$ rpki-client -vvf rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft File: bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft (raw, json) Hash identifier: OZjQ2Nj0hg7SfiYBbRUK6Rsr3k6XQU4WURFMUPKJ75s= Subject key identifier: 4A:9B:1B:76:C3:36:71:C2:A3:56:5C:80:C9:4F:C9:26:ED:A5:51:07 Authority key identifier: 6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 Certificate issuer: /CN=A91C95AA/serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Certificate serial: 0256 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft Manifest number: 0251 Signing time: Thu 03 Jul 2025 02:13:42 +0000 Manifest this update: Thu 03 Jul 2025 02:13:42 +0000 Manifest next update: Thu 10 Jul 2025 02:13:42 +0000 Files and hashes: 1: bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl (hash: JEwfEdZiw0tIilEnHcxSkc4K47Zb1NsOTC7t00Pi6gg=) 2: FB1F8158242A11ED9547B486C4F9AE02.roa (hash: F+DLJ1aQV5oLLpGFe5erh1ip1G2eNsPVMkZyfdufJjc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 598 (0x256) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C95AA, serialNumber=6C9B9687D05E2B5BE536109A6AF9BFFA199873D4 Validity Not Before: Jul 3 02:13:42 2025 GMT Not After : Jul 10 02:13:42 2025 GMT Subject: CN=6865e756-7626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c5:b2:21:ca:46:c9:18:cc:fd:4a:ca:98:a6: 9b:b3:0f:8e:77:a0:1b:4b:fc:af:99:47:f8:69:20: 23:b0:f4:c1:00:33:ab:43:bf:1f:d2:b0:39:3b:63: d0:6d:14:6e:30:55:7f:1e:9b:1c:9e:4f:a4:09:05: 6d:95:5b:24:cf:9c:44:79:5e:ed:76:ec:91:48:a4: 84:78:d2:24:8b:b6:b4:86:ee:69:ce:c7:39:b0:34: c3:95:7d:2e:b4:7e:d8:da:8c:27:16:90:ef:19:4c: b7:1e:ec:ee:82:4f:b7:c0:fc:7b:1d:f9:f3:e0:b7: cb:85:ba:b3:2d:d0:e8:2e:7a:10:9b:4e:4f:41:8a: 89:28:64:5c:84:cb:34:46:8f:fb:8e:4a:17:e6:f6: 78:d1:69:73:9d:b1:c1:1e:26:83:67:16:e9:37:41: 81:77:69:7e:78:bb:cd:40:44:52:1c:16:a0:f9:7f: 8b:9d:22:51:46:da:4c:dd:9e:bb:04:0a:ab:88:09: 87:e5:df:a0:1d:b3:c6:a6:74:f3:27:60:b7:e8:25: 7c:38:a5:64:54:3c:f2:2b:72:39:72:59:92:07:82: 25:02:6d:4c:69:fc:6d:a9:81:45:97:25:66:e1:77: 05:9f:76:ac:59:02:1b:2a:a9:ab:0a:f1:a9:9f:de: 95:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9B:1B:76:C3:36:71:C2:A3:56:5C:80:C9:4F:C9:26:ED:A5:51:07 X509v3 Authority Key Identifier: keyid:6C:9B:96:87:D0:5E:2B:5B:E5:36:10:9A:6A:F9:BF:FA:19:98:73:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJuWh9BeK1vlNhCaavm_-hmYc9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C95AA/156BD89E242711EDB3EA3480C4F9AE02/bJuWh9BeK1vlNhCaavm_-hmYc9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e9:a9:7a:46:3b:c1:02:b2:03:88:34:74:e5:d3:a6:40:47:21: f0:35:33:db:54:2e:cb:dd:3a:51:3f:21:8f:db:37:16:7d:04: 03:ce:cb:49:44:cc:a4:92:a3:db:7c:40:68:fa:41:d8:99:6c: 2c:bf:d6:eb:86:2a:97:dc:c1:be:4a:d5:2b:cd:94:15:d1:33: 4f:56:ad:7e:b5:91:4e:51:b3:4b:92:4e:c9:ce:db:33:ee:d9: 95:ff:1d:d9:79:12:ae:81:1c:fe:88:1a:fe:20:4f:14:0b:87: ab:04:f2:14:e4:0f:c0:66:b7:ad:64:0e:32:a1:5f:63:d8:3e: 99:ba:8a:95:9e:8c:cc:a0:cd:4c:35:ca:2c:14:1e:c5:3e:d0: b7:7b:34:88:e5:97:01:57:4d:ba:a5:98:14:bb:f8:f8:5a:ef: 48:62:cb:e4:e9:ff:40:91:fe:63:c8:10:39:9b:ae:53:58:9b: 05:20:bb:12:c6:89:39:a8:16:8a:33:72:8a:70:21:2b:a2:2c: 62:3e:38:b1:22:3c:7d:87:08:67:ed:79:36:22:43:5e:c5:79: 52:e4:d2:4b:0e:e5:3f:9a:c5:4d:8f:78:d0:59:a5:96:d2:7e: 29:76:43:0c:1d:db:be:3c:00:60:94:17:7a:95:0b:f9:25:4b: a3:ed:83:8d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk1QUExMTAvBgNVBAUTKDZDOUI5Njg3RDA1RTJCNUJFNTM2MTA5QTZBRjlCRkZB MTk5ODczRDQwHhcNMjUwNzAzMDIxMzQyWhcNMjUwNzEwMDIxMzQyWjAYMRYwFAYD VQQDEw02ODY1ZTc1Ni03NjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcWyIcpGyRjM/UrKmKabsw+Od6AbS/yvmUf4aSAjsPTBADOrQ78f0rA5O2PQ bRRuMFV/Hpscnk+kCQVtlVskz5xEeV7tduyRSKSEeNIki7a0hu5pzsc5sDTDlX0u tH7Y2ownFpDvGUy3Huzugk+3wPx7Hfnz4LfLhbqzLdDoLnoQm05PQYqJKGRchMs0 Ro/7jkoX5vZ40WlznbHBHiaDZxbpN0GBd2l+eLvNQERSHBag+X+LnSJRRtpM3Z67 BAqriAmH5d+gHbPGpnTzJ2C36CV8OKVkVDzyK3I5clmSB4IlAm1MafxtqYFFlyVm 4XcFn3asWQIbKqmrCvGpn96VQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqbG3bD NnHCo1ZcgMlPySbtpVEHMB8GA1UdIwQYMBaAFGyblofQXitb5TYQmmr5v/oZmHPU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTVBQS8xNTZCRDg5RTI0 MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsxdmxOaENhYXZtXy1obVlj OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKdVdoOUJlSzF2bE5oQ2Fhdm1fLWhtWWM5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTVBQS8xNTZCRDg5RTI0MjcxMUVEQjNFQTM0ODBDNEY5QUUwMi9iSnVXaDlCZUsx dmxOaENhYXZtXy1obVljOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDpqXpGO8ECsgOINHTl06ZARyHwNTPbVC7L3TpRPyGP2zcWfQQDzstJ RMykkqPbfEBo+kHYmWwsv9brhiqX3MG+StUrzZQV0TNPVq1+tZFOUbNLkk7Jztsz 7tmV/x3ZeRKugRz+iBr+IE8UC4erBPIU5A/AZretZA4yoV9j2D6ZuoqVnozMoM1M NcosFB7FPtC3ezSI5ZcBV026pZgUu/j4Wu9IYsvk6f9Akf5jyBA5m65TWJsFILsS xok5qBaKM3KKcCEroixiPjixIjx9hwhn7Xk2IkNexXlS5NJLDuU/msVNj3jQWaWW 0n4pdkMMHdu+PABglBd6lQv5JUuj7YON -----END CERTIFICATE-----Generated at Thu Jul 3 21:46:15 2025 by rpki-client