$ rpki-client -vvf rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft File: bZZ_vdG4dHSCRqy41KqQuotWG0o.mft (raw, json) Hash identifier: iyeBAyrlDIEbnT+S2LSo6vpqy6Z1pT1wch1I1JJpW2Y= Subject key identifier: A4:2B:3B:BB:CA:76:A6:2E:27:23:29:CB:DC:6A:E3:71:C5:5F:D8:B4 Authority key identifier: 6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A Certificate issuer: /CN=A915365A/serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Certificate serial: 1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft Manifest number: 1B Signing time: Fri 25 Apr 2025 06:53:58 +0000 Manifest this update: Fri 25 Apr 2025 06:53:58 +0000 Manifest next update: Fri 02 May 2025 06:53:57 +0000 Files and hashes: 1: bZZ_vdG4dHSCRqy41KqQuotWG0o.crl (hash: 4kusBTrMgLhaqehK/Y42n8D06i55j/vB8FvsVp1RP8w=) 2: 186817D6FAAA11EFA67E0D81C4F9AE02.roa (hash: wX4c7151grTgYjOcABNVbqGv3q7jdM7FBjuR7z58nBM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28 (0x1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915365A, serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Validity Not Before: Apr 25 06:53:58 2025 GMT Not After : May 2 06:53:57 2025 GMT Subject: CN=680b3186-ad86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3b:8a:20:38:53:a4:70:44:8a:6c:e8:9c:7f: 85:5a:49:37:5c:91:94:3e:21:dd:35:e4:41:2c:9c: 0f:3a:f3:ee:91:33:25:cf:33:72:b4:a5:76:82:60: 84:a9:fe:f9:1f:b8:56:0a:27:ae:a6:85:c1:27:71: 25:a3:23:77:1f:bf:df:f1:4c:5d:36:23:5d:f7:35: cd:1b:5d:bc:63:90:4a:0a:ba:75:6e:e9:4b:51:7f: 26:fc:8f:64:07:17:40:0a:4f:83:90:65:d8:58:89: 8c:76:0c:9d:d6:03:76:0b:1f:d8:25:32:5c:6c:57: 5c:de:e6:47:97:e1:5c:92:19:45:23:72:d2:2c:41: 86:38:29:93:1d:c8:3e:7d:79:69:85:a8:84:d4:7b: 85:f8:cd:ce:0d:40:58:3f:c9:65:f2:85:77:93:ef: 28:7a:c8:b8:eb:6b:c9:51:90:54:2b:14:45:51:f4: 45:ab:65:12:60:b6:e9:2c:db:80:58:53:92:a2:55: 0f:a0:79:43:91:3c:c8:e8:66:35:31:cf:fd:38:c7: a0:77:75:94:c5:cb:aa:f5:36:08:2b:a2:b0:c1:57: bb:d0:ec:e4:53:79:8e:65:c1:a8:e5:3d:2e:9e:32: d6:57:37:45:04:06:90:fc:ed:22:ca:a4:df:ec:f3: 8a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2B:3B:BB:CA:76:A6:2E:27:23:29:CB:DC:6A:E3:71:C5:5F:D8:B4 X509v3 Authority Key Identifier: keyid:6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e0:5d:79:7d:89:59:c6:0f:39:a3:52:5e:2f:8f:f6:e0:57:f3: 2b:86:1b:c6:b9:f2:d1:de:0c:d5:2a:30:ac:24:8c:81:11:6a: fd:e9:02:55:00:05:98:e2:a1:f7:22:1e:ea:f8:cd:92:c4:54: 05:4d:51:6e:15:c7:5a:e9:65:4b:4c:1e:16:47:c7:e8:10:c4: 76:96:1c:7b:aa:5a:6f:2f:2e:75:38:20:c5:76:0f:84:36:7e: 93:71:2a:14:2f:7e:52:7f:e6:db:b7:c3:8f:09:29:1a:8f:fc: 04:51:4e:ba:8e:38:fe:72:cb:36:16:eb:1f:2b:d4:04:61:1a: c3:72:b5:6d:06:60:9d:b6:1a:9b:52:d9:c5:23:56:6f:fa:24: 28:ba:7d:80:ab:78:b9:bf:eb:57:97:23:38:66:c5:28:d2:ed: b2:db:6b:09:f2:33:3b:7f:3e:9b:4b:cc:21:63:6e:b9:0f:ad: dc:11:13:28:a2:30:d0:ed:c4:c2:86:f7:65:6a:89:9c:42:bc: 0c:2a:25:85:e9:81:40:a5:14:d9:84:64:2e:b9:54:6e:bd:05: 01:b9:e9:a2:91:3d:e5:03:a0:cb:ff:ec:f8:47:35:61:6e:8a: db:57:c5:ea:90:60:9e:c5:d8:03:bc:30:59:eb:f7:d4:66:b5: f7:95:ba:66 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzY1QTExMC8GA1UEBRMoNkQ5NjdGQkREMUI4NzQ3NDgyNDZBQ0I4RDRBQTkwQkE4 QjU2MUI0QTAeFw0yNTA0MjUwNjUzNThaFw0yNTA1MDIwNjUzNTdaMBgxFjAUBgNV BAMTDTY4MGIzMTg2LWFkODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5O4ogOFOkcESKbOicf4VaSTdckZQ+Id015EEsnA868+6RMyXPM3K0pXaCYISp /vkfuFYKJ66mhcEncSWjI3cfv9/xTF02I133Nc0bXbxjkEoKunVu6UtRfyb8j2QH F0AKT4OQZdhYiYx2DJ3WA3YLH9glMlxsV1ze5keX4VySGUUjctIsQYY4KZMdyD59 eWmFqITUe4X4zc4NQFg/yWXyhXeT7yh6yLjra8lRkFQrFEVR9EWrZRJgtuks24BY U5KiVQ+geUORPMjoZjUxz/04x6B3dZTFy6r1NggrorDBV7vQ7ORTeY5lwajlPS6e MtZXN0UEBpD87SLKpN/s84pLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpCs7u8p2 pi4nIynL3GrjccVf2LQwHwYDVR0jBBgwFoAUbZZ/vdG4dHSCRqy41KqQuotWG0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNjVBL0ZBNzA4QURFRkFB ODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhTQ1JxeTQxS3FRdW90V0cw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlpaX3ZkRzRkSFNDUnF5NDFLcVF1b3RXRzBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz NjVBL0ZBNzA4QURFRkFBODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhT Q1JxeTQxS3FRdW90V0cwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAOBdeX2JWcYPOaNSXi+P9uBX8yuGG8a58tHeDNUqMKwkjIERav3pAlUA BZjiofciHur4zZLEVAVNUW4Vx1rpZUtMHhZHx+gQxHaWHHuqWm8vLnU4IMV2D4Q2 fpNxKhQvflJ/5tu3w48JKRqP/ARRTrqOOP5yyzYW6x8r1ARhGsNytW0GYJ22GptS 2cUjVm/6JCi6fYCreLm/61eXIzhmxSjS7bLbawnyMzt/PptLzCFjbrkPrdwREyii MNDtxMKG92VqiZxCvAwqJYXpgUClFNmEZC65VG69BQG56aKRPeUDoMv/7PhHNWFu ittXxeqQYJ7F2AO8MFnr99RmtfeVumY= -----END CERTIFICATE-----Generated at Sat Apr 26 05:00:35 2025 by rpki-client