$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft File: 7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft (raw, json) Hash identifier: QrkaEEilKEsGF079a4egxA9qhX+DTlEbAkcP8lt6C6k= Subject key identifier: F1:E6:14:C9:15:68:AF:FB:21:AF:BA:86:78:58:17:E8:A5:12:A0:6C Authority key identifier: ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87 Certificate issuer: /CN=A91DD468/serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687 Certificate serial: 01CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft Manifest number: 01C7 Signing time: Fri 13 Jun 2025 01:59:35 +0000 Manifest this update: Fri 13 Jun 2025 01:59:35 +0000 Manifest next update: Fri 20 Jun 2025 01:59:35 +0000 Files and hashes: 1: 7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl (hash: fhPL/AsHr9uyZ9wfyOr0tk/+ghwoz6x2Y51zMbRArTk=) 2: 3FF7C9468C9211ED8D052619C4F9AE02.roa (hash: 5zp05k5VVLn+h5FTDM7wh1ceYmuMlTAzc+yFX4p/lNI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 01:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 458 (0x1ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD468, serialNumber=ED39781E7CA2632C54B7FAE2254E21F01BA07687 Validity Not Before: Jun 13 01:59:35 2025 GMT Not After : Jun 20 01:59:35 2025 GMT Subject: CN=684b8607-f829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:f6:0c:ca:60:e9:1d:1d:7c:b0:b3:3c:18: 57:7e:8f:b3:31:b8:b3:5d:96:5a:ad:83:aa:c2:ff: b9:b4:bc:21:c0:78:8d:d0:9a:05:4b:2e:87:1f:c3: d6:94:05:f7:5e:b8:00:a4:92:15:de:cc:fc:bc:a0: ff:8a:69:c4:60:b2:4e:c1:42:45:38:1a:55:5c:50: 2c:54:cd:6d:e6:e5:9a:92:64:02:d5:b7:73:c4:ea: 63:a8:68:97:fd:38:2d:dc:7c:f3:3d:4b:e2:d4:f8: 3c:c8:9e:8b:9e:4e:cd:6d:ed:50:4c:59:38:d8:64: 6d:57:9c:8a:c9:03:b5:bb:b6:f6:09:d6:2b:a6:8c: 52:23:02:10:36:1d:b2:21:65:ff:f2:57:33:44:28: 93:f0:d8:c0:c6:cb:da:3d:b5:6e:f3:02:52:a9:ec: c7:30:0f:18:bb:8e:1f:ae:a2:9e:8b:6f:84:69:1b: 7f:18:d8:5c:ad:72:fc:b9:9e:6b:31:42:a5:04:73: c2:82:eb:60:26:fb:f3:3d:20:49:9f:3e:c1:76:da: 24:1b:6b:48:c6:55:97:46:60:a9:b2:98:41:f7:8f: 04:42:e7:95:07:34:b5:fa:af:31:08:4d:d2:d5:25: bf:bc:93:6a:b6:1f:6b:5f:d1:81:bb:56:2c:64:1e: 24:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E6:14:C9:15:68:AF:FB:21:AF:BA:86:78:58:17:E8:A5:12:A0:6C X509v3 Authority Key Identifier: keyid:ED:39:78:1E:7C:A2:63:2C:54:B7:FA:E2:25:4E:21:F0:1B:A0:76:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Tl4HnyiYyxUt_riJU4h8Bugdoc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD468/5B4A33C68C8F11EDBC8A6114C4F9AE02/7Tl4HnyiYyxUt_riJU4h8Bugdoc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:2a:e1:a8:e6:9e:ab:c0:2d:ed:d3:cd:6d:cd:83:1c:30:96: 45:6b:10:68:83:a7:4b:87:6a:b1:78:fb:5b:4d:85:76:0f:4c: e2:09:dc:ca:66:fb:c4:1e:8b:24:13:90:f9:43:5d:21:79:20: 9c:7f:bd:6d:c3:62:d0:46:fb:4b:00:71:09:ad:a2:7e:81:15: 4d:ce:64:f8:30:66:0a:de:e2:38:25:bf:33:2d:6d:b7:a1:2c: fc:aa:87:8e:28:a5:5f:5b:ea:b6:97:80:b7:74:74:4c:7b:86: e9:64:30:fc:9c:96:d4:f4:45:46:fe:db:bb:d4:8c:b4:df:33: dd:ea:b6:c1:c0:72:39:f2:f3:de:a5:60:23:2b:67:65:13:91: ca:b2:52:12:76:12:ad:20:bd:86:b5:59:13:9e:c6:bf:d4:73: 28:58:19:0b:a5:82:7b:35:df:8c:d3:9b:14:f9:97:88:f0:d2: 65:cc:95:a1:be:ac:a2:cf:5b:c8:71:27:64:14:a4:25:5a:39: 4e:05:02:20:e5:ae:11:b7:f4:dd:96:1e:b0:5f:59:aa:10:7e: 66:24:a6:d7:77:d0:25:b4:d3:ae:88:92:44:e8:f9:ad:fb:bb: f4:36:93:0b:01:d6:20:a0:26:d9:5d:1b:38:8e:1c:13:53:5b: 2e:39:08:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0NjgxMTAvBgNVBAUTKEVEMzk3ODFFN0NBMjYzMkM1NEI3RkFFMjI1NEUyMUYw MUJBMDc2ODcwHhcNMjUwNjEzMDE1OTM1WhcNMjUwNjIwMDE1OTM1WjAYMRYwFAYD VQQDEw02ODRiODYwNy1mODI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArJf2DMpg6R0dfLCzPBhXfo+zMbizXZZarYOqwv+5tLwhwHiN0JoFSy6HH8PW lAX3XrgApJIV3sz8vKD/imnEYLJOwUJFOBpVXFAsVM1t5uWakmQC1bdzxOpjqGiX /Tgt3HzzPUvi1Pg8yJ6Lnk7Nbe1QTFk42GRtV5yKyQO1u7b2CdYrpoxSIwIQNh2y IWX/8lczRCiT8NjAxsvaPbVu8wJSqezHMA8Yu44frqKei2+EaRt/GNhcrXL8uZ5r MUKlBHPCgutgJvvzPSBJnz7BdtokG2tIxlWXRmCpsphB948EQueVBzS1+q8xCE3S 1SW/vJNqth9rX9GBu1YsZB4kCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPHmFMkV aK/7Ia+6hnhYF+ilEqBsMB8GA1UdIwQYMBaAFO05eB58omMsVLf64iVOIfAboHaH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDQ2OC81QjRBMzNDNjhD OEYxMUVEQkM4QTYxMTRDNEY5QUUwMi83VGw0SG55aVl5eFV0X3JpSlU0aDhCdWdk b2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdUbDRIbnlpWXl4VXRfcmlKVTRoOEJ1Z2RvYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDQ2OC81QjRBMzNDNjhDOEYxMUVEQkM4QTYxMTRDNEY5QUUwMi83VGw0SG55aVl5 eFV0X3JpSlU0aDhCdWdkb2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlKuGo5p6rwC3t081tzYMcMJZFaxBog6dLh2qxePtbTYV2D0ziCdzK ZvvEHoskE5D5Q10heSCcf71tw2LQRvtLAHEJraJ+gRVNzmT4MGYK3uI4Jb8zLW23 oSz8qoeOKKVfW+q2l4C3dHRMe4bpZDD8nJbU9EVG/tu71Iy03zPd6rbBwHI58vPe pWAjK2dlE5HKslISdhKtIL2GtVkTnsa/1HMoWBkLpYJ7Nd+M05sU+ZeI8NJlzJWh vqyiz1vIcSdkFKQlWjlOBQIg5a4Rt/Tdlh6wX1mqEH5mJKbXd9AltNOuiJJE6Pmt +7v0NpMLAdYgoCbZXRs4jhwTU1suOQgC -----END CERTIFICATE-----Generated at Sat Jun 14 19:10:44 2025 by rpki-client