$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft File: BZOGVctKEp6P3fsJQsICA-N-G8E.mft (raw, json) Hash identifier: O5OANUJ5ETJ6GMTTwxEWC1I2rPbRRdj2hxNNxyhquyo= Subject key identifier: 04:A6:FE:41:0A:50:B5:2D:3B:F1:90:87:24:BC:F2:33:3C:BD:5B:D3 Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1 Certificate issuer: /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1 Certificate serial: 03AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft Manifest number: 03A5 Signing time: Sun 15 Jun 2025 00:27:32 +0000 Manifest this update: Sun 15 Jun 2025 00:27:32 +0000 Manifest next update: Sun 22 Jun 2025 00:27:32 +0000 Files and hashes: 1: BZOGVctKEp6P3fsJQsICA-N-G8E.crl (hash: /zzoYAcaNYvLMyl/Nkb0TP0vxxn4IDUUQmPQm5dBhGM=) 2: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (hash: IDcKfjrcD970kwyhuo4LacbpxchYwfNjnBXBdXrdXbs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 00:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 938 (0x3aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF5AE, serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1 Validity Not Before: Jun 15 00:27:32 2025 GMT Not After : Jun 22 00:27:32 2025 GMT Subject: CN=684e1374-4773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:04:9f:f8:55:60:20:fc:d2:a8:84:a1:c3:79: 2f:a8:0e:09:dc:8a:32:c8:11:5e:cf:b0:fc:2a:ee: 76:35:02:f7:06:48:83:8c:d6:6e:80:06:85:7a:c3: 16:ac:df:ab:8d:91:d5:4e:6e:e3:19:b0:0c:bc:ab: 12:1a:9b:e5:ab:b3:64:a9:3c:03:df:66:6b:2b:fe: 4b:dc:e4:96:26:a1:6e:95:3f:18:87:fc:95:08:8d: 4f:72:53:ea:e7:e2:4f:77:cd:e2:17:31:22:2e:91: d1:b6:1b:e3:11:49:d3:e4:74:bf:1b:43:50:38:39: bc:ce:69:40:3c:1c:a7:1b:c0:41:3b:03:1e:e8:ae: 03:6f:d7:c3:e4:a4:ce:44:b9:a5:76:a2:8b:5f:a8: 95:1c:60:82:6c:32:2b:b6:29:a7:69:f4:28:57:2d: e3:b1:a3:ae:f0:de:7e:a3:07:f7:7b:ed:1f:41:37: 38:3a:80:b9:3b:90:f5:f6:41:4a:ae:e3:67:70:e9: 1c:5d:ed:8d:72:88:eb:19:c9:f7:e7:82:d8:4b:c6: 06:5b:38:89:95:bc:46:33:c4:f8:14:5a:39:a8:f1: 44:70:0f:0d:e5:62:df:b6:d8:53:55:db:6e:bc:62: 69:69:96:0a:e8:38:64:90:51:8a:eb:04:df:98:74: 40:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A6:FE:41:0A:50:B5:2D:3B:F1:90:87:24:BC:F2:33:3C:BD:5B:D3 X509v3 Authority Key Identifier: keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:8e:15:3b:3e:e6:fd:07:37:d0:62:ff:71:ad:cc:59:ce:5e: 2e:28:ac:35:14:1a:b2:6d:7e:ff:40:31:bf:8d:6a:4d:b3:91: 3e:87:34:42:9e:25:3a:0f:b7:0a:80:92:9f:62:de:71:de:0a: d1:6b:70:03:57:4f:f6:df:8f:d1:9a:eb:90:49:cb:50:b7:eb: b3:ee:aa:cd:32:90:b7:33:11:b7:fe:c4:7e:8e:8f:64:d8:09: aa:41:b4:54:89:22:8e:d5:e9:f4:94:54:77:92:9e:29:ec:59: ae:56:31:b6:03:5f:75:43:b5:a7:95:0c:3c:26:99:b6:b3:b5: fa:9f:d7:e6:62:68:b2:46:14:ae:33:15:e6:d3:b2:65:98:c6: 16:a6:d1:f6:f2:6d:ad:95:13:29:f4:d4:2f:e4:d2:3d:eb:a2: 87:c3:22:20:e1:e5:61:ea:00:57:3e:8b:6b:61:8e:a4:68:4e: 96:1c:f2:4b:21:ee:ad:ce:87:d5:23:ff:5e:6e:08:99:60:25: b2:76:d6:7f:94:46:a2:ec:5a:c6:0c:dc:de:f6:a4:c1:0b:ce: 66:f2:80:ed:a6:db:23:20:fb:9b:fe:71:a2:69:96:4f:3e:58: 5f:77:52:35:6a:23:d7:95:90:11:14:d5:9b:9e:c1:cd:8e:11: ad:90:73:2f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1QUUxMTAvBgNVBAUTKDA1OTM4NjU1Q0I0QTEyOUU4RkRERkIwOTQyQzIwMjAz RTM3RTFCQzEwHhcNMjUwNjE1MDAyNzMyWhcNMjUwNjIyMDAyNzMyWjAYMRYwFAYD VQQDEw02ODRlMTM3NC00NzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowSf+FVgIPzSqIShw3kvqA4J3IoyyBFez7D8Ku52NQL3BkiDjNZugAaFesMW rN+rjZHVTm7jGbAMvKsSGpvlq7NkqTwD32ZrK/5L3OSWJqFulT8Yh/yVCI1PclPq 5+JPd83iFzEiLpHRthvjEUnT5HS/G0NQODm8zmlAPBynG8BBOwMe6K4Db9fD5KTO RLmldqKLX6iVHGCCbDIrtimnafQoVy3jsaOu8N5+owf3e+0fQTc4OoC5O5D19kFK ruNncOkcXe2NcojrGcn354LYS8YGWziJlbxGM8T4FFo5qPFEcA8N5WLftthTVdtu vGJpaZYK6DhkkFGK6wTfmHRAQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASm/kEK ULUtO/GQhyS88jM8vVvTMB8GA1UdIwQYMBaAFAWThlXLShKej937CULCAgPjfhvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjVBRS81RTZFMjA3ODlB QTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0VwNlAzZnNKUXNJQ0EtTi1H OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JaT0dWY3RLRXA2UDNmc0pRc0lDQS1OLUc4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjVBRS81RTZFMjA3ODlBQTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0Vw NlAzZnNKUXNJQ0EtTi1HOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqjhU7Pub9BzfQYv9xrcxZzl4uKKw1FBqybX7/QDG/jWpNs5E+hzRC niU6D7cKgJKfYt5x3grRa3ADV0/234/RmuuQSctQt+uz7qrNMpC3MxG3/sR+jo9k 2AmqQbRUiSKO1en0lFR3kp4p7FmuVjG2A191Q7WnlQw8Jpm2s7X6n9fmYmiyRhSu MxXm07JlmMYWptH28m2tlRMp9NQv5NI966KHwyIg4eVh6gBXPotrYY6kaE6WHPJL Ie6tzofVI/9ebgiZYCWydtZ/lEai7FrGDNze9qTBC85m8oDtptsjIPub/nGiaZZP Plhfd1I1aiPXlZARFNWbnsHNjhGtkHMv -----END CERTIFICATE-----Generated at Sun Jun 15 09:58:35 2025 by rpki-client