$ rpki-client -vvf rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft File: bC3jjX43M-CH3e95d-MYOcCt7jc.mft (raw, json) Hash identifier: 1O1pXvf+zCwCwqBtn23/bf+Y+MMrV1k5dd6LzsBd1Vc= Subject key identifier: 14:B7:39:E3:3D:79:2B:A0:9C:09:CA:D8:6F:41:BB:BE:6A:B9:C7:8C Authority key identifier: 6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37 Certificate issuer: /CN=A9181380/serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37 Certificate serial: 020F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft Manifest number: 020B Signing time: Thu 03 Jul 2025 02:23:52 +0000 Manifest this update: Thu 03 Jul 2025 02:23:51 +0000 Manifest next update: Thu 10 Jul 2025 02:23:51 +0000 Files and hashes: 1: bC3jjX43M-CH3e95d-MYOcCt7jc.crl (hash: DYYx4JxUIZL9NNjNQTYVExazJCZCmdxvxEhSiHozhDQ=) 2: 164993A63FBA11EDA5387132C4F9AE02.roa (hash: XYc2mxLenXQc+O8B80ZFK5EpIFxtXO429dywGYqqozs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 527 (0x20f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9181380, serialNumber=6C2DE38D7E3733E087DDEF7977E31839C0ADEE37 Validity Not Before: Jul 3 02:23:51 2025 GMT Not After : Jul 10 02:23:51 2025 GMT Subject: CN=6865e9b7-8296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a4:13:0f:4b:d1:fb:f6:f3:74:e1:64:65:3c: 62:f6:ed:64:ce:68:ae:61:cf:51:31:e0:89:ff:96: 63:e1:ee:ba:8f:56:c2:fe:56:21:09:e1:8a:9b:0d: 46:f2:61:74:d1:0f:e0:aa:76:2b:54:d9:f1:b6:0b: af:aa:22:77:3c:44:a8:1e:31:e8:a9:e8:b4:70:e2: bf:ee:0d:fb:5d:a0:2c:bb:73:0f:7a:16:76:07:27: 9c:db:05:6e:fe:a6:24:e1:86:33:1d:f9:33:00:a0: e0:34:25:e3:50:3b:cf:6f:10:5f:7f:0e:bd:42:e6: f1:e3:e0:7b:ec:bb:f0:0d:42:82:74:77:13:dc:c8: 9d:f3:a1:28:45:6a:87:4b:8f:ea:96:9d:64:98:1b: 9f:d2:67:16:b2:2a:69:8a:ff:cf:73:6c:b4:f8:8d: 9a:a6:45:c5:33:96:bf:61:dc:b6:6c:fb:a7:3d:f0: b8:89:20:5b:71:c8:bc:4c:fe:15:68:a7:e1:fb:71: c8:ce:99:5e:5c:4c:bb:ef:e0:9b:12:c4:08:6d:4e: 96:1d:f8:f2:8e:2d:bf:4d:20:e7:b2:4e:18:85:d2: 5e:a5:78:9f:a2:2f:c4:ea:34:49:9b:ca:ef:63:72: ad:b3:dd:8b:0b:ae:6f:74:9c:23:37:24:d2:8d:1c: 92:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:B7:39:E3:3D:79:2B:A0:9C:09:CA:D8:6F:41:BB:BE:6A:B9:C7:8C X509v3 Authority Key Identifier: keyid:6C:2D:E3:8D:7E:37:33:E0:87:DD:EF:79:77:E3:18:39:C0:AD:EE:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bC3jjX43M-CH3e95d-MYOcCt7jc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181380/0DF3B39A3EFB11EDB7DA7875C4F9AE02/bC3jjX43M-CH3e95d-MYOcCt7jc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:66:3a:b0:8c:7b:40:22:49:ec:55:9c:37:1e:a4:93:fa:32: 34:fa:90:b3:61:93:e3:07:de:79:be:15:7c:d6:1b:cf:0a:2b: cd:07:b0:97:2d:fd:95:62:53:de:69:20:36:16:0f:d3:93:37: 5b:fd:42:e4:52:53:3d:4a:0d:ad:cb:79:19:5c:df:53:e1:53: 9f:3c:14:7c:f7:2c:6c:fd:4f:63:51:66:93:b9:05:79:79:f3: 33:05:6a:6f:a8:3a:0d:a9:32:47:76:2d:44:c9:d8:21:97:5a: d2:40:20:68:7d:b0:ef:47:8f:da:ff:e9:c6:0b:a2:7e:7c:61: 8c:e6:e9:2d:62:1f:05:2a:c6:2f:d2:b6:6a:5e:21:dd:96:4f: 0a:54:4b:9b:81:28:cf:03:b9:5d:38:74:63:a9:6b:bd:1b:21: 3c:78:0b:62:e3:ad:37:54:11:43:d8:2d:e7:4e:08:4c:b0:f8: 51:f8:ac:5a:f5:d9:85:19:96:33:42:03:d3:48:5a:b7:d2:e5: 3e:1a:92:ac:64:86:e3:65:e6:81:71:fb:89:cf:10:bb:ec:54: a9:74:b3:8d:96:0b:7e:37:46:9e:a5:0b:1f:ac:f2:8f:5e:41: 37:17:0b:53:40:57:14:c5:14:56:0e:09:cb:9e:2b:d7:13:61: 19:6f:63:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODEzODAxMTAvBgNVBAUTKDZDMkRFMzhEN0UzNzMzRTA4N0RERUY3OTc3RTMxODM5 QzBBREVFMzcwHhcNMjUwNzAzMDIyMzUxWhcNMjUwNzEwMDIyMzUxWjAYMRYwFAYD VQQDEw02ODY1ZTliNy04Mjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0aQTD0vR+/bzdOFkZTxi9u1kzmiuYc9RMeCJ/5Zj4e66j1bC/lYhCeGKmw1G 8mF00Q/gqnYrVNnxtguvqiJ3PESoHjHoqei0cOK/7g37XaAsu3MPehZ2Byec2wVu /qYk4YYzHfkzAKDgNCXjUDvPbxBffw69Qubx4+B77LvwDUKCdHcT3Mid86EoRWqH S4/qlp1kmBuf0mcWsippiv/Pc2y0+I2apkXFM5a/Ydy2bPunPfC4iSBbcci8TP4V aKfh+3HIzpleXEy77+CbEsQIbU6WHfjyji2/TSDnsk4YhdJepXifoi/E6jRJm8rv Y3Kts92LC65vdJwjNyTSjRySqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBS3OeM9 eSugnAnK2G9Bu75quceMMB8GA1UdIwQYMBaAFGwt441+NzPgh93veXfjGDnAre43 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MTM4MC8wREYzQjM5QTNF RkIxMUVEQjdEQTc4NzVDNEY5QUUwMi9iQzNqalg0M00tQ0gzZTk1ZC1NWU9jQ3Q3 amMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JDM2pqWDQzTS1DSDNlOTVkLU1ZT2NDdDdqYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MTM4MC8wREYzQjM5QTNFRkIxMUVEQjdEQTc4NzVDNEY5QUUwMi9iQzNqalg0M00t Q0gzZTk1ZC1NWU9jQ3Q3amMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWZjqwjHtAIknsVZw3HqST+jI0+pCzYZPjB955vhV81hvPCivNB7CX Lf2VYlPeaSA2Fg/Tkzdb/ULkUlM9Sg2ty3kZXN9T4VOfPBR89yxs/U9jUWaTuQV5 efMzBWpvqDoNqTJHdi1Eydghl1rSQCBofbDvR4/a/+nGC6J+fGGM5uktYh8FKsYv 0rZqXiHdlk8KVEubgSjPA7ldOHRjqWu9GyE8eAti4603VBFD2C3nTghMsPhR+Kxa 9dmFGZYzQgPTSFq30uU+GpKsZIbjZeaBcfuJzxC77FSpdLONlgt+N0aepQsfrPKP XkE3FwtTQFcUxRRWDgnLnivXE2EZb2N9 -----END CERTIFICATE-----Generated at Fri Jul 4 02:54:29 2025 by rpki-client