$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft File: 9bzqkIXorbqorCGgTlPb_sMgvOI.mft (raw, json) Hash identifier: DTrXcxEGIXeY9zt3kWI+ocdJrB/uhDYk78BTDnaRvXE= Subject key identifier: 7C:3C:95:49:90:46:F7:62:D1:6F:95:41:90:F6:F3:5D:3B:61:34:47 Authority key identifier: F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2 Certificate issuer: /CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2 Certificate serial: 015D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft Manifest number: 015D Signing time: Fri 20 Jun 2025 15:49:46 +0000 Manifest this update: Fri 20 Jun 2025 15:49:46 +0000 Manifest next update: Fri 27 Jun 2025 15:49:46 +0000 Files and hashes: 1: 9bzqkIXorbqorCGgTlPb_sMgvOI.crl (hash: 0uOGMk7lT1ymnbaqTygvONau+Sxj/S0n8HC+yNQfvSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 15:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 349 (0x15d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2 Validity Not Before: Jun 20 15:49:46 2025 GMT Not After : Jun 27 15:49:46 2025 GMT Subject: CN=6855831a-b9d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:60:d9:f3:81:bf:db:1a:fd:cc:b4:b5:7d:a6: 6f:04:c2:97:40:e2:e1:06:b1:b0:3f:84:8e:c3:18: 29:24:cb:8f:a2:c9:84:bf:da:5e:05:af:1f:a4:bd: 4f:4e:d0:ae:c0:a5:e2:73:aa:58:71:f1:e7:36:77: 05:9e:09:3c:1f:d6:32:66:8f:c5:52:0a:85:27:13: 14:17:b0:b7:c1:d4:eb:eb:79:41:88:54:62:00:8f: 60:ef:28:72:03:c7:fb:59:14:08:9b:57:c8:e1:cf: 83:de:53:a5:5f:8e:07:d1:58:f3:f2:7b:02:7d:95: 37:58:45:24:ce:6a:fa:e9:29:64:fd:30:56:f8:3c: df:13:4d:b1:25:82:4e:ef:28:54:c2:86:62:a4:47: 62:14:22:53:93:c9:de:b6:23:c0:73:d9:0d:84:88: 3a:f6:b9:d8:41:03:b1:15:51:d4:ba:3d:da:49:f9: a3:9e:ea:f0:1e:37:41:37:f9:2a:e3:5e:90:27:40: 21:23:14:93:59:f0:2e:ce:2c:d1:10:40:9d:25:bf: 3d:a5:43:14:e0:d6:8f:6d:02:54:ee:53:bd:a7:c6: cf:38:b2:9a:cd:93:cb:1c:f5:11:92:77:94:72:f0: 24:8f:47:20:46:5f:ef:53:07:05:83:cf:ac:62:96: 32:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3C:95:49:90:46:F7:62:D1:6F:95:41:90:F6:F3:5D:3B:61:34:47 X509v3 Authority Key Identifier: keyid:F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:bd:31:de:37:3a:3f:e1:83:22:84:f8:5b:11:fb:5a:9e:da: 40:5c:ad:f9:ff:ee:0d:3a:d1:fa:ba:f8:c9:87:61:13:3f:37: 85:ec:fa:ce:e8:19:f5:94:d2:80:82:45:e6:cc:e6:e3:e9:1f: 0e:8e:5b:66:30:41:70:bb:b2:7c:da:ef:96:a6:86:5d:47:9f: e0:9f:08:58:bd:cd:1d:76:5e:e0:6e:07:96:cc:71:42:dc:7e: 65:ca:fb:b8:8a:31:d2:00:97:5f:5f:c7:87:30:a5:b8:c5:99: 07:56:7c:e3:2d:19:47:4c:71:ff:25:a8:69:06:1a:cf:e8:79: f2:7d:92:42:69:68:c9:f8:54:2b:88:98:d7:3b:84:21:6b:f8: 0c:62:c4:2e:10:49:da:b7:1e:f8:98:5f:a7:a2:e8:10:5f:2b: c2:5a:5a:4b:b2:02:5c:3e:90:18:5f:51:0c:8e:50:2d:fb:13: 64:0c:42:bd:6a:dd:94:42:8d:63:1e:0f:fb:a1:b5:d4:bd:2e: 5f:d5:c8:1c:7e:d5:38:0d:3b:42:29:e4:87:34:16:f5:70:a5: 16:58:d1:62:bc:76:f6:f7:53:43:4f:6f:3f:72:f7:83:ae:eb: dc:94:03:44:85:16:51:b2:d7:80:32:9d:05:63:9b:da:3a:ff: 29:92:db:89 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKEY1QkNFQTkwODVFOEFEQkFBOEFDMjFBMDRFNTNEQkZF QzMyMEJDRTIwHhcNMjUwNjIwMTU0OTQ2WhcNMjUwNjI3MTU0OTQ2WjAYMRYwFAYD VQQDEw02ODU1ODMxYS1iOWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0mDZ84G/2xr9zLS1faZvBMKXQOLhBrGwP4SOwxgpJMuPosmEv9peBa8fpL1P TtCuwKXic6pYcfHnNncFngk8H9YyZo/FUgqFJxMUF7C3wdTr63lBiFRiAI9g7yhy A8f7WRQIm1fI4c+D3lOlX44H0Vjz8nsCfZU3WEUkzmr66Slk/TBW+DzfE02xJYJO 7yhUwoZipEdiFCJTk8netiPAc9kNhIg69rnYQQOxFVHUuj3aSfmjnurwHjdBN/kq 416QJ0AhIxSTWfAuzizREECdJb89pUMU4NaPbQJU7lO9p8bPOLKazZPLHPURkneU cvAkj0cgRl/vUwcFg8+sYpYy1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHw8lUmQ Rvdi0W+VQZD28107YTRHMB8GA1UdIwQYMBaAFPW86pCF6K26qKwhoE5T2/7DILzi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS9BMjk4OEYzODQw QUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3JicW9yQ0dnVGxQYl9zTWd2 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlienFrSVhvcmJxb3JDR2dUbFBiX3NNZ3ZPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS9BMjk4OEYzODQwQUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3Ji cW9yQ0dnVGxQYl9zTWd2T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRvTHeNzo/4YMihPhbEftantpAXK35/+4NOtH6uvjJh2ETPzeF7PrO 6Bn1lNKAgkXmzObj6R8OjltmMEFwu7J82u+WpoZdR5/gnwhYvc0ddl7gbgeWzHFC 3H5lyvu4ijHSAJdfX8eHMKW4xZkHVnzjLRlHTHH/JahpBhrP6HnyfZJCaWjJ+FQr iJjXO4Qha/gMYsQuEEnatx74mF+nougQXyvCWlpLsgJcPpAYX1EMjlAt+xNkDEK9 at2UQo1jHg/7obXUvS5f1cgcftU4DTtCKeSHNBb1cKUWWNFivHb291NDT28/cveD ruvclANEhRZRsteAMp0FY5vaOv8pktuJ -----END CERTIFICATE-----Generated at Sat Jun 21 09:36:27 2025 by rpki-client