$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft File: BH7xoc9llmNJhmdnZVZI7vkRDFo.mft (raw, json) Hash identifier: LO+W9BxGLcG7BJHgx0x2IEelPd02/MNFmjWaQhpB2Nk= Subject key identifier: 5A:7D:6A:3C:31:8F:AC:CC:98:8D:74:0B:DA:4C:B5:96:4E:BF:4F:2D Authority key identifier: 04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A Certificate issuer: /CN=A91CE4C1/serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft Manifest number: 47 Signing time: Sun 15 Jun 2025 06:33:12 +0000 Manifest this update: Sun 15 Jun 2025 06:33:12 +0000 Manifest next update: Sun 22 Jun 2025 06:33:12 +0000 Files and hashes: 1: BH7xoc9llmNJhmdnZVZI7vkRDFo.crl (hash: VKp0875AxZqUse7SExLXus6w4UVPZUjin9gKrFMhV1Y=) 2: 459E12EAE9C611EFB8012F10C4F9AE02.roa (hash: /RmfZz46so9ge+fbPNaFv77MZSPZTzTOQnyx59sNwag=) 3: FB4C0514E9C311EFADA7270AC4F9AE02.roa (hash: b+8Vf+1PI1yNyvvstVRxJPifoMZ8KqBIQc0NBIzO5qc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE4C1, serialNumber=047EF1A1CF65966349866767655648EEF9110C5A Validity Not Before: Jun 15 06:33:12 2025 GMT Not After : Jun 22 06:33:12 2025 GMT Subject: CN=684e6928-8650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ec:7f:57:88:83:29:fb:ff:57:fd:7d:44:59: bd:5c:6d:76:fa:8d:a8:bb:25:c9:8b:75:56:6a:9e: 35:c6:5f:d9:06:11:9b:13:86:0f:00:4d:26:b9:93: bf:a3:81:c7:ee:e3:a2:91:8d:34:da:97:93:f0:1d: 9d:bd:20:da:7a:af:30:91:f4:49:e3:dd:49:37:36: 76:40:b4:e6:16:2c:c4:32:7e:1e:f9:34:c5:11:4b: db:97:b3:d0:9e:b2:ce:a2:2b:84:1c:05:d2:d8:57: ab:27:2a:a1:1c:39:d3:4e:84:65:f0:e8:18:2e:8f: c5:99:81:be:d9:62:14:c0:10:d2:3b:15:f8:c3:ac: 41:db:fe:73:70:da:89:a8:7a:d9:74:89:aa:d5:4a: e1:cd:33:89:80:9b:3f:3e:2f:e1:95:f7:3b:94:3b: cd:d4:69:5f:a4:4b:ac:cb:34:8b:93:e4:2d:68:c7: 02:74:ac:76:8c:a6:6d:61:72:4a:19:a0:cc:66:3c: 6d:bf:56:34:28:05:c7:f6:13:a0:7f:59:8d:19:a2: 0c:47:42:10:1c:84:82:5d:3b:57:d4:4f:e1:08:d9: 5a:4a:66:90:ef:d2:24:13:13:2c:72:68:ac:57:ff: 1f:cc:2d:16:58:b5:2a:4b:67:b7:d7:cf:29:99:8d: 84:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7D:6A:3C:31:8F:AC:CC:98:8D:74:0B:DA:4C:B5:96:4E:BF:4F:2D X509v3 Authority Key Identifier: keyid:04:7E:F1:A1:CF:65:96:63:49:86:67:67:65:56:48:EE:F9:11:0C:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BH7xoc9llmNJhmdnZVZI7vkRDFo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE4C1/3644887AE9BB11EFBAAC9D70C4F9AE02/BH7xoc9llmNJhmdnZVZI7vkRDFo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 46:86:b6:9e:af:58:69:47:6f:d3:e9:07:58:33:39:50:b8:62: 65:fd:3f:49:7a:4a:21:5f:c4:f9:ba:c7:63:d9:c1:8b:a3:ac: b3:13:f8:2b:e7:d8:e0:e1:27:b7:cd:f8:e1:3c:bd:35:60:95: 33:90:a8:a2:ae:2c:e0:81:f2:65:2f:65:4b:a6:a5:20:5b:54: 49:9f:c5:c0:52:93:a2:a9:85:d8:9f:47:80:32:56:de:97:bd: a7:ac:53:20:74:41:65:fc:c1:43:52:5d:3d:6b:19:54:17:b7: 05:75:09:15:26:ce:fa:fb:82:44:fa:e6:1d:dd:52:f7:f5:3b: e0:39:23:c8:3a:3b:a6:66:88:12:9f:5f:c0:8d:97:8b:51:20: 4d:25:53:70:27:c3:e2:64:ac:fb:79:73:70:15:95:7d:e1:88: 54:25:99:62:c4:26:c1:3d:57:da:3b:91:67:53:1e:be:36:42: 3f:86:d7:ad:f8:7f:ee:dc:67:30:bf:10:6f:0d:08:6e:48:c0: 63:59:d6:39:6d:90:c0:0e:22:33:ac:1d:a4:b9:71:1c:c5:71: 94:f8:08:d0:59:3b:76:54:30:7c:85:db:68:6e:3e:b4:1a:b1: 67:22:c9:12:0a:72:ec:ba:ae:83:c3:6f:58:68:39:1a:26:0b: 6a:cd:cf:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTRDMTExMC8GA1UEBRMoMDQ3RUYxQTFDRjY1OTY2MzQ5ODY2NzY3NjU1NjQ4RUVG OTExMEM1QTAeFw0yNTA2MTUwNjMzMTJaFw0yNTA2MjIwNjMzMTJaMBgxFjAUBgNV BAMTDTY4NGU2OTI4LTg2NTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC37H9XiIMp+/9X/X1EWb1cbXb6jai7JcmLdVZqnjXGX9kGEZsThg8ATSa5k7+j gcfu46KRjTTal5PwHZ29INp6rzCR9Enj3Uk3NnZAtOYWLMQyfh75NMURS9uXs9Ce ss6iK4QcBdLYV6snKqEcOdNOhGXw6Bguj8WZgb7ZYhTAENI7FfjDrEHb/nNw2omo etl0iarVSuHNM4mAmz8+L+GV9zuUO83UaV+kS6zLNIuT5C1oxwJ0rHaMpm1hckoZ oMxmPG2/VjQoBcf2E6B/WY0ZogxHQhAchIJdO1fUT+EI2VpKZpDv0iQTEyxyaKxX /x/MLRZYtSpLZ7fXzymZjYQDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWn1qPDGP rMyYjXQL2ky1lk6/Ty0wHwYDVR0jBBgwFoAUBH7xoc9llmNJhmdnZVZI7vkRDFow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFNEMxLzM2NDQ4ODdBRTlC QjExRUZCQUFDOUQ3MEM0RjlBRTAyL0JIN3hvYzlsbG1OSmhtZG5aVlpJN3ZrUkRG by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQkg3eG9jOWxsbU5KaG1kblpWWkk3dmtSREZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNF NEMxLzM2NDQ4ODdBRTlCQjExRUZCQUFDOUQ3MEM0RjlBRTAyL0JIN3hvYzlsbG1O SmhtZG5aVlpJN3ZrUkRGby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEaGtp6vWGlHb9PpB1gzOVC4YmX9P0l6SiFfxPm6x2PZwYujrLMT+Cvn 2ODhJ7fN+OE8vTVglTOQqKKuLOCB8mUvZUumpSBbVEmfxcBSk6KphdifR4AyVt6X vaesUyB0QWX8wUNSXT1rGVQXtwV1CRUmzvr7gkT65h3dUvf1O+A5I8g6O6ZmiBKf X8CNl4tRIE0lU3Anw+JkrPt5c3AVlX3hiFQlmWLEJsE9V9o7kWdTHr42Qj+G1634 f+7cZzC/EG8NCG5IwGNZ1jltkMAOIjOsHaS5cRzFcZT4CNBZO3ZUMHyF22huPrQa sWciyRIKcuy6roPDb1hoORomC2rNz4c= -----END CERTIFICATE-----Generated at Sun Jun 15 09:56:34 2025 by rpki-client