$ rpki-client -vvf rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft File: bZZ_vdG4dHSCRqy41KqQuotWG0o.mft (raw, json) Hash identifier: Es3JUKMFvrmkPJOjhStvFCQ7gXQl51T7SCgeHywQXs0= Subject key identifier: E1:85:79:7A:77:19:B3:0A:91:77:7C:48:E5:B5:2C:40:EC:D1:D9:C9 Authority key identifier: 6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A Certificate issuer: /CN=A915365A/serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Certificate serial: 52 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft Manifest number: 50 Signing time: Tue 05 Aug 2025 07:54:23 +0000 Manifest this update: Tue 05 Aug 2025 07:54:22 +0000 Manifest next update: Tue 12 Aug 2025 07:54:22 +0000 Files and hashes: 1: bZZ_vdG4dHSCRqy41KqQuotWG0o.crl (hash: Kbb2RKcq9XCGDb5cZry+FYsYI/BQHqID2ejahc9aDxw=) 2: 186817D6FAAA11EFA67E0D81C4F9AE02.roa (hash: XqbSA7pTHQu8ks4FQOA3vJ/bHZOe/8eB0bJZqpH2INk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 82 (0x52) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915365A, serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Validity Not Before: Aug 5 07:54:22 2025 GMT Not After : Aug 12 07:54:22 2025 GMT Subject: CN=6891b8ae-3c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d1:6b:1c:90:50:87:c7:fe:ff:41:51:f3:f4: d5:dc:1c:96:a4:94:02:08:32:d3:3c:8d:f9:eb:e1: 99:f8:86:d5:4e:46:03:5a:ee:5c:89:63:c7:98:5c: 35:c8:5f:e4:3a:89:be:c4:1b:8f:6a:0d:ad:3b:72: cc:f9:b7:d3:41:c3:4d:c5:6e:c6:7d:6b:1e:90:0e: a9:5d:b4:66:0d:0d:99:77:65:fd:b8:46:35:09:b2: 0b:37:60:dd:4d:58:07:27:d2:61:83:8a:6c:1e:2c: 33:a7:8d:04:51:78:08:c8:97:af:fa:69:4d:8f:f3: 5a:11:d8:cd:13:c9:48:e0:0f:6a:71:b3:a7:93:8e: 64:e6:b7:f0:8b:4a:cf:03:99:c0:93:bf:f1:a6:e4: 39:39:84:62:e6:cd:b3:2f:f6:cb:e1:78:cb:f2:76: 96:0e:53:45:ba:8c:0c:32:06:76:6e:4f:28:04:fb: ff:d0:47:23:7c:6d:3e:71:70:f2:92:9e:93:02:4a: 5e:61:b4:44:22:08:47:d6:60:0b:2a:8d:f0:4a:8b: ad:f1:95:de:bb:71:4a:0f:41:08:d5:1c:0d:94:e7: 98:2c:f4:49:c5:2d:4d:c4:65:67:24:6b:80:3d:b5: 06:78:f8:7d:ce:3a:8c:17:9a:02:34:84:0a:52:9b: b4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:85:79:7A:77:19:B3:0A:91:77:7C:48:E5:B5:2C:40:EC:D1:D9:C9 X509v3 Authority Key Identifier: keyid:6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:a6:30:95:9b:05:70:b2:11:36:d1:c8:d2:b4:0f:03:4f:e6: a4:1f:b1:cb:6f:d4:3c:dd:e7:14:37:38:cc:0d:05:27:4e:2e: 06:1a:d9:91:bf:f4:c6:b8:ad:e8:b8:6f:15:e9:0e:24:c0:b4: 17:be:63:00:38:ad:dc:41:eb:d0:74:dd:d0:83:b6:aa:55:66: fe:b6:88:c5:5b:55:a4:dd:eb:63:96:4f:16:dc:8d:29:19:bf: 78:b1:f3:41:bf:d3:14:66:89:08:51:07:67:79:05:8b:b1:36: 15:1d:1a:af:c9:b7:fa:15:b4:cd:dc:ad:96:f8:15:0b:c7:8b: c1:25:c2:53:96:df:e1:a6:3b:e9:84:d9:23:ca:99:6e:17:4b: dc:5c:bf:26:eb:4e:f2:61:5d:c4:f7:d0:8c:88:ab:ff:52:0c: 98:96:b1:8b:94:b2:81:0d:1f:02:5e:3a:bb:e2:cd:57:43:45: 61:7e:a7:e5:bd:e1:0e:90:21:46:c0:ac:5b:76:08:c4:32:58: b0:eb:4a:30:e3:2d:4f:1e:f9:55:57:6d:cc:8c:24:24:bd:76: 86:65:a1:54:87:ab:06:c9:31:f8:01:c9:2f:f7:ba:d7:c9:2c: bc:96:7b:73:d4:b7:46:8c:b1:3b:92:21:a3:28:5c:8d:99:b8: c2:5b:21:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzY1QTExMC8GA1UEBRMoNkQ5NjdGQkREMUI4NzQ3NDgyNDZBQ0I4RDRBQTkwQkE4 QjU2MUI0QTAeFw0yNTA4MDUwNzU0MjJaFw0yNTA4MTIwNzU0MjJaMBgxFjAUBgNV BAMTDTY4OTFiOGFlLTNjMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJ0WsckFCHx/7/QVHz9NXcHJaklAIIMtM8jfnr4Zn4htVORgNa7lyJY8eYXDXI X+Q6ib7EG49qDa07csz5t9NBw03FbsZ9ax6QDqldtGYNDZl3Zf24RjUJsgs3YN1N WAcn0mGDimweLDOnjQRReAjIl6/6aU2P81oR2M0TyUjgD2pxs6eTjmTmt/CLSs8D mcCTv/Gm5Dk5hGLmzbMv9svheMvydpYOU0W6jAwyBnZuTygE+//QRyN8bT5xcPKS npMCSl5htEQiCEfWYAsqjfBKi63xld67cUoPQQjVHA2U55gs9EnFLU3EZWcka4A9 tQZ4+H3OOowXmgI0hApSm7RRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU4YV5encZ swqRd3xI5bUsQOzR2ckwHwYDVR0jBBgwFoAUbZZ/vdG4dHSCRqy41KqQuotWG0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNjVBL0ZBNzA4QURFRkFB ODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhTQ1JxeTQxS3FRdW90V0cw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlpaX3ZkRzRkSFNDUnF5NDFLcVF1b3RXRzBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz NjVBL0ZBNzA4QURFRkFBODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhT Q1JxeTQxS3FRdW90V0cwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABamMJWbBXCyETbRyNK0DwNP5qQfsctv1Dzd5xQ3OMwNBSdOLgYa2ZG/ 9Ma4rei4bxXpDiTAtBe+YwA4rdxB69B03dCDtqpVZv62iMVbVaTd62OWTxbcjSkZ v3ix80G/0xRmiQhRB2d5BYuxNhUdGq/Jt/oVtM3crZb4FQvHi8ElwlOW3+GmO+mE 2SPKmW4XS9xcvybrTvJhXcT30IyIq/9SDJiWsYuUsoENHwJeOrvizVdDRWF+p+W9 4Q6QIUbArFt2CMQyWLDrSjDjLU8e+VVXbcyMJCS9doZloVSHqwbJMfgByS/3utfJ LLyWe3PUt0aMsTuSIaMoXI2ZuMJbIZI= -----END CERTIFICATE-----Generated at Wed Aug 6 14:11:37 2025 by rpki-client