$ rpki-client -vvf rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft File: bZYGiLbecUGnIYmOngc-FneP7zU.mft (raw, json) Hash identifier: iGLPlYeM8kzWKn/xa5fFffnTfv0tt0yVBCB0LuT2ILA= Subject key identifier: 36:85:2F:6B:6C:25:44:D4:24:34:71:21:41:FB:E2:BA:9C:B3:E4:0D Authority key identifier: 6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35 Certificate issuer: /CN=A9197A8F/serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35 Certificate serial: 0165 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft Manifest number: 0161 Signing time: Tue 05 Aug 2025 04:27:36 +0000 Manifest this update: Tue 05 Aug 2025 04:27:36 +0000 Manifest next update: Tue 12 Aug 2025 04:27:36 +0000 Files and hashes: 1: bZYGiLbecUGnIYmOngc-FneP7zU.crl (hash: XzcDpL998eWreCPYdO0e/2a84seD6HEf3YftmuGK50s=) 2: A663285A59DE11EE85CFCB12C4F9AE02.roa (hash: X/pG7qc3+7qr+qWCl38L4oCPzOU3+0jR+niOHWQizTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 357 (0x165) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197A8F, serialNumber=6D960688B6DE7141A721898E9E073E16778FEF35 Validity Not Before: Aug 5 04:27:36 2025 GMT Not After : Aug 12 04:27:36 2025 GMT Subject: CN=68918838-43f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9c:41:c0:95:ac:74:db:d5:51:0e:08:85:d0: 70:e1:9c:dd:17:8d:b5:74:e3:e0:65:5e:5d:8f:0e: 49:cf:43:8f:ce:bf:69:ab:1a:2e:72:56:be:01:44: ca:d7:be:b0:27:b8:4a:82:10:4b:55:b6:2a:bb:b6: 67:95:07:a8:32:79:ab:2a:7d:92:20:7f:13:39:36: 66:66:fc:ea:d4:7e:7a:f7:cd:44:2a:44:a3:0b:27: b4:15:2e:90:d6:8c:17:00:be:4c:c9:94:89:70:e3: 6d:85:d9:c1:95:c1:67:46:03:85:4d:5b:26:06:2f: 5d:15:70:14:58:c8:76:0d:37:09:74:5c:b7:94:2c: a5:9c:d4:55:bd:e3:96:8a:19:b1:86:7f:a9:98:12: d6:b3:d8:91:ec:d6:7c:df:44:71:c5:32:04:1b:6c: af:7c:9d:e7:ea:32:72:ac:3e:09:cc:67:3d:a8:c6: 17:6f:ca:b5:06:f8:12:fb:4e:e8:4b:7d:ff:10:e0: 8a:64:18:d6:c9:84:b9:2d:d2:fa:05:02:70:ec:f0: e8:7b:e1:ad:1f:3b:ee:c7:e2:20:7d:dc:48:84:bb: 0b:2e:65:e8:1c:63:61:00:88:99:0f:4b:73:1c:fa: 53:fb:54:3f:17:c1:a9:e7:f5:83:bf:2c:76:27:39: 89:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:85:2F:6B:6C:25:44:D4:24:34:71:21:41:FB:E2:BA:9C:B3:E4:0D X509v3 Authority Key Identifier: keyid:6D:96:06:88:B6:DE:71:41:A7:21:89:8E:9E:07:3E:16:77:8F:EF:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZYGiLbecUGnIYmOngc-FneP7zU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197A8F/63ACD5F459DB11EEA737FE0AC4F9AE02/bZYGiLbecUGnIYmOngc-FneP7zU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:0d:e0:44:de:c5:e9:5f:27:1a:f4:a2:0a:85:3e:8b:1e:d3: d8:29:f6:3f:a8:76:02:14:00:a3:2c:67:d6:2a:c6:37:f6:16: ea:27:11:8d:56:d8:f4:95:d0:c0:dd:d4:e5:5a:89:6e:ff:b8: cb:43:74:ed:e4:03:db:96:89:1c:4f:96:e7:9a:3a:a9:34:77: ea:2c:e7:df:a8:c4:e2:b0:da:2a:87:ac:6f:0a:c5:f4:75:ca: fa:d4:5b:32:68:06:7e:1f:5d:9b:01:cb:c3:6b:45:92:ab:6d: 64:3d:6a:e0:40:6b:ef:55:bf:1f:69:d6:d1:2e:55:e9:91:3e: bf:67:e7:81:5f:fd:9c:8c:de:f9:16:1e:27:42:a0:ae:cb:82: cd:40:f2:e7:8e:5c:ea:8f:06:ef:6e:af:82:ce:f1:e3:08:5c: 3e:3c:f5:a1:c3:ea:70:a9:95:f5:af:7f:4e:12:95:63:56:b8: 9d:16:88:5d:ac:9c:08:2f:f5:31:12:02:de:50:70:86:0f:ca: cf:cb:55:55:af:20:e1:fe:72:a7:d5:04:32:43:c3:c9:ac:f9: 24:16:40:87:f0:73:84:4c:61:9f:41:64:0a:2f:cb:ae:ca:85: 05:6c:c7:f3:5d:c5:55:d5:d2:e1:65:42:b7:16:13:92:37:cc: 64:4e:a9:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdBOEYxMTAvBgNVBAUTKDZEOTYwNjg4QjZERTcxNDFBNzIxODk4RTlFMDczRTE2 Nzc4RkVGMzUwHhcNMjUwODA1MDQyNzM2WhcNMjUwODEyMDQyNzM2WjAYMRYwFAYD VQQDEw02ODkxODgzOC00M2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5xBwJWsdNvVUQ4IhdBw4ZzdF421dOPgZV5djw5Jz0OPzr9pqxoucla+AUTK 176wJ7hKghBLVbYqu7ZnlQeoMnmrKn2SIH8TOTZmZvzq1H56981EKkSjCye0FS6Q 1owXAL5MyZSJcONthdnBlcFnRgOFTVsmBi9dFXAUWMh2DTcJdFy3lCylnNRVveOW ihmxhn+pmBLWs9iR7NZ830RxxTIEG2yvfJ3n6jJyrD4JzGc9qMYXb8q1BvgS+07o S33/EOCKZBjWyYS5LdL6BQJw7PDoe+GtHzvux+IgfdxIhLsLLmXoHGNhAIiZD0tz HPpT+1Q/F8Gp5/WDvyx2JzmJYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDaFL2ts JUTUJDRxIUH74rqcs+QNMB8GA1UdIwQYMBaAFG2WBoi23nFBpyGJjp4HPhZ3j+81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0E4Ri82M0FDRDVGNDU5 REIxMUVFQTczN0ZFMEFDNEY5QUUwMi9iWllHaUxiZWNVR25JWW1PbmdjLUZuZVA3 elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JaWUdpTGJlY1VHbklZbU9uZ2MtRm5lUDd6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0E4Ri82M0FDRDVGNDU5REIxMUVFQTczN0ZFMEFDNEY5QUUwMi9iWllHaUxiZWNV R25JWW1PbmdjLUZuZVA3elUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNDeBE3sXpXyca9KIKhT6LHtPYKfY/qHYCFACjLGfWKsY39hbqJxGN Vtj0ldDA3dTlWolu/7jLQ3Tt5APblokcT5bnmjqpNHfqLOffqMTisNoqh6xvCsX0 dcr61FsyaAZ+H12bAcvDa0WSq21kPWrgQGvvVb8fadbRLlXpkT6/Z+eBX/2cjN75 Fh4nQqCuy4LNQPLnjlzqjwbvbq+CzvHjCFw+PPWhw+pwqZX1r39OEpVjVridFohd rJwIL/UxEgLeUHCGD8rPy1VVryDh/nKn1QQyQ8PJrPkkFkCH8HOETGGfQWQKL8uu yoUFbMfzXcVV1dLhZUK3FhOSN8xkTqmM -----END CERTIFICATE-----Generated at Tue Aug 5 17:26:23 2025 by rpki-client