$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft File: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json) Hash identifier: LacEJ//LyFWRMKBdn0o6+YKU+e5zyI8uqoxCYQmGzJY= Subject key identifier: 06:F1:03:54:D2:64:1F:93:54:9E:DD:5D:B7:27:9C:61:BD:5F:74:38 Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 Certificate issuer: /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Certificate serial: D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft Manifest number: D5 Signing time: Mon 21 Jul 2025 05:44:17 +0000 Manifest this update: Mon 21 Jul 2025 05:44:17 +0000 Manifest next update: Mon 28 Jul 2025 05:44:17 +0000 Files and hashes: 1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: cIO+jz9U/GLemHA6QFybPsJcwJ5Df25x+NWmeRnGX5E=) 2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: qfe+ZRHsuzJUkN6PV847BSXw2bwliF4QuG/2zTq3t3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 215 (0xd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Validity Not Before: Jul 21 05:44:17 2025 GMT Not After : Jul 28 05:44:17 2025 GMT Subject: CN=687dd3b1-ec86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a1:f0:76:e1:62:33:10:e8:98:9e:99:73:da: 6e:90:15:51:7c:17:53:ca:32:c8:7e:17:6e:1d:a8: 46:51:1b:6a:c7:8a:32:0a:49:e1:9e:58:cc:19:9f: 0f:e0:05:aa:fb:9f:25:94:49:ac:6a:6f:28:08:0f: ca:d7:bf:4a:c0:85:17:02:bb:ff:e5:1f:69:4f:79: cc:e3:dd:51:0c:7b:4c:51:b4:aa:6b:2f:94:4d:72: 5a:65:14:c6:e4:d9:ff:d5:7c:3f:26:f8:11:73:20: bb:db:cd:a6:fe:34:7f:fe:13:e1:7a:45:84:8e:54: ac:05:3d:4d:fc:1b:f0:c5:18:db:8f:bf:c3:c6:61: 4f:6b:07:1d:ca:4e:0a:bb:2e:62:ba:86:bf:79:2c: 50:92:b4:85:51:4a:0a:82:12:d8:90:e9:c3:97:f0: 1c:12:56:ce:83:36:93:66:3a:bf:53:ad:9b:dd:fd: 43:22:c3:1b:6a:35:75:a9:c6:16:87:f3:fc:cd:a3: 7f:fd:e7:70:48:27:c7:02:3f:23:1b:1b:8e:ec:98: fc:96:b1:1a:69:5f:56:6b:f5:09:ed:f4:d0:42:f8: 9e:5d:69:68:f4:a0:d4:77:de:4e:da:59:fb:75:28: 6d:d8:9b:6d:5f:a7:85:d4:2e:41:99:56:96:5f:db: ae:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F1:03:54:D2:64:1F:93:54:9E:DD:5D:B7:27:9C:61:BD:5F:74:38 X509v3 Authority Key Identifier: keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:0b:b1:fa:17:d3:ef:1e:20:cd:6f:7f:d5:a3:d4:fa:b2:5c: bd:fd:a5:e4:b5:73:20:36:39:0a:17:f4:e9:3d:49:a9:7c:bc: 5e:20:25:83:07:3b:8f:dd:0e:12:75:e1:ee:84:40:d6:d2:73: 6c:9a:08:86:09:d8:79:de:b7:2a:11:70:f3:78:4c:3c:2a:3a: 16:e2:1d:c6:bc:5e:cd:f7:e9:6c:29:ea:46:80:ae:56:18:1b: a5:f3:b4:8e:3e:c0:a8:df:5a:1f:88:e4:6d:d3:10:ac:c4:66: bb:1f:ae:b0:9f:1f:1a:4f:97:ad:39:f8:82:4a:b8:26:44:14: df:97:d2:89:01:df:3e:9d:a5:55:7d:9f:5c:ee:21:23:10:b7: 7d:3e:43:c6:56:e2:d0:be:64:da:5c:63:4b:63:2d:58:b0:14: a5:5c:1a:26:88:cf:a6:c7:66:af:f1:38:c9:2d:d5:ed:fd:71: b6:e5:8c:97:19:c4:46:53:4e:04:99:62:1c:2e:4c:14:1b:7c: 5a:e9:12:b8:4e:ef:ba:57:0b:b9:bc:4e:5c:9a:e9:9e:f4:e6: 1f:d3:02:0d:cb:1f:26:da:0e:65:a3:d4:87:f8:ce:09:01:8e: 02:72:6e:50:a3:13:6b:30:81:67:66:f4:8d:d5:d8:52:13:a2: 0a:3b:87:90 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKEY3RjA2MzY5Mzk5RDk5MzVGNUZCNTlGRDU4NTcxNTQx QTU4MUNDNjMwHhcNMjUwNzIxMDU0NDE3WhcNMjUwNzI4MDU0NDE3WjAYMRYwFAYD VQQDEw02ODdkZDNiMS1lYzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKHwduFiMxDomJ6Zc9pukBVRfBdTyjLIfhduHahGURtqx4oyCknhnljMGZ8P 4AWq+58llEmsam8oCA/K179KwIUXArv/5R9pT3nM491RDHtMUbSqay+UTXJaZRTG 5Nn/1Xw/JvgRcyC7282m/jR//hPhekWEjlSsBT1N/BvwxRjbj7/DxmFPawcdyk4K uy5iuoa/eSxQkrSFUUoKghLYkOnDl/AcElbOgzaTZjq/U62b3f1DIsMbajV1qcYW h/P8zaN//edwSCfHAj8jGxuO7Jj8lrEaaV9Wa/UJ7fTQQvieXWlo9KDUd95O2ln7 dSht2JttX6eF1C5BmVaWX9uuDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbxA1TS ZB+TVJ7dXbcnnGG9X3Q4MB8GA1UdIwQYMBaAFPfwY2k5nZk19ftZ/VhXFUGlgcxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS84NjI0NjM0ODFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1UWDEtMW45V0ZjVlFhV0J6 R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlfQmphVG1kbVRYMS0xbjlXRmNWUWFXQnpHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS84NjI0NjM0ODFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1U WDEtMW45V0ZjVlFhV0J6R00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0C7H6F9PvHiDNb3/Vo9T6sly9/aXktXMgNjkKF/TpPUmpfLxeICWD BzuP3Q4SdeHuhEDW0nNsmgiGCdh53rcqEXDzeEw8KjoW4h3GvF7N9+lsKepGgK5W GBul87SOPsCo31ofiORt0xCsxGa7H66wnx8aT5etOfiCSrgmRBTfl9KJAd8+naVV fZ9c7iEjELd9PkPGVuLQvmTaXGNLYy1YsBSlXBomiM+mx2av8TjJLdXt/XG25YyX GcRGU04EmWIcLkwUG3xa6RK4Tu+6Vwu5vE5cmume9OYf0wINyx8m2g5lo9SH+M4J AY4Ccm5QoxNrMIFnZvSN1dhSE6IKO4eQ -----END CERTIFICATE-----Generated at Mon Jul 21 13:27:45 2025 by rpki-client