$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft File: bjdXKUWj6XupZFmfpVXE20JjwOQ.mft (raw, json) Hash identifier: nd1H/yCD1Kkc0q8LOSRlsLiEV+HYjg9ao9yYXE1Od40= Subject key identifier: DB:49:7A:22:39:3A:C5:36:3E:AF:1A:1B:62:8E:F1:3F:DD:3D:79:F3 Authority key identifier: 6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4 Certificate issuer: /CN=A9176302/serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft Manifest number: 0D Signing time: Thu 05 Jun 2025 05:24:16 +0000 Manifest this update: Thu 05 Jun 2025 05:24:16 +0000 Manifest next update: Thu 12 Jun 2025 05:24:16 +0000 Files and hashes: 1: bjdXKUWj6XupZFmfpVXE20JjwOQ.crl (hash: QCm4+c/DsXuGxjiNUNkIKfsPO1uM6UqDgkuAwgDJ980=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 05:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176302, serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4 Validity Not Before: Jun 5 05:24:16 2025 GMT Not After : Jun 12 05:24:16 2025 GMT Subject: CN=68412a00-60e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:99:4e:02:c5:cd:d8:2e:96:c2:92:01:07:3e: c3:5a:3a:51:d6:f1:93:29:fa:ab:a5:7b:af:48:fe: 80:39:30:61:32:2b:6b:31:5c:65:3e:c8:94:27:e9: 78:02:e9:bf:80:ef:63:38:0f:2e:58:04:0a:a5:1a: 46:59:60:1b:eb:3d:ac:f5:c0:6b:da:ef:1c:fa:18: 98:34:cd:41:22:f8:e3:21:65:28:91:7a:0e:c0:ea: 32:f4:0a:16:b3:cc:6a:42:48:00:9f:0f:cd:08:2c: e4:0d:09:8b:fb:f5:93:d6:de:0e:f4:b3:25:05:e3: c3:76:32:a9:1a:88:18:7e:ee:79:c6:62:18:8d:7b: 3b:67:c9:b4:b9:f7:53:52:1d:17:6a:4a:ef:87:89: 8f:9f:f2:b7:fa:88:19:79:59:29:cc:ea:87:75:67: 14:4c:27:a6:bd:54:62:8d:b9:af:47:17:9f:14:b0: ff:b2:c0:7c:da:4a:02:21:42:8e:61:4e:ae:4a:2b: 26:a7:ee:3d:15:77:4f:ef:e7:fa:ba:bc:22:b9:c5: 20:fe:3b:60:3d:a4:2c:36:23:8d:15:24:d8:97:9d: 62:86:69:2a:0c:5b:e5:20:88:6c:7b:26:e3:1b:22: c9:29:9f:49:19:1a:e6:c0:0a:d8:bf:c8:31:91:aa: 2e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:49:7A:22:39:3A:C5:36:3E:AF:1A:1B:62:8E:F1:3F:DD:3D:79:F3 X509v3 Authority Key Identifier: keyid:6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:83:2f:7a:65:95:b2:df:22:e0:fa:1d:dc:a3:bd:97:90:25: 1e:b2:9e:2d:77:59:e9:fd:9d:5f:eb:7c:4e:ca:ac:8e:0b:25: 54:33:f0:fa:44:f3:54:90:96:6e:a9:8e:c3:8c:b6:77:62:44: 98:b0:9f:0e:51:60:10:bb:3d:68:5f:e6:d6:16:86:1e:fd:30: 0b:c8:d8:ba:7c:77:0b:fc:25:a2:b0:c9:f2:45:3a:99:b6:e3: b2:67:c2:cc:91:d9:f4:58:19:87:fc:ba:4a:48:1f:0e:1d:f2: bd:0e:e3:0b:a5:6b:18:53:1d:d7:3f:0a:d1:20:47:1a:50:81: 80:9a:60:55:13:99:87:31:23:0e:26:36:38:29:85:c1:32:71: 7c:fd:02:7e:7f:fc:4b:62:f6:da:05:43:d2:ed:ad:04:97:8a: 49:33:ee:fe:f1:60:f2:af:66:cb:1c:ac:1f:52:4d:7e:fa:a9: 54:33:b0:41:06:ce:da:f9:c8:5c:31:14:f3:d5:99:2c:b0:18: ed:cf:cd:c0:cd:3c:45:85:f3:c2:70:73:5e:fd:0d:57:63:91: 2e:ae:ca:54:65:b0:3d:13:60:41:c5:be:71:52:d4:e5:5b:9a: 9c:b2:0a:3d:82:a9:cb:b6:7b:50:3a:4c:85:c4:1e:38:a5:5a: d9:2b:8e:36 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NjMwMjExMC8GA1UEBRMoNkUzNzU3Mjk0NUEzRTk3QkE5NjQ1OTlGQTU1NUM0REI0 MjYzQzBFNDAeFw0yNTA2MDUwNTI0MTZaFw0yNTA2MTIwNTI0MTZaMBgxFjAUBgNV BAMTDTY4NDEyYTAwLTYwZTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDDmU4Cxc3YLpbCkgEHPsNaOlHW8ZMp+qule69I/oA5MGEyK2sxXGU+yJQn6XgC 6b+A72M4Dy5YBAqlGkZZYBvrPaz1wGva7xz6GJg0zUEi+OMhZSiReg7A6jL0Chaz zGpCSACfD80ILOQNCYv79ZPW3g70syUF48N2MqkaiBh+7nnGYhiNeztnybS591NS HRdqSu+HiY+f8rf6iBl5WSnM6od1ZxRMJ6a9VGKNua9HF58UsP+ywHzaSgIhQo5h Tq5KKyan7j0Vd0/v5/q6vCK5xSD+O2A9pCw2I40VJNiXnWKGaSoMW+UgiGx7JuMb Iskpn0kZGubACti/yDGRqi5fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU20l6Ijk6 xTY+rxobYo7xP909efMwHwYDVR0jBBgwFoAUbjdXKUWj6XupZFmfpVXE20JjwOQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2MzAyLzM2MjcyREU4MzA2 NTExRjA4RTgyQTIxNEM0RjlBRTAyL2JqZFhLVVdqNlh1cFpGbWZwVlhFMjBKandP US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYmpkWEtVV2o2WHVwWkZtZnBWWEUyMEpqd09RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 MzAyLzM2MjcyREU4MzA2NTExRjA4RTgyQTIxNEM0RjlBRTAyL2JqZFhLVVdqNlh1 cFpGbWZwVlhFMjBKandPUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIODL3pllbLfIuD6HdyjvZeQJR6yni13Wen9nV/rfE7KrI4LJVQz8PpE 81SQlm6pjsOMtndiRJiwnw5RYBC7PWhf5tYWhh79MAvI2Lp8dwv8JaKwyfJFOpm2 47JnwsyR2fRYGYf8ukpIHw4d8r0O4wulaxhTHdc/CtEgRxpQgYCaYFUTmYcxIw4m NjgphcEycXz9An5//Eti9toFQ9LtrQSXikkz7v7xYPKvZsscrB9STX76qVQzsEEG ztr5yFwxFPPVmSywGO3PzcDNPEWF88Jwc179DVdjkS6uylRlsD0TYEHFvnFS1OVb mpyyCj2Cqcu2e1A6TIXEHjilWtkrjjY= -----END CERTIFICATE-----Generated at Thu Jun 5 20:08:12 2025 by rpki-client