$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft File: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json) Hash identifier: MugAMkyjB5Su9xS3XV36d9WJ8Po8/iTGC3r2lkF2Qic= Subject key identifier: 8D:43:F3:BA:E8:E8:A9:23:4E:16:E2:9F:85:C5:46:B4:7F:38:55:C4 Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 Certificate issuer: /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft Manifest number: C2 Signing time: Fri 13 Jun 2025 04:46:05 +0000 Manifest this update: Fri 13 Jun 2025 04:46:04 +0000 Manifest next update: Fri 20 Jun 2025 04:46:04 +0000 Files and hashes: 1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: Se3w5PYesg0UYh1tyCWjM0/pB/YY0r3pYphV6S+kesY=) 2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: qfe+ZRHsuzJUkN6PV847BSXw2bwliF4QuG/2zTq3t3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 04:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Validity Not Before: Jun 13 04:46:04 2025 GMT Not After : Jun 20 04:46:04 2025 GMT Subject: CN=684bad0c-129b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:84:10:1c:bd:b5:93:33:69:a0:bd:40:38:93: dd:b7:0a:fb:3b:2e:9c:c6:5c:ff:78:25:1c:dc:fb: 56:7f:72:8b:3a:f4:3d:5e:25:93:1f:be:71:b9:ee: 78:99:55:21:d4:82:16:94:3b:62:d2:95:da:6e:b2: fa:b5:a7:c7:ce:8f:34:0f:90:d6:4c:ec:1d:db:e9: dd:9d:29:98:8e:2e:8b:2c:d2:a6:2f:c0:41:a4:6b: 02:d7:04:c2:fc:a2:f4:94:b4:1c:b7:0b:56:1b:d9: 03:4a:d4:b6:5e:27:b2:2f:f7:00:a0:17:56:89:b7: 69:00:22:70:7f:9a:e7:b5:8c:ca:cb:d2:d7:b4:a3: 4e:b6:3c:c7:c5:90:29:c2:0c:86:14:0a:0d:91:12: 47:a6:5f:06:c9:97:6e:43:e9:b1:07:c0:3c:31:ad: c3:87:0d:63:91:e7:63:a9:1d:0f:50:b9:a2:f3:53: 2c:3d:b0:cd:c5:a9:03:f6:16:e7:53:01:e7:d6:8d: 1b:03:d7:1d:84:ca:89:8c:a6:41:5d:35:67:97:c9: a7:37:8d:d3:51:bf:62:22:e6:20:fc:c0:7e:b6:a0: 1a:c5:22:fb:e7:5d:4a:f9:1e:e7:84:a2:29:b4:46: 1b:ec:cf:96:e3:d0:0d:e0:92:2d:d7:08:7c:1c:54: 4c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:43:F3:BA:E8:E8:A9:23:4E:16:E2:9F:85:C5:46:B4:7F:38:55:C4 X509v3 Authority Key Identifier: keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:80:08:41:bb:38:56:0b:5b:e7:65:b6:5b:0d:d1:2e:a0:32: 9b:10:c4:2d:5b:5f:0c:df:06:24:28:60:1a:96:b6:51:47:21: c4:81:d5:dc:b8:84:03:d9:47:91:9e:49:1f:8c:66:6b:07:4c: 65:83:5b:e0:3a:17:03:cd:86:4c:99:e0:8e:0a:bd:04:49:5e: b4:cb:7f:26:7a:71:ff:ca:93:39:72:48:f2:48:07:42:3f:a7: 67:bc:91:c6:09:85:a4:c4:e3:d5:5e:3c:22:1a:66:30:d3:43: e9:ea:12:fc:c6:a0:b0:65:33:ae:11:3f:e8:e8:aa:08:78:d4: 3a:d6:f3:31:55:91:3c:34:ca:ba:8b:f5:70:0f:db:27:e0:ae: ac:28:18:0f:57:61:c7:f6:0d:55:1f:0c:76:5c:7d:87:bf:50: a9:ad:aa:40:d7:d5:2e:3f:ba:5a:ba:bb:92:bc:a5:86:15:1e: 6a:9c:a6:43:bc:21:1d:5c:02:25:96:26:4b:b6:b5:8d:18:f5: 7f:11:12:f7:9b:49:1f:a4:04:39:a2:6f:3a:b0:2e:17:93:f6: 28:f9:ee:4f:f0:3e:1a:c7:9c:48:1f:5f:a2:94:46:13:c9:07: ce:ba:27:8f:ae:a3:66:4d:85:a7:d8:65:da:40:33:eb:d9:f0: 63:41:49:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKEY3RjA2MzY5Mzk5RDk5MzVGNUZCNTlGRDU4NTcxNTQx QTU4MUNDNjMwHhcNMjUwNjEzMDQ0NjA0WhcNMjUwNjIwMDQ0NjA0WjAYMRYwFAYD VQQDEw02ODRiYWQwYy0xMjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA24QQHL21kzNpoL1AOJPdtwr7Oy6cxlz/eCUc3PtWf3KLOvQ9XiWTH75xue54 mVUh1IIWlDti0pXabrL6tafHzo80D5DWTOwd2+ndnSmYji6LLNKmL8BBpGsC1wTC /KL0lLQctwtWG9kDStS2XieyL/cAoBdWibdpACJwf5rntYzKy9LXtKNOtjzHxZAp wgyGFAoNkRJHpl8GyZduQ+mxB8A8Ma3Dhw1jkedjqR0PULmi81MsPbDNxakD9hbn UwHn1o0bA9cdhMqJjKZBXTVnl8mnN43TUb9iIuYg/MB+tqAaxSL7511K+R7nhKIp tEYb7M+W49AN4JIt1wh8HFRM7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1D87ro 6KkjThbin4XFRrR/OFXEMB8GA1UdIwQYMBaAFPfwY2k5nZk19ftZ/VhXFUGlgcxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS84NjI0NjM0ODFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1UWDEtMW45V0ZjVlFhV0J6 R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlfQmphVG1kbVRYMS0xbjlXRmNWUWFXQnpHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS84NjI0NjM0ODFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1U WDEtMW45V0ZjVlFhV0J6R00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpgAhBuzhWC1vnZbZbDdEuoDKbEMQtW18M3wYkKGAalrZRRyHEgdXc uIQD2UeRnkkfjGZrB0xlg1vgOhcDzYZMmeCOCr0ESV60y38menH/ypM5ckjySAdC P6dnvJHGCYWkxOPVXjwiGmYw00Pp6hL8xqCwZTOuET/o6KoIeNQ61vMxVZE8NMq6 i/VwD9sn4K6sKBgPV2HH9g1VHwx2XH2Hv1CprapA19UuP7pauruSvKWGFR5qnKZD vCEdXAIlliZLtrWNGPV/ERL3m0kfpAQ5om86sC4Xk/Yo+e5P8D4ax5xIH1+ilEYT yQfOuiePrqNmTYWn2GXaQDPr2fBjQUnV -----END CERTIFICATE-----Generated at Sat Jun 14 19:39:53 2025 by rpki-client