$ rpki-client -vvf rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft File: Bmy1pxYud36-c45cu4Dn9JRwzCE.mft (raw, json) Hash identifier: FSe4rB77HRPiD4xgsoMBLCrijtIjbkiutSrnIXKAQNc= Subject key identifier: 4E:4D:32:1E:83:E2:1C:7A:49:A2:79:47:59:ED:5C:EF:81:AA:91:E3 Authority key identifier: 06:6C:B5:A7:16:2E:77:7E:BE:73:8E:5C:BB:80:E7:F4:94:70:CC:21 Certificate issuer: /CN=A9134FAF/serialNumber=066CB5A7162E777EBE738E5CBB80E7F49470CC21 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft Manifest number: 0D Signing time: Tue 01 Jul 2025 08:53:33 +0000 Manifest this update: Tue 01 Jul 2025 08:53:32 +0000 Manifest next update: Tue 08 Jul 2025 08:53:32 +0000 Files and hashes: 1: Bmy1pxYud36-c45cu4Dn9JRwzCE.crl (hash: pP8h7Gw/6DRD0hTp6ArAiQNP1Jism+VOvtYDKQq1O7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.crl rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:53:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134FAF, serialNumber=066CB5A7162E777EBE738E5CBB80E7F49470CC21 Validity Not Before: Jul 1 08:53:32 2025 GMT Not After : Jul 8 08:53:32 2025 GMT Subject: CN=6863a20d-b631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:63:f7:31:47:05:0d:60:95:8d:16:01:66: 8e:fa:ca:de:21:c9:16:e6:b9:66:ad:31:af:8e:13: 23:42:a1:c4:35:54:f9:62:38:12:c2:51:a3:b1:1c: 44:02:e5:3d:08:1d:42:e8:3c:bd:2b:89:74:44:0f: d1:bb:81:13:1f:6c:a7:ce:c3:3a:24:64:72:82:5f: c0:0a:8e:5d:b8:4e:1f:73:14:5f:23:0e:1d:64:72: c3:ec:33:29:16:63:38:9c:d4:52:36:fc:b1:7d:ee: c3:eb:c2:36:5b:3e:c3:52:85:9c:dd:21:b7:61:f2: 91:13:7f:18:5f:06:18:1a:b5:c5:e0:81:b4:5d:e7: 34:56:57:1d:58:98:84:17:97:e7:95:cc:61:df:a3: 67:b9:bc:a1:6c:e4:39:94:01:42:76:98:8d:a1:f4: 80:ae:2f:3b:24:81:a2:7f:3d:4f:0e:e2:b8:0b:fd: e9:a6:3e:a7:f4:2c:92:62:f0:d7:64:98:a9:1d:2b: e2:4d:1d:42:c8:01:ff:ea:ec:3a:32:62:95:5e:64: ae:1b:51:8e:25:be:6a:d2:6e:17:ef:b5:59:fa:3d: 3c:01:fb:05:7c:c5:5b:5c:9c:88:8c:16:24:49:7a: 53:ed:f9:d3:dd:ed:e1:d7:3b:a4:85:a9:d5:94:6c: 51:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:4D:32:1E:83:E2:1C:7A:49:A2:79:47:59:ED:5C:EF:81:AA:91:E3 X509v3 Authority Key Identifier: keyid:06:6C:B5:A7:16:2E:77:7E:BE:73:8E:5C:BB:80:E7:F4:94:70:CC:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bmy1pxYud36-c45cu4Dn9JRwzCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134FAF/8AC41794449711F0A9757362C4F9AE02/Bmy1pxYud36-c45cu4Dn9JRwzCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:71:f8:f6:71:1d:fd:8b:18:e4:25:c0:74:4d:11:a8:16:95: b7:cf:ad:1d:79:76:0b:72:76:87:9e:76:b4:23:6a:36:5c:32: 63:1f:f1:37:76:fa:92:df:59:56:85:9b:16:94:51:d6:e4:1a: 0e:78:43:af:db:62:c1:80:22:05:f1:af:41:95:85:69:a2:68: fb:24:2a:c3:eb:04:58:41:2c:60:77:b1:33:10:32:ed:ee:99: a0:91:89:79:0f:dd:10:3e:da:49:42:2f:3d:c4:08:f9:8d:07: 50:42:db:9a:f1:44:a7:40:d8:42:f4:90:ed:09:7c:60:a6:19: a8:d2:14:05:a2:ed:2f:9b:05:c0:e2:33:e9:b3:c0:27:94:f9: 32:8c:09:0d:47:f2:25:59:e9:c8:50:34:29:76:58:ae:fa:3d: 64:23:57:ae:c0:75:84:64:e7:75:16:83:02:bd:21:f7:24:21: 37:3b:16:dd:d4:9e:ce:2c:bc:49:7a:93:53:77:77:0d:2a:ca: 64:9a:ad:2e:22:ab:7b:09:97:12:2b:29:dd:0d:2e:96:8c:06: de:0f:fa:90:dd:2c:9b:ad:48:b8:19:36:65:68:dd:58:67:6d: 11:9a:6c:e7:53:17:22:85:d5:87:61:af:8b:6c:13:6c:73:ef: 89:35:85:cf -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NEZBRjExMC8GA1UEBRMoMDY2Q0I1QTcxNjJFNzc3RUJFNzM4RTVDQkI4MEU3RjQ5 NDcwQ0MyMTAeFw0yNTA3MDEwODUzMzJaFw0yNTA3MDgwODUzMzJaMBgxFjAUBgNV BAMTDTY4NjNhMjBkLWI2MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5CmP3MUcFDWCVjRYBZo76yt4hyRbmuWatMa+OEyNCocQ1VPliOBLCUaOxHEQC 5T0IHULoPL0riXRED9G7gRMfbKfOwzokZHKCX8AKjl24Th9zFF8jDh1kcsPsMykW Yzic1FI2/LF97sPrwjZbPsNShZzdIbdh8pETfxhfBhgatcXggbRd5zRWVx1YmIQX l+eVzGHfo2e5vKFs5DmUAUJ2mI2h9ICuLzskgaJ/PU8O4rgL/emmPqf0LJJi8Ndk mKkdK+JNHULIAf/q7DoyYpVeZK4bUY4lvmrSbhfvtVn6PTwB+wV8xVtcnIiMFiRJ elPt+dPd7eHXO6SFqdWUbFE/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUTk0yHoPi HHpJonlHWe1c74GqkeMwHwYDVR0jBBgwFoAUBmy1pxYud36+c45cu4Dn9JRwzCEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0RkFGLzhBQzQxNzk0NDQ5 NzExRjBBOTc1NzM2MkM0RjlBRTAyL0JteTFweFl1ZDM2LWM0NWN1NERuOUpSd3pD RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQm15MXB4WXVkMzYtYzQ1Y3U0RG45SlJ3ekNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM0 RkFGLzhBQzQxNzk0NDQ5NzExRjBBOTc1NzM2MkM0RjlBRTAyL0JteTFweFl1ZDM2 LWM0NWN1NERuOUpSd3pDRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAARx+PZxHf2LGOQlwHRNEagWlbfPrR15dgtydoeedrQjajZcMmMf8Td2 +pLfWVaFmxaUUdbkGg54Q6/bYsGAIgXxr0GVhWmiaPskKsPrBFhBLGB3sTMQMu3u maCRiXkP3RA+2klCLz3ECPmNB1BC25rxRKdA2EL0kO0JfGCmGajSFAWi7S+bBcDi M+mzwCeU+TKMCQ1H8iVZ6chQNCl2WK76PWQjV67AdYRk53UWgwK9IfckITc7Ft3U ns4svEl6k1N3dw0qymSarS4iq3sJlxIrKd0NLpaMBt4P+pDdLJutSLgZNmVo3Vhn bRGabOdTFyKF1Ydhr4tsE2xz74k1hc8= -----END CERTIFICATE-----Generated at Tue Jul 1 19:52:51 2025 by rpki-client