$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft File: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json) Hash identifier: XthCWhoRviSghlHPHB4u4XTzRs/tNfYRsOCsO8FcBxs= Subject key identifier: C9:F8:C2:4D:00:CA:B3:AC:85:BB:67:49:0F:C8:3C:C8:9C:34:8B:6E Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 Certificate issuer: /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Certificate serial: B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft Manifest number: B3 Signing time: Sat 17 May 2025 05:30:15 +0000 Manifest this update: Sat 17 May 2025 05:30:14 +0000 Manifest next update: Sat 24 May 2025 05:30:14 +0000 Files and hashes: 1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: DUeZBEWTOHkYZbw1g28n7kg4BW+qkAg8Cs0KoqAWmjM=) 2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: aCxLNGUfAZ6CNYlr7962E8YpM0oFXazWi/2qqzUqx5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 05:30:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 180 (0xb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Validity Not Before: May 17 05:30:14 2025 GMT Not After : May 24 05:30:14 2025 GMT Subject: CN=68281ee6-ed7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:da:ba:b1:0b:b8:dc:fe:22:41:fe:84:26:ce: 7e:92:22:40:79:6e:8a:b6:cb:8f:09:00:7c:96:e9: b7:74:ed:65:95:55:81:79:0c:eb:17:4b:c6:e4:0b: af:d9:68:43:05:32:53:2f:08:2f:8f:7e:b3:07:94: 82:cf:9a:3e:be:a5:5a:27:e6:8d:7e:4e:4e:d6:00: 73:5d:38:be:d9:86:14:b2:36:95:27:18:18:0f:70: cf:54:3c:22:4a:f2:ab:1f:fe:21:f2:30:9c:8e:04: a9:8e:22:e5:8b:39:37:b2:ef:f5:a8:6c:66:72:64: f1:01:a0:bc:d1:21:20:7c:3a:ce:1f:e0:bd:dc:b2: 37:1a:e1:c0:42:f5:f1:35:4a:55:48:a1:cb:13:d7: 9b:de:19:77:8e:16:09:03:41:62:39:cd:b1:2c:16: 5e:8f:f7:c5:4d:43:9a:72:76:a5:b8:e9:cc:59:e6: 68:c8:f0:7f:b8:52:9e:b3:d8:3f:e1:d1:1c:af:10: cd:be:5c:a5:f3:95:56:98:2b:ea:74:ce:4e:ed:3a: 41:24:49:db:44:c9:16:f6:ba:6d:1a:97:d0:ec:da: 27:51:4b:a0:d5:cd:70:9f:46:46:4b:d4:e8:7b:e5: 90:7d:f5:67:32:17:ce:0a:83:f6:e1:44:05:63:ee: ae:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F8:C2:4D:00:CA:B3:AC:85:BB:67:49:0F:C8:3C:C8:9C:34:8B:6E X509v3 Authority Key Identifier: keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:a2:7e:3e:65:19:1a:16:b9:3f:d7:d5:c5:be:85:3a:f9:75: cf:ae:3b:a1:98:2c:c0:0f:a5:df:1e:82:50:9b:70:36:09:37: 27:b6:8a:97:1b:99:17:10:a8:ea:08:9c:b2:98:e0:85:bc:a3: 7e:32:9d:87:a5:91:ee:79:7d:04:89:73:2e:a7:a1:57:20:73: 70:33:75:71:bc:e8:cb:60:f7:1b:6c:b4:75:ec:2e:49:8d:c3: b5:62:af:e2:0a:3d:3d:7f:c1:99:32:10:87:9f:18:34:4a:dd: 0a:69:09:e0:fd:a4:69:a3:54:52:1e:a4:b3:22:6c:b7:e5:4a: 9b:9b:f6:66:2f:01:8e:6f:1f:23:70:b7:4c:c5:ca:b2:e3:32: 3c:95:fd:c5:6b:73:aa:df:94:c6:dc:66:a0:6e:9c:cb:3a:2b: 45:32:f6:ce:d4:3f:1b:eb:9f:40:6d:03:9a:65:0b:36:67:77: c6:5e:fc:e7:94:d7:c2:52:bb:27:6d:42:56:06:97:98:f2:44: f7:06:6b:d1:8a:73:30:39:40:2f:9d:54:0d:7c:26:0e:4d:cc: 61:96:bd:53:48:37:51:d7:f7:68:de:d4:5d:51:24:75:cd:77: 10:c5:48:43:a1:6c:63:81:74:76:15:17:a1:99:cb:20:ae:4b: 77:08:af:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKEY3RjA2MzY5Mzk5RDk5MzVGNUZCNTlGRDU4NTcxNTQx QTU4MUNDNjMwHhcNMjUwNTE3MDUzMDE0WhcNMjUwNTI0MDUzMDE0WjAYMRYwFAYD VQQDEw02ODI4MWVlNi1lZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvNq6sQu43P4iQf6EJs5+kiJAeW6KtsuPCQB8lum3dO1llVWBeQzrF0vG5Auv 2WhDBTJTLwgvj36zB5SCz5o+vqVaJ+aNfk5O1gBzXTi+2YYUsjaVJxgYD3DPVDwi SvKrH/4h8jCcjgSpjiLlizk3su/1qGxmcmTxAaC80SEgfDrOH+C93LI3GuHAQvXx NUpVSKHLE9eb3hl3jhYJA0FiOc2xLBZej/fFTUOacnaluOnMWeZoyPB/uFKes9g/ 4dEcrxDNvlyl85VWmCvqdM5O7TpBJEnbRMkW9rptGpfQ7NonUUug1c1wn0ZGS9To e+WQffVnMhfOCoP24UQFY+6u+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMn4wk0A yrOshbtnSQ/IPMicNItuMB8GA1UdIwQYMBaAFPfwY2k5nZk19ftZ/VhXFUGlgcxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS84NjI0NjM0ODFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1UWDEtMW45V0ZjVlFhV0J6 R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlfQmphVG1kbVRYMS0xbjlXRmNWUWFXQnpHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS84NjI0NjM0ODFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1U WDEtMW45V0ZjVlFhV0J6R00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeon4+ZRkaFrk/19XFvoU6+XXPrjuhmCzAD6XfHoJQm3A2CTcntoqX G5kXEKjqCJyymOCFvKN+Mp2HpZHueX0EiXMup6FXIHNwM3VxvOjLYPcbbLR17C5J jcO1Yq/iCj09f8GZMhCHnxg0St0KaQng/aRpo1RSHqSzImy35Uqbm/ZmLwGObx8j cLdMxcqy4zI8lf3Fa3Oq35TG3GagbpzLOitFMvbO1D8b659AbQOaZQs2Z3fGXvzn lNfCUrsnbUJWBpeY8kT3BmvRinMwOUAvnVQNfCYOTcxhlr1TSDdR1/do3tRdUSR1 zXcQxUhDoWxjgXR2FRehmcsgrkt3CK+F -----END CERTIFICATE-----Generated at Sun May 18 02:19:29 2025 by rpki-client