$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft File: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft (raw, json) Hash identifier: P+tTb2U7Qbcbz9cKLaIhFOKC9yhvGBSLh+OwmcSodh0= Subject key identifier: 41:47:0B:0B:9D:41:F8:9B:2B:FF:BA:F6:9E:1C:1F:93:36:6B:53:DE Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 Certificate issuer: /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Certificate serial: BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft Manifest number: B9 Signing time: Sat 31 May 2025 05:29:32 +0000 Manifest this update: Sat 31 May 2025 05:29:31 +0000 Manifest next update: Sat 07 Jun 2025 05:29:31 +0000 Files and hashes: 1: 9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl (hash: gxAiGqCb3sLPnZ0feKLq1LeZYPVRSQW8RtWPqeBLze8=) 2: F6668BF41FF311EFB0A97A82C4F9AE02.roa (hash: aCxLNGUfAZ6CNYlr7962E8YpM0oFXazWi/2qqzUqx5o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 186 (0xba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63 Validity Not Before: May 31 05:29:31 2025 GMT Not After : Jun 7 05:29:31 2025 GMT Subject: CN=683a93bc-ab63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:da:ed:39:a1:69:a2:06:72:cd:dc:0e:ca: 38:d4:11:2b:e9:1d:24:93:85:50:15:12:37:b1:23: 2b:e1:ad:f3:b0:53:6b:ea:12:d4:51:ce:4c:4f:42: 46:2d:f4:42:77:37:9e:02:d9:27:57:e9:24:ea:c0: fc:07:d8:19:43:b7:68:40:f8:19:01:ee:d8:55:29: c2:8e:a4:b1:38:74:0c:0b:e3:18:ea:c2:e9:b5:61: 06:5b:75:15:2d:b7:4d:f4:01:6d:77:b1:2d:46:07: dd:63:a7:74:06:d5:84:15:6a:ad:7f:01:d7:ae:9d: 50:cc:61:f1:dd:15:7e:38:7f:8b:f9:84:90:b6:b4: a4:68:f1:d3:e9:6e:f0:44:c6:ad:fc:71:7d:39:25: 83:2e:fa:b4:b7:79:82:22:13:2f:6b:6a:b4:6e:5d: 20:66:96:04:73:73:06:a2:8d:c4:da:d1:ef:89:16: d2:19:3a:6f:d4:02:41:a3:c1:50:4e:d5:df:61:61: 49:b9:88:58:7a:b3:e7:7f:75:c9:0d:ef:b1:69:df: bb:e3:96:26:51:a9:a3:fe:a9:26:56:d0:b5:e1:72: 32:fb:57:df:04:39:55:18:42:fa:de:1d:f0:47:57: 7a:4c:06:65:15:30:ee:7b:18:b8:1b:fc:ed:25:3a: f6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:47:0B:0B:9D:41:F8:9B:2B:FF:BA:F6:9E:1C:1F:93:36:6B:53:DE X509v3 Authority Key Identifier: keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b3:cc:0f:f4:83:4a:34:a2:39:88:74:bb:67:92:f2:3c:7c:75: 98:69:c6:e1:12:b9:bb:8e:f8:da:5a:08:81:58:e8:43:1f:a6: 0b:63:8b:34:49:1b:d9:ae:d5:1a:1a:69:36:ee:ff:69:3e:0e: 6d:a9:18:70:b7:78:ba:6b:fd:07:60:f5:1f:3f:f6:d0:3f:95: b3:28:90:71:d2:7b:28:6c:03:1d:af:08:85:24:12:bd:44:a2: a9:8f:b9:f8:9d:23:1d:08:4a:de:4e:be:1f:50:0a:27:7c:42: 43:f8:6d:ac:15:46:24:50:13:c2:1c:62:a4:bf:18:0b:04:9d: 29:ef:34:b3:a2:38:60:43:43:9a:bc:83:32:a5:04:ec:30:6e: d1:28:c1:8d:5f:fd:f4:a2:8f:72:38:3b:35:91:d7:d7:ca:73: 85:90:8a:70:f0:3b:cd:e0:39:6f:e2:de:29:37:20:c2:5e:0d: 44:bc:ce:7a:d4:d7:f7:23:e4:70:22:00:c7:33:0e:72:55:c9: af:90:be:c2:d0:f0:ea:cb:18:26:b4:23:74:47:35:47:09:c0: 77:55:0b:ed:52:27:83:81:89:9a:fd:bb:20:b8:43:0f:63:d1: b6:6b:f9:39:03:b1:80:5e:c3:40:cc:7c:bb:a9:95:e6:5f:cb: d2:a1:be:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3QTkxMTAvBgNVBAUTKEY3RjA2MzY5Mzk5RDk5MzVGNUZCNTlGRDU4NTcxNTQx QTU4MUNDNjMwHhcNMjUwNTMxMDUyOTMxWhcNMjUwNjA3MDUyOTMxWjAYMRYwFAYD VQQDEw02ODNhOTNiYy1hYjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs7ja7TmhaaIGcs3cDso41BEr6R0kk4VQFRI3sSMr4a3zsFNr6hLUUc5MT0JG LfRCdzeeAtknV+kk6sD8B9gZQ7doQPgZAe7YVSnCjqSxOHQMC+MY6sLptWEGW3UV LbdN9AFtd7EtRgfdY6d0BtWEFWqtfwHXrp1QzGHx3RV+OH+L+YSQtrSkaPHT6W7w RMat/HF9OSWDLvq0t3mCIhMva2q0bl0gZpYEc3MGoo3E2tHviRbSGTpv1AJBo8FQ TtXfYWFJuYhYerPnf3XJDe+xad+745YmUamj/qkmVtC14XIy+1ffBDlVGEL63h3w R1d6TAZlFTDuexi4G/ztJTr2DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFHCwud QfibK/+69p4cH5M2a1PeMB8GA1UdIwQYMBaAFPfwY2k5nZk19ftZ/VhXFUGlgcxj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdBOS84NjI0NjM0ODFG RjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1UWDEtMW45V0ZjVlFhV0J6 R00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlfQmphVG1kbVRYMS0xbjlXRmNWUWFXQnpHTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTdBOS84NjI0NjM0ODFGRjMxMUVGQTNGQjJDODFDNEY5QUUwMi85X0JqYVRtZG1U WDEtMW45V0ZjVlFhV0J6R00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCzzA/0g0o0ojmIdLtnkvI8fHWYacbhErm7jvjaWgiBWOhDH6YLY4s0 SRvZrtUaGmk27v9pPg5tqRhwt3i6a/0HYPUfP/bQP5WzKJBx0nsobAMdrwiFJBK9 RKKpj7n4nSMdCEreTr4fUAonfEJD+G2sFUYkUBPCHGKkvxgLBJ0p7zSzojhgQ0Oa vIMypQTsMG7RKMGNX/30oo9yODs1kdfXynOFkIpw8DvN4Dlv4t4pNyDCXg1EvM56 1Nf3I+RwIgDHMw5yVcmvkL7C0PDqyxgmtCN0RzVHCcB3VQvtUieDgYma/bsguEMP Y9G2a/k5A7GAXsNAzHy7qZXmX8vSob54 -----END CERTIFICATE-----Generated at Sat May 31 17:57:50 2025 by rpki-client