$ rpki-client -vvf rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft File: bZZ_vdG4dHSCRqy41KqQuotWG0o.mft (raw, json) Hash identifier: i7lH3wLc/w20Y1ogVSq92oO6j30OmC8tN8UKiZcVAJc= Subject key identifier: 03:D1:E7:DA:61:B9:5C:87:DC:AB:5F:A1:2E:7B:07:B6:64:3C:40:D9 Authority key identifier: 6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A Certificate issuer: /CN=A915365A/serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft Manifest number: 35 Signing time: Fri 13 Jun 2025 06:31:46 +0000 Manifest this update: Fri 13 Jun 2025 06:31:45 +0000 Manifest next update: Fri 20 Jun 2025 06:31:45 +0000 Files and hashes: 1: bZZ_vdG4dHSCRqy41KqQuotWG0o.crl (hash: nFqBoU0P+xHReKXWRvV0/Rgt5O97jdKLGB5MS2rSs+g=) 2: 186817D6FAAA11EFA67E0D81C4F9AE02.roa (hash: XqbSA7pTHQu8ks4FQOA3vJ/bHZOe/8eB0bJZqpH2INk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 06:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915365A, serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Validity Not Before: Jun 13 06:31:45 2025 GMT Not After : Jun 20 06:31:45 2025 GMT Subject: CN=684bc5d2-2ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:50:bf:b3:66:30:e5:9c:ed:f9:78:2c:99:09: 66:5a:7f:d6:6a:ee:80:9f:d6:97:9c:95:5c:b7:18: 8b:76:dc:78:d9:17:a4:22:8d:1f:70:a3:f7:b6:c9: 4e:6e:32:5f:bc:eb:58:1b:f5:be:3d:4d:88:64:8e: 9e:e6:72:c1:19:36:28:6a:26:75:0b:f8:c2:13:67: 1a:c7:2b:67:50:c7:36:d4:a8:c2:c4:2a:a8:77:77: 4a:6e:93:25:1b:2e:13:c4:72:bc:eb:ab:3b:8c:0f: 5e:e3:a1:00:6d:78:c5:43:4b:87:9c:b4:e8:0e:29: 67:f8:5f:23:ff:bc:3c:3e:a8:c7:d3:dd:b4:90:23: 64:fe:8d:4b:f4:2b:52:d0:94:4a:20:36:2c:08:e2: 6c:ad:20:b2:5e:f4:ba:e7:a2:96:4c:fa:6b:92:ab: bd:7b:6b:1c:77:8b:8e:fa:86:da:e5:ba:6c:58:22: 68:27:01:1e:2f:3b:96:c5:15:75:30:ff:03:d9:32: bc:21:10:b4:ff:60:21:5f:7c:ba:c7:14:6e:b7:ba: 21:27:d9:3a:85:e2:b8:b5:4c:68:e3:3d:44:7d:2e: 7a:d7:d0:97:86:b6:59:57:6f:1c:50:64:6f:cd:04: 35:f7:62:0d:98:40:51:a2:2f:16:0b:69:ce:06:62: 28:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D1:E7:DA:61:B9:5C:87:DC:AB:5F:A1:2E:7B:07:B6:64:3C:40:D9 X509v3 Authority Key Identifier: keyid:6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:21:27:c4:63:34:fa:f8:d2:98:93:a3:38:6b:db:e0:20:20: 48:45:dd:93:b0:c9:17:62:e4:d1:42:a8:1f:94:1d:28:00:7f: 64:71:11:80:05:aa:86:95:9b:76:f9:9c:ef:99:85:ad:32:0a: d2:a2:61:10:72:1c:ca:f0:25:69:f7:77:86:a3:41:92:29:7c: 58:1c:be:c9:6d:db:67:1a:33:60:3f:c9:02:3e:e2:60:4c:3b: d7:d5:7f:da:b0:59:39:98:34:ff:85:18:b2:5c:97:97:5d:1a: 2c:ab:de:53:6c:66:0f:ea:82:0d:06:50:bd:67:99:1a:76:26: e1:4c:e6:04:a2:d4:13:64:52:18:2f:9c:15:92:57:f7:86:d7: 75:fd:85:98:e8:8c:4a:44:a6:15:02:23:51:7f:a0:7f:dc:44: 6e:93:ba:d1:61:6b:9a:58:61:f2:21:9a:45:d0:88:e6:83:ea: 29:a1:b3:4e:72:bb:19:9a:b1:74:17:5d:2b:58:22:fd:64:58: 4e:6f:8b:48:18:90:c2:7a:ad:0d:c8:6b:15:f5:25:67:1d:c3: 3c:ff:48:71:22:83:a2:65:33:47:0d:2e:19:6b:91:13:12:cd: 4e:2a:1a:6e:ff:4c:6e:f8:97:73:5a:8c:cd:da:ac:eb:e3:24: 53:84:77:c8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzY1QTExMC8GA1UEBRMoNkQ5NjdGQkREMUI4NzQ3NDgyNDZBQ0I4RDRBQTkwQkE4 QjU2MUI0QTAeFw0yNTA2MTMwNjMxNDVaFw0yNTA2MjAwNjMxNDVaMBgxFjAUBgNV BAMTDTY4NGJjNWQyLTJhZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3UL+zZjDlnO35eCyZCWZaf9Zq7oCf1peclVy3GIt23HjZF6QijR9wo/e2yU5u Ml+861gb9b49TYhkjp7mcsEZNihqJnUL+MITZxrHK2dQxzbUqMLEKqh3d0pukyUb LhPEcrzrqzuMD17joQBteMVDS4ectOgOKWf4XyP/vDw+qMfT3bSQI2T+jUv0K1LQ lEogNiwI4mytILJe9LrnopZM+muSq717axx3i476htrlumxYImgnAR4vO5bFFXUw /wPZMrwhELT/YCFffLrHFG63uiEn2TqF4ri1TGjjPUR9LnrX0JeGtllXbxxQZG/N BDX3Yg2YQFGiLxYLac4GYijrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUA9Hn2mG5 XIfcq1+hLnsHtmQ8QNkwHwYDVR0jBBgwFoAUbZZ/vdG4dHSCRqy41KqQuotWG0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNjVBL0ZBNzA4QURFRkFB ODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhTQ1JxeTQxS3FRdW90V0cw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlpaX3ZkRzRkSFNDUnF5NDFLcVF1b3RXRzBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz NjVBL0ZBNzA4QURFRkFBODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhT Q1JxeTQxS3FRdW90V0cwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC4hJ8RjNPr40piTozhr2+AgIEhF3ZOwyRdi5NFCqB+UHSgAf2RxEYAF qoaVm3b5nO+Zha0yCtKiYRByHMrwJWn3d4ajQZIpfFgcvslt22caM2A/yQI+4mBM O9fVf9qwWTmYNP+FGLJcl5ddGiyr3lNsZg/qgg0GUL1nmRp2JuFM5gSi1BNkUhgv nBWSV/eG13X9hZjojEpEphUCI1F/oH/cRG6TutFha5pYYfIhmkXQiOaD6imhs05y uxmasXQXXStYIv1kWE5vi0gYkMJ6rQ3IaxX1JWcdwzz/SHEig6JlM0cNLhlrkRMS zU4qGm7/TG74l3NajM3arOvjJFOEd8g= -----END CERTIFICATE-----Generated at Sat Jun 14 17:44:35 2025 by rpki-client