$ rpki-client -vvf rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft File: bZZ_vdG4dHSCRqy41KqQuotWG0o.mft (raw, json) Hash identifier: AfCLnfxJ6BoK3rj+KmlIYcNq4TvHTIsaSXdRtEkQrbk= Subject key identifier: BB:B5:B2:5A:D7:C4:E1:7D:7A:48:10:2A:F5:6A:2C:8F:8C:81:D6:8D Authority key identifier: 6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A Certificate issuer: /CN=A915365A/serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Certificate serial: 5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft Manifest number: 59 Signing time: Sat 23 Aug 2025 07:25:21 +0000 Manifest this update: Sat 23 Aug 2025 07:25:20 +0000 Manifest next update: Sat 30 Aug 2025 07:25:20 +0000 Files and hashes: 1: bZZ_vdG4dHSCRqy41KqQuotWG0o.crl (hash: y7F7V7F7CQSH5ivp0eMtLWJCNarbg5y2QoNRn+j5968=) 2: 186817D6FAAA11EFA67E0D81C4F9AE02.roa (hash: XqbSA7pTHQu8ks4FQOA3vJ/bHZOe/8eB0bJZqpH2INk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:25:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 91 (0x5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915365A, serialNumber=6D967FBDD1B874748246ACB8D4AA90BA8B561B4A Validity Not Before: Aug 23 07:25:20 2025 GMT Not After : Aug 30 07:25:20 2025 GMT Subject: CN=68a96ce0-5649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f6:dc:9c:4a:43:6a:b9:66:d9:3e:d3:65:e8: 4a:54:37:58:57:61:23:fd:a6:85:5a:06:6a:86:f2: 27:00:5c:ce:52:b3:94:0f:13:90:6c:f2:bb:d9:0c: 74:fd:ef:46:01:c0:b3:cc:65:f3:4c:d8:69:e5:9e: cd:c6:81:82:03:85:c8:a5:af:70:5d:56:2e:6b:ba: 81:aa:b3:28:80:c9:86:00:3d:9f:ae:67:92:ad:93: 2a:a9:e8:09:d9:2d:84:21:e4:ef:c0:6d:eb:58:95: 20:99:5a:c6:91:83:8e:24:1f:08:4b:af:7b:70:fd: 67:27:91:97:46:d2:83:34:30:66:bc:dc:53:9a:e3: 04:46:88:f4:4c:d7:2f:ad:d6:5c:7c:b6:60:b8:3b: 9f:a0:a7:6d:12:65:4c:a5:83:8a:32:38:c3:9f:a9: 71:d8:58:0d:9c:5c:33:55:21:7b:7e:79:c1:50:c2: 65:50:c8:7c:69:eb:24:4f:aa:67:00:bc:73:f2:62: d4:8b:ef:29:9f:c7:2c:b0:1d:a9:13:0d:50:50:c4: 35:e0:eb:b3:63:b1:dd:c5:62:03:b9:12:3f:79:f4: 40:9e:3e:1b:54:9e:1e:d7:62:ec:5f:2f:f8:60:b6: 63:8e:f4:c3:f9:f0:c8:40:69:fa:ce:3f:35:db:e9: f2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B5:B2:5A:D7:C4:E1:7D:7A:48:10:2A:F5:6A:2C:8F:8C:81:D6:8D X509v3 Authority Key Identifier: keyid:6D:96:7F:BD:D1:B8:74:74:82:46:AC:B8:D4:AA:90:BA:8B:56:1B:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZZ_vdG4dHSCRqy41KqQuotWG0o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915365A/FA708ADEFAA811EFBE5C047BC4F9AE02/bZZ_vdG4dHSCRqy41KqQuotWG0o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:12:1d:9d:e2:9f:ae:17:56:8e:d6:f5:a3:7f:b3:50:29:44: 33:95:ef:1f:6b:7f:4d:97:32:d4:3e:e2:5f:6a:a7:36:35:67: c5:03:a9:95:a8:e1:70:b3:f4:cf:e9:f1:c4:e6:50:7a:13:41: 30:7f:98:31:16:a1:13:96:ea:82:40:3f:d3:67:9f:b7:dc:34: 54:b8:6f:71:35:b0:f6:dd:70:be:68:1f:6e:85:44:54:6a:a1: 50:5b:46:78:8e:c0:09:3b:f4:b2:02:e7:5f:9e:3e:e0:cf:f8: 76:82:06:e9:a2:14:6d:38:c9:47:87:96:ef:9c:d4:9a:3c:6a: 72:78:e8:3e:5a:cc:ff:35:1a:59:20:f5:f6:f7:4f:93:8d:8f: 92:5b:a1:b3:76:fb:36:7c:1e:42:1c:fe:4f:bf:e1:5f:4e:a8: 5d:90:09:c3:8c:68:ff:58:9a:41:90:69:01:4e:5f:50:01:d6: d0:a8:78:f5:ec:97:76:85:84:11:e3:d7:04:9a:31:48:9b:7d: eb:d6:b2:94:b2:1f:eb:99:fa:58:f4:ce:fb:74:93:ac:4a:8e: 9f:53:87:60:2d:31:ac:ae:e9:a3:3d:a6:bb:02:80:a0:07:dc: ac:b7:06:ba:70:f4:70:bd:83:1c:45:92:a0:48:bf:9e:d7:9c: ae:f8:5b:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MzY1QTExMC8GA1UEBRMoNkQ5NjdGQkREMUI4NzQ3NDgyNDZBQ0I4RDRBQTkwQkE4 QjU2MUI0QTAeFw0yNTA4MjMwNzI1MjBaFw0yNTA4MzAwNzI1MjBaMBgxFjAUBgNV BAMTDTY4YTk2Y2UwLTU2NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDk9tycSkNquWbZPtNl6EpUN1hXYSP9poVaBmqG8icAXM5Ss5QPE5Bs8rvZDHT9 70YBwLPMZfNM2Gnlns3GgYIDhcilr3BdVi5ruoGqsyiAyYYAPZ+uZ5Ktkyqp6AnZ LYQh5O/AbetYlSCZWsaRg44kHwhLr3tw/WcnkZdG0oM0MGa83FOa4wRGiPRM1y+t 1lx8tmC4O5+gp20SZUylg4oyOMOfqXHYWA2cXDNVIXt+ecFQwmVQyHxp6yRPqmcA vHPyYtSL7ymfxyywHakTDVBQxDXg67Njsd3FYgO5Ej959ECePhtUnh7XYuxfL/hg tmOO9MP58MhAafrOPzXb6fJzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu7WyWtfE 4X16SBAq9Wosj4yB1o0wHwYDVR0jBBgwFoAUbZZ/vdG4dHSCRqy41KqQuotWG0ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzNjVBL0ZBNzA4QURFRkFB ODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhTQ1JxeTQxS3FRdW90V0cw by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYlpaX3ZkRzRkSFNDUnF5NDFLcVF1b3RXRzBvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUz NjVBL0ZBNzA4QURFRkFBODExRUZCRTVDMDQ3QkM0RjlBRTAyL2JaWl92ZEc0ZEhT Q1JxeTQxS3FRdW90V0cwby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC8SHZ3in64XVo7W9aN/s1ApRDOV7x9rf02XMtQ+4l9qpzY1Z8UDqZWo 4XCz9M/p8cTmUHoTQTB/mDEWoROW6oJAP9Nnn7fcNFS4b3E1sPbdcL5oH26FRFRq oVBbRniOwAk79LIC51+ePuDP+HaCBumiFG04yUeHlu+c1Jo8anJ46D5azP81Glkg 9fb3T5ONj5JbobN2+zZ8HkIc/k+/4V9OqF2QCcOMaP9YmkGQaQFOX1AB1tCoePXs l3aFhBHj1wSaMUibfevWspSyH+uZ+lj0zvt0k6xKjp9Th2AtMayu6aM9prsCgKAH 3Ky3Brpw9HC9gxxFkqBIv57XnK74W5s= -----END CERTIFICATE-----Generated at Sat Aug 23 21:03:22 2025 by rpki-client