$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft File: bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json) Hash identifier: 117MjX3liASbwPP0ZxXRHheRiy44vIH/L6O1zZ5cTfA= Subject key identifier: 5C:34:D5:5B:AC:FD:15:E4:21:B7:A8:51:30:18:BE:62:0A:57:06:54 Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 Certificate issuer: /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Certificate serial: DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft Manifest number: DD Signing time: Sat 23 Aug 2025 05:38:36 +0000 Manifest this update: Sat 23 Aug 2025 05:38:36 +0000 Manifest next update: Sat 30 Aug 2025 05:38:36 +0000 Files and hashes: 1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: zaHhOv7j+XxEjFXZQodGkJo69NG1oOxNAUqrXfk6NxA=) 2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: /1PjZ5NNRMUhyhR9YlRWIkmEIJE+BmHYk2vv+gNzyk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:38:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 223 (0xdf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Validity Not Before: Aug 23 05:38:36 2025 GMT Not After : Aug 30 05:38:36 2025 GMT Subject: CN=68a953dc-5c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c3:81:8d:4f:c3:22:6f:6f:7f:1f:1b:b3:f6: bf:dc:23:fc:e9:a0:62:4a:01:d1:d5:8d:bb:36:23: ca:b1:ce:49:fa:8d:98:9a:21:6e:84:c5:9b:57:99: 76:1f:b7:d6:4d:ef:f7:2b:0b:ab:19:63:4f:5f:80: 29:84:3a:30:53:9b:3b:7c:e2:13:03:20:d1:64:43: b9:9d:10:5d:e9:6b:3c:e1:5d:d6:40:cc:bc:62:e2: fb:28:7e:02:5d:68:30:3e:e9:ff:23:3f:53:cd:68: 25:7f:29:e6:82:1a:fe:a7:20:22:c7:dc:4b:2b:a9: 99:e2:75:32:ea:92:79:02:85:ee:d7:e2:bc:94:4a: 66:5a:c7:f0:44:b1:87:61:85:44:c6:5c:12:5b:8b: bc:d2:9b:22:92:72:78:83:1a:6d:5f:e7:ec:08:c7: 7b:00:e5:59:89:d9:50:fd:16:4b:7c:b6:89:24:df: 2d:ff:e7:a0:8e:f6:01:e6:40:09:a6:96:01:c7:fd: d3:d0:7c:ee:38:63:ea:9d:1e:09:52:b5:69:9c:7b: f9:ea:22:34:d4:4f:9d:4a:3f:f4:c7:56:e5:aa:2e: 22:80:8f:3e:b5:58:3a:36:d1:82:66:08:4e:d2:80: 8a:cf:49:f5:d8:f2:18:9c:6e:79:e5:eb:31:4c:96: e0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:34:D5:5B:AC:FD:15:E4:21:B7:A8:51:30:18:BE:62:0A:57:06:54 X509v3 Authority Key Identifier: keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:8d:76:05:20:1f:d9:2b:23:f0:8d:ff:83:48:94:ed:4a:1f: 3f:97:f8:5e:02:a0:42:13:7d:bb:b3:51:3f:b0:04:03:0b:66: b6:cd:c0:93:f7:f9:ba:1a:02:73:17:82:36:33:85:4c:2d:27: d4:3a:09:23:b2:09:e0:5d:fd:51:34:fd:08:ae:18:43:18:82: 67:73:df:76:d2:ab:02:8e:ca:86:83:36:0f:94:af:9a:f8:9f: 05:a1:e2:f4:bf:11:78:e5:2a:82:e4:43:06:52:fc:5b:d7:a2: 73:80:a9:f7:40:e7:c0:e4:8f:2a:24:53:f5:20:fd:be:7c:dc: fb:fd:2a:bd:4c:00:14:e5:1a:69:e1:81:5a:0b:ca:89:0e:1b: 21:51:7a:a5:3e:80:78:86:cd:43:99:5d:6b:d4:04:2b:28:3a: 3a:dd:5e:d9:e9:af:93:39:58:4f:e0:b8:04:76:aa:40:5c:54: d4:ee:8f:55:c1:36:ff:66:1e:b6:f9:32:c1:10:ce:ae:f7:ef: fe:ed:36:5d:5b:b1:9b:d0:80:b7:2b:27:41:09:54:c3:64:ca: dc:58:a0:d7:15:13:8a:32:74:40:0e:ae:80:b9:5b:36:bf:bd: 6d:f2:90:60:45:38:85:dc:b8:59:a5:b2:7a:18:c2:65:b7:0e: a7:b6:01:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKDZDOUExMjIxMTU3OTFCOEUxNTA0ODAxN0E5NzU3RTU4 N0FCNTZGODAwHhcNMjUwODIzMDUzODM2WhcNMjUwODMwMDUzODM2WjAYMRYwFAYD VQQDEw02OGE5NTNkYy01YzRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2sOBjU/DIm9vfx8bs/a/3CP86aBiSgHR1Y27NiPKsc5J+o2YmiFuhMWbV5l2 H7fWTe/3KwurGWNPX4AphDowU5s7fOITAyDRZEO5nRBd6Ws84V3WQMy8YuL7KH4C XWgwPun/Iz9TzWglfynmghr+pyAix9xLK6mZ4nUy6pJ5AoXu1+K8lEpmWsfwRLGH YYVExlwSW4u80psiknJ4gxptX+fsCMd7AOVZidlQ/RZLfLaJJN8t/+egjvYB5kAJ ppYBx/3T0HzuOGPqnR4JUrVpnHv56iI01E+dSj/0x1blqi4igI8+tVg6NtGCZghO 0oCKz0n12PIYnG555esxTJbgHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFw01Vus /RXkIbeoUTAYvmIKVwZUMB8GA1UdIwQYMBaAFGyaEiEVeRuOFQSAF6l1flh6tW+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83NDdBQTQ0QTJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0NFZCSUFYcVhWLVdIcTFi NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKb1NJUlY1RzQ0VkJJQVhxWFYtV0hxMWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83NDdBQTQ0QTJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0 NFZCSUFYcVhWLVdIcTFiNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9jXYFIB/ZKyPwjf+DSJTtSh8/l/heAqBCE327s1E/sAQDC2a2zcCT 9/m6GgJzF4I2M4VMLSfUOgkjsgngXf1RNP0IrhhDGIJnc9920qsCjsqGgzYPlK+a +J8FoeL0vxF45SqC5EMGUvxb16JzgKn3QOfA5I8qJFP1IP2+fNz7/Sq9TAAU5Rpp 4YFaC8qJDhshUXqlPoB4hs1DmV1r1AQrKDo63V7Z6a+TOVhP4LgEdqpAXFTU7o9V wTb/Zh62+TLBEM6u9+/+7TZdW7Gb0IC3KydBCVTDZMrcWKDXFROKMnRADq6AuVs2 v71t8pBgRTiF3LhZpbJ6GMJltw6ntgEs -----END CERTIFICATE-----Generated at Sat Aug 23 16:29:49 2025 by rpki-client