$ rpki-client -vvf rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft File: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft (raw, json) Hash identifier: 6sw/YMCWDHV5c0qb60C1ooWpobWms7Km3aZEB07tj+U= Subject key identifier: AC:08:38:E2:E6:91:11:A5:7B:4F:BB:7F:37:12:2A:57:6C:8C:D7:BC Authority key identifier: 06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5 Certificate issuer: /CN=A9178D35/serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5 Certificate serial: 3497 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft Manifest number: 3497 Signing time: Wed 02 Jul 2025 14:38:50 +0000 Manifest this update: Wed 02 Jul 2025 14:38:50 +0000 Manifest next update: Wed 09 Jul 2025 14:38:50 +0000 Files and hashes: 1: BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl (hash: D5l9TP1OPRlZPptyPdqUAPy6FyrnXPjLU70D6QcdZiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13463 (0x3497) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9178D35, serialNumber=0655E2915CADE91677AAB48C23C1E224B43DBAA5 Validity Not Before: Jul 2 14:38:50 2025 GMT Not After : Jul 9 14:38:50 2025 GMT Subject: CN=6865447a-5bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:8b:75:bd:cf:9a:d9:59:c9:06:55:80:5a: 6d:d6:e9:64:d1:8a:e6:1b:38:82:82:52:39:6e:29: e9:d3:b0:1d:ab:be:eb:85:26:53:3c:54:73:4c:21: e4:fc:a0:16:ce:dd:a1:d0:2b:15:dc:70:10:7e:b7: 85:72:12:a2:52:55:37:00:e4:0e:3f:df:c9:e7:ee: 5a:e5:d4:84:3a:cf:75:81:42:4d:ae:26:81:cf:7e: a6:c4:44:af:c5:13:2b:2b:3b:dd:8f:2a:77:84:b8: 17:af:51:c6:6f:15:42:91:b2:0e:8b:6a:7c:26:0c: 13:18:67:71:82:61:34:a7:c0:ef:5b:82:91:85:95: 57:d3:46:a1:3f:51:40:72:f8:2e:28:49:64:df:7b: 83:b6:36:b4:48:02:3a:12:04:2d:72:98:61:fd:4c: 59:2a:ac:10:46:87:f9:1c:45:a3:05:16:57:0e:0f: 56:9d:5d:c5:ba:02:89:0b:0a:db:fa:05:fb:8e:35: bb:3f:15:64:cb:82:b9:5f:15:a9:fd:ae:05:b0:99: 40:29:36:8f:25:6a:92:b9:60:34:e5:b8:1c:e7:51: d2:16:70:fc:dd:2b:09:37:5d:f5:c7:5c:71:3d:3a: 6f:2c:b0:90:3a:a3:dc:fd:22:49:cc:8a:b9:92:77: 56:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:08:38:E2:E6:91:11:A5:7B:4F:BB:7F:37:12:2A:57:6C:8C:D7:BC X509v3 Authority Key Identifier: keyid:06:55:E2:91:5C:AD:E9:16:77:AA:B4:8C:23:C1:E2:24:B4:3D:BA:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178D35/D6F885A41D8C11E29FA623EA08B02CD2/BlXikVyt6RZ3qrSMI8HiJLQ9uqU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:00:58:c6:39:28:7d:54:1f:12:b8:ed:5c:54:1b:5a:2b:87: d9:c7:68:14:65:84:6f:b3:ca:cb:d2:c5:a2:99:db:1c:6b:4d: 9f:80:c4:b3:d7:6b:84:61:6d:45:d4:48:e1:8b:a7:eb:ec:5a: 1a:f3:45:eb:42:f7:ef:27:08:e9:4d:9c:39:d9:ca:3c:b8:e2: 3c:f5:2f:84:c5:6d:09:b2:57:6e:11:65:69:73:3a:dc:62:1f: fd:d7:df:e7:db:e8:b2:05:38:01:65:b1:61:44:64:7d:0f:61: d5:01:97:84:87:19:2f:3d:38:42:85:67:a2:d7:0c:8e:1b:88: 0d:ed:43:e3:1c:f4:05:eb:cb:97:13:f6:5d:1b:62:59:3d:fa: aa:80:81:67:f4:fa:2f:ad:8f:2f:af:73:9a:48:6c:96:ec:7a: cd:3a:fe:97:7c:70:db:59:00:41:87:e1:2e:03:1e:9f:df:1b: 5c:26:d0:c8:1d:45:51:3f:c3:4a:00:c5:c2:6a:53:08:79:9c: 32:ef:31:29:a9:33:d6:4d:1f:a0:53:6d:12:0c:a2:1e:be:65: 1c:6d:22:e6:c1:8f:32:66:13:de:2b:a1:a7:e2:88:87:ad:a3: 1e:f1:0f:ec:6c:6c:b1:5b:b5:99:13:26:ec:00:fe:64:20:83: a1:9a:f4:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzhEMzUxMTAvBgNVBAUTKDA2NTVFMjkxNUNBREU5MTY3N0FBQjQ4QzIzQzFFMjI0 QjQzREJBQTUwHhcNMjUwNzAyMTQzODUwWhcNMjUwNzA5MTQzODUwWjAYMRYwFAYD VQQDEw02ODY1NDQ3YS01YmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtPKLdb3PmtlZyQZVgFpt1ulk0YrmGziCglI5binp07Adq77rhSZTPFRzTCHk /KAWzt2h0CsV3HAQfreFchKiUlU3AOQOP9/J5+5a5dSEOs91gUJNriaBz36mxESv xRMrKzvdjyp3hLgXr1HGbxVCkbIOi2p8JgwTGGdxgmE0p8DvW4KRhZVX00ahP1FA cvguKElk33uDtja0SAI6EgQtcphh/UxZKqwQRof5HEWjBRZXDg9WnV3FugKJCwrb +gX7jjW7PxVky4K5XxWp/a4FsJlAKTaPJWqSuWA05bgc51HSFnD83SsJN131x1xx PTpvLLCQOqPc/SJJzIq5kndWnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKwIOOLm kRGle0+7fzcSKldsjNe8MB8GA1UdIwQYMBaAFAZV4pFcrekWd6q0jCPB4iS0Pbql MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OEQzNS9ENkY4ODVBNDFE OEMxMUUyOUZBNjIzRUEwOEIwMkNEMi9CbFhpa1Z5dDZSWjNxclNNSThIaUpMUTl1 cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JsWGlrVnl0NlJaM3FyU01JOEhpSkxROXVxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 OEQzNS9ENkY4ODVBNDFEOEMxMUUyOUZBNjIzRUEwOEIwMkNEMi9CbFhpa1Z5dDZS WjNxclNNSThIaUpMUTl1cVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhAFjGOSh9VB8SuO1cVBtaK4fZx2gUZYRvs8rL0sWimdsca02fgMSz 12uEYW1F1Ejhi6fr7Foa80XrQvfvJwjpTZw52co8uOI89S+ExW0JslduEWVpczrc Yh/919/n2+iyBTgBZbFhRGR9D2HVAZeEhxkvPThChWei1wyOG4gN7UPjHPQF68uX E/ZdG2JZPfqqgIFn9PovrY8vr3OaSGyW7HrNOv6XfHDbWQBBh+EuAx6f3xtcJtDI HUVRP8NKAMXCalMIeZwy7zEpqTPWTR+gU20SDKIevmUcbSLmwY8yZhPeK6Gn4oiH raMe8Q/sbGyxW7WZEybsAP5kIIOhmvQK -----END CERTIFICATE-----Generated at Thu Jul 3 10:31:19 2025 by rpki-client