$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft File: bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft (raw, json) Hash identifier: hgxAcNHTuOCwpHRg6HE8lZG6XDZgW+F2OeuVqeLXrzY= Subject key identifier: E5:92:B3:A5:67:DF:4E:CE:89:64:DE:CF:F3:D6:18:B6:AE:3A:31:C8 Authority key identifier: 6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC Certificate issuer: /CN=A9119010/serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Certificate serial: 0C4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft Manifest number: 0C71 Signing time: Wed 02 Jul 2025 18:50:47 +0000 Manifest this update: Wed 02 Jul 2025 18:50:46 +0000 Manifest next update: Wed 09 Jul 2025 18:50:46 +0000 Files and hashes: 1: bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl (hash: nB0o3eSZSWVMSjs+tNzrE9a14k2+fMa+yiYOus7zBdI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3147 (0xc4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119010, serialNumber=6C05EEAF3F687041D59A49BA1709B83032B74CDC Validity Not Before: Jul 2 18:50:46 2025 GMT Not After : Jul 9 18:50:46 2025 GMT Subject: CN=68657f86-eb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:71:d1:0f:e7:4e:4d:ed:2a:b2:e4:0b:ad:dc: dd:05:19:6e:4d:d1:3f:d7:c8:cd:a1:f5:ef:85:99: 4a:9a:a0:b3:b7:61:37:60:a6:75:95:a0:77:23:68: 38:d0:f4:19:74:24:4f:a4:69:ab:dd:76:16:7c:b4: 12:d1:99:43:82:07:7b:79:e5:9a:0b:01:fc:16:b3: f5:80:6c:bc:d7:9c:24:47:61:c8:f0:39:a8:2e:d7: cb:14:e7:e2:1a:8a:63:55:5a:41:56:2a:cb:b3:af: 40:f2:b7:0a:0f:84:7c:51:be:57:3f:7c:64:0e:d8: f3:70:30:7e:7b:c8:48:f8:e5:24:f8:ee:0a:00:89: 27:fa:8d:49:1d:98:8b:17:11:57:ca:61:6f:9a:52: bc:32:3c:6f:29:f7:d5:9c:59:fc:c3:ff:96:42:55: 43:fd:60:81:94:cf:cb:6a:ce:9e:70:1f:83:4b:f3: 95:8b:b0:87:a8:3d:9d:9b:33:b5:1b:97:1a:a1:a7: 2f:db:09:4c:a1:d0:c5:5c:a2:29:f8:01:5f:7a:14: 5b:ee:65:ad:f3:9d:58:a6:0b:23:9f:0b:4a:0e:a3: fc:ca:c7:87:42:23:d2:06:0f:83:dc:43:e8:97:9a: 29:ff:45:7b:4f:65:c3:b3:d8:dd:f9:b5:98:5f:92: ce:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:92:B3:A5:67:DF:4E:CE:89:64:DE:CF:F3:D6:18:B6:AE:3A:31:C8 X509v3 Authority Key Identifier: keyid:6C:05:EE:AF:3F:68:70:41:D5:9A:49:BA:17:09:B8:30:32:B7:4C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bAXurz9ocEHVmkm6Fwm4MDK3TNw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/bAXurz9ocEHVmkm6Fwm4MDK3TNw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:b6:c1:68:5c:91:50:70:e2:49:fd:bc:a1:82:3f:b2:be:d7: 41:58:74:d1:d5:7c:07:58:0a:7a:7c:17:8c:09:cf:56:57:8e: 01:f0:a7:72:4a:e2:a7:45:71:ce:a9:81:48:72:5a:f9:0d:c1: 70:a3:a8:39:c9:af:7d:48:a5:4b:8b:8b:45:41:aa:79:44:28: 98:f6:bc:7a:e1:18:28:a6:bb:80:c6:89:e8:64:f6:c7:fb:58: a3:c1:4a:15:0c:93:03:0d:39:ac:2c:13:69:2a:3a:47:84:2b: df:e5:e0:ce:e9:dd:6c:00:b5:d5:52:e9:b5:e7:ca:9a:7b:b6: 04:43:eb:10:2b:d0:60:7b:f5:be:ad:86:5a:b6:b3:11:fe:30: eb:ee:9a:c7:21:48:ce:a3:04:eb:5e:65:84:59:eb:72:f1:6c: a9:49:02:3c:0f:ec:e6:95:37:9a:38:81:2a:3a:05:b9:77:57: 35:6e:b7:0a:e1:c9:c8:31:63:1a:90:87:ed:28:40:72:8b:10: f2:8c:8b:f4:a3:85:91:91:7a:8f:c8:34:28:5a:76:bb:83:92: f6:7f:48:ef:1e:d0:91:80:0d:23:c9:b6:10:83:75:4f:65:8e: 32:6a:5a:d9:1f:3c:e8:64:c7:c2:b1:94:c3:23:53:0a:10:c7: a6:51:d0:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTkwMTAxMTAvBgNVBAUTKDZDMDVFRUFGM0Y2ODcwNDFENTlBNDlCQTE3MDlCODMw MzJCNzRDREMwHhcNMjUwNzAyMTg1MDQ2WhcNMjUwNzA5MTg1MDQ2WjAYMRYwFAYD VQQDEw02ODY1N2Y4Ni1lYjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5XHRD+dOTe0qsuQLrdzdBRluTdE/18jNofXvhZlKmqCzt2E3YKZ1laB3I2g4 0PQZdCRPpGmr3XYWfLQS0ZlDggd7eeWaCwH8FrP1gGy815wkR2HI8DmoLtfLFOfi GopjVVpBVirLs69A8rcKD4R8Ub5XP3xkDtjzcDB+e8hI+OUk+O4KAIkn+o1JHZiL FxFXymFvmlK8MjxvKffVnFn8w/+WQlVD/WCBlM/Las6ecB+DS/OVi7CHqD2dmzO1 G5caoacv2wlModDFXKIp+AFfehRb7mWt851YpgsjnwtKDqP8yseHQiPSBg+D3EPo l5op/0V7T2XDs9jd+bWYX5LOSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOWSs6Vn 307OiWTez/PWGLauOjHIMB8GA1UdIwQYMBaAFGwF7q8/aHBB1ZpJuhcJuDAyt0zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTAxMC82QTdFOTQwQTBD M0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NFSFZta202RndtNE1ESzNU TncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JBWHVyejlvY0VIVm1rbTZGd200TURLM1ROdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTAxMC82QTdFOTQwQTBDM0ExMUVBOTM1NTdDNzlDNEY5QUUwMi9iQVh1cno5b2NF SFZta202RndtNE1ESzNUTncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBotsFoXJFQcOJJ/byhgj+yvtdBWHTR1XwHWAp6fBeMCc9WV44B8Kdy SuKnRXHOqYFIclr5DcFwo6g5ya99SKVLi4tFQap5RCiY9rx64RgopruAxonoZPbH +1ijwUoVDJMDDTmsLBNpKjpHhCvf5eDO6d1sALXVUum158qae7YEQ+sQK9Bge/W+ rYZatrMR/jDr7prHIUjOowTrXmWEWety8WypSQI8D+zmlTeaOIEqOgW5d1c1brcK 4cnIMWMakIftKEByixDyjIv0o4WRkXqPyDQoWna7g5L2f0jvHtCRgA0jybYQg3VP ZY4yalrZHzzoZMfCsZTDI1MKEMemUdDR -----END CERTIFICATE-----Generated at Thu Jul 3 18:41:16 2025 by rpki-client