$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft File: bjdXKUWj6XupZFmfpVXE20JjwOQ.mft (raw, json) Hash identifier: OY0tfM1EEbj4K2VftN+CD+OuYjqG8CiJxE+t9ZfqWzw= Subject key identifier: 1D:D5:68:AB:F1:4E:10:DC:C2:11:0E:92:98:DE:3A:B5:52:79:72:6F Authority key identifier: 6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4 Certificate issuer: /CN=A9176302/serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4 Certificate serial: 1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft Manifest number: 1B Signing time: Thu 03 Jul 2025 06:02:41 +0000 Manifest this update: Thu 03 Jul 2025 06:02:40 +0000 Manifest next update: Thu 10 Jul 2025 06:02:40 +0000 Files and hashes: 1: bjdXKUWj6XupZFmfpVXE20JjwOQ.crl (hash: 91nX30LWvSHFVcyeb+/1108Sr7G039yhA3wIEd5CbcA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176302, serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4 Validity Not Before: Jul 3 06:02:40 2025 GMT Not After : Jul 10 06:02:40 2025 GMT Subject: CN=68661d01-0332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a6:4e:f2:cd:2b:94:e4:cc:97:d5:2f:da:81: 82:df:dd:e3:94:4b:a1:f0:cf:0f:3f:c0:90:90:ff: 2f:29:1e:fa:e1:0d:07:ca:dc:07:9e:60:4b:c0:54: 39:b8:0d:d3:b8:c3:c1:92:2a:bd:02:05:63:a2:d0: 53:49:49:50:23:7b:55:60:6a:a0:65:a1:6d:05:d5: 3f:44:51:71:d2:86:22:a7:bf:a2:76:0e:ce:25:5e: a3:6c:6b:45:da:75:10:5d:55:2e:3c:8f:93:70:6f: 8a:96:da:67:88:8b:57:df:d7:d0:30:1e:e5:d1:17: 11:a8:a7:c9:b3:8c:bb:55:9d:81:4f:31:21:05:78: fa:f2:d7:96:e8:4a:47:d2:e5:3c:8a:17:e4:2c:6d: b4:5f:35:7c:35:a4:13:ff:5d:8d:63:4a:2c:23:34: a0:c6:94:a3:2a:0f:f6:64:4b:b5:d8:11:25:b2:e6: 87:eb:d5:3d:f3:38:73:18:1d:d7:3d:f6:41:f4:fd: f2:d8:a2:a8:21:db:ac:40:cf:cc:c1:09:66:5f:7a: 04:62:f0:f4:03:fe:31:ef:1a:c5:4c:6a:04:fc:1d: 3e:81:ab:2f:8e:e2:27:19:1d:c8:09:62:2e:d4:39: 71:a4:ab:a3:03:11:59:e6:26:a8:2e:c0:09:55:48: 66:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D5:68:AB:F1:4E:10:DC:C2:11:0E:92:98:DE:3A:B5:52:79:72:6F X509v3 Authority Key Identifier: keyid:6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption be:16:3f:d1:3c:3c:12:6e:4d:85:6b:26:f7:72:fc:b0:d4:0d: 66:7e:61:13:a7:6d:d5:e2:f3:1b:15:1e:01:b9:cb:5e:d2:72: ac:39:1a:be:c1:9f:66:a6:6e:83:27:93:9a:cb:d4:f5:07:c1: 1e:06:bd:a6:c7:6c:ea:ee:e6:2e:a5:75:33:00:55:5b:12:06: 05:e5:ef:77:1b:e0:62:b7:08:52:d3:7c:84:d5:d2:fc:0d:9c: d2:58:e1:a7:8f:99:98:a3:6e:95:7b:b2:26:d0:b8:0d:ba:bf: 09:b2:77:0d:d5:76:34:4e:f3:61:96:20:c2:ab:a2:d8:76:f0: be:85:7f:81:63:4f:db:3f:37:31:eb:1f:88:d5:e9:9c:f5:06: 96:11:48:4c:94:0e:79:de:a0:63:e0:63:89:e8:85:ed:22:13: ea:21:82:2c:d5:5d:de:52:13:1d:04:3d:5b:dc:80:0e:72:24: 2f:ad:1e:44:58:45:79:26:14:a7:32:eb:d7:19:23:08:0c:87: 76:90:cd:59:42:b0:f0:58:09:dc:89:f3:cf:63:f3:81:cc:cd: 21:31:c0:6d:ef:41:eb:ef:19:a6:b0:a5:0a:02:82:83:43:74: 9c:e6:c0:16:35:41:5f:9d:3e:23:93:d1:f7:d3:91:41:d1:06: 27:ea:1a:e5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NjMwMjExMC8GA1UEBRMoNkUzNzU3Mjk0NUEzRTk3QkE5NjQ1OTlGQTU1NUM0REI0 MjYzQzBFNDAeFw0yNTA3MDMwNjAyNDBaFw0yNTA3MTAwNjAyNDBaMBgxFjAUBgNV BAMTDTY4NjYxZDAxLTAzMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwpk7yzSuU5MyX1S/agYLf3eOUS6Hwzw8/wJCQ/y8pHvrhDQfK3AeeYEvAVDm4 DdO4w8GSKr0CBWOi0FNJSVAje1VgaqBloW0F1T9EUXHShiKnv6J2Ds4lXqNsa0Xa dRBdVS48j5Nwb4qW2meIi1ff19AwHuXRFxGop8mzjLtVnYFPMSEFePry15boSkfS 5TyKF+QsbbRfNXw1pBP/XY1jSiwjNKDGlKMqD/ZkS7XYESWy5ofr1T3zOHMYHdc9 9kH0/fLYoqgh26xAz8zBCWZfegRi8PQD/jHvGsVMagT8HT6Bqy+O4icZHcgJYi7U OXGkq6MDEVnmJqguwAlVSGbbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHdVoq/FO ENzCEQ6SmN46tVJ5cm8wHwYDVR0jBBgwFoAUbjdXKUWj6XupZFmfpVXE20JjwOQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2MzAyLzM2MjcyREU4MzA2 NTExRjA4RTgyQTIxNEM0RjlBRTAyL2JqZFhLVVdqNlh1cFpGbWZwVlhFMjBKandP US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYmpkWEtVV2o2WHVwWkZtZnBWWEUyMEpqd09RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 MzAyLzM2MjcyREU4MzA2NTExRjA4RTgyQTIxNEM0RjlBRTAyL2JqZFhLVVdqNlh1 cFpGbWZwVlhFMjBKandPUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL4WP9E8PBJuTYVrJvdy/LDUDWZ+YROnbdXi8xsVHgG5y17Scqw5Gr7B n2amboMnk5rL1PUHwR4GvabHbOru5i6ldTMAVVsSBgXl73cb4GK3CFLTfITV0vwN nNJY4aePmZijbpV7sibQuA26vwmydw3VdjRO82GWIMKroth28L6Ff4FjT9s/NzHr H4jV6Zz1BpYRSEyUDnneoGPgY4nohe0iE+ohgizVXd5SEx0EPVvcgA5yJC+tHkRY RXkmFKcy69cZIwgMh3aQzVlCsPBYCdyJ889j84HMzSExwG3vQevvGaawpQoCgoND dJzmwBY1QV+dPiOT0ffTkUHRBifqGuU= -----END CERTIFICATE-----Generated at Thu Jul 3 21:48:23 2025 by rpki-client