$ rpki-client -vvf rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft File: bjdXKUWj6XupZFmfpVXE20JjwOQ.mft (raw, json) Hash identifier: VDmkhTlYAkAy95I9zIvb8XfmvpcICPfLNq+yobuaHjY= Subject key identifier: 77:E7:5B:EF:DE:65:A5:86:89:20:E4:20:45:11:59:F9:CA:03:C1:E9 Authority key identifier: 6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4 Certificate issuer: /CN=A9176302/serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft Manifest number: 3C Signing time: Fri 05 Sep 2025 05:52:33 +0000 Manifest this update: Fri 05 Sep 2025 05:52:33 +0000 Manifest next update: Fri 12 Sep 2025 05:52:33 +0000 Files and hashes: 1: bjdXKUWj6XupZFmfpVXE20JjwOQ.crl (hash: isD7rH2qH3L7G0B6UV8jc3m1oFxcAOLqoJtkYvC83Ok=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 05:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9176302, serialNumber=6E37572945A3E97BA964599FA555C4DB4263C0E4 Validity Not Before: Sep 5 05:52:33 2025 GMT Not After : Sep 12 05:52:33 2025 GMT Subject: CN=68ba7aa1-311a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e0:ad:fb:a0:bd:2b:37:0c:88:28:58:c9:a0: ff:ef:c7:5e:5c:ab:21:4e:33:76:a5:56:c7:e4:bb: 49:3d:66:20:bf:a8:76:c7:cd:dc:6c:e8:3b:e4:09: ce:bd:32:9d:98:bc:3e:a2:6c:a9:93:4c:b5:ef:3c: 40:31:4e:d0:14:c4:f5:1e:1d:5e:34:42:25:3a:cb: bb:a7:00:c0:54:68:2c:27:14:87:dc:ee:37:82:64: 1a:5d:1f:c6:7a:20:87:cd:6f:2d:cd:c3:44:45:98: 91:6f:1d:79:be:7c:3c:61:e2:00:25:e8:4c:9f:34: 13:d7:03:8f:af:c8:cb:dc:04:f7:95:a8:c3:c9:73: a4:ec:ac:eb:c3:86:df:ba:93:e7:5d:33:44:28:3b: 01:f0:24:47:26:7c:c7:51:4d:1d:d4:ca:45:35:79: ab:1c:f0:c3:61:dc:51:7c:e6:7c:4c:2d:e4:02:ee: 61:27:bd:19:80:de:72:9e:82:1a:d4:fc:c2:db:73: 2d:e4:ca:73:73:67:05:66:10:6c:17:25:a7:98:05: b2:a7:15:06:17:41:a1:43:7c:13:92:7f:7e:a7:28: 32:42:4f:64:8c:52:b0:10:c5:dd:f0:45:a1:4d:35: 8c:68:69:d6:3a:07:ba:61:09:58:84:df:26:91:49: 85:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E7:5B:EF:DE:65:A5:86:89:20:E4:20:45:11:59:F9:CA:03:C1:E9 X509v3 Authority Key Identifier: keyid:6E:37:57:29:45:A3:E9:7B:A9:64:59:9F:A5:55:C4:DB:42:63:C0:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bjdXKUWj6XupZFmfpVXE20JjwOQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176302/36272DE8306511F08E82A214C4F9AE02/bjdXKUWj6XupZFmfpVXE20JjwOQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:53:fa:71:b8:cd:43:f9:b5:40:89:9b:6f:40:58:24:aa:02: 60:2e:28:6f:f8:fd:1a:da:b1:bf:75:d9:e7:79:b1:dd:c3:37: a7:86:96:72:4a:f1:d8:4a:c9:99:37:76:de:5c:fa:a9:80:26: 6a:9c:3b:ce:1b:6b:e0:ab:35:19:4c:30:84:59:7a:dc:df:aa: 4a:ce:3e:4b:ce:17:a1:bd:4f:b3:a8:b3:cb:0c:c7:6a:a8:5d: 64:27:73:1a:66:d0:a2:df:9d:ad:11:05:03:07:84:cc:46:7a: 90:57:be:a9:9c:ab:2d:96:b7:d9:78:4f:32:97:d7:3c:2c:e3: 2a:75:b4:4c:e5:c7:26:d2:8e:6d:66:68:68:6d:7d:a8:30:ae: c1:51:7a:10:4f:6e:e5:cd:e8:89:02:b9:9d:85:8f:5d:9b:f2: 93:4f:1d:43:aa:f2:ca:3b:d6:c9:39:3d:10:1a:17:52:ea:5e: 02:c2:77:75:f3:bb:bc:bf:0b:f4:03:0b:a9:5a:25:b4:90:48: ae:99:21:4e:40:e0:67:3f:38:0e:0d:e0:ae:47:d8:6b:1c:1a: b7:32:ef:02:a0:43:45:17:cb:fd:1f:c7:c0:b6:b8:29:bb:4d: dc:8c:06:8d:1c:1d:b8:e7:2c:79:c1:d9:45:fd:eb:27:73:df: 00:c4:8a:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 NjMwMjExMC8GA1UEBRMoNkUzNzU3Mjk0NUEzRTk3QkE5NjQ1OTlGQTU1NUM0REI0 MjYzQzBFNDAeFw0yNTA5MDUwNTUyMzNaFw0yNTA5MTIwNTUyMzNaMBgxFjAUBgNV BAMTDTY4YmE3YWExLTMxMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDb4K37oL0rNwyIKFjJoP/vx15cqyFOM3alVsfku0k9ZiC/qHbHzdxs6DvkCc69 Mp2YvD6ibKmTTLXvPEAxTtAUxPUeHV40QiU6y7unAMBUaCwnFIfc7jeCZBpdH8Z6 IIfNby3Nw0RFmJFvHXm+fDxh4gAl6EyfNBPXA4+vyMvcBPeVqMPJc6TsrOvDht+6 k+ddM0QoOwHwJEcmfMdRTR3UykU1easc8MNh3FF85nxMLeQC7mEnvRmA3nKeghrU /MLbcy3kynNzZwVmEGwXJaeYBbKnFQYXQaFDfBOSf36nKDJCT2SMUrAQxd3wRaFN NYxoadY6B7phCViE3yaRSYVnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd+db795l pYaJIOQgRRFZ+coDwekwHwYDVR0jBBgwFoAUbjdXKUWj6XupZFmfpVXE20JjwOQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2MzAyLzM2MjcyREU4MzA2 NTExRjA4RTgyQTIxNEM0RjlBRTAyL2JqZFhLVVdqNlh1cFpGbWZwVlhFMjBKandP US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYmpkWEtVV2o2WHVwWkZtZnBWWEUyMEpqd09RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc2 MzAyLzM2MjcyREU4MzA2NTExRjA4RTgyQTIxNEM0RjlBRTAyL2JqZFhLVVdqNlh1 cFpGbWZwVlhFMjBKandPUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAD1T+nG4zUP5tUCJm29AWCSqAmAuKG/4/Rrasb912ed5sd3DN6eGlnJK 8dhKyZk3dt5c+qmAJmqcO84ba+CrNRlMMIRZetzfqkrOPkvOF6G9T7Oos8sMx2qo XWQncxpm0KLfna0RBQMHhMxGepBXvqmcqy2Wt9l4TzKX1zws4yp1tEzlxybSjm1m aGhtfagwrsFRehBPbuXN6IkCuZ2Fj12b8pNPHUOq8so71sk5PRAaF1LqXgLCd3Xz u7y/C/QDC6laJbSQSK6ZIU5A4Gc/OA4N4K5H2GscGrcy7wKgQ0UXy/0fx8C2uCm7 TdyMBo0cHbjnLHnB2UX96ydz3wDEisg= -----END CERTIFICATE-----Generated at Sat Sep 6 21:11:00 2025 by rpki-client