$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft File: bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json) Hash identifier: 3sXcebkyaLcADogcAtt8j5MmWi7HbYY/rcz3bg8RyWk= Subject key identifier: 9D:3D:51:A5:F3:FD:62:F2:4F:C8:66:94:EC:EC:6A:2A:97:07:C9:93 Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 Certificate issuer: /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Certificate serial: C2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft Manifest number: C1 Signing time: Thu 03 Jul 2025 05:58:37 +0000 Manifest this update: Thu 03 Jul 2025 05:58:37 +0000 Manifest next update: Thu 10 Jul 2025 05:58:37 +0000 Files and hashes: 1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: xb7404uYeoqAlNiVKLqnJVQZlfOPPHjaoPil2gqWB1g=) 2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: DUAmLb46NS5+SPzS5A3HqFl4Nie2fVO5tlFoQkTdtDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 194 (0xc2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Validity Not Before: Jul 3 05:58:37 2025 GMT Not After : Jul 10 05:58:37 2025 GMT Subject: CN=68661c0d-a8ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:49:89:21:ca:5a:b3:32:43:ef:d0:5b:6c:12: 0d:4b:e4:ed:35:54:eb:31:ed:91:4d:e1:6c:81:27: bd:3f:e1:15:6b:78:d2:72:bb:9e:42:52:0c:42:d3: 76:7e:8b:53:d0:26:ee:f3:7a:d5:b0:51:b9:3c:f5: f9:c6:ea:b5:5a:54:e9:a3:46:7b:e8:a8:3a:f9:9e: 72:f7:47:95:36:92:6a:67:30:3e:db:d9:08:05:5d: 53:f9:a9:aa:44:20:e5:81:f2:df:29:c8:cb:da:4a: 11:fe:42:de:f2:81:99:91:67:cc:f9:26:93:a9:e0: 38:35:c2:66:93:09:80:ae:d5:22:57:a2:9c:bd:58: 00:db:87:4b:18:e9:de:7a:62:9e:41:78:81:98:c5: f0:a7:12:a3:a1:55:87:c1:73:7f:c5:68:37:8a:36: 5d:46:6c:15:8d:0e:5b:4b:60:cd:cf:43:75:31:ba: 3a:58:fd:1f:16:c6:54:c2:c0:12:bf:c0:36:47:7d: 17:98:9b:81:46:e2:bd:5f:51:e9:c9:89:50:89:0e: ce:15:ea:50:3e:c6:35:be:bc:99:cf:e9:d7:8e:2a: 05:f6:c0:0d:cb:53:56:93:f0:44:bc:ef:bb:eb:43: d3:e1:4b:3f:4d:c4:af:09:73:6b:04:2b:cf:b8:25: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:3D:51:A5:F3:FD:62:F2:4F:C8:66:94:EC:EC:6A:2A:97:07:C9:93 X509v3 Authority Key Identifier: keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:f2:25:74:8c:d6:87:34:7a:9c:7d:33:c9:99:c8:f9:92:32: 54:d7:c9:b8:51:8d:10:ea:5f:3e:66:68:60:ca:53:3f:dd:b5: e2:42:13:1f:44:c9:cd:8c:55:a6:48:9f:fd:62:16:a0:b9:06: a3:84:6f:11:81:00:1d:fc:4b:93:9f:89:4c:2b:dd:6d:1b:e0: 81:7d:5e:73:d6:ce:d0:7d:67:53:d1:99:fe:15:75:b6:d7:c3: 90:c6:0f:10:1e:b1:5f:bf:77:ee:02:81:7a:af:10:48:45:b0: e0:3f:36:f1:b7:9e:29:dd:97:8b:0e:cc:47:df:f3:8f:24:58: 6f:7b:cc:e6:51:54:68:2e:cf:8d:16:a2:3f:db:4f:bd:4a:67: b3:8a:78:60:12:9e:4a:fb:c9:93:79:1b:ac:e7:1d:74:58:d7: 93:88:ee:e7:ee:05:8d:51:75:96:82:f1:76:13:3e:5a:63:11: dd:fc:49:78:fb:7c:11:1e:e0:91:da:eb:89:71:67:86:82:67: dd:02:e5:18:43:67:72:e6:79:24:d8:b3:4c:82:c0:e3:74:1b: 18:91:74:83:bf:78:1f:6a:e0:91:a1:67:4c:7e:55:db:fb:b2: 0f:9d:a1:5d:c1:e0:c7:2a:c9:72:58:8c:54:5d:0e:d9:ce:dc: 99:d8:fb:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKDZDOUExMjIxMTU3OTFCOEUxNTA0ODAxN0E5NzU3RTU4 N0FCNTZGODAwHhcNMjUwNzAzMDU1ODM3WhcNMjUwNzEwMDU1ODM3WjAYMRYwFAYD VQQDEw02ODY2MWMwZC1hOGFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoEmJIcpaszJD79BbbBINS+TtNVTrMe2RTeFsgSe9P+EVa3jScrueQlIMQtN2 fotT0Cbu83rVsFG5PPX5xuq1WlTpo0Z76Kg6+Z5y90eVNpJqZzA+29kIBV1T+amq RCDlgfLfKcjL2koR/kLe8oGZkWfM+SaTqeA4NcJmkwmArtUiV6KcvVgA24dLGOne emKeQXiBmMXwpxKjoVWHwXN/xWg3ijZdRmwVjQ5bS2DNz0N1Mbo6WP0fFsZUwsAS v8A2R30XmJuBRuK9X1HpyYlQiQ7OFepQPsY1vryZz+nXjioF9sANy1NWk/BEvO+7 60PT4Us/TcSvCXNrBCvPuCWBpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ09UaXz /WLyT8hmlOzsaiqXB8mTMB8GA1UdIwQYMBaAFGyaEiEVeRuOFQSAF6l1flh6tW+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83NDdBQTQ0QTJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0NFZCSUFYcVhWLVdIcTFi NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKb1NJUlY1RzQ0VkJJQVhxWFYtV0hxMWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83NDdBQTQ0QTJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0 NFZCSUFYcVhWLVdIcTFiNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl8iV0jNaHNHqcfTPJmcj5kjJU18m4UY0Q6l8+ZmhgylM/3bXiQhMf RMnNjFWmSJ/9YhaguQajhG8RgQAd/EuTn4lMK91tG+CBfV5z1s7QfWdT0Zn+FXW2 18OQxg8QHrFfv3fuAoF6rxBIRbDgPzbxt54p3ZeLDsxH3/OPJFhve8zmUVRoLs+N FqI/20+9SmezinhgEp5K+8mTeRus5x10WNeTiO7n7gWNUXWWgvF2Ez5aYxHd/El4 +3wRHuCR2uuJcWeGgmfdAuUYQ2dy5nkk2LNMgsDjdBsYkXSDv3gfauCRoWdMflXb +7IPnaFdweDHKslyWIxUXQ7ZztyZ2PuW -----END CERTIFICATE-----Generated at Thu Jul 3 23:06:24 2025 by rpki-client