$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: 0O8BLWByjEePkxti4NEe/GGGkHmrt1Nga3fAIoEV4K0= Subject key identifier: 9E:19:E3:48:4C:54:99:38:9A:E8:02:08:5A:60:CA:69:20:DB:F0:8B Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 0475 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 046B Signing time: Sat 09 Aug 2025 00:38:16 +0000 Manifest this update: Sat 09 Aug 2025 00:38:16 +0000 Manifest next update: Sat 16 Aug 2025 00:38:16 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: Iz3k/f0PaQ0CxW7rn4WnJnVZ8X+mHbnEHTg0JRIXlJQ=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: kZjcKzBGqSINobGtIV728vc2/z8+SbRwdVQQn+JVTTU=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: uuh45EQpfeL2lsbAeT2+gUwqmhTYsY8UsTGJi5buq44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1141 (0x475) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Aug 9 00:38:16 2025 GMT Not After : Aug 16 00:38:16 2025 GMT Subject: CN=68969878-c642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:31:49:cb:52:16:ec:79:61:10:d3:79:04:0a: 93:73:d6:17:1d:2c:81:73:bf:25:8c:b0:4e:57:a2: 84:db:04:a8:5e:a0:8b:76:25:14:23:35:13:8d:e0: 40:66:a5:f5:14:c2:d7:12:d1:fc:02:61:ae:03:1f: 05:91:34:a7:3c:b7:6c:45:8b:3a:af:63:22:7a:06: e3:87:70:d8:a6:8b:de:a9:85:dd:8c:c0:80:7d:23: 39:89:76:62:05:b5:4a:20:68:96:9d:55:07:29:84: 5c:47:96:9a:d1:65:93:b5:c2:76:71:d2:43:7e:cc: e3:28:ba:93:79:b5:e3:bd:8a:6d:3e:94:65:7e:d9: b8:2f:95:ee:0a:87:f2:7c:47:da:4a:b7:35:4f:30: db:aa:e2:79:bd:16:b4:18:89:25:df:ee:67:7c:c7: 72:a2:dd:f4:4d:66:61:b0:70:01:58:8e:20:36:64: 34:36:ae:d8:ef:79:04:ed:10:90:e1:7a:a4:82:df: d1:72:d9:51:f5:7f:1a:2f:c2:99:f7:43:71:15:2b: fd:03:d5:3b:11:f5:2c:1f:60:a9:58:ec:87:78:a8: 9d:d4:38:4f:4a:6c:3e:76:78:24:81:4c:96:bb:14: 90:94:6d:9d:e8:2b:27:ad:c8:52:52:e8:a9:96:4c: 0e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:19:E3:48:4C:54:99:38:9A:E8:02:08:5A:60:CA:69:20:DB:F0:8B X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:b9:e5:2e:d6:2e:fc:76:f1:bd:05:30:f9:0d:1d:a5:85:32: 4d:64:d1:e6:5b:b1:a6:69:79:95:b7:df:60:21:9b:ae:ec:8d: 54:1e:a0:1e:8a:a9:e7:37:48:ea:d7:c2:87:49:85:50:14:91: ea:bd:14:bd:82:4a:3c:0a:79:3f:68:17:39:da:05:34:db:17: 17:b5:f5:18:70:62:04:38:be:aa:6d:0d:44:99:98:fa:9f:95: a6:37:ad:be:17:73:b7:db:10:7b:ff:00:fe:32:48:df:30:07: f7:72:39:c3:0a:0d:93:8a:f2:e9:a9:6d:0d:02:ed:18:3c:4b: e5:77:c9:a6:b0:7a:c0:0c:b1:b3:3c:f9:69:88:00:14:4b:66: 32:3c:91:53:7a:7f:1f:aa:06:af:ea:f1:2e:09:04:38:10:5a: 4e:12:a1:4f:cc:cf:82:d9:5a:a5:f3:39:7f:5b:d2:48:45:b1: 34:05:b7:93:e3:bf:80:15:fb:be:e4:8c:d8:38:20:58:58:80: 76:55:35:3c:df:e6:1f:88:95:af:fd:60:61:a4:b1:0b:f2:4e: 9d:0a:78:36:dd:c2:74:df:34:2f:6b:59:1c:f7:56:83:fe:4b: 34:49:fb:5f:55:dd:cb:cf:34:3a:a2:e9:62:20:ef:d3:6f:8d: 6c:26:19:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjUwODA5MDAzODE2WhcNMjUwODE2MDAzODE2WjAYMRYwFAYD VQQDEw02ODk2OTg3OC1jNjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TFJy1IW7HlhENN5BAqTc9YXHSyBc78ljLBOV6KE2wSoXqCLdiUUIzUTjeBA ZqX1FMLXEtH8AmGuAx8FkTSnPLdsRYs6r2Miegbjh3DYpoveqYXdjMCAfSM5iXZi BbVKIGiWnVUHKYRcR5aa0WWTtcJ2cdJDfszjKLqTebXjvYptPpRlftm4L5XuCofy fEfaSrc1TzDbquJ5vRa0GIkl3+5nfMdyot30TWZhsHABWI4gNmQ0Nq7Y73kE7RCQ 4Xqkgt/RctlR9X8aL8KZ90NxFSv9A9U7EfUsH2CpWOyHeKid1DhPSmw+dngkgUyW uxSQlG2d6CsnrchSUuiplkwOowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4Z40hM VJk4mugCCFpgymkg2/CLMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFueUu1i78dvG9BTD5DR2lhTJNZNHmW7GmaXmVt99gIZuu7I1UHqAe iqnnN0jq18KHSYVQFJHqvRS9gko8Cnk/aBc52gU02xcXtfUYcGIEOL6qbQ1EmZj6 n5WmN62+F3O32xB7/wD+MkjfMAf3cjnDCg2TivLpqW0NAu0YPEvld8mmsHrADLGz PPlpiAAUS2YyPJFTen8fqgav6vEuCQQ4EFpOEqFPzM+C2Vql8zl/W9JIRbE0BbeT 47+AFfu+5IzYOCBYWIB2VTU83+YfiJWv/WBhpLEL8k6dCng23cJ03zQva1kc91aD /ks0SftfVd3LzzQ6ouliIO/Tb41sJhku -----END CERTIFICATE-----Generated at Sun Aug 10 04:53:22 2025 by rpki-client