$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft File: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json) Hash identifier: vuLgTjTh3WN5ZGiap+n3eqnBNul71Mm7ce5WIAibqYE= Subject key identifier: 8C:30:99:E4:B5:D5:F0:53:F7:63:06:E3:E5:33:85:71:14:B4:44:30 Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 Certificate issuer: /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Certificate serial: F5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft Manifest number: F3 Signing time: Wed 17 Sep 2025 05:51:20 +0000 Manifest this update: Wed 17 Sep 2025 05:51:20 +0000 Manifest next update: Wed 24 Sep 2025 05:51:20 +0000 Files and hashes: 1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: dK8mvECXmL2m5E23eWsbfcFMMAcQV6BBm8+EDbnNxis=) 2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: qfe+ZRHsuzJUkN6PV847BSXw2bwliF4QuG/2zTq3t3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 05:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Validity Not Before: Sep 17 05:51:20 2025 GMT Not After : Sep 24 05:51:20 2025 GMT Subject: CN=68ca4c58-1ae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:75:9b:a3:fc:df:d8:54:07:a8:6f:7d:7f:29: 44:8f:25:f1:01:dc:58:4c:18:90:2c:68:89:67:b3: 0e:21:4e:1d:8c:52:71:04:6c:39:cb:96:4b:a8:60: 1f:cb:31:3e:17:ce:58:23:7a:8e:ef:f0:1f:04:15: 2d:ec:e3:69:2c:ad:00:f8:1f:36:fd:98:20:79:10: 1e:32:a4:62:74:58:c3:da:8e:8a:ee:99:e7:f8:0e: 8a:4c:3c:e4:91:b9:c9:99:7f:52:73:e5:9c:f5:67: 2a:5b:ff:6e:53:23:dc:1e:6a:d8:14:f0:b3:50:91: 3f:d8:c5:49:24:76:b6:30:f5:90:50:2a:43:5d:22: fa:e7:11:1a:0a:8d:6e:4e:d5:05:fc:99:0d:92:d7: c1:bd:15:eb:b8:d7:b7:5a:3a:34:0c:70:c0:3f:88: 53:7a:08:9d:03:67:3c:c5:a2:dc:c3:e7:d5:25:32: 58:a0:59:93:41:0d:4f:92:68:c9:cb:e9:b0:16:68: 81:9e:b0:bb:46:d2:29:41:ca:1d:ba:ed:37:d1:ed: d2:27:fa:6a:04:67:4a:78:f9:6d:18:39:d0:c5:0c: 0e:0b:7c:b3:0e:9f:be:bc:32:02:8f:ed:73:7c:1d: db:6c:e7:7e:50:07:a5:cc:af:b9:0e:0b:19:73:be: 25:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:30:99:E4:B5:D5:F0:53:F7:63:06:E3:E5:33:85:71:14:B4:44:30 X509v3 Authority Key Identifier: keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:b4:41:a2:34:d2:45:5e:3b:c7:7e:44:54:e4:b9:db:c1:af: 8b:37:c3:2f:9b:ea:4b:7c:c3:9f:51:04:9e:3b:e7:eb:12:2f: 7c:b0:02:34:35:3e:1d:5c:da:ea:55:00:14:3a:de:5a:79:c9: 7d:6c:2a:1e:77:f0:72:af:a9:34:7c:92:23:d9:cd:cf:25:8a: b9:db:29:81:b2:91:f4:1d:ac:84:83:3b:f0:bb:70:a4:8c:7c: 9d:63:75:03:23:7e:50:18:6e:22:ea:3e:4d:03:49:8d:8b:56: 7e:40:30:09:97:8f:2a:2b:98:e0:b5:c5:65:0d:41:2d:75:a6: ac:0d:a0:62:10:32:43:f0:fc:bb:86:08:5c:ad:f2:e2:60:29: 2e:62:25:31:ce:5c:b4:26:97:b5:51:6c:f0:32:90:b3:d3:35: 27:c0:d6:e1:41:e3:ca:fb:25:ff:94:2b:2d:4c:1e:97:bb:ed: cd:39:ee:44:bc:6a:ea:f0:01:28:25:7f:c0:3d:39:ca:c1:cc: 03:4e:6c:58:9c:b2:08:52:99:99:0b:a0:83:e3:55:c8:87:c8: c3:be:d2:53:40:e6:88:e5:d0:a1:33:f7:4f:9d:80:70:8c:86: aa:66:97:53:f1:c4:1d:14:24:e9:c3:f3:22:be:05:96:c5:5b: 98:4b:21:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKEY3RjA2MzY5Mzk5RDk5MzVGNUZCNTlGRDU4NTcxNTQx QTU4MUNDNjMwHhcNMjUwOTE3MDU1MTIwWhcNMjUwOTI0MDU1MTIwWjAYMRYwFAYD VQQDEw02OGNhNGM1OC0xYWUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHWbo/zf2FQHqG99fylEjyXxAdxYTBiQLGiJZ7MOIU4djFJxBGw5y5ZLqGAf yzE+F85YI3qO7/AfBBUt7ONpLK0A+B82/ZggeRAeMqRidFjD2o6K7pnn+A6KTDzk kbnJmX9Sc+Wc9WcqW/9uUyPcHmrYFPCzUJE/2MVJJHa2MPWQUCpDXSL65xEaCo1u TtUF/JkNktfBvRXruNe3Wjo0DHDAP4hTegidA2c8xaLcw+fVJTJYoFmTQQ1PkmjJ y+mwFmiBnrC7RtIpQcoduu030e3SJ/pqBGdKePltGDnQxQwOC3yzDp++vDICj+1z fB3bbOd+UAelzK+5DgsZc74lfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwwmeS1 1fBT92MG4+UzhXEUtEQwMB8GA1UdIwQYMBaAFPfwY2k5nZk19ftZ/VhXFUGlgcxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS84NjI0NjM0ODFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1UWDEtMW45V0ZjVlFhV0J6 R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlfQmphVG1kbVRYMS0xbjlXRmNWUWFXQnpHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS84NjI0NjM0ODFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1U WDEtMW45V0ZjVlFhV0J6R00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUtEGiNNJFXjvHfkRU5Lnbwa+LN8Mvm+pLfMOfUQSeO+frEi98sAI0 NT4dXNrqVQAUOt5aecl9bCoed/Byr6k0fJIj2c3PJYq52ymBspH0HayEgzvwu3Ck jHydY3UDI35QGG4i6j5NA0mNi1Z+QDAJl48qK5jgtcVlDUEtdaasDaBiEDJD8Py7 hghcrfLiYCkuYiUxzly0Jpe1UWzwMpCz0zUnwNbhQePK+yX/lCstTB6Xu+3NOe5E vGrq8AEoJX/APTnKwcwDTmxYnLIIUpmZC6CD41XIh8jDvtJTQOaI5dChM/dPnYBw jIaqZpdT8cQdFCTpw/MivgWWxVuYSyFa -----END CERTIFICATE-----Generated at Fri Sep 19 03:49:34 2025 by rpki-client