$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft File: bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json) Hash identifier: R/9v99wSLpDYwDkyaFoGPzog/lhnf0w+a2hXtEJlNmI= Subject key identifier: 2D:A6:1E:E7:7A:86:8A:BB:96:B6:15:BA:E1:30:08:0D:AB:42:21:82 Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 Certificate issuer: /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Certificate serial: B9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft Manifest number: B8 Signing time: Sun 15 Jun 2025 05:01:40 +0000 Manifest this update: Sun 15 Jun 2025 05:01:39 +0000 Manifest next update: Sun 22 Jun 2025 05:01:39 +0000 Files and hashes: 1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: PhoByMeCxhIty8m5ids0doVTOrqmmsNJMIbIKHcrqfk=) 2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: DUAmLb46NS5+SPzS5A3HqFl4Nie2fVO5tlFoQkTdtDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 05:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 185 (0xb9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Validity Not Before: Jun 15 05:01:39 2025 GMT Not After : Jun 22 05:01:39 2025 GMT Subject: CN=684e53b4-a957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:15:fb:e5:12:4c:46:ce:29:06:1f:e5:de:8c: 87:8e:7d:28:92:0e:30:6d:a5:2e:72:95:13:f0:2d: f6:72:29:b5:c6:84:50:84:88:6a:8a:00:52:20:cf: c8:7b:db:1b:b5:e2:6b:95:3d:f9:9d:70:a7:64:2a: d3:75:7e:cf:b6:18:6d:59:7c:1e:e0:37:16:97:b1: d7:78:71:be:70:70:af:a3:fd:b3:2a:93:ed:78:a3: b4:2b:31:fa:91:4f:68:0b:71:d8:12:7d:54:f6:f8: b9:88:53:a7:98:4e:c2:ab:cb:34:f6:da:0b:67:af: 26:52:82:44:d3:8b:47:2e:40:42:b7:20:fe:97:05: 70:85:a9:5c:30:7e:41:8d:68:c1:9a:96:b4:a0:b2: 81:19:d2:d6:04:a3:a8:5f:79:70:36:17:85:44:08: 72:88:1d:ad:fb:f5:01:4f:76:7c:84:c1:1e:9d:a6: 07:e0:fa:99:8e:b7:72:4e:89:1b:6d:14:78:ba:5d: 0b:e7:59:01:94:9a:82:4f:6d:95:d4:1d:a3:26:3f: da:c0:e3:a1:a5:22:ff:9b:2d:6b:8d:cb:d8:02:c4: 19:25:29:1c:9a:98:91:9c:2c:0e:28:c3:0a:5d:89: 34:8d:dd:ce:cf:33:d2:a9:57:ff:87:3c:05:7c:ad: cd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A6:1E:E7:7A:86:8A:BB:96:B6:15:BA:E1:30:08:0D:AB:42:21:82 X509v3 Authority Key Identifier: keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:53:87:c1:46:24:f3:c8:bb:ee:33:18:98:fe:f3:3b:35:b9: 2f:3c:c4:86:76:41:ec:cd:49:c1:0f:56:db:ad:f1:9d:5a:70: 87:3a:5a:60:2c:43:73:2a:b9:ff:9e:0b:77:32:01:4a:ee:05: 1c:42:00:bc:94:97:3c:4f:6d:60:fb:09:8f:b2:10:b2:a0:02: a9:18:8d:32:64:24:a7:9c:f6:b2:72:d4:86:d1:f0:60:1e:ee: 8c:ce:fb:33:e8:d0:2a:83:c4:7a:97:38:6c:d9:33:50:5d:df: 72:7f:04:d7:ce:8c:a7:73:2c:a6:db:c4:e1:a7:70:36:e6:ac: 0b:e4:43:f7:4d:df:d8:c7:7e:1e:17:5b:3d:13:6d:89:9c:c9: ae:bb:ae:a1:50:cc:14:94:1e:f0:8a:28:7a:d0:89:2a:7d:a9: f1:54:91:22:b9:4c:0b:01:a4:27:c9:cf:6e:7e:a6:fd:ca:63: 96:44:61:2c:0f:dc:1c:31:5c:dc:8f:93:8b:b3:35:d6:a3:88: 3a:41:85:40:ec:dc:20:37:ff:b4:e3:ee:d9:e4:6e:9a:10:d5: b4:46:d1:11:38:c3:40:5f:ae:0f:7e:a7:7d:ff:b9:d7:86:d4: 9d:39:5f:75:52:ef:31:40:78:f2:38:77:1c:4b:19:39:84:81: 44:a1:22:f1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKDZDOUExMjIxMTU3OTFCOEUxNTA0ODAxN0E5NzU3RTU4 N0FCNTZGODAwHhcNMjUwNjE1MDUwMTM5WhcNMjUwNjIyMDUwMTM5WjAYMRYwFAYD VQQDEw02ODRlNTNiNC1hOTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnRX75RJMRs4pBh/l3oyHjn0okg4wbaUucpUT8C32cim1xoRQhIhqigBSIM/I e9sbteJrlT35nXCnZCrTdX7PthhtWXwe4DcWl7HXeHG+cHCvo/2zKpPteKO0KzH6 kU9oC3HYEn1U9vi5iFOnmE7Cq8s09toLZ68mUoJE04tHLkBCtyD+lwVwhalcMH5B jWjBmpa0oLKBGdLWBKOoX3lwNheFRAhyiB2t+/UBT3Z8hMEenaYH4PqZjrdyTokb bRR4ul0L51kBlJqCT22V1B2jJj/awOOhpSL/my1rjcvYAsQZJSkcmpiRnCwOKMMK XYk0jd3OzzPSqVf/hzwFfK3NQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC2mHud6 hoq7lrYVuuEwCA2rQiGCMB8GA1UdIwQYMBaAFGyaEiEVeRuOFQSAF6l1flh6tW+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83NDdBQTQ0QTJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0NFZCSUFYcVhWLVdIcTFi NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKb1NJUlY1RzQ0VkJJQVhxWFYtV0hxMWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83NDdBQTQ0QTJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0 NFZCSUFYcVhWLVdIcTFiNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWU4fBRiTzyLvuMxiY/vM7NbkvPMSGdkHszUnBD1bbrfGdWnCHOlpg LENzKrn/ngt3MgFK7gUcQgC8lJc8T21g+wmPshCyoAKpGI0yZCSnnPayctSG0fBg Hu6Mzvsz6NAqg8R6lzhs2TNQXd9yfwTXzoyncyym28Thp3A25qwL5EP3Td/Yx34e F1s9E22JnMmuu66hUMwUlB7wiih60IkqfanxVJEiuUwLAaQnyc9ufqb9ymOWRGEs D9wcMVzcj5OLszXWo4g6QYVA7NwgN/+04+7Z5G6aENW0RtEROMNAX64Pfqd9/7nX htSdOV91Uu8xQHjyOHccSxk5hIFEoSLx -----END CERTIFICATE-----Generated at Mon Jun 16 22:13:30 2025 by rpki-client