$ rpki-client -vvf rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft File: bZZ_vdG4dHSCRqy41KqQuotWG0o.mft (raw, json) Hash identifier: 8zhM76mGnR1XHmWzgvxivaP5dtuIRX9GEEMojHwJTmE= Subject key identifier: CE:3F:C2:0B:5A:7B:F6:87:49:99:2C:ED:7A:E0:14:47:40:76:8B:59 Authority key identifier: 6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A Certificate issuer: /CN=A915365A/serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Certificate serial: 3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft Manifest number: 3D Signing time: Sun 29 Jun 2025 06:33:08 +0000 Manifest this update: Sun 29 Jun 2025 06:33:08 +0000 Manifest next update: Sun 06 Jul 2025 06:33:08 +0000 Files and hashes: 1: bZZ_vdG4dHSCRqy41KqQuotWG0o.crl (hash: K9mOffzQEHBpbrLlk+JdPea+eW0i78MDco7kgEKLhow=) 2: 186817D6FAAA11EFA67E0D81C4F9AE02.roa (hash: XqbSA7pTHQu8ks4FQOA3vJ/bHZOe/8eB0bJZqpH2INk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 06:33:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63 (0x3f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915365A, serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Validity Not Before: Jun 29 06:33:08 2025 GMT Not After : Jul 6 06:33:08 2025 GMT Subject: CN=6860de24-c91a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f5:09:8e:0c:58:7d:ee:d9:26:92:5d:ed:af: d9:0a:c5:76:89:44:43:dd:d5:b8:1e:54:43:f1:7f: a2:0a:97:29:c3:d5:6c:3f:ec:91:4b:54:06:c8:a9: 9b:86:af:df:6b:55:8d:64:99:e9:1b:5e:5d:d4:d3: 0d:48:28:0a:da:c3:1e:b6:7f:3b:14:b1:59:9c:09: 54:38:d9:3a:63:71:3b:8c:28:26:f7:1c:de:e3:f2: 71:c1:aa:0d:88:69:c1:f2:57:df:d6:00:28:a6:cb: 40:ad:46:49:ea:4d:fd:8a:f1:75:b7:bd:7d:da:7c: 1a:b6:6f:20:5c:c1:ab:6a:30:a1:61:69:39:6d:5a: 3a:52:ad:d3:71:f0:b9:74:e4:4b:8c:1a:00:64:cf: c6:ff:b8:21:10:f4:04:9f:d5:58:9f:cf:79:b7:1a: 4c:2b:44:a1:bc:ae:80:65:54:d4:fa:2b:2d:ed:05: 93:b2:49:98:c8:34:dd:e9:c2:c7:b9:aa:e6:6c:3b: c0:a4:eb:8e:aa:5e:3d:87:5f:7a:1e:dd:67:9b:1b: eb:57:f7:4d:70:ce:82:04:12:d2:f5:50:5e:35:59: d0:08:e0:0c:dd:f5:71:5a:8e:4f:78:a9:e5:f1:c4: e5:1e:e4:8a:f2:65:6b:a3:55:3c:05:70:f4:6f:99: b9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3F:C2:0B:5A:7B:F6:87:49:99:2C:ED:7A:E0:14:47:40:76:8B:59 X509v3 Authority Key Identifier: keyid:6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:57:b4:e0:71:f6:57:f7:ab:8b:7d:a6:c5:b6:73:00:4f:01: cd:79:e7:70:9e:a6:e4:86:d1:e3:73:ad:a2:ec:c9:c4:8b:76: 8e:e2:10:42:2a:2b:5d:72:8c:f9:6e:bd:fb:ab:23:b7:18:04: da:f8:5e:3e:47:e9:fd:2f:16:7c:d4:25:c2:20:97:d3:26:52: 91:c3:2d:d2:16:e9:72:f3:ac:ff:97:80:1a:23:e1:ad:ff:0a: 05:4b:a6:2f:ca:dd:3e:8d:2d:f1:31:f4:9e:fa:ef:5b:8e:2b: e2:62:84:09:0f:83:83:bf:01:ab:4e:bb:3d:74:50:43:50:23: 58:6d:ad:ea:b9:10:ea:cb:97:1a:21:cb:74:0a:ef:82:a8:42: 50:ff:83:f8:88:9a:94:b9:10:3e:51:65:0e:ca:ff:4a:6a:cd: 57:a8:c9:a3:a1:9e:d0:09:05:a9:f0:5b:a7:31:c2:9b:c0:17: b8:79:a9:60:06:3c:06:97:2f:20:a5:53:96:b3:1d:1a:6e:9b: ab:d3:4e:53:5d:e7:a0:c6:a3:b7:fa:25:05:7c:9a:77:4f:85: d7:5d:7e:7b:70:42:5a:f2:ac:65:73:0d:b9:9d:de:c4:e1:23: ed:b4:af:f5:2a:b7:9b:d1:a6:bb:73:5f:8d:09:63:06:d4:1d: a4:37:0c:69 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzY1QTExMC8GA1UEBRMoNkQ5NjdGQkREMUI4NzQ3NDgyNDZBQ0I4RDRBQTkwQkE4 QjU2MUI0QTAeFw0yNTA2MjkwNjMzMDhaFw0yNTA3MDYwNjMzMDhaMBgxFjAUBgNV BAMTDTY4NjBkZTI0LWM5MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS9QmODFh97tkmkl3tr9kKxXaJREPd1bgeVEPxf6IKlynD1Ww/7JFLVAbIqZuG r99rVY1kmekbXl3U0w1IKArawx62fzsUsVmcCVQ42TpjcTuMKCb3HN7j8nHBqg2I acHyV9/WACimy0CtRknqTf2K8XW3vX3afBq2byBcwatqMKFhaTltWjpSrdNx8Ll0 5EuMGgBkz8b/uCEQ9ASf1Vifz3m3GkwrRKG8roBlVNT6Ky3tBZOySZjINN3pwse5 quZsO8Ck646qXj2HX3oe3WebG+tX901wzoIEEtL1UF41WdAI4Azd9XFajk94qeXx xOUe5IryZWujVTwFcPRvmbnpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzj/CC1p7 9odJmSzteuAUR0B2i1kwHwYDVR0jBBgwFoAUbZZ/vdG4dHSCRqy41KqQuotWG0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNjVBL0ZBNzA4QURFRkFB ODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhTQ1JxeTQxS3FRdW90V0cw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlpaX3ZkRzRkSFNDUnF5NDFLcVF1b3RXRzBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz NjVBL0ZBNzA4QURFRkFBODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhT Q1JxeTQxS3FRdW90V0cwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBANZXtOBx9lf3q4t9psW2cwBPAc1553CepuSG0eNzraLsycSLdo7iEEIq K11yjPluvfurI7cYBNr4Xj5H6f0vFnzUJcIgl9MmUpHDLdIW6XLzrP+XgBoj4a3/ CgVLpi/K3T6NLfEx9J7671uOK+JihAkPg4O/AatOuz10UENQI1htreq5EOrLlxoh y3QK74KoQlD/g/iImpS5ED5RZQ7K/0pqzVeoyaOhntAJBanwW6cxwpvAF7h5qWAG PAaXLyClU5azHRpum6vTTlNd56DGo7f6JQV8mndPhdddfntwQlryrGVzDbmd3sTh I+20r/Uqt5vRprtzX40JYwbUHaQ3DGk= -----END CERTIFICATE-----Generated at Tue Jul 1 00:48:59 2025 by rpki-client