$ rpki-client -vvf rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft File: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft (raw, json) Hash identifier: gqnHCyC65rEphWmzePgxEkAD0OlFGlZrTLYtQlskC6I= Subject key identifier: B0:BC:69:40:0F:7B:0E:1C:ED:35:8E:1D:9B:3C:D8:5E:3C:6F:98:3E Authority key identifier: 97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 Certificate issuer: /CN=A913F2BD/serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Certificate serial: BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft Manifest number: BA Signing time: Thu 03 Jul 2025 06:03:38 +0000 Manifest this update: Thu 03 Jul 2025 06:03:37 +0000 Manifest next update: Thu 10 Jul 2025 06:03:37 +0000 Files and hashes: 1: l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl (hash: 3YnOlUiOl4poPISCgAxXLB6UN2pvW/IBPFPlEK4PS/E=) 2: 470E849A389E11EF83D66176C4F9AE02.roa (hash: I6wYLUXo9wiy4AQAxb2ubHia3GZFxKPK++eH7JKRPwI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 187 (0xbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F2BD, serialNumber=97D04159FBB37EA67462B896976C1140C959E691 Validity Not Before: Jul 3 06:03:37 2025 GMT Not After : Jul 10 06:03:37 2025 GMT Subject: CN=68661d39-4ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:2d:65:43:da:eb:5e:db:f4:71:35:4c:e1:7b: 43:ca:a0:44:a8:48:6a:f7:e8:b3:05:af:c3:98:e6: 22:74:94:cb:8c:e7:3a:0c:06:27:9e:d5:3f:9a:42: 30:78:47:90:74:15:74:47:b6:72:57:c0:7e:88:de: bd:0f:52:a6:87:f6:81:c3:70:e0:6d:b5:3f:c0:e0: dc:5b:5e:b7:05:a9:ca:ab:59:f7:d3:67:84:fc:07: a6:fd:18:3d:8e:48:f5:7d:71:ca:48:bd:79:45:55: c2:a5:8e:d1:19:5f:c8:c7:1d:64:67:2d:c0:0b:6e: a2:5b:ea:8e:98:fe:55:60:ed:cc:04:6f:ad:a5:44: 63:a6:1e:49:86:bb:e1:64:4c:a2:c0:e2:ac:1c:26: c5:9a:9e:bd:58:03:87:27:c7:49:40:27:a6:aa:4d: ea:b7:ff:b8:a0:51:a4:14:75:9f:56:9b:3f:bc:0c: b6:3c:32:95:52:f0:f8:fa:85:4a:c2:41:ff:00:7f: 4f:ae:00:31:ca:e5:ae:e7:61:af:14:0e:52:6d:d6: 40:cd:8a:a0:30:fb:bf:70:05:bf:82:ec:68:69:75: 9b:49:58:89:7b:8d:ed:27:70:70:35:38:7f:80:65: 08:25:8b:2d:cd:88:69:e1:d8:75:e7:1e:d4:40:da: f1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:BC:69:40:0F:7B:0E:1C:ED:35:8E:1D:9B:3C:D8:5E:3C:6F:98:3E X509v3 Authority Key Identifier: keyid:97:D0:41:59:FB:B3:7E:A6:74:62:B8:96:97:6C:11:40:C9:59:E6:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F2BD/47844200389611EF9EDE8136C4F9AE02/l9BBWfuzfqZ0YriWl2wRQMlZ5pE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d2:4a:09:c1:ce:aa:4a:60:3b:bd:97:d8:1c:c6:d1:a9:fe:b0: ca:00:48:2c:df:9f:8b:eb:f3:c8:8e:f0:f5:9d:02:a5:b4:3f: 09:34:15:fe:39:88:5e:82:ac:b0:c8:31:8e:c1:eb:cd:36:5d: d7:5d:a5:8f:18:cb:0d:34:57:5e:fc:1f:ff:ca:3c:5a:4a:98: c8:e8:c0:85:fe:d3:9c:5c:43:39:77:aa:12:45:2b:35:03:4c: 9c:9a:1a:c5:c6:a7:ec:e3:e2:7a:7d:90:97:91:19:44:7d:1f: 2b:49:7c:2f:b7:fa:46:05:9f:e5:cc:48:ba:d9:3c:e4:1c:f9: b2:a7:44:63:c4:42:2a:5a:e1:72:dd:3f:e7:02:6a:7d:76:ae: af:65:e5:66:a7:26:b9:9e:0f:c3:78:c3:2b:8c:6f:3b:12:4f: 74:c1:49:a0:50:14:07:52:f5:68:bb:31:66:75:96:31:2d:0d: c2:45:a4:56:a8:48:50:83:e5:92:e7:93:99:91:80:d7:b7:64: 29:d3:33:99:1b:29:f7:10:f1:a8:3d:e9:90:f3:61:d4:71:9e: a6:1f:b4:1a:a0:ca:db:2f:0e:13:e3:e1:cc:37:fb:be:6b:e5: 43:02:3f:67:93:d4:9b:ce:1a:87:e5:2b:e2:d9:ce:52:75:fe: 93:74:70:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YyQkQxMTAvBgNVBAUTKDk3RDA0MTU5RkJCMzdFQTY3NDYyQjg5Njk3NkMxMTQw Qzk1OUU2OTEwHhcNMjUwNzAzMDYwMzM3WhcNMjUwNzEwMDYwMzM3WjAYMRYwFAYD VQQDEw02ODY2MWQzOS00YWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7C1lQ9rrXtv0cTVM4XtDyqBEqEhq9+izBa/DmOYidJTLjOc6DAYnntU/mkIw eEeQdBV0R7ZyV8B+iN69D1Kmh/aBw3DgbbU/wODcW163BanKq1n302eE/Aem/Rg9 jkj1fXHKSL15RVXCpY7RGV/Ixx1kZy3AC26iW+qOmP5VYO3MBG+tpURjph5Jhrvh ZEyiwOKsHCbFmp69WAOHJ8dJQCemqk3qt/+4oFGkFHWfVps/vAy2PDKVUvD4+oVK wkH/AH9PrgAxyuWu52GvFA5SbdZAzYqgMPu/cAW/guxoaXWbSViJe43tJ3BwNTh/ gGUIJYstzYhp4dh15x7UQNrxXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLC8aUAP ew4c7TWOHZs82F48b5g+MB8GA1UdIwQYMBaAFJfQQVn7s36mdGK4lpdsEUDJWeaR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjJCRC80Nzg0NDIwMDM4 OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZxWjBZcmlXbDJ3UlFNbFo1 cEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w5QkJXZnV6ZnFaMFlyaVdsMndSUU1sWjVwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RjJCRC80Nzg0NDIwMDM4OTYxMUVGOUVERTgxMzZDNEY5QUUwMi9sOUJCV2Z1emZx WjBZcmlXbDJ3UlFNbFo1cEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDSSgnBzqpKYDu9l9gcxtGp/rDKAEgs35+L6/PIjvD1nQKltD8JNBX+ OYhegqywyDGOwevNNl3XXaWPGMsNNFde/B//yjxaSpjI6MCF/tOcXEM5d6oSRSs1 A0ycmhrFxqfs4+J6fZCXkRlEfR8rSXwvt/pGBZ/lzEi62TzkHPmyp0RjxEIqWuFy 3T/nAmp9dq6vZeVmpya5ng/DeMMrjG87Ek90wUmgUBQHUvVouzFmdZYxLQ3CRaRW qEhQg+WS55OZkYDXt2Qp0zOZGyn3EPGoPemQ82HUcZ6mH7QaoMrbLw4T4+HMN/u+ a+VDAj9nk9SbzhqH5Svi2c5Sdf6TdHAe -----END CERTIFICATE-----Generated at Fri Jul 4 15:59:57 2025 by rpki-client