$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft File: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json) Hash identifier: gJ99m8He1m6mLHT3nAa3QTmf4El7EtkQVk5frcicoUU= Subject key identifier: 27:1D:1A:D1:18:36:52:37:97:6B:ED:95:18:01:26:36:24:21:81:91 Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 Certificate issuer: /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Certificate serial: CE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft Manifest number: CC Signing time: Thu 03 Jul 2025 05:52:41 +0000 Manifest this update: Thu 03 Jul 2025 05:52:41 +0000 Manifest next update: Thu 10 Jul 2025 05:52:41 +0000 Files and hashes: 1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: vxcYD7L6mL+jjKfcWPHRMMY2v0OgPMYJ2ixbpa4Wf3w=) 2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: qfe+ZRHsuzJUkN6PV847BSXw2bwliF4QuG/2zTq3t3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Validity Not Before: Jul 3 05:52:41 2025 GMT Not After : Jul 10 05:52:41 2025 GMT Subject: CN=68661aa9-3f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ba:40:4b:91:aa:12:5c:12:fc:70:07:9d:b9: 3c:c2:d1:d5:b1:ca:21:a4:4f:23:6b:9f:72:21:40: 49:eb:12:4b:98:75:91:70:72:3e:c2:8b:6d:29:cf: 11:a9:2c:df:9b:a3:56:0a:d4:97:0e:8a:50:6d:38: 5e:ea:c9:a7:ea:90:ba:31:ab:3e:1b:07:b9:bc:55: 8f:a1:99:9d:68:f7:ee:fb:9a:2c:90:5e:80:f5:88: 33:69:21:3e:7b:72:ed:61:4f:d3:c2:b9:d9:c0:b4: 58:85:de:1a:79:b2:5f:d1:b1:49:b8:92:0e:43:df: 77:64:ac:12:1e:9f:1d:ce:8a:61:68:1d:d0:24:c0: aa:81:1e:b7:41:65:64:6c:e4:53:8a:d8:31:1b:f9: e8:9a:56:7c:2a:78:6f:d4:58:e0:31:aa:6a:2f:7b: 15:c8:43:9a:76:e7:85:78:6b:76:39:c9:68:f1:16: a2:c2:81:dd:54:90:84:e6:59:40:11:95:bb:61:38: 72:8a:21:bf:ca:f8:37:20:c9:db:b6:34:50:52:1f: 71:50:86:ea:b5:9a:f9:02:2e:30:6a:29:be:7a:f4: 1a:c5:f8:19:60:6e:7f:92:af:c6:ea:a6:41:16:26: a4:8f:b3:7e:2f:73:d5:ba:fc:6f:7b:4d:5d:f9:3e: 64:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1D:1A:D1:18:36:52:37:97:6B:ED:95:18:01:26:36:24:21:81:91 X509v3 Authority Key Identifier: keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:06:fd:0f:8d:b0:d3:c1:fb:5d:ed:5e:7e:d8:1a:0c:c7:dc: 72:6d:ef:e2:b0:c5:b9:a0:e3:09:62:c0:98:28:2f:ce:53:f7: b4:8b:04:9a:d4:77:8d:db:fa:ef:cd:aa:c0:dd:58:2d:6c:0b: 58:49:41:0a:b8:a4:5f:3f:b5:35:c1:ba:65:fb:cc:f7:fd:3a: 79:da:e9:8f:49:a8:82:cd:94:fd:6f:4b:da:eb:e5:2d:5e:99: 8c:9e:a0:6f:b3:30:7e:36:1f:27:13:1c:5a:a7:4b:26:16:c2: ca:b8:bf:8a:c7:b4:b4:20:f2:ef:fa:7d:c1:4a:e7:c9:d5:bf: 4c:84:d4:ca:1a:89:4f:18:1f:91:c3:85:bc:bf:92:c2:e3:ba: dd:47:70:4d:73:2f:f3:d2:ad:9c:b1:c5:08:62:28:98:95:94: 25:8e:fe:bd:59:6a:84:b7:df:a5:68:30:e9:6e:fb:dc:12:74: 41:db:49:9f:53:f7:51:36:61:eb:3e:9f:ae:bb:ff:20:fd:32: 39:18:23:e2:ea:8e:28:7d:f1:df:d2:51:ce:c5:53:c1:58:bf: 78:23:68:cc:61:16:dc:71:38:c3:61:d1:f7:f7:62:7e:0f:8b: 64:1f:ca:72:7c:f0:1e:a4:9c:e4:67:e1:7c:69:72:ab:94:4c: 04:69:c3:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKEY3RjA2MzY5Mzk5RDk5MzVGNUZCNTlGRDU4NTcxNTQx QTU4MUNDNjMwHhcNMjUwNzAzMDU1MjQxWhcNMjUwNzEwMDU1MjQxWjAYMRYwFAYD VQQDEw02ODY2MWFhOS0zZjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1bpAS5GqElwS/HAHnbk8wtHVscohpE8ja59yIUBJ6xJLmHWRcHI+wottKc8R qSzfm6NWCtSXDopQbThe6smn6pC6Mas+Gwe5vFWPoZmdaPfu+5oskF6A9YgzaSE+ e3LtYU/TwrnZwLRYhd4aebJf0bFJuJIOQ993ZKwSHp8dzophaB3QJMCqgR63QWVk bORTitgxG/nomlZ8Knhv1FjgMapqL3sVyEOadueFeGt2Oclo8RaiwoHdVJCE5llA EZW7YThyiiG/yvg3IMnbtjRQUh9xUIbqtZr5Ai4waim+evQaxfgZYG5/kq/G6qZB Fiakj7N+L3PVuvxve01d+T5kSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcdGtEY NlI3l2vtlRgBJjYkIYGRMB8GA1UdIwQYMBaAFPfwY2k5nZk19ftZ/VhXFUGlgcxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS84NjI0NjM0ODFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1UWDEtMW45V0ZjVlFhV0J6 R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlfQmphVG1kbVRYMS0xbjlXRmNWUWFXQnpHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS84NjI0NjM0ODFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1U WDEtMW45V0ZjVlFhV0J6R00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeBv0PjbDTwftd7V5+2BoMx9xybe/isMW5oOMJYsCYKC/OU/e0iwSa 1HeN2/rvzarA3VgtbAtYSUEKuKRfP7U1wbpl+8z3/Tp52umPSaiCzZT9b0va6+Ut XpmMnqBvszB+Nh8nExxap0smFsLKuL+Kx7S0IPLv+n3BSufJ1b9MhNTKGolPGB+R w4W8v5LC47rdR3BNcy/z0q2cscUIYiiYlZQljv69WWqEt9+laDDpbvvcEnRB20mf U/dRNmHrPp+uu/8g/TI5GCPi6o4offHf0lHOxVPBWL94I2jMYRbccTjDYdH392J+ D4tkH8pyfPAepJzkZ+F8aXKrlEwEacOv -----END CERTIFICATE-----Generated at Fri Jul 4 16:13:49 2025 by rpki-client