85:00:7d:ea:da:38:1f:6a:e4: 3c:dc:0e:71:97:9a:41:ed:f4:16:c2:84:67:c9:d2: 04:aa:7b:bd:19:f8:96:17:e2:9f:9f:bd:0d:74:d1: ec:bb:52:fa:31:0e:4f:d1:4d:e0:d8:e8:da:22:d4: 73:15:b0:59:ba:b0:27:bb:c6:23:c7:ce:c6:b0:d7: ff:be:41:b8:b4:88:e3:df:aa:28:51:1a:76:e9:13: 80:19:20:4c:dd:d9:97:cf:cc:40:c9:ba:b2:db:70: 95:5b:39:1c:46:b3:e8:bc:a6:cc:7e:93:f0:40:b3: 08:4b:19:3d:b1:c1:da:9f:e2:55:70:89:0e:69:e4: ac:14:09:17:ef:08:f4:41:a6:07:a6:bf:98:ad:30: 43:a0:5c:4e:37:63:75:9e:fc:51:ce:da:34:92:1a: ea:b9:f5:9b:d6:d8:49:62:7d:d7:ce:1c:ca:fe:7e: c9:e2:94:13:c4:28:20:41:4f:77:15:74:db:b4:41: ab:76:15:12:72:23:ac:29:f7:7e:a3:87:3b:91:3b: 4b:ef:26:97:ae:44:c6:7b:28:50:99:90:42:03:28: c4:08:92:35:d9:4d:24:b3:ec:73:cf:be:44:a4:2b: 60:1f:22:99:55:08:06:97:d7:7f:ad:bc:80:3d:dc: d9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:98:CF:91:C7:F1:C5:B1:F7:D2:3B:EC:61:38:20:20:9D:67:35:39 X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:90:51:b7:ce:fa:05:fe:45:19:be:6d:9c:24:2a:9c:42:d1: 64:65:2e:b9:fe:cb:8f:eb:dd:8e:11:e8:6f:1d:70:4f:ce:86: ec:dc:22:89:e0:f4:22:28:95:52:89:ca:82:ad:c5:08:5d:83: bd:1e:67:33:fa:3b:00:02:46:58:7d:9e:f7:ca:73:6d:be:96: 82:96:ae:06:18:3e:a2:a4:86:4d:0e:34:be:b8:52:80:c7:87: 68:b3:81:5f:62:7a:b3:83:21:c4:fd:b0:9e:39:0b:76:73:78: 23:2a:ea:84:59:c6:89:59:c8:9b:ac:ad:b3:d4:99:96:0d:b1: 58:8f:ca:ab:09:0c:73:79:ba:f7:35:73:c8:9c:71:08:35:cd: 3f:e4:94:b5:fb:87:16:1b:66:a3:91:41:7b:03:a3:d9:82:54: 33:ff:95:35:96:e4:c5:89:79:aa:11:7a:66:80:b5:e8:16:24: be:93:bd:16:82:52:4e:7a:b2:65:57:3d:d9:ee:9e:3b:ba:94: 93:c5:31:eb:75:f6:09:08:89:c8:5b:b3:e0:87:ba:b2:34:61: df:2f:79:c4:89:d2:18:45:59:d0:f1:55:ff:16:a7:11:d8:53: 7f:81:02:96:8b:2a:3c:ef:ce:65:e5:58:bd:70:dd:31:8d:d5: 05:51:f2:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTRDMTExMC8GA1UEBRMoMDQ3RUYxQTFDRjY1OTY2MzQ5ODY2NzY3NjU1NjQ4RUVG OTExMEM1QTAeFw0yNTA4MDkwNzM2MzJaFw0yNTA4MTYwNzM2MzFaMBgxFjAUBgNV BAMTDTY4OTZmYTgwLTcyYjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk5ULPkoUAferaOB9q5DzcDnGXmkHt9BbChGfJ0gSqe70Z+JYX4p+fvQ100ey7 UvoxDk/RTeDY6Noi1HMVsFm6sCe7xiPHzsaw1/++Qbi0iOPfqihRGnbpE4AZIEzd 2ZfPzEDJurLbcJVbORxGs+i8psx+k/BAswhLGT2xwdqf4lVwiQ5p5KwUCRfvCPRB pgemv5itMEOgXE43Y3We/FHO2jSSGuq59ZvW2ElifdfOHMr+fsnilBPEKCBBT3cV dNu0Qat2FRJyI6wp936jhzuRO0vvJpeuRMZ7KFCZkEIDKMQIkjXZTSSz7HPPvkSk K2AfIplVCAaX13+tvIA93NnhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUEJjPkcfx xbH30jvsYTggIJ1nNTkwHwYDVR0jBBgwFoAUBH7xoc9llmNJhmdnZVZI7vkRDFow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFNEMxLzM2NDQ4ODdBRTlC QjExRUZCQUFDOUQ3MEM0RjlBRTAyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRG by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQkg3eG9jOWxsbU5KaG1kblpWWkk3dmtSREZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF NEMxLzM2NDQ4ODdBRTlCQjExRUZCQUFDOUQ3MEM0RjlBRTAyL0JIN3hvYzlsbG1O SmhtZG5aVlpJN3ZrUkRGby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI6QUbfO+gX+RRm+bZwkKpxC0WRlLrn+y4/r3Y4R6G8dcE/OhuzcIong 9CIolVKJyoKtxQhdg70eZzP6OwACRlh9nvfKc22+loKWrgYYPqKkhk0ONL64UoDH h2izgV9ierODIcT9sJ45C3ZzeCMq6oRZxolZyJusrbPUmZYNsViPyqsJDHN5uvc1 c8iccQg1zT/klLX7hxYbZqORQXsDo9mCVDP/lTWW5MWJeaoRemaAtegWJL6TvRaC Uk56smVXPdnunju6lJPFMet19gkIichbs+CHurI0Yd8vecSJ0hhFWdDxVf8WpxHY U3+BApaLKjzvzmXlWL1w3TGN1QVR8nY= -----END CERTIFICATE-----Generated at Sun Aug 10 18:20:16 2025 by rpki-client