$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft File: BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft (raw, json) Hash identifier: cKMC2MLghuPKo8eoob+4pThRWN8eVn0Rs+IBWTzdcGo= Subject key identifier: DF:E6:C8:84:21:76:F7:D0:00:7B:85:29:52:E2:AF:7E:A9:95:F3:11 Authority key identifier: 07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90 Certificate issuer: /CN=A915B0C9/serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90 Certificate serial: 01E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft Manifest number: 01E0 Signing time: Thu 03 Jul 2025 02:49:22 +0000 Manifest this update: Thu 03 Jul 2025 02:49:22 +0000 Manifest next update: Thu 10 Jul 2025 02:49:22 +0000 Files and hashes: 1: BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl (hash: qMFJbh6Bq8qulXKQ91vaBYM7ZgNtWRtVYj9YtdvYDNE=) 2: F0F09EAA7D1D11EDAE0CF917C4F9AE02.roa (hash: /AIOMPF379cdDnZ0oCHY5QGxjdpZh2kab3GCf0LfQ6w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:49:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B0C9, serialNumber=073817DB529CDBEB3FF938AE5EE08488E17E4E90 Validity Not Before: Jul 3 02:49:22 2025 GMT Not After : Jul 10 02:49:22 2025 GMT Subject: CN=6865efb2-da8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:34:e4:ff:b0:cf:6d:09:28:46:88:7d:02: 2a:39:34:a0:e2:d3:7d:b8:9b:84:f8:9e:ce:0f:bb: 8e:8f:20:5b:71:30:1c:df:74:a0:52:88:18:b6:f5: bf:ac:3c:8f:84:51:9d:4b:8e:0e:f1:6e:f7:ca:07: 77:a5:43:67:6a:27:e0:36:69:93:a5:23:4e:69:5b: 21:07:ee:fb:47:e4:72:fc:0d:94:d5:4b:82:bf:4c: d5:7a:7b:85:6c:4a:79:a0:e2:1b:18:44:02:93:79: af:b8:ff:49:5d:02:c3:51:6b:a4:47:d6:05:70:58: 9e:da:cf:28:9f:1c:4a:4a:aa:0b:18:df:ad:d8:e6: c0:6f:87:62:fa:c5:2f:80:61:dc:a8:7c:54:bd:da: 96:b9:82:69:33:f3:20:2f:c8:5f:7b:fd:28:13:b1: f2:bd:41:0e:44:c3:7e:9e:6d:2c:75:3f:94:a8:a0: 09:52:3f:7d:21:be:4b:1f:4d:46:30:22:9a:2d:e1: 7c:fe:17:93:e8:e6:b5:64:c5:40:6a:79:38:b3:62: 0a:9c:8a:c2:fc:83:15:a0:49:ba:39:05:18:d8:b9: b4:69:01:86:67:c0:2a:00:93:7f:f8:94:fa:09:dc: 26:ed:28:40:7c:61:bd:05:48:fe:0e:5c:d8:ff:cc: bb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E6:C8:84:21:76:F7:D0:00:7B:85:29:52:E2:AF:7E:A9:95:F3:11 X509v3 Authority Key Identifier: keyid:07:38:17:DB:52:9C:DB:EB:3F:F9:38:AE:5E:E0:84:88:E1:7E:4E:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzgX21Kc2-s_-TiuXuCEiOF-TpA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0C9/0C778CB47D1A11ED8E8BEB82C4F9AE02/BzgX21Kc2-s_-TiuXuCEiOF-TpA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:16:04:f1:af:f7:27:9a:bf:cd:0c:17:c4:d4:03:b6:03:bf: d5:b0:fc:b7:12:c2:c4:d5:f0:c0:94:3d:4c:b1:0a:17:fa:f9: 23:4b:9e:e7:04:ce:c8:0c:17:8b:6b:d0:48:4b:e9:db:9b:02: a4:92:8c:07:d8:dd:ee:8d:69:b6:c2:76:04:b0:87:bb:87:d1: b5:f3:0d:37:5e:e5:f4:47:9f:78:e4:2e:c9:1e:4a:8a:b5:72: 85:1a:57:b0:41:ce:ae:cc:66:46:fd:f9:76:e0:d4:a1:c8:02: 25:2c:25:36:7d:88:b0:78:93:63:d8:a5:96:ca:b8:7a:f5:be: ba:f4:7f:70:ec:e1:27:f3:0f:dc:45:a0:5b:90:1a:d9:a4:25: 43:c8:f2:db:b8:c2:32:76:70:ba:50:89:ba:83:a5:5c:1f:1a: 30:9c:f6:06:65:c8:4b:2c:06:01:e2:6d:60:70:fe:76:88:7b: 2e:67:57:7f:37:ca:45:7b:61:63:4f:e5:27:28:21:2b:a2:b5: 7b:a5:7f:df:e4:6b:56:d8:0a:6c:56:31:f5:74:b6:9f:f7:55: b9:4c:75:10:86:bc:36:f5:f5:bc:17:70:40:96:0d:2c:4c:81: c8:03:a4:02:ce:e3:8a:7d:73:a3:d1:bc:84:cb:97:4a:34:20: 4c:d6:df:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIwQzkxMTAvBgNVBAUTKDA3MzgxN0RCNTI5Q0RCRUIzRkY5MzhBRTVFRTA4NDg4 RTE3RTRFOTAwHhcNMjUwNzAzMDI0OTIyWhcNMjUwNzEwMDI0OTIyWjAYMRYwFAYD VQQDEw02ODY1ZWZiMi1kYThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApCs05P+wz20JKEaIfQIqOTSg4tN9uJuE+J7OD7uOjyBbcTAc33SgUogYtvW/ rDyPhFGdS44O8W73ygd3pUNnaifgNmmTpSNOaVshB+77R+Ry/A2U1UuCv0zVenuF bEp5oOIbGEQCk3mvuP9JXQLDUWukR9YFcFie2s8onxxKSqoLGN+t2ObAb4di+sUv gGHcqHxUvdqWuYJpM/MgL8hfe/0oE7HyvUEORMN+nm0sdT+UqKAJUj99Ib5LH01G MCKaLeF8/heT6Oa1ZMVAank4s2IKnIrC/IMVoEm6OQUY2Lm0aQGGZ8AqAJN/+JT6 Cdwm7ShAfGG9BUj+DlzY/8y7AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN/myIQh dvfQAHuFKVLir36plfMRMB8GA1UdIwQYMBaAFAc4F9tSnNvrP/k4rl7ghIjhfk6Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjBDOS8wQzc3OENCNDdE MUExMUVEOEU4QkVCODJDNEY5QUUwMi9CemdYMjFLYzItc18tVGl1WHVDRWlPRi1U cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6Z1gyMUtjMi1zXy1UaXVYdUNFaU9GLVRwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjBDOS8wQzc3OENCNDdEMUExMUVEOEU4QkVCODJDNEY5QUUwMi9CemdYMjFLYzIt c18tVGl1WHVDRWlPRi1UcEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSFgTxr/cnmr/NDBfE1AO2A7/VsPy3EsLE1fDAlD1MsQoX+vkjS57n BM7IDBeLa9BIS+nbmwKkkowH2N3ujWm2wnYEsIe7h9G18w03XuX0R5945C7JHkqK tXKFGlewQc6uzGZG/fl24NShyAIlLCU2fYiweJNj2KWWyrh69b669H9w7OEn8w/c RaBbkBrZpCVDyPLbuMIydnC6UIm6g6VcHxownPYGZchLLAYB4m1gcP52iHsuZ1d/ N8pFe2FjT+UnKCErorV7pX/f5GtW2ApsVjH1dLaf91W5THUQhrw29fW8F3BAlg0s TIHIA6QCzuOKfXOj0byEy5dKNCBM1t+U -----END CERTIFICATE-----Generated at Fri Jul 4 18:38:47 2025 by rpki-client