$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft File: bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft (raw, json) Hash identifier: 6/dqs3kuD4NvnfuPTp6LgxaoP9/WhuVyFh5rqad5PuI= Subject key identifier: 41:3A:02:E4:C4:F6:29:1D:88:38:6E:68:B8:3F:C8:7D:DF:26:A1:B1 Authority key identifier: 6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25 Certificate issuer: /CN=A9155A44/serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25 Certificate serial: 0299 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft Manifest number: 0295 Signing time: Thu 03 Jul 2025 01:57:55 +0000 Manifest this update: Thu 03 Jul 2025 01:57:54 +0000 Manifest next update: Thu 10 Jul 2025 01:57:54 +0000 Files and hashes: 1: bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl (hash: sOAdl3AL4h8XwyqE6P5seYbrbkosrfxyuO5oQf3IB1g=) 2: ED947C26088911EDA7D9A84AC4F9AE02.roa (hash: m5tkDr99ueIyPYAtBqolFfiSgG7uue2Tp2ShsOm2nZQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 01:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9155A44, serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25 Validity Not Before: Jul 3 01:57:54 2025 GMT Not After : Jul 10 01:57:54 2025 GMT Subject: CN=6865e3a3-a64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9b:02:eb:c4:cf:aa:41:07:75:1d:70:c3:fa: 5c:cc:06:84:63:4d:a1:d3:0e:43:8a:8c:18:f6:09: b7:b0:98:96:0b:da:70:46:51:7c:f0:7b:66:95:15: 77:77:40:b8:6c:43:c5:a2:f5:d1:fd:e3:fd:90:e5: 3b:54:bd:93:c3:48:d3:9d:e0:af:c2:ed:dd:dd:8c: df:4d:80:19:da:67:ff:77:cb:a0:02:20:f4:d1:13: b7:e9:11:8f:2f:ac:b7:2f:d4:66:83:12:23:bf:41: 09:40:9f:a9:fa:53:2f:ae:91:66:e5:b9:63:9c:e3: 12:50:8a:66:28:d2:92:dc:9c:f5:49:8d:2c:41:d2: 12:d0:f4:a7:ad:28:c7:88:c1:2c:64:81:44:59:0a: 70:c5:0e:7c:6a:10:ca:b9:d9:6a:29:c7:27:1c:1a: 46:27:b9:a8:d7:e2:90:73:d0:e9:59:5a:37:52:12: 5d:42:22:77:8b:ff:e9:48:2e:bf:34:5d:cd:ff:aa: 74:7e:45:c3:3d:9e:9d:7b:d7:77:f5:27:f0:af:fa: 11:29:19:44:2c:12:8a:e6:a0:ea:78:35:6e:a2:3e: 1e:25:22:ea:4b:12:44:0b:b8:25:0b:68:b1:2b:68: 79:68:80:54:31:1b:af:55:9a:2b:10:3f:be:98:f2: fe:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3A:02:E4:C4:F6:29:1D:88:38:6E:68:B8:3F:C8:7D:DF:26:A1:B1 X509v3 Authority Key Identifier: keyid:6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:52:7a:0e:34:7f:62:77:1b:b5:be:a0:fa:a2:cf:f8:5a:05: cb:07:47:25:7a:77:13:3c:d4:e0:4e:21:7b:b2:a7:2c:74:78: ed:f8:c4:1d:62:8f:02:31:4c:ad:98:5b:27:36:8f:ac:cc:c4: 8b:2d:ca:88:66:b1:12:58:73:ce:1e:ca:ec:d4:0f:0d:ba:f9: 1d:42:72:46:23:f8:98:e2:f5:61:67:e0:96:c8:1f:98:67:b3: e9:b1:b6:44:5f:51:6e:90:6e:3f:95:17:5c:10:c5:91:c5:7b: e8:de:8c:ff:30:72:bb:47:fb:2e:ef:64:e9:9e:5d:a4:d9:70: 33:ea:05:24:ce:f3:39:87:0d:78:10:06:b9:09:5b:b5:96:0a: 59:52:7e:fe:e1:a3:99:f1:17:d4:62:16:81:a7:6c:b6:65:a4: ee:44:49:7b:f4:09:7a:c5:1c:36:3b:79:f9:b5:0c:46:b2:6d: ad:bd:e0:4a:3f:b4:cd:c0:48:1b:95:71:63:f4:19:1d:30:1f: f6:f5:81:9a:8d:d6:9a:80:3f:7f:90:5a:56:f7:31:5b:5d:10: 2f:dc:ce:43:26:2c:33:ee:4a:61:af:d6:94:2d:cd:fa:cc:1a: a1:1a:2e:b0:f8:f4:d8:82:0b:e4:9a:96:e8:1c:90:b7:50:c5: 97:10:f3:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTVBNDQxMTAvBgNVBAUTKDZDOUUwQzJCRkU5RjdEMUIxREUxRDZFRjYyODI1M0FB NzA4OTJBMjUwHhcNMjUwNzAzMDE1NzU0WhcNMjUwNzEwMDE1NzU0WjAYMRYwFAYD VQQDEw02ODY1ZTNhMy1hNjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5sC68TPqkEHdR1ww/pczAaEY02h0w5DiowY9gm3sJiWC9pwRlF88HtmlRV3 d0C4bEPFovXR/eP9kOU7VL2Tw0jTneCvwu3d3YzfTYAZ2mf/d8ugAiD00RO36RGP L6y3L9RmgxIjv0EJQJ+p+lMvrpFm5bljnOMSUIpmKNKS3Jz1SY0sQdIS0PSnrSjH iMEsZIFEWQpwxQ58ahDKudlqKccnHBpGJ7mo1+KQc9DpWVo3UhJdQiJ3i//pSC6/ NF3N/6p0fkXDPZ6de9d39Sfwr/oRKRlELBKK5qDqeDVuoj4eJSLqSxJEC7glC2ix K2h5aIBUMRuvVZorED++mPL+jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEE6AuTE 9ikdiDhuaLg/yH3fJqGxMB8GA1UdIwQYMBaAFGyeDCv+n30bHeHW72KCU6pwiSol MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NUE0NC8wRUM4RTQyQTA4 ODcxMUVEODkxRUU2NDRDNEY5QUUwMi9iSjRNS182ZmZSc2Q0ZGJ2WW9KVHFuQ0pL aVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JKNE1LXzZmZlJzZDRkYnZZb0pUcW5DSktpVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NUE0NC8wRUM4RTQyQTA4ODcxMUVEODkxRUU2NDRDNEY5QUUwMi9iSjRNS182ZmZS c2Q0ZGJ2WW9KVHFuQ0pLaVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhUnoONH9idxu1vqD6os/4WgXLB0clencTPNTgTiF7sqcsdHjt+MQd Yo8CMUytmFsnNo+szMSLLcqIZrESWHPOHsrs1A8NuvkdQnJGI/iY4vVhZ+CWyB+Y Z7PpsbZEX1FukG4/lRdcEMWRxXvo3oz/MHK7R/su72Tpnl2k2XAz6gUkzvM5hw14 EAa5CVu1lgpZUn7+4aOZ8RfUYhaBp2y2ZaTuREl79Al6xRw2O3n5tQxGsm2tveBK P7TNwEgblXFj9BkdMB/29YGajdaagD9/kFpW9zFbXRAv3M5DJiwz7kphr9aULc36 zBqhGi6w+PTYggvkmpboHJC3UMWXEPP7 -----END CERTIFICATE-----Generated at Thu Jul 3 03:29:34 2025 by rpki-client