$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft File: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft (raw, json) Hash identifier: sXBK/LKwXrCDC7s9BUtPLtLO60uNyQFqYK1xAnR2tDk= Subject key identifier: 5F:4D:70:9D:27:CB:EC:D9:60:8C:EF:4D:35:04:D1:2D:AF:E3:14:73 Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 Certificate issuer: /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Certificate serial: 013E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft Manifest number: 0134 Signing time: Tue 01 Jul 2025 05:04:23 +0000 Manifest this update: Tue 01 Jul 2025 05:04:22 +0000 Manifest next update: Tue 08 Jul 2025 05:04:22 +0000 Files and hashes: 1: Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl (hash: WAOtyriBYcFJ2v3tuLXH7aXOPqltQn5tj4Kn+j34o2M=) 2: 342A14D6F0E911EEAAAD9A6CC4F9AE02.roa (hash: 1nis0P6SfwA6Mcq8SFQmwhxCRMw2QytQSM1sy/jc0jU=) 3: 5A44099895C111EE951C9E4CC4F9AE02.roa (hash: KgYF6AgzMh0SR6YaAVsJGBjcvKCcJWg6gXxqQiLpD64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 318 (0x13e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362 Validity Not Before: Jul 1 05:04:22 2025 GMT Not After : Jul 8 05:04:22 2025 GMT Subject: CN=68636c56-0d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9c:e0:10:2f:65:20:15:36:e5:1e:5d:91:c5: 15:31:57:a0:6d:5b:de:ca:bb:67:cc:b4:84:69:c0: 53:57:e6:9a:e4:72:41:15:a0:41:4d:0c:11:f9:10: 40:51:b2:53:d8:e6:b7:86:87:e7:24:56:c1:8d:ff: ec:47:f6:2a:60:61:47:ea:17:99:27:a4:25:eb:2a: 68:dd:dd:99:1b:0b:22:d9:3c:13:7d:ab:2c:d0:9d: 9a:45:3f:6a:78:2d:5d:c8:7c:d8:15:ee:b6:35:b0: 71:33:6e:55:01:e2:41:c3:d4:6c:85:3d:e1:b0:61: 28:93:dd:9e:c9:d5:52:94:a5:f0:38:1b:21:59:b1: da:86:9d:b6:3c:96:39:a6:93:d2:6a:61:5a:84:6b: 0f:99:d3:a1:06:49:1d:fe:d7:61:04:e1:0f:9c:51: 29:9a:bc:a4:ce:a6:9e:39:57:01:e5:f1:38:c6:ff: fd:d7:f5:42:c6:b5:7b:5d:3c:9e:40:74:8e:20:ca: cf:c9:90:c5:3e:8e:88:20:5d:24:bd:1d:bf:5e:1f: 22:0f:5f:df:dc:5e:d3:b5:3f:00:6c:74:e1:6e:99: e5:f5:b1:c3:e4:a1:81:22:27:6e:63:bf:d0:40:50: a7:22:a4:44:db:4a:f6:7a:06:e6:79:45:90:ec:8d: 5b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4D:70:9D:27:CB:EC:D9:60:8C:EF:4D:35:04:D1:2D:AF:E3:14:73 X509v3 Authority Key Identifier: keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:86:53:f6:a6:d1:10:a1:5f:a6:90:49:38:3c:14:79:c3:e1: 4e:71:51:89:55:2a:0a:5b:18:f2:b9:d7:9a:e6:52:ce:3f:05: 60:69:f3:95:19:25:58:37:bb:4a:22:f4:62:70:be:ab:1f:c9: 20:45:80:db:75:c1:75:2f:21:e3:43:ce:b9:a3:e1:eb:ba:88: 77:4c:df:bc:fa:5f:3b:b3:ac:9a:9a:dc:f6:fc:1e:f0:81:29: f6:6e:e1:42:41:12:e8:58:f8:08:d4:ab:b9:4c:ad:b0:e4:7a: d2:3d:19:35:e5:a6:cc:74:6d:f1:13:3e:a4:72:8b:cd:8f:d4: a3:4d:df:dd:cc:a5:c3:d1:82:d7:8f:64:15:08:1c:e0:24:d5: 7e:96:01:d4:db:77:01:32:8f:be:ed:d5:97:e7:57:0a:0c:83: f7:60:a0:25:a1:8a:72:48:9a:1b:9b:76:ac:1c:e3:2d:16:8f: 1c:ac:ff:a4:83:a2:bc:5c:5e:4d:eb:be:59:cc:dc:d6:bf:9e: 0b:c4:e2:cb:06:e1:76:83:d8:2b:02:f1:13:58:fc:68:f1:a7: ce:a2:b2:49:ef:0e:d7:46:d1:c1:6c:1b:08:cb:0b:98:d5:f2: 68:ad:d5:92:d6:9a:9e:d3:7a:b4:60:1b:6c:93:bd:0c:b6:b7: 36:41:c4:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkzOUYxMTAvBgNVBAUTKDA3MUUyNTg1NUU2QTM1QjNEODA4RkY3QTYwQTA4Qjg3 ODEzNTYzNjIwHhcNMjUwNzAxMDUwNDIyWhcNMjUwNzA4MDUwNDIyWjAYMRYwFAYD VQQDEw02ODYzNmM1Ni0wZDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65zgEC9lIBU25R5dkcUVMVegbVveyrtnzLSEacBTV+aa5HJBFaBBTQwR+RBA UbJT2Oa3hofnJFbBjf/sR/YqYGFH6heZJ6Ql6ypo3d2ZGwsi2TwTfass0J2aRT9q eC1dyHzYFe62NbBxM25VAeJBw9RshT3hsGEok92eydVSlKXwOBshWbHahp22PJY5 ppPSamFahGsPmdOhBkkd/tdhBOEPnFEpmrykzqaeOVcB5fE4xv/91/VCxrV7XTye QHSOIMrPyZDFPo6IIF0kvR2/Xh8iD1/f3F7TtT8AbHThbpnl9bHD5KGBIiduY7/Q QFCnIqRE20r2egbmeUWQ7I1bDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9NcJ0n y+zZYIzvTTUE0S2v4xRzMB8GA1UdIwQYMBaAFAceJYVeajWz2Aj/emCgi4eBNWNi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTM5Ri8yMkU1RjY1NjhB QzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5iUFlDUDk2WUtDTGg0RTFZ MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J4NGxoVjVxTmJQWUNQOTZZS0NMaDRFMVkySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTM5Ri8yMkU1RjY1NjhBQzExMUVFODUxM0JCMURDNEY5QUUwMi9CeDRsaFY1cU5i UFlDUDk2WUtDTGg0RTFZMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9hlP2ptEQoV+mkEk4PBR5w+FOcVGJVSoKWxjyudea5lLOPwVgafOV GSVYN7tKIvRicL6rH8kgRYDbdcF1LyHjQ865o+Hruoh3TN+8+l87s6yamtz2/B7w gSn2buFCQRLoWPgI1Ku5TK2w5HrSPRk15abMdG3xEz6kcovNj9SjTd/dzKXD0YLX j2QVCBzgJNV+lgHU23cBMo++7dWX51cKDIP3YKAloYpySJobm3asHOMtFo8crP+k g6K8XF5N675ZzNzWv54LxOLLBuF2g9grAvETWPxo8afOorJJ7w7XRtHBbBsIywuY 1fJordWS1pqe03q0YBtsk70Mtrc2QcSw -----END CERTIFICATE-----Generated at Thu Jul 3 01:19:43 2025 by rpki-client