$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json) Hash identifier: cCE7ziw+KRVBzt5tToG53oueIaET5uu8hdmjN60uffA= Subject key identifier: 9D:27:CD:1B:10:E7:A3:A7:14:5B:91:66:86:15:58:48:87:F3:EF:36 Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0C41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft Manifest number: 0C24 Signing time: Sat 14 Jun 2025 18:32:29 +0000 Manifest this update: Sat 14 Jun 2025 18:32:28 +0000 Manifest next update: Sat 21 Jun 2025 18:32:28 +0000 Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: uUmF4UGSTQ/WxXTN6RujML0dt0JZvVf4GbqkQ0i4i+Y=) 2: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: 6O0VKauTuWTfzmPjcovFKdSm/+YMqCBqWG3p+BX8OSE=) 3: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: YvJPp5TLJmmNMFrXdStXJanbJJfuz5ICtmKerDM4nQo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 18:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3137 (0xc41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Validity Not Before: Jun 14 18:32:28 2025 GMT Not After : Jun 21 18:32:28 2025 GMT Subject: CN=684dc03d-f169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:01:27:28:3e:50:f7:48:a0:d2:63:ce:4c:fa: 96:d2:5e:c9:2a:e2:c7:ae:59:99:75:c6:bb:0c:52: 1f:5e:6e:1c:0e:fc:62:cd:96:3f:33:75:74:e7:0a: ce:57:3e:bf:11:22:bc:a2:b6:72:26:bf:25:a1:a1: b6:3f:c3:7a:e3:56:17:33:9d:72:e6:72:f3:d6:68: 1e:c8:2c:9b:cc:f0:c6:59:23:5d:55:34:23:00:ca: a3:36:aa:ee:2a:a6:3e:4d:7d:aa:4e:c1:29:df:6b: 3e:51:c4:e6:2d:99:fe:34:f8:27:d0:a8:7c:73:0d: aa:85:99:64:08:b7:cf:09:ad:c9:99:47:95:23:e8: 4b:f7:c9:90:87:b2:16:da:a7:5a:ea:f4:3a:3f:78: 8f:f3:50:81:57:86:64:ab:90:aa:fa:f3:7c:04:0d: 73:bb:a3:05:cc:c4:c8:d1:6d:a6:9b:1d:fd:6c:8f: 9c:2a:4f:ee:16:93:47:05:0d:36:6d:ec:63:af:43: af:b2:9c:3e:19:63:a9:67:da:8e:87:89:e4:89:9d: 2b:c5:43:72:1c:c6:07:7b:81:91:07:e4:54:ff:ba: 62:2b:ed:e4:8a:02:8d:f9:d7:15:e9:f2:b2:20:59: 5d:5d:a3:c5:08:48:68:52:2d:79:e7:9b:56:21:ed: cd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:27:CD:1B:10:E7:A3:A7:14:5B:91:66:86:15:58:48:87:F3:EF:36 X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:f4:47:37:8c:21:77:ab:9a:48:fa:89:5d:78:10:22:30:3a: f8:9d:0d:7f:59:01:9a:c7:75:4b:50:a3:00:ec:df:fb:35:f9: f2:86:6d:1a:52:92:f5:9e:ec:ab:cb:fa:93:8e:47:c9:91:cc: 02:0f:9e:33:83:98:85:b6:09:28:b6:f8:63:29:d8:9d:10:c6: b0:e9:f6:17:91:98:1d:58:79:3b:7b:1e:b3:13:70:a4:69:1a: 25:ee:a4:f6:44:90:33:fe:1c:33:f7:3f:f9:c7:28:2f:b2:e6: 7b:55:52:29:cb:fa:be:63:48:0f:ff:1a:6a:c1:d5:a1:b0:9f: 00:1f:b7:d3:bd:76:30:17:6d:42:41:0b:fc:9f:b0:c8:ce:7f: d2:b2:85:0e:57:5d:18:6d:e9:96:32:ea:e1:2b:97:c1:4a:ca: 21:13:4d:9d:26:8d:75:0a:47:e3:fc:75:5e:dd:2f:50:df:b8: cb:b3:13:bf:30:26:cd:cc:4d:90:cc:7b:5c:b3:77:47:52:85: 6f:0f:54:fb:e5:cc:0a:08:ab:57:be:7a:e5:f8:aa:f2:8a:c7: 3a:01:86:c9:67:0a:5d:82:f7:72:aa:62:8b:8f:52:cb:c6:de: ea:40:78:6c:75:ae:44:91:50:32:72:f3:84:a7:04:d0:50:57: 1f:7f:29:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjUwNjE0MTgzMjI4WhcNMjUwNjIxMTgzMjI4WjAYMRYwFAYD VQQDEw02ODRkYzAzZC1mMTY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwEnKD5Q90ig0mPOTPqW0l7JKuLHrlmZdca7DFIfXm4cDvxizZY/M3V05wrO Vz6/ESK8orZyJr8loaG2P8N641YXM51y5nLz1mgeyCybzPDGWSNdVTQjAMqjNqru KqY+TX2qTsEp32s+UcTmLZn+NPgn0Kh8cw2qhZlkCLfPCa3JmUeVI+hL98mQh7IW 2qda6vQ6P3iP81CBV4Zkq5Cq+vN8BA1zu6MFzMTI0W2mmx39bI+cKk/uFpNHBQ02 bexjr0Ovspw+GWOpZ9qOh4nkiZ0rxUNyHMYHe4GRB+RU/7piK+3kigKN+dcV6fKy IFldXaPFCEhoUi1555tWIe3NRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ0nzRsQ 56OnFFuRZoYVWEiH8+82MB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMxMi84NTkyRTQ4ODBGNjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJF bjdPMm00YVJ6eURBRW5lYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCR9Ec3jCF3q5pI+oldeBAiMDr4nQ1/WQGax3VLUKMA7N/7Nfnyhm0a UpL1nuyry/qTjkfJkcwCD54zg5iFtgkotvhjKdidEMaw6fYXkZgdWHk7ex6zE3Ck aRol7qT2RJAz/hwz9z/5xygvsuZ7VVIpy/q+Y0gP/xpqwdWhsJ8AH7fTvXYwF21C QQv8n7DIzn/SsoUOV10YbemWMurhK5fBSsohE02dJo11Ckfj/HVe3S9Q37jLsxO/ MCbNzE2QzHtcs3dHUoVvD1T75cwKCKtXvnrl+Kryisc6AYbJZwpdgvdyqmKLj1LL xt7qQHhsda5EkVAycvOEpwTQUFcffyl0 -----END CERTIFICATE-----Generated at Mon Jun 16 15:59:24 2025 by rpki-client