$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft File: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json) Hash identifier: 6vqNyFr710GlouAnCADOkuajbMT2KcwYbKGWrGc1lFY= Subject key identifier: 89:6F:0A:D5:BC:5A:A3:69:C4:C6:EB:49:89:6D:DC:2A:1B:FD:6C:7D Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 Certificate issuer: /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Certificate serial: E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft Manifest number: E6 Signing time: Sat 23 Aug 2025 05:32:49 +0000 Manifest this update: Sat 23 Aug 2025 05:32:48 +0000 Manifest next update: Sat 30 Aug 2025 05:32:48 +0000 Files and hashes: 1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: bxZqUY+z39kjyNuDEmL9vzk02gfyIkjtPH9III5r/7w=) 2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: qfe+ZRHsuzJUkN6PV847BSXw2bwliF4QuG/2zTq3t3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Validity Not Before: Aug 23 05:32:48 2025 GMT Not After : Aug 30 05:32:48 2025 GMT Subject: CN=68a95281-2eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:6f:5c:7e:54:f5:2c:34:66:79:3d:17:ed: 55:1f:2f:79:a1:cc:b4:d2:46:05:b2:1d:07:04:18: 60:76:1a:3c:82:6e:9c:03:e3:5f:8f:f1:27:ac:75: ba:fe:d2:d5:b3:fa:e3:e7:d3:2f:17:85:bd:f2:75: 06:a0:19:d7:54:0d:ae:1b:fa:3a:c5:81:e9:c7:36: ac:b4:03:cb:4f:e0:20:e8:99:ce:54:b0:b4:bd:4c: f6:15:d3:c9:7a:e2:7a:ee:2f:f3:29:03:3c:41:6d: 65:49:45:9b:46:67:e4:95:bf:ee:b6:13:40:46:6d: 57:9e:7a:0a:da:30:2b:07:f5:bf:34:27:25:43:bd: 34:77:0d:82:6e:9d:c4:1c:13:ae:da:42:43:1e:8a: d5:7e:3a:c3:df:ee:ab:c5:87:78:f9:22:79:68:d3: a3:f8:71:c2:c4:e1:5c:8c:a5:9b:be:ad:fb:0c:f8: 42:1f:17:b4:fe:e6:94:d7:16:10:85:88:96:3f:a4: f5:04:86:e1:4d:78:09:04:93:f5:4f:83:ad:0b:c9: 88:16:7e:e3:08:12:f3:a5:ef:64:7b:01:c9:dd:9d: 03:41:03:e0:84:56:43:6e:65:58:28:2e:d8:f9:8c: 59:2a:f2:da:f2:af:2f:b9:15:b8:f8:7d:9c:4c:94: 72:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:6F:0A:D5:BC:5A:A3:69:C4:C6:EB:49:89:6D:DC:2A:1B:FD:6C:7D X509v3 Authority Key Identifier: keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:2d:2e:5b:b0:bf:78:0c:64:61:24:74:c6:b8:41:87:e2:f1: 28:46:ee:69:70:02:f6:aa:b6:50:15:01:ef:bb:82:85:7c:80: 74:2e:6b:47:49:9d:92:fe:40:f4:cf:5a:4a:59:cb:32:1e:fa: 35:2e:d0:37:c8:08:fa:fe:9f:8f:95:1d:59:ab:91:c9:bf:dc: fe:3c:ed:59:d0:9d:23:26:0f:d1:23:cf:94:86:ba:f4:8e:4b: 7e:e4:6a:39:38:e4:b8:01:2a:56:cc:2e:03:e4:df:5a:f9:f0: f4:16:b3:04:f4:63:bc:f2:34:86:1d:3b:3e:4d:39:4c:88:90: f1:a7:c4:23:c7:6f:db:df:fa:7f:13:05:6f:f5:fb:77:a8:5d: 74:4b:bb:f6:1f:2e:c8:00:2c:0b:a4:74:5e:53:17:f1:6b:b5: 21:10:95:c5:45:07:37:b3:b0:15:ce:5e:99:04:b7:17:65:31: e1:c9:72:58:37:cb:c0:ab:0f:7f:61:e6:4f:0a:ab:9d:04:24: b4:5c:83:cb:84:b2:81:ae:b8:c5:3a:38:79:17:04:41:b9:f8: 82:84:7a:99:04:5b:c4:3b:8c:50:04:85:52:e2:46:c6:96:20: b0:84:5e:8a:14:d3:67:fe:4f:3f:4c:eb:3a:df:5c:bd:f2:c3: 5f:9e:67:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKEY3RjA2MzY5Mzk5RDk5MzVGNUZCNTlGRDU4NTcxNTQx QTU4MUNDNjMwHhcNMjUwODIzMDUzMjQ4WhcNMjUwODMwMDUzMjQ4WjAYMRYwFAYD VQQDEw02OGE5NTI4MS0yZWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt4JvXH5U9Sw0Znk9F+1VHy95ocy00kYFsh0HBBhgdho8gm6cA+Nfj/EnrHW6 /tLVs/rj59MvF4W98nUGoBnXVA2uG/o6xYHpxzastAPLT+Ag6JnOVLC0vUz2FdPJ euJ67i/zKQM8QW1lSUWbRmfklb/uthNARm1XnnoK2jArB/W/NCclQ700dw2Cbp3E HBOu2kJDHorVfjrD3+6rxYd4+SJ5aNOj+HHCxOFcjKWbvq37DPhCHxe0/uaU1xYQ hYiWP6T1BIbhTXgJBJP1T4OtC8mIFn7jCBLzpe9kewHJ3Z0DQQPghFZDbmVYKC7Y +YxZKvLa8q8vuRW4+H2cTJRyjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlvCtW8 WqNpxMbrSYlt3Cob/Wx9MB8GA1UdIwQYMBaAFPfwY2k5nZk19ftZ/VhXFUGlgcxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS84NjI0NjM0ODFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1UWDEtMW45V0ZjVlFhV0J6 R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlfQmphVG1kbVRYMS0xbjlXRmNWUWFXQnpHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS84NjI0NjM0ODFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1U WDEtMW45V0ZjVlFhV0J6R00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALLS5bsL94DGRhJHTGuEGH4vEoRu5pcAL2qrZQFQHvu4KFfIB0LmtH SZ2S/kD0z1pKWcsyHvo1LtA3yAj6/p+PlR1Zq5HJv9z+PO1Z0J0jJg/RI8+Uhrr0 jkt+5Go5OOS4ASpWzC4D5N9a+fD0FrME9GO88jSGHTs+TTlMiJDxp8Qjx2/b3/p/ EwVv9ft3qF10S7v2Hy7IACwLpHReUxfxa7UhEJXFRQc3s7AVzl6ZBLcXZTHhyXJY N8vAqw9/YeZPCqudBCS0XIPLhLKBrrjFOjh5FwRBufiChHqZBFvEO4xQBIVS4kbG liCwhF6KFNNn/k8/TOs631y98sNfnmcj -----END CERTIFICATE-----Generated at Sun Aug 24 07:04:15 2025 by rpki-client