$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft File: BQcL-a2TBEn7O2m4aRzyDAEnebk.mft (raw, json) Hash identifier: jVgU9jBeE372rSyuqYUE8LX01nV8iJnY5M1V1xa7sEo= Subject key identifier: FA:F7:D8:BB:2A:31:25:EE:4F:55:B2:A6:1D:3E:DA:36:77:CE:7E:E9 Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0C5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft Manifest number: 0C3E Signing time: Mon 04 Aug 2025 18:51:15 +0000 Manifest this update: Mon 04 Aug 2025 18:51:15 +0000 Manifest next update: Mon 11 Aug 2025 18:51:15 +0000 Files and hashes: 1: BQcL-a2TBEn7O2m4aRzyDAEnebk.crl (hash: Fu5zYV+5j1NBuIP6xpmuxixrLwGTb61bJmlK+jyBc1I=) 2: A766D10CF86B11EF86A73884C4F9AE02.roa (hash: YvJPp5TLJmmNMFrXdStXJanbJJfuz5ICtmKerDM4nQo=) 3: A87393C8F86B11EF86A73884C4F9AE02.roa (hash: 6O0VKauTuWTfzmPjcovFKdSm/+YMqCBqWG3p+BX8OSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:51:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3163 (0xc5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12, serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Validity Not Before: Aug 4 18:51:15 2025 GMT Not After : Aug 11 18:51:15 2025 GMT Subject: CN=68910123-3506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:73:be:87:65:e8:22:e0:7b:2e:05:df:35: 10:3f:93:90:03:2c:ec:5d:e3:cf:05:74:71:1b:d8: d3:be:7c:ca:ea:f2:28:b6:bf:23:5a:41:b1:a1:11: 17:94:98:34:a0:b1:f0:f9:b8:b2:5f:23:3c:ed:6f: 04:48:2a:5b:90:19:11:20:d0:12:25:cb:e5:d9:73: 12:8c:f6:c5:c0:15:38:9d:8a:7c:5d:30:5e:7f:91: 90:fc:5d:ea:6e:68:41:b3:1e:93:6c:08:53:11:17: 58:d0:b2:06:4a:e3:17:62:d1:a4:05:70:21:56:2b: 49:18:f3:41:66:dd:60:9d:f3:f0:52:fe:ec:eb:e6: 0e:7a:67:5e:be:ce:8f:9e:a7:d1:08:3a:32:e2:2f: 76:5b:be:7c:c6:8c:5f:6d:de:85:7d:fe:ee:83:a3: af:98:f6:27:89:42:71:7a:03:a2:06:67:74:17:df: 9a:c3:64:03:b9:81:44:9e:2b:71:2b:52:6d:f2:a2: c3:c6:a5:6d:33:5b:ab:da:70:0b:6d:f4:e3:76:54: 93:29:1f:73:20:4c:fb:b5:7b:ea:67:ae:41:17:25: 7f:8b:10:90:c7:4c:ed:75:53:6b:be:24:d8:8a:08: 4d:cd:79:30:2a:d4:6b:4a:05:c3:ce:b9:d7:f2:88: cd:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F7:D8:BB:2A:31:25:EE:4F:55:B2:A6:1D:3E:DA:36:77:CE:7E:E9 X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:68:d2:a1:95:96:bb:fc:0b:ba:81:0b:b8:cd:c4:f9:5b:90: 2a:b0:04:59:f6:95:c7:ab:a4:d2:09:ee:dc:fc:bf:57:ca:b2: 97:72:ec:4f:d1:07:19:b2:e8:cd:a8:8b:4e:22:c6:a6:b5:12: a5:06:f3:80:ea:ce:43:b5:b6:85:a9:1d:c8:4d:34:56:87:11: 55:c2:c2:e1:ad:37:48:97:35:86:f0:ff:35:f5:58:08:e1:17: bd:6c:a3:ec:fa:10:dd:f9:68:c4:cf:e6:9d:ae:84:65:6c:c9: 79:fd:4a:5e:c2:08:74:25:74:6e:14:9a:9f:80:46:8d:55:c9: 88:6c:f1:dc:d0:b4:b4:0e:4d:15:a6:e8:4d:a5:92:9b:64:b2: 34:da:8c:33:a6:83:ad:79:10:52:98:b6:f9:00:9e:6f:72:07: 5c:bb:85:5b:e9:43:e1:a3:e5:7a:7c:c9:5c:4a:da:33:09:35: 67:91:88:40:b4:d3:cd:54:3f:c9:81:20:14:52:f3:5a:ba:88: 91:31:9b:6d:bb:96:01:de:93:2e:2a:f5:d6:fc:25:13:eb:05: 02:2c:0e:61:05:a6:e0:91:c0:cf:1c:05:1e:1c:5a:ce:1f:de: 52:db:6f:17:e7:8b:a4:52:ee:ff:40:8b:a9:6f:40:83:22:9b: a8:35:d0:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjUwODA0MTg1MTE1WhcNMjUwODExMTg1MTE1WjAYMRYwFAYD VQQDEw02ODkxMDEyMy0zNTA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApfVzvodl6CLgey4F3zUQP5OQAyzsXePPBXRxG9jTvnzK6vIotr8jWkGxoREX lJg0oLHw+biyXyM87W8ESCpbkBkRINASJcvl2XMSjPbFwBU4nYp8XTBef5GQ/F3q bmhBsx6TbAhTERdY0LIGSuMXYtGkBXAhVitJGPNBZt1gnfPwUv7s6+YOemdevs6P nqfRCDoy4i92W758xoxfbd6Fff7ug6OvmPYniUJxegOiBmd0F9+aw2QDuYFEnitx K1Jt8qLDxqVtM1ur2nALbfTjdlSTKR9zIEz7tXvqZ65BFyV/ixCQx0ztdVNrviTY ighNzXkwKtRrSgXDzrnX8ojNMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPr32Lsq MSXuT1Wyph0+2jZ3zn7pMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RUMxMi84NTkyRTQ4ODBGNjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJF bjdPMm00YVJ6eURBRW5lYmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwaNKhlZa7/Au6gQu4zcT5W5AqsARZ9pXHq6TSCe7c/L9XyrKXcuxP 0QcZsujNqItOIsamtRKlBvOA6s5DtbaFqR3ITTRWhxFVwsLhrTdIlzWG8P819VgI 4Re9bKPs+hDd+WjEz+adroRlbMl5/Upewgh0JXRuFJqfgEaNVcmIbPHc0LS0Dk0V puhNpZKbZLI02owzpoOteRBSmLb5AJ5vcgdcu4Vb6UPho+V6fMlcStozCTVnkYhA tNPNVD/JgSAUUvNauoiRMZttu5YB3pMuKvXW/CUT6wUCLA5hBabgkcDPHAUeHFrO H95S228X54ukUu7/QIupb0CDIpuoNdCK -----END CERTIFICATE-----Generated at Wed Aug 6 14:20:27 2025 by rpki-client