$ rpki-client -vvf rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft File: D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft (raw, json) Hash identifier: rYi8SlRUOlQfMSGUS5sq/FPY8eCYqq//LVWR+rHxp9I= Subject key identifier: 23:97:13:11:00:31:D9:B3:99:28:01:35:A8:5F:2F:DA:9D:A2:C5:8A Authority key identifier: 0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 Certificate issuer: /CN=A9156B5D/serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Certificate serial: 46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft Manifest number: 44 Signing time: Thu 03 Jul 2025 07:39:44 +0000 Manifest this update: Thu 03 Jul 2025 07:39:44 +0000 Manifest next update: Thu 10 Jul 2025 07:39:44 +0000 Files and hashes: 1: D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl (hash: ykclSZL6vMMEcAQC4Qv14spfG/FUxPyo5+jVDKHuqHQ=) 2: 8CF57F0EF1C111EFAC8BCA59C4F9AE02.roa (hash: BMK5egNvgRPb4zFSiHjhQ8AJphJuXdtk94523bl6Tzs=) 3: 41554C78F1C111EFA67D2459C4F9AE02.roa (hash: waSBCEbcYlolsmBXhQe06r7v3tswwJfsDI5vXs6FVRA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70 (0x46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9156B5D, serialNumber=0FE06324F1787C8F214FBEAE67D886D22F816702 Validity Not Before: Jul 3 07:39:44 2025 GMT Not After : Jul 10 07:39:44 2025 GMT Subject: CN=686633c0-9548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d9:c5:27:25:fb:5a:58:94:02:94:01:4b:ce: f1:51:6d:c1:e3:cc:4d:19:18:1b:38:e2:36:0b:2d: 3e:c9:a0:56:27:24:3f:ea:92:d1:5e:e4:54:d6:10: 42:54:53:a5:bf:eb:a8:79:13:24:c3:21:20:ae:10: 48:df:f9:e9:ed:5a:50:31:6d:a6:20:6f:0b:e4:80: 1c:25:79:4e:c7:4e:46:07:a7:bc:76:d7:b9:71:7a: e3:89:e5:fa:74:35:24:10:25:9f:6f:45:c5:4f:34: b6:9a:fd:06:05:92:ba:b1:9d:33:12:29:8a:88:e0: 5e:17:bf:80:2c:39:70:87:85:e8:71:28:1e:ad:13: 42:0a:93:56:42:31:bc:70:6e:a0:7f:9c:c8:e5:ac: 04:cb:19:50:12:bf:77:c1:5a:92:2c:78:65:58:1a: 17:46:f1:e4:00:17:da:49:c4:f7:64:ea:38:77:21: 3d:00:36:27:03:0a:ba:ed:fe:62:f1:d7:f1:9e:e8: 67:93:0d:12:d2:ce:39:1a:dd:07:87:69:ef:f5:93: a0:cb:22:bb:04:5e:3a:7f:a9:66:df:b9:b4:72:e7: 3e:eb:ec:cc:54:d5:50:20:f0:4d:7c:08:ae:33:07: 07:57:44:ec:7a:f8:0d:8f:25:b0:ca:b6:94:ed:35: 92:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:97:13:11:00:31:D9:B3:99:28:01:35:A8:5F:2F:DA:9D:A2:C5:8A X509v3 Authority Key Identifier: keyid:0F:E0:63:24:F1:78:7C:8F:21:4F:BE:AE:67:D8:86:D2:2F:81:67:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D-BjJPF4fI8hT76uZ9iG0i-BZwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156B5D/98FD1A42F1C011EFA5716B54C4F9AE02/D-BjJPF4fI8hT76uZ9iG0i-BZwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cd:06:91:f5:30:fb:f6:44:f5:94:54:8b:27:19:00:69:c7: e3:a8:e5:00:d1:81:8e:61:20:ad:af:3e:e1:bf:a2:86:3e:12: 03:00:4e:95:16:86:db:9a:30:22:d9:15:dc:e4:2b:da:0c:94: c8:15:a4:35:b5:7a:c7:15:09:59:0f:3a:07:40:29:fb:c6:5f: d6:a8:84:72:2d:79:97:2c:ca:df:85:bb:55:43:21:dc:d8:0b: 63:96:3a:2e:9c:fd:f5:1d:75:55:c1:51:29:fd:67:f4:b6:58: 20:eb:f2:9a:b6:30:f5:4f:5e:72:0a:69:99:03:1c:1d:60:f9: 6f:de:34:06:f3:fa:ce:8e:f2:f9:99:05:4a:06:17:9e:c5:06: b5:7a:50:30:4c:a7:c5:1d:96:ee:d9:c6:c9:6c:30:56:6d:15: fe:17:db:d5:24:24:52:2a:26:4a:9d:91:62:b6:02:9b:09:4e: 20:71:a4:f8:3e:9c:46:2c:39:92:97:f7:ad:3a:52:dc:32:97: 1a:e6:89:7c:4c:89:04:6d:2d:25:23:19:50:fa:7e:64:bd:18: df:f0:32:a7:d2:4e:3e:d3:03:56:a1:a4:1c:4e:76:68:4d:d1: bf:80:5e:88:6f:ce:60:be:fb:b1:fb:b9:6f:c7:60:d3:2f:c5: 95:33:75:88 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NkI1RDExMC8GA1UEBRMoMEZFMDYzMjRGMTc4N0M4RjIxNEZCRUFFNjdEODg2RDIy RjgxNjcwMjAeFw0yNTA3MDMwNzM5NDRaFw0yNTA3MTAwNzM5NDRaMBgxFjAUBgNV BAMTDTY4NjYzM2MwLTk1NDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDW2cUnJftaWJQClAFLzvFRbcHjzE0ZGBs44jYLLT7JoFYnJD/qktFe5FTWEEJU U6W/66h5EyTDISCuEEjf+entWlAxbaYgbwvkgBwleU7HTkYHp7x217lxeuOJ5fp0 NSQQJZ9vRcVPNLaa/QYFkrqxnTMSKYqI4F4Xv4AsOXCHhehxKB6tE0IKk1ZCMbxw bqB/nMjlrATLGVASv3fBWpIseGVYGhdG8eQAF9pJxPdk6jh3IT0ANicDCrrt/mLx 1/Ge6GeTDRLSzjka3QeHae/1k6DLIrsEXjp/qWbfubRy5z7r7MxU1VAg8E18CK4z BwdXROx6+A2PJbDKtpTtNZLDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUI5cTEQAx 2bOZKAE1qF8v2p2ixYowHwYDVR0jBBgwFoAUD+BjJPF4fI8hT76uZ9iG0i+BZwIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2QjVELzk4RkQxQTQyRjFD MDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4aFQ3NnVaOWlHMGktQlp3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRC1CakpQRjRmSThoVDc2dVo5aUcwaS1CWndJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 QjVELzk4RkQxQTQyRjFDMDExRUZBNTcxNkI1NEM0RjlBRTAyL0QtQmpKUEY0Zkk4 aFQ3NnVaOWlHMGktQlp3SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGvNBpH1MPv2RPWUVIsnGQBpx+Oo5QDRgY5hIK2vPuG/ooY+EgMATpUW htuaMCLZFdzkK9oMlMgVpDW1escVCVkPOgdAKfvGX9aohHIteZcsyt+Fu1VDIdzY C2OWOi6c/fUddVXBUSn9Z/S2WCDr8pq2MPVPXnIKaZkDHB1g+W/eNAbz+s6O8vmZ BUoGF57FBrV6UDBMp8Udlu7ZxslsMFZtFf4X29UkJFIqJkqdkWK2ApsJTiBxpPg+ nEYsOZKX9606UtwylxrmiXxMiQRtLSUjGVD6fmS9GN/wMqfSTj7TA1ahpBxOdmhN 0b+AXohvzmC++7H7uW/HYNMvxZUzdYg= -----END CERTIFICATE-----Generated at Thu Jul 3 21:54:21 2025 by rpki-client