$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft File: bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json) Hash identifier: zLvJoAQBKR9+haYKJllL8Wi8X5VcqxW74bFZvAMVlFo= Subject key identifier: 25:D6:D7:02:31:A3:1E:88:AB:8D:16:21:A5:C3:4F:C1:D8:84:90:88 Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 Certificate issuer: /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft Manifest number: CB Signing time: Sat 19 Jul 2025 05:54:11 +0000 Manifest this update: Sat 19 Jul 2025 05:54:11 +0000 Manifest next update: Sat 26 Jul 2025 05:54:11 +0000 Files and hashes: 1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: tujVSgP6hVuauBgSv1CsGRqLs/mlY9spjAHrq/80gzg=) 2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: /1PjZ5NNRMUhyhR9YlRWIkmEIJE+BmHYk2vv+gNzyk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Validity Not Before: Jul 19 05:54:11 2025 GMT Not After : Jul 26 05:54:11 2025 GMT Subject: CN=687b3303-65d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9a:b8:e5:bc:54:de:b1:69:ad:3d:55:9c:2c: 23:8f:48:7d:73:8b:f4:68:95:75:4f:ac:6a:d8:3d: c6:46:17:76:fd:40:d6:1f:90:8e:e9:a0:63:42:ac: 1b:58:8f:3b:cd:5f:f3:f4:a7:b3:ac:b6:a7:ed:bd: 3d:44:d9:fa:fc:da:d7:0b:08:79:73:db:62:f9:78: b1:8e:b9:50:14:10:84:6b:f6:e2:5e:cc:02:23:b2: 84:34:de:5d:4d:be:ef:6d:13:6b:f0:70:85:5d:cd: 7e:b4:8b:b9:4f:b3:c6:bd:0e:c6:95:26:be:54:90: 1b:bd:f0:5e:49:4e:03:5c:f9:bd:bd:70:f9:7a:b2: eb:41:b9:77:66:03:12:d2:06:e1:94:37:fa:21:06: 75:18:ec:b8:f8:df:d4:5b:65:e7:90:03:45:ce:97: 64:82:1f:83:f2:08:56:16:e1:8a:71:d1:74:90:99: 4c:63:ad:f4:ae:91:34:82:84:18:81:aa:e4:14:fe: bf:43:83:02:96:fb:18:50:3c:5f:92:3e:6f:8f:ba: 82:23:e7:09:53:65:2e:c5:21:c4:d3:b7:99:94:47: d9:3a:6a:e3:16:41:39:5a:64:a7:8f:66:d8:03:8a: fd:6a:7d:ea:ec:73:b6:df:eb:9f:f7:23:27:1d:2f: 4c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D6:D7:02:31:A3:1E:88:AB:8D:16:21:A5:C3:4F:C1:D8:84:90:88 X509v3 Authority Key Identifier: keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:0b:c1:3f:cc:1a:e4:a6:3a:d7:bd:43:e8:e7:19:31:ef:32: a7:fb:6a:c8:c8:a5:ed:a5:98:f4:80:23:32:ca:6f:9a:8b:a1: c8:25:7f:45:05:9d:87:25:6f:f0:2a:f3:f7:9f:c6:85:36:00: 5d:6e:74:31:97:b3:e6:de:f0:f7:aa:83:aa:c1:03:80:1d:20: 10:3a:e1:b2:87:a9:f8:71:1f:29:7e:55:45:ae:b7:ec:9f:c3: 6a:62:cf:fb:a0:db:50:2b:85:c0:24:2b:bd:65:91:b9:9c:92: 0d:28:33:3f:14:88:17:e5:87:ab:f1:54:05:1e:46:1d:b8:71: cb:8f:b3:d0:36:2f:4b:dc:e0:51:41:f4:26:04:23:b6:a6:65: 21:6c:83:10:32:1f:3a:5d:51:47:7f:23:3b:d2:fd:ee:65:cc: 43:b8:0e:bc:a6:5b:2b:9c:e1:8a:0e:36:1d:86:67:31:12:36: 85:2e:d7:95:49:0d:f2:e8:cd:e5:af:f0:37:cd:2b:95:9f:f6: a0:3f:cd:dc:33:c5:ae:fd:7d:b9:02:34:c1:ec:58:c2:82:89: d0:41:f6:ac:00:fc:18:d7:83:18:b8:76:7f:7a:f3:8e:7f:2b: 54:b7:33:fe:c1:c6:bd:73:2c:2e:f7:74:c3:58:6c:ad:1e:8e: 1e:f2:63:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKDZDOUExMjIxMTU3OTFCOEUxNTA0ODAxN0E5NzU3RTU4 N0FCNTZGODAwHhcNMjUwNzE5MDU1NDExWhcNMjUwNzI2MDU1NDExWjAYMRYwFAYD VQQDEw02ODdiMzMwMy02NWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZq45bxU3rFprT1VnCwjj0h9c4v0aJV1T6xq2D3GRhd2/UDWH5CO6aBjQqwb WI87zV/z9KezrLan7b09RNn6/NrXCwh5c9ti+XixjrlQFBCEa/biXswCI7KENN5d Tb7vbRNr8HCFXc1+tIu5T7PGvQ7GlSa+VJAbvfBeSU4DXPm9vXD5erLrQbl3ZgMS 0gbhlDf6IQZ1GOy4+N/UW2XnkANFzpdkgh+D8ghWFuGKcdF0kJlMY630rpE0goQY garkFP6/Q4MClvsYUDxfkj5vj7qCI+cJU2UuxSHE07eZlEfZOmrjFkE5WmSnj2bY A4r9an3q7HO23+uf9yMnHS9M3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXW1wIx ox6Iq40WIaXDT8HYhJCIMB8GA1UdIwQYMBaAFGyaEiEVeRuOFQSAF6l1flh6tW+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83NDdBQTQ0QTJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0NFZCSUFYcVhWLVdIcTFi NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKb1NJUlY1RzQ0VkJJQVhxWFYtV0hxMWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83NDdBQTQ0QTJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0 NFZCSUFYcVhWLVdIcTFiNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByC8E/zBrkpjrXvUPo5xkx7zKn+2rIyKXtpZj0gCMyym+ai6HIJX9F BZ2HJW/wKvP3n8aFNgBdbnQxl7Pm3vD3qoOqwQOAHSAQOuGyh6n4cR8pflVFrrfs n8NqYs/7oNtQK4XAJCu9ZZG5nJINKDM/FIgX5Yer8VQFHkYduHHLj7PQNi9L3OBR QfQmBCO2pmUhbIMQMh86XVFHfyM70v3uZcxDuA68plsrnOGKDjYdhmcxEjaFLteV SQ3y6M3lr/A3zSuVn/agP83cM8Wu/X25AjTB7FjCgonQQfasAPwY14MYuHZ/evOO fytUtzP+wca9cywu93TDWGytHo4e8mPs -----END CERTIFICATE-----Generated at Sun Jul 20 18:39:19 2025 by rpki-client