$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft File: BHT0BqF40ixU1e9yTGssLJo7a5g.mft (raw, json) Hash identifier: YRDRsDvnZaX0Ox09WNdMMYFiOnGZ0eD9Y+pyypzlbrU= Subject key identifier: 63:35:B9:B6:AE:E7:32:4E:C1:CB:BB:82:4B:04:79:57:52:EC:F8:20 Authority key identifier: 04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 Certificate issuer: /CN=A91D60CF/serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Certificate serial: C3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft Manifest number: C0 Signing time: Tue 17 Jun 2025 04:48:37 +0000 Manifest this update: Tue 17 Jun 2025 04:48:37 +0000 Manifest next update: Tue 24 Jun 2025 04:48:37 +0000 Files and hashes: 1: BHT0BqF40ixU1e9yTGssLJo7a5g.crl (hash: WYYyr27q6Q2vt5UsyrJqsmSMcilPVerfR1X+bW2SvEY=) 2: B56F40DEE9DB11EFBDD8BD26C4F9AE02.roa (hash: dk/mJ6WLbx1un0lM/kEaDG7s+C714fNxg9o9daVbyM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Jun 2025 04:48:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D60CF, serialNumber=0474F406A178D22C54D5EF724C6B2C2C9A3B6B98 Validity Not Before: Jun 17 04:48:37 2025 GMT Not After : Jun 24 04:48:37 2025 GMT Subject: CN=6850f3a5-7515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:49:44:8a:71:3e:da:2a:87:db:40:af:a4:c7: 40:1e:c9:62:4b:96:c2:ac:bd:83:fb:cc:e2:49:63: ac:98:71:69:75:11:03:42:10:dc:ea:6c:32:2c:91: 06:ef:0f:d8:1d:31:60:74:df:d9:51:81:0e:43:69: 4f:07:c3:55:88:c8:a3:78:43:1f:8f:df:55:a0:5f: 62:de:af:4d:f9:79:73:fe:e7:a1:4f:ea:24:07:b8: 36:0b:ab:04:07:e1:bb:75:35:f4:d1:e3:94:f6:ac: c1:c9:d7:c8:25:e7:0c:d1:3e:5e:a9:bc:11:fb:09: 93:90:d0:fe:31:d3:86:5d:12:c1:12:46:d3:26:95: 7d:12:3e:a7:9f:9f:c5:75:75:19:e8:9e:b2:65:5d: 30:05:fa:4f:65:bb:c5:51:36:be:cb:ba:fb:9b:f5: 87:f7:10:9f:dc:56:51:81:07:ef:20:a6:10:6d:2c: 55:e7:3c:68:fd:5f:a2:63:d8:9d:ca:09:bb:39:4b: 4e:51:46:55:db:5d:a8:a8:2f:15:21:b0:29:43:b9: 57:ba:5a:82:8a:6b:11:5b:4e:2e:ec:96:23:3b:99: 8d:ba:a4:ba:75:36:6a:f2:ee:78:66:50:e8:9e:59: 69:70:05:b1:4e:a8:1b:7c:30:a7:3e:2f:db:a4:23: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:35:B9:B6:AE:E7:32:4E:C1:CB:BB:82:4B:04:79:57:52:EC:F8:20 X509v3 Authority Key Identifier: keyid:04:74:F4:06:A1:78:D2:2C:54:D5:EF:72:4C:6B:2C:2C:9A:3B:6B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BHT0BqF40ixU1e9yTGssLJo7a5g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/E53608F02AFC11EFA0243C4AC4F9AE02/BHT0BqF40ixU1e9yTGssLJo7a5g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:94:0a:d7:d8:ce:61:da:85:88:97:ce:fa:d3:d5:f5:a7:06: 49:59:ba:3d:4e:1c:04:d7:86:e2:14:23:a5:6e:4e:02:67:ce: 24:5d:03:15:69:6c:df:e0:b1:d6:4e:6a:a0:12:60:bf:aa:f1: 15:4e:da:55:6b:36:f5:d8:ca:a8:a8:00:dd:90:dc:a4:29:b0: fd:d7:b4:82:22:dd:0a:40:56:38:9b:16:23:d3:86:50:8f:41: c5:a9:de:fa:47:1b:73:26:1d:fc:28:31:d9:6a:2d:4e:6e:0e: 67:f4:30:6a:55:17:d9:78:43:97:9b:d7:6c:86:c8:9b:90:ca: 43:16:85:24:8d:0f:e2:3f:c6:11:ad:88:e4:27:aa:3a:6e:3a: 11:34:6a:15:08:af:29:06:3d:07:04:9d:fc:b2:56:08:2a:68: 36:32:36:90:72:e6:4a:f4:cf:9d:09:38:44:c4:77:95:fb:4d: 8c:05:2b:a1:4d:34:a4:e0:c3:4b:18:2f:c9:fa:01:6a:6f:45: 97:94:f8:e5:01:7c:e4:a8:0c:1d:22:5f:87:b0:e1:c6:e7:31: 7f:c9:58:fc:5b:fe:ed:ee:a8:68:70:9f:8f:94:7c:28:23:84: df:89:18:a3:31:6e:d9:c8:ca:b2:14:02:df:5a:e8:f7:a5:27: e3:94:12:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYwQ0YxMTAvBgNVBAUTKDA0NzRGNDA2QTE3OEQyMkM1NEQ1RUY3MjRDNkIyQzJD OUEzQjZCOTgwHhcNMjUwNjE3MDQ0ODM3WhcNMjUwNjI0MDQ0ODM3WjAYMRYwFAYD VQQDEw02ODUwZjNhNS03NTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyklEinE+2iqH20CvpMdAHsliS5bCrL2D+8ziSWOsmHFpdREDQhDc6mwyLJEG 7w/YHTFgdN/ZUYEOQ2lPB8NViMijeEMfj99VoF9i3q9N+Xlz/uehT+okB7g2C6sE B+G7dTX00eOU9qzBydfIJecM0T5eqbwR+wmTkND+MdOGXRLBEkbTJpV9Ej6nn5/F dXUZ6J6yZV0wBfpPZbvFUTa+y7r7m/WH9xCf3FZRgQfvIKYQbSxV5zxo/V+iY9id ygm7OUtOUUZV212oqC8VIbApQ7lXulqCimsRW04u7JYjO5mNuqS6dTZq8u54ZlDo nllpcAWxTqgbfDCnPi/bpCOmOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGM1ubau 5zJOwcu7gksEeVdS7PggMB8GA1UdIwQYMBaAFAR09AaheNIsVNXvckxrLCyaO2uY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjBDRi9FNTM2MDhGMDJB RkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBpeFUxZTl5VEdzc0xKbzdh NWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JIVDBCcUY0MGl4VTFlOXlUR3NzTEpvN2E1Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjBDRi9FNTM2MDhGMDJBRkMxMUVGQTAyNDNDNEFDNEY5QUUwMi9CSFQwQnFGNDBp eFUxZTl5VEdzc0xKbzdhNWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAulArX2M5h2oWIl87609X1pwZJWbo9ThwE14biFCOlbk4CZ84kXQMV aWzf4LHWTmqgEmC/qvEVTtpVazb12MqoqADdkNykKbD917SCIt0KQFY4mxYj04ZQ j0HFqd76RxtzJh38KDHZai1Obg5n9DBqVRfZeEOXm9dshsibkMpDFoUkjQ/iP8YR rYjkJ6o6bjoRNGoVCK8pBj0HBJ38slYIKmg2MjaQcuZK9M+dCThExHeV+02MBSuh TTSk4MNLGC/J+gFqb0WXlPjlAXzkqAwdIl+HsOHG5zF/yVj8W/7t7qhocJ+PlHwo I4TfiRijMW7ZyMqyFALfWuj3pSfjlBKh -----END CERTIFICATE-----Generated at Tue Jun 17 20:15:34 2025 by rpki-client