$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft File: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json) Hash identifier: U9YvySRqSU6jaEXaOJcVhByONwk0L0V8ma9eR0DNqvM= Subject key identifier: 7D:F1:23:37:16:FF:53:0A:54:3A:30:CA:EF:93:D6:41:94:8F:E6:B9 Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 Certificate issuer: /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft Manifest number: DF Signing time: Sat 09 Aug 2025 05:53:08 +0000 Manifest this update: Sat 09 Aug 2025 05:53:08 +0000 Manifest next update: Sat 16 Aug 2025 05:53:08 +0000 Files and hashes: 1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: Q+72KWAwLMqP4Ogj6mPcyd5ZqOy83OSPX8XLV7V7kWI=) 2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: qfe+ZRHsuzJUkN6PV847BSXw2bwliF4QuG/2zTq3t3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Validity Not Before: Aug 9 05:53:08 2025 GMT Not After : Aug 16 05:53:08 2025 GMT Subject: CN=6896e244-6e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:af:03:64:72:81:f5:4e:02:cc:e5:78:ad:d5: 3f:c4:17:91:2c:c5:a5:14:a3:f4:91:f9:91:be:04: d9:85:27:fe:8a:12:0e:d6:22:48:18:53:f0:25:07: 36:84:85:5c:22:e3:97:95:57:52:55:4c:76:29:63: e8:ef:91:8c:a7:93:63:a3:c3:ac:21:7f:e6:93:7c: e8:80:07:96:b4:f2:88:13:01:7d:4d:5a:f4:ef:2d: aa:05:16:c1:b7:54:6c:19:84:fa:b5:13:e0:52:a5: 1f:64:b3:97:65:3f:6e:89:37:24:73:b6:a1:d5:58: 13:37:a8:9f:a5:8a:e1:07:d8:87:71:ce:87:79:05: 5e:44:4e:5f:3a:f3:18:08:90:1e:e5:2c:36:a8:e5: d1:32:c7:50:5d:ed:2e:28:9b:5f:23:f2:f2:31:96: ac:b6:07:3e:31:ac:51:97:31:f0:34:2f:60:dc:0a: 98:b1:52:bc:a6:77:f7:0a:60:64:06:e8:ad:f2:62: cc:4e:e3:4e:f9:c9:ed:41:cd:ef:3a:8c:69:3c:32: a1:18:13:d7:92:c5:57:d7:63:89:8c:45:c1:99:7f: b7:db:e4:c5:29:09:87:65:fe:c8:84:6c:7f:26:b8: b3:74:6e:b7:af:f8:eb:08:27:d8:06:e5:d5:2f:f9: 4c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F1:23:37:16:FF:53:0A:54:3A:30:CA:EF:93:D6:41:94:8F:E6:B9 X509v3 Authority Key Identifier: keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 76:78:d4:e5:a5:38:cb:2f:ea:c8:72:71:76:b8:b9:a6:ca:eb: 25:d8:dd:dc:20:e2:d2:67:a7:a0:c6:8f:92:60:b0:c1:8e:96: 82:36:d2:36:89:ca:53:91:af:67:8e:e5:93:a8:61:45:19:7e: 98:71:bd:b4:88:c3:dc:bb:ca:3a:10:0e:8f:0f:13:67:46:b7: 77:8c:56:1f:38:42:9f:86:b2:dc:11:50:58:aa:6d:86:58:37: 31:be:a3:2c:00:30:2a:c8:a7:f8:19:fc:b2:7b:d8:ac:02:b1: 71:17:43:9b:13:6a:0b:55:ba:11:42:4a:e4:d3:09:8f:8b:a4: f4:f9:1f:4e:43:5a:36:4f:50:11:5a:d2:d4:b7:c1:50:13:bc: 17:93:d7:8b:bc:52:ec:47:df:14:85:91:83:01:e1:ff:c5:42: ab:3c:93:08:c9:d1:30:3c:d4:74:40:6a:5f:29:1e:9f:b3:57: 4e:52:08:3f:ad:55:30:56:5d:60:3d:ac:b4:55:99:e3:c0:b6: 19:ee:57:40:62:a6:7a:50:c7:69:ad:ed:a9:a8:4c:da:f1:15: 25:5a:d3:2d:93:60:8c:2f:12:1d:7f:52:b1:ee:8b:6a:04:0e: 5c:98:50:c0:2a:1e:f9:66:72:f6:6c:07:19:bb:f9:0f:e2:5c: e2:99:5f:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKEY3RjA2MzY5Mzk5RDk5MzVGNUZCNTlGRDU4NTcxNTQx QTU4MUNDNjMwHhcNMjUwODA5MDU1MzA4WhcNMjUwODE2MDU1MzA4WjAYMRYwFAYD VQQDEw02ODk2ZTI0NC02ZTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1q8DZHKB9U4CzOV4rdU/xBeRLMWlFKP0kfmRvgTZhSf+ihIO1iJIGFPwJQc2 hIVcIuOXlVdSVUx2KWPo75GMp5Njo8OsIX/mk3zogAeWtPKIEwF9TVr07y2qBRbB t1RsGYT6tRPgUqUfZLOXZT9uiTckc7ah1VgTN6ifpYrhB9iHcc6HeQVeRE5fOvMY CJAe5Sw2qOXRMsdQXe0uKJtfI/LyMZastgc+MaxRlzHwNC9g3AqYsVK8pnf3CmBk Buit8mLMTuNO+cntQc3vOoxpPDKhGBPXksVX12OJjEXBmX+32+TFKQmHZf7IhGx/ JrizdG63r/jrCCfYBuXVL/lMxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH3xIzcW /1MKVDowyu+T1kGUj+a5MB8GA1UdIwQYMBaAFPfwY2k5nZk19ftZ/VhXFUGlgcxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS84NjI0NjM0ODFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1UWDEtMW45V0ZjVlFhV0J6 R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlfQmphVG1kbVRYMS0xbjlXRmNWUWFXQnpHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS84NjI0NjM0ODFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1U WDEtMW45V0ZjVlFhV0J6R00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB2eNTlpTjLL+rIcnF2uLmmyusl2N3cIOLSZ6egxo+SYLDBjpaCNtI2 icpTka9njuWTqGFFGX6Ycb20iMPcu8o6EA6PDxNnRrd3jFYfOEKfhrLcEVBYqm2G WDcxvqMsADAqyKf4Gfyye9isArFxF0ObE2oLVboRQkrk0wmPi6T0+R9OQ1o2T1AR WtLUt8FQE7wXk9eLvFLsR98UhZGDAeH/xUKrPJMIydEwPNR0QGpfKR6fs1dOUgg/ rVUwVl1gPay0VZnjwLYZ7ldAYqZ6UMdpre2pqEza8RUlWtMtk2CMLxIdf1Kx7otq BA5cmFDAKh75ZnL2bAcZu/kP4lzimV9n -----END CERTIFICATE-----Generated at Mon Aug 11 04:38:39 2025 by rpki-client