$ rpki-client -vvf rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft File: BKfrBJqTf9nyuG4Vnd310sma1B4.mft (raw, json) Hash identifier: zoVhDolf5S20Y34lQap+Vx03SCq1Xz8fdUvVm5QCvGc= Subject key identifier: F7:E1:C9:80:8C:C0:19:07:5D:5C:C0:3A:85:84:79:1E:7B:C7:F5:C3 Authority key identifier: 04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E Certificate issuer: /CN=A91E87AB/serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Certificate serial: 0501 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft Manifest number: 04FB Signing time: Thu 12 Jun 2025 23:17:00 +0000 Manifest this update: Thu 12 Jun 2025 23:17:00 +0000 Manifest next update: Thu 19 Jun 2025 23:17:00 +0000 Files and hashes: 1: BKfrBJqTf9nyuG4Vnd310sma1B4.crl (hash: QzInbVAobtg3wIwB6HIAqkNrqpKDtUdDdD1/G7gIQXI=) 2: 709F3B2E145C11EC9A902165C4F9AE02.roa (hash: UibVZP54wNfnJM5fmfROJ4sssLQa2oOrL7RimgDBnPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1281 (0x501) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E87AB, serialNumber=04A7EB049A937FD9F2B86E159DDDF5D2C99AD41E Validity Not Before: Jun 12 23:17:00 2025 GMT Not After : Jun 19 23:17:00 2025 GMT Subject: CN=684b5fec-ff2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:04:be:04:68:a0:25:3b:67:cc:85:68:5d:e2: 91:db:0c:e8:58:6c:f8:9a:ac:c6:c3:dc:62:0a:6d: 93:46:03:17:34:56:c6:e4:69:10:55:55:be:fa:eb: e5:2e:fe:c7:c4:81:71:4e:3a:91:73:be:65:00:a0: b7:22:bb:6d:c2:2a:c5:18:2d:cc:ae:6a:19:ee:bc: ab:bb:fc:58:05:ba:e9:ab:b6:27:3f:ae:64:59:9e: 06:40:95:f1:69:3d:60:a6:78:66:81:19:2b:25:7c: 6d:f9:b0:db:7c:cc:6e:28:60:0c:8c:57:ac:14:60: 88:d3:07:c2:cd:d7:f3:0b:ae:c4:b5:86:39:3e:64: 90:30:80:b0:39:d5:31:aa:34:12:0a:22:d9:dc:5a: c9:34:13:27:4d:44:62:83:3f:11:fe:73:4b:ad:b5: b9:e3:2a:37:63:ac:66:2d:54:d9:63:05:6e:9e:38: 4a:f2:cf:a0:6f:4e:b7:52:91:71:e6:be:07:d2:be: ef:59:dc:f1:bd:c9:08:b7:3e:36:60:0e:09:d1:0f: a6:55:8e:77:09:7c:13:f5:38:e8:97:49:e1:bf:da: bd:fd:35:78:cf:e8:60:b4:91:d1:62:82:29:49:8d: 95:7b:06:95:50:21:d5:d8:f5:76:c2:c2:41:95:02: 75:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E1:C9:80:8C:C0:19:07:5D:5C:C0:3A:85:84:79:1E:7B:C7:F5:C3 X509v3 Authority Key Identifier: keyid:04:A7:EB:04:9A:93:7F:D9:F2:B8:6E:15:9D:DD:F5:D2:C9:9A:D4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BKfrBJqTf9nyuG4Vnd310sma1B4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E87AB/916B0666145811EC9ED6C73BC4F9AE02/BKfrBJqTf9nyuG4Vnd310sma1B4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:2a:4c:e5:9c:f0:9f:ba:3c:7e:2d:c7:36:5d:87:8b:fd:45: 39:11:a7:86:74:68:c5:c1:84:a6:d0:b7:60:3d:39:d6:77:d4: 9b:ee:cd:b5:6f:3c:70:24:ca:5e:42:d0:85:23:9f:29:12:0d: ed:21:8e:65:00:d8:c6:f5:b8:29:4a:ea:29:ae:18:9b:e1:04: e8:4c:b7:80:49:1f:c6:49:49:7b:2d:b5:3a:aa:c9:14:c9:00: 9f:06:51:62:e7:40:3f:8a:8b:c1:57:87:b9:cd:ab:f0:6d:33: 23:58:5b:42:5a:8f:ac:5b:ce:52:dd:c2:39:d3:65:81:0f:2d: c9:7b:e2:a1:13:b1:e2:09:14:ab:9c:df:ad:0b:e1:f1:2f:a5: e3:12:b3:5e:35:ad:75:4a:aa:3d:7f:99:cf:dc:37:36:9a:c8: e8:4c:db:a5:fd:cd:e2:7b:6b:a8:14:22:77:9a:67:5b:30:82: 93:db:c9:32:71:d6:bc:3c:01:db:6a:43:31:9d:8f:c2:95:58: ab:9a:46:c9:83:20:12:70:73:2a:cf:1d:3c:51:36:29:d9:6f: 38:f2:1e:50:2a:e7:fd:4f:77:59:85:7c:b4:2a:18:ed:52:75: f2:10:b8:c0:b3:f8:93:61:ac:f0:61:46:49:38:c2:a2:12:12: e6:1c:07:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg3QUIxMTAvBgNVBAUTKDA0QTdFQjA0OUE5MzdGRDlGMkI4NkUxNTlERERGNUQy Qzk5QUQ0MUUwHhcNMjUwNjEyMjMxNzAwWhcNMjUwNjE5MjMxNzAwWjAYMRYwFAYD VQQDEw02ODRiNWZlYy1mZjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2QS+BGigJTtnzIVoXeKR2wzoWGz4mqzGw9xiCm2TRgMXNFbG5GkQVVW++uvl Lv7HxIFxTjqRc75lAKC3IrttwirFGC3MrmoZ7ryru/xYBbrpq7YnP65kWZ4GQJXx aT1gpnhmgRkrJXxt+bDbfMxuKGAMjFesFGCI0wfCzdfzC67EtYY5PmSQMICwOdUx qjQSCiLZ3FrJNBMnTURigz8R/nNLrbW54yo3Y6xmLVTZYwVunjhK8s+gb063UpFx 5r4H0r7vWdzxvckItz42YA4J0Q+mVY53CXwT9Tjol0nhv9q9/TV4z+hgtJHRYoIp SY2VewaVUCHV2PV2wsJBlQJ1XQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfhyYCM wBkHXVzAOoWEeR57x/XDMB8GA1UdIwQYMBaAFASn6wSak3/Z8rhuFZ3d9dLJmtQe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODdBQi85MTZCMDY2NjE0 NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5bnl1RzRWbmQzMTBzbWEx QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JLZnJCSnFUZjlueXVHNFZuZDMxMHNtYTFCNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODdBQi85MTZCMDY2NjE0NTgxMUVDOUVENkM3M0JDNEY5QUUwMi9CS2ZyQkpxVGY5 bnl1RzRWbmQzMTBzbWExQjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPKkzlnPCfujx+Lcc2XYeL/UU5EaeGdGjFwYSm0LdgPTnWd9Sb7s21 bzxwJMpeQtCFI58pEg3tIY5lANjG9bgpSuoprhib4QToTLeASR/GSUl7LbU6qskU yQCfBlFi50A/iovBV4e5zavwbTMjWFtCWo+sW85S3cI502WBDy3Je+KhE7HiCRSr nN+tC+HxL6XjErNeNa11Sqo9f5nP3Dc2msjoTNul/c3ie2uoFCJ3mmdbMIKT28ky cda8PAHbakMxnY/ClVirmkbJgyAScHMqzx08UTYp2W848h5QKuf9T3dZhXy0Khjt UnXyELjAs/iTYazwYUZJOMKiEhLmHAdD -----END CERTIFICATE-----Generated at Sat Jun 14 18:43:13 2025 by rpki-client