$ rpki-client -vvf rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft File: bJoSIRV5G44VBIAXqXV-WHq1b4A.mft (raw, json) Hash identifier: +M6c5ccVSBG2uqaUrrufCWkodY+xTxWxCLh3Ka1F91E= Subject key identifier: 09:AE:2F:33:4D:FB:2C:3F:18:8B:13:65:38:B3:B9:5E:2B:F2:94:F8 Authority key identifier: 6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 Certificate issuer: /CN=A9133239/serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft Manifest number: E3 Signing time: Wed 03 Sep 2025 05:55:41 +0000 Manifest this update: Wed 03 Sep 2025 05:55:41 +0000 Manifest next update: Wed 10 Sep 2025 05:55:41 +0000 Files and hashes: 1: bJoSIRV5G44VBIAXqXV-WHq1b4A.crl (hash: KP0BjSZ1GxPhzv4iZORjXvjH6k+9dlmd4onX3TyPF38=) 2: CA2855CC2F0211EFB28E0271C4F9AE02.roa (hash: /1PjZ5NNRMUhyhR9YlRWIkmEIJE+BmHYk2vv+gNzyk8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 05:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9133239, serialNumber=6C9A122115791B8E15048017A9757E587AB56F80 Validity Not Before: Sep 3 05:55:41 2025 GMT Not After : Sep 10 05:55:41 2025 GMT Subject: CN=68b7d85d-9e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:70:e5:67:bf:aa:e9:08:bc:f6:d7:18:d3:a1: b1:d4:7f:a3:29:3f:c0:e7:c0:bf:05:2a:8b:53:7c: f8:71:a4:6b:50:68:5b:0d:ed:2d:a0:50:d2:84:c5: 19:d5:48:05:8b:4d:04:00:9c:13:33:50:16:19:45: 2e:36:60:36:a2:03:fa:49:63:b1:42:62:bc:46:5c: ca:f0:a2:4b:e1:b5:1b:0a:a6:c2:46:b5:22:9d:f7: a6:5f:22:02:f1:09:1f:e2:45:b9:53:55:a8:b1:bc: 29:dc:e7:d1:06:aa:ac:1d:e8:6f:0c:b1:45:5c:61: c1:5f:30:07:5f:aa:66:c6:2f:bf:1a:b6:2b:c8:ef: 55:13:59:65:da:66:d7:96:09:8e:02:43:7d:32:a2: fd:37:2d:60:f3:7e:c9:d6:dc:35:28:b0:62:a1:a5: 09:49:a7:93:7d:fd:ab:06:8a:31:8d:33:69:e4:14: 00:28:66:1d:2e:b1:8b:12:1b:c8:62:7c:46:3f:ac: 08:df:a0:c8:95:bc:68:dc:73:06:e0:a5:29:86:00: c5:09:e2:15:a0:14:9b:e8:0f:75:21:3f:af:80:e2: 82:de:18:a5:fb:00:d1:b8:12:2c:c4:94:11:88:1d: 7b:72:b7:bd:42:e3:01:06:12:91:76:83:11:2e:d5: 47:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:AE:2F:33:4D:FB:2C:3F:18:8B:13:65:38:B3:B9:5E:2B:F2:94:F8 X509v3 Authority Key Identifier: keyid:6C:9A:12:21:15:79:1B:8E:15:04:80:17:A9:75:7E:58:7A:B5:6F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bJoSIRV5G44VBIAXqXV-WHq1b4A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133239/747AA44A2F0211EF8C7A5870C4F9AE02/bJoSIRV5G44VBIAXqXV-WHq1b4A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:4a:e1:37:8a:2f:6d:30:46:1e:08:09:1c:3d:3b:f8:68:67: 81:4c:8a:e2:c9:6b:a1:f5:0d:97:24:52:50:a9:d8:60:c6:d2: cb:ff:e8:c0:c9:17:76:82:10:7e:24:ba:cc:19:80:7c:80:56: b9:b3:06:d7:0a:99:dc:69:c2:2d:73:19:a5:98:ff:f6:db:59: 4f:47:ca:b3:8f:3c:ad:cd:9e:23:b4:10:52:c1:11:20:36:65: 03:af:c8:58:99:5f:b5:9f:0d:57:d2:85:c9:6b:ab:95:3a:cc: 6c:a6:60:db:05:35:5a:a6:18:1a:d4:ba:8c:3c:14:22:fc:58: 6c:f5:fe:30:1c:3d:ba:2b:9a:2e:8e:6a:bb:be:b6:9f:df:ba: cb:da:58:71:ee:06:27:fb:45:1a:b6:ba:22:65:63:23:cc:d4: 8c:15:ba:c4:5e:65:e3:f1:65:02:b0:d8:1e:5c:48:fb:0c:e0: d8:ef:d7:9d:2e:6c:98:5c:5b:23:e2:80:6b:c3:03:3f:af:ad: f6:df:16:66:98:22:6b:67:59:0a:b9:d1:ee:79:6b:d3:ae:8b: e1:55:44:95:73:7b:0d:8d:91:2b:af:2d:c7:19:75:5f:93:a2: 8d:89:de:68:9d:86:79:c4:b3:2f:67:1b:1e:ba:8b:93:37:d4: 8c:6f:99:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzMyMzkxMTAvBgNVBAUTKDZDOUExMjIxMTU3OTFCOEUxNTA0ODAxN0E5NzU3RTU4 N0FCNTZGODAwHhcNMjUwOTAzMDU1NTQxWhcNMjUwOTEwMDU1NTQxWjAYMRYwFAYD VQQDEw02OGI3ZDg1ZC05ZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy3DlZ7+q6Qi89tcY06Gx1H+jKT/A58C/BSqLU3z4caRrUGhbDe0toFDShMUZ 1UgFi00EAJwTM1AWGUUuNmA2ogP6SWOxQmK8RlzK8KJL4bUbCqbCRrUinfemXyIC 8Qkf4kW5U1Wosbwp3OfRBqqsHehvDLFFXGHBXzAHX6pmxi+/GrYryO9VE1ll2mbX lgmOAkN9MqL9Ny1g837J1tw1KLBioaUJSaeTff2rBooxjTNp5BQAKGYdLrGLEhvI YnxGP6wI36DIlbxo3HMG4KUphgDFCeIVoBSb6A91IT+vgOKC3hil+wDRuBIsxJQR iB17cre9QuMBBhKRdoMRLtVHYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAmuLzNN +yw/GIsTZTizuV4r8pT4MB8GA1UdIwQYMBaAFGyaEiEVeRuOFQSAF6l1flh6tW+A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzIzOS83NDdBQTQ0QTJG MDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0NFZCSUFYcVhWLVdIcTFi NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2JKb1NJUlY1RzQ0VkJJQVhxWFYtV0hxMWI0QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MzIzOS83NDdBQTQ0QTJGMDIxMUVGOEM3QTU4NzBDNEY5QUUwMi9iSm9TSVJWNUc0 NFZCSUFYcVhWLVdIcTFiNEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUSuE3ii9tMEYeCAkcPTv4aGeBTIriyWuh9Q2XJFJQqdhgxtLL/+jA yRd2ghB+JLrMGYB8gFa5swbXCpncacItcxmlmP/221lPR8qzjzytzZ4jtBBSwREg NmUDr8hYmV+1nw1X0oXJa6uVOsxspmDbBTVaphga1LqMPBQi/Fhs9f4wHD26K5ou jmq7vraf37rL2lhx7gYn+0UatroiZWMjzNSMFbrEXmXj8WUCsNgeXEj7DODY79ed LmyYXFsj4oBrwwM/r6323xZmmCJrZ1kKudHueWvTrovhVUSVc3sNjZErry3HGXVf k6KNid5onYZ5xLMvZxseuouTN9SMb5nX -----END CERTIFICATE-----Generated at Thu Sep 4 13:58:36 2025 by rpki-client