$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: 8n4rmEndM7t4dP48/is9/bGzQq609cMQPRfZ5E2/+CE= Subject key identifier: 5B:6D:59:57:FD:95:1C:F7:41:E5:8C:FC:2E:FB:51:8E:30:3D:9C:C3 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 0436 Signing time: Fri 25 Apr 2025 00:04:29 +0000 Manifest this update: Fri 25 Apr 2025 00:04:29 +0000 Manifest next update: Fri 02 May 2025 00:04:29 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: FLCHvcJq8oTM2KgcKXaaWRUgOSB1OdnJqNGPaU853Hw=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: kZjcKzBGqSINobGtIV728vc2/z8+SbRwdVQQn+JVTTU=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: uuh45EQpfeL2lsbAeT2+gUwqmhTYsY8UsTGJi5buq44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 00:04:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Apr 25 00:04:29 2025 GMT Not After : May 2 00:04:29 2025 GMT Subject: CN=680ad18d-8108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:3c:ab:48:cc:08:b6:0a:ae:85:35:39:92:eb: 36:4a:f8:e6:0d:08:89:45:f2:14:86:90:ac:bf:c8: d1:5a:fe:b5:c2:06:8e:ec:17:fb:23:05:06:57:6e: 9c:03:81:a9:5f:05:1f:e6:5d:f1:a4:86:93:99:69: e2:eb:23:6e:1e:34:e0:ac:ba:02:ca:06:e8:05:97: 0c:60:8a:66:29:70:32:3a:ac:40:bd:92:ec:27:23: ff:61:42:4f:26:8f:d7:5e:60:0d:4b:4d:d1:19:e8: 5f:d1:11:2b:36:e2:13:49:22:55:40:2e:99:c1:98: b9:2d:b4:ce:76:64:27:e9:5d:06:e6:0b:65:f1:f3: 17:c7:03:05:32:e9:b7:7f:8f:ba:b8:de:3f:cc:d8: c0:b8:50:ed:67:58:1b:81:21:44:da:87:2d:c0:17: 35:69:16:be:a4:23:ed:75:cc:d7:6f:ba:f7:5a:9f: 50:a5:1b:d3:04:c0:b4:ab:e2:7a:11:2c:46:b3:56: d6:71:31:58:62:87:61:b1:75:e8:2a:1f:6c:67:41: dc:4b:49:e5:09:19:43:98:35:79:3a:b5:9a:a1:14: f5:ae:12:3c:78:1e:ee:a6:dd:a1:ee:31:2b:45:d4: e1:80:83:81:f2:71:80:cb:5e:7b:0e:a6:9c:b0:ea: e4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6D:59:57:FD:95:1C:F7:41:E5:8C:FC:2E:FB:51:8E:30:3D:9C:C3 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:f5:c6:00:8c:c4:3f:40:f6:53:37:4c:5f:fe:85:54:86:93: 48:9c:d0:e3:6d:ca:6d:65:d7:22:96:2d:8e:8c:48:83:cb:d4: f1:3c:8e:08:5a:cb:34:54:95:cb:ec:d2:05:92:48:12:8e:06: 40:a4:fc:17:ba:45:59:6d:42:7f:90:51:89:50:9f:c1:00:a5: 76:f4:e4:20:ef:c2:8c:9f:3e:c3:55:92:ea:ca:75:2d:ff:3f: 60:8d:c3:84:ee:a5:f3:79:5d:7d:ca:3f:85:c9:54:28:1b:1e: 89:96:61:6a:14:a2:dc:f8:1c:59:07:b7:5e:e1:38:64:6e:84: 61:6c:4a:07:d5:60:38:de:df:ff:18:06:eb:77:c8:27:fd:5a: e3:92:ac:c0:09:88:c2:91:06:70:f8:dd:4a:5e:37:39:ae:27: 5f:8f:84:0f:c7:e6:d3:af:98:4e:9f:f9:18:62:b4:13:ec:d1: 55:10:c2:74:6a:ef:6e:b1:b5:c9:a6:69:03:32:30:18:46:88: d2:23:30:d7:37:e7:35:38:26:1e:a6:74:5b:1d:7a:c8:5e:0b: 84:10:c9:22:07:18:dc:d6:2a:b3:2e:5b:5c:a8:53:5e:d7:05: 19:b4:5d:a0:61:71:e7:91:2c:94:ca:ae:59:13:5f:63:e0:a5: 6f:2f:33:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjUwNDI1MDAwNDI5WhcNMjUwNTAyMDAwNDI5WjAYMRYwFAYD VQQDEw02ODBhZDE4ZC04MTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5TyrSMwItgquhTU5kus2SvjmDQiJRfIUhpCsv8jRWv61wgaO7Bf7IwUGV26c A4GpXwUf5l3xpIaTmWni6yNuHjTgrLoCygboBZcMYIpmKXAyOqxAvZLsJyP/YUJP Jo/XXmANS03RGehf0RErNuITSSJVQC6ZwZi5LbTOdmQn6V0G5gtl8fMXxwMFMum3 f4+6uN4/zNjAuFDtZ1gbgSFE2octwBc1aRa+pCPtdczXb7r3Wp9QpRvTBMC0q+J6 ESxGs1bWcTFYYodhsXXoKh9sZ0HcS0nlCRlDmDV5OrWaoRT1rhI8eB7upt2h7jEr RdThgIOB8nGAy157DqacsOrk2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFttWVf9 lRz3QeWM/C77UY4wPZzDMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCs9cYAjMQ/QPZTN0xf/oVUhpNInNDjbcptZdcili2OjEiDy9TxPI4I Wss0VJXL7NIFkkgSjgZApPwXukVZbUJ/kFGJUJ/BAKV29OQg78KMnz7DVZLqynUt /z9gjcOE7qXzeV19yj+FyVQoGx6JlmFqFKLc+BxZB7de4ThkboRhbEoH1WA43t// GAbrd8gn/VrjkqzACYjCkQZw+N1KXjc5ridfj4QPx+bTr5hOn/kYYrQT7NFVEMJ0 au9usbXJpmkDMjAYRojSIzDXN+c1OCYepnRbHXrIXguEEMkiBxjc1iqzLltcqFNe 1wUZtF2gYXHnkSyUyq5ZE19j4KVvLzMM -----END CERTIFICATE-----Generated at Sat Apr 26 12:35:29 2025 by rpki-client