$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft File: bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json) Hash identifier: lFDJBU+J7iOrVgxK67BzPwnklo/E0IFyu9yUu9YRMa8= Subject key identifier: 52:6A:B8:E2:E1:AA:F9:31:8F:6F:7A:5C:A8:31:61:9F:36:39:BA:2D Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 Certificate issuer: /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft Manifest number: B2 Signing time: Tue 03 Jun 2025 05:46:20 +0000 Manifest this update: Tue 03 Jun 2025 05:46:20 +0000 Manifest next update: Tue 10 Jun 2025 05:46:20 +0000 Files and hashes: 1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: 8XcEtsdQ6wJoEKWLx4JfMCJHipVVLLzoiVV+klTzpUA=) 2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: DUAmLb46NS5+SPzS5A3HqFl4Nie2fVO5tlFoQkTdtDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Validity Not Before: Jun 3 05:46:20 2025 GMT Not After : Jun 10 05:46:20 2025 GMT Subject: CN=683e8c2c-ffa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:73:33:f4:91:f1:34:c3:2b:b6:c2:cf:53:6b: 35:18:33:a1:2e:e6:1a:97:b7:0d:b2:4c:43:de:c9: e4:d3:de:09:b3:3a:78:cd:58:81:25:02:e7:85:69: 0f:55:94:2e:8c:bf:76:72:bd:0c:77:eb:4a:aa:72: 76:07:8e:54:e4:83:a1:e2:4b:4f:a6:c2:bf:74:9d: c0:04:86:04:96:ed:5d:07:35:f8:3f:5c:81:1d:74: 02:07:64:f4:04:c5:9c:a9:b6:23:57:9c:e9:7a:c1: 4e:4b:39:68:04:68:92:93:b1:b2:f1:e7:97:78:43: 12:e8:c6:c5:84:39:33:e8:4a:71:d3:71:53:d1:a4: 18:62:9a:6e:79:0c:53:90:51:50:ed:26:9e:dd:72: a6:27:64:c9:6a:5e:3d:6d:20:f7:82:3e:48:96:63: 2f:49:e4:42:73:b2:1d:c3:3a:81:25:a6:ce:c7:45: 2e:81:7c:be:f3:a4:82:0e:61:05:44:74:dd:23:74: 3a:ae:74:0f:b2:de:87:74:b6:39:78:88:79:75:9a: 1d:0c:99:a1:e1:0f:3e:05:48:7c:bf:08:c6:ea:01: cb:69:89:59:10:fa:90:fd:4f:5e:a4:ed:ea:5f:8a: c2:08:9b:d5:83:c3:93:bc:f9:20:b0:fa:66:7b:dd: 14:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6A:B8:E2:E1:AA:F9:31:8F:6F:7A:5C:A8:31:61:9F:36:39:BA:2D X509v3 Authority Key Identifier: keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:07:85:0f:8f:ad:1d:70:26:69:24:12:85:fa:6c:31:57:e3: 4b:f7:f2:c3:ec:95:f3:79:b3:63:1d:c8:63:b7:86:ac:41:a0: 2f:27:7b:0d:42:fa:81:94:80:38:d6:1c:e2:c4:cd:d2:8a:fd: e7:b7:0b:18:c6:e2:82:f7:f6:f1:6c:17:4a:05:1e:ea:ff:a4: 9f:6a:c6:fa:8b:5d:b7:54:80:d1:fa:24:a3:4a:3c:1c:91:34: 91:70:e6:5d:37:c3:03:31:87:25:9b:65:9d:9b:16:f6:25:58: e5:d6:90:75:69:64:51:b3:22:82:5b:45:b7:72:2e:b4:85:e0: 06:af:76:52:67:d8:e4:5b:62:00:e2:72:96:b8:76:6e:f0:a1: 23:a9:43:38:f4:2b:8d:41:f0:04:d2:db:b2:3b:07:14:4b:bc: c6:88:52:c8:55:26:59:c0:51:d2:fe:35:f9:e5:44:db:a9:a2: 11:7d:3b:ac:30:3a:3b:42:9d:20:a5:40:57:a0:13:db:16:28: 54:3b:c8:a5:a2:c4:59:1d:92:37:71:74:3a:7d:52:ed:08:88: a5:06:ce:cc:8f:a5:c3:3e:d5:5d:59:16:a6:f3:e6:d5:20:4a: bb:91:34:9a:d9:3e:0b:b9:da:d6:35:63:df:17:1f:c8:c4:c5: ce:9f:6d:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKDZDOUExMjIxMTU3OTFCOEUxNTA0ODAxN0E5NzU3RTU4 N0FCNTZGODAwHhcNMjUwNjAzMDU0NjIwWhcNMjUwNjEwMDU0NjIwWjAYMRYwFAYD VQQDEw02ODNlOGMyYy1mZmEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5nMz9JHxNMMrtsLPU2s1GDOhLuYal7cNskxD3snk094Jszp4zViBJQLnhWkP VZQujL92cr0Md+tKqnJ2B45U5IOh4ktPpsK/dJ3ABIYElu1dBzX4P1yBHXQCB2T0 BMWcqbYjV5zpesFOSzloBGiSk7Gy8eeXeEMS6MbFhDkz6Epx03FT0aQYYppueQxT kFFQ7Sae3XKmJ2TJal49bSD3gj5IlmMvSeRCc7IdwzqBJabOx0UugXy+86SCDmEF RHTdI3Q6rnQPst6HdLY5eIh5dZodDJmh4Q8+BUh8vwjG6gHLaYlZEPqQ/U9epO3q X4rCCJvVg8OTvPkgsPpme90UTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJquOLh qvkxj296XKgxYZ82ObotMB8GA1UdIwQYMBaAFGyaEiEVeRuOFQSAF6l1flh6tW+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83NDdBQTQ0QTJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0NFZCSUFYcVhWLVdIcTFi NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKb1NJUlY1RzQ0VkJJQVhxWFYtV0hxMWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83NDdBQTQ0QTJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0 NFZCSUFYcVhWLVdIcTFiNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClB4UPj60dcCZpJBKF+mwxV+NL9/LD7JXzebNjHchjt4asQaAvJ3sN QvqBlIA41hzixM3Siv3ntwsYxuKC9/bxbBdKBR7q/6Sfasb6i123VIDR+iSjSjwc kTSRcOZdN8MDMYclm2Wdmxb2JVjl1pB1aWRRsyKCW0W3ci60heAGr3ZSZ9jkW2IA 4nKWuHZu8KEjqUM49CuNQfAE0tuyOwcUS7zGiFLIVSZZwFHS/jX55UTbqaIRfTus MDo7Qp0gpUBXoBPbFihUO8ilosRZHZI3cXQ6fVLtCIilBs7Mj6XDPtVdWRam8+bV IEq7kTSa2T4LudrWNWPfFx/IxMXOn22y -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:26 2025 by rpki-client