$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft File: 9bzqkIXorbqorCGgTlPb_sMgvOI.mft (raw, json) Hash identifier: 5eAg2zQ7pSngZi/bvjUGZBIRi0SpT9TbV22ERM6L07U= Subject key identifier: AF:F7:D5:B5:BE:61:34:92:AA:02:5E:C4:95:A6:C7:17:1A:93:91:36 Authority key identifier: F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2 Certificate issuer: /CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2 Certificate serial: 0163 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft Manifest number: 0163 Signing time: Wed 02 Jul 2025 15:54:14 +0000 Manifest this update: Wed 02 Jul 2025 15:54:13 +0000 Manifest next update: Wed 09 Jul 2025 15:54:13 +0000 Files and hashes: 1: 9bzqkIXorbqorCGgTlPb_sMgvOI.crl (hash: X8cHyGV/ml5w9l9Yoyu1JAMytkSN9V/NBE3a+OZSf3A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:54:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 355 (0x163) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2 Validity Not Before: Jul 2 15:54:13 2025 GMT Not After : Jul 9 15:54:13 2025 GMT Subject: CN=68655626-ebc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:af:b1:39:ac:87:8b:45:b2:6a:77:f3:ce:dd: 3f:2d:18:3c:2e:70:85:eb:d8:c9:bb:92:b0:35:15: a7:46:0b:c8:7a:7d:05:83:b7:74:51:eb:1f:7a:94: fa:bc:28:e5:95:7a:fc:a9:4e:ac:2d:0a:c2:31:86: 0d:b9:af:cd:90:56:02:a7:ce:c7:4f:3f:95:8d:24: 78:10:df:ab:c2:69:6b:04:76:9c:21:79:4c:0e:4b: 58:4a:f3:69:40:da:f4:d6:06:5b:82:fb:c6:47:9f: 9b:2c:3b:c4:9b:57:76:9d:6c:07:76:3a:d3:7d:d9: ef:57:65:eb:b0:41:68:fb:56:33:ae:47:d0:6b:cd: fd:4a:bf:45:20:79:f8:08:1c:9a:54:6c:ce:ed:13: 90:38:d5:76:d5:83:a9:c9:53:16:85:91:3f:89:ae: f8:c3:a4:0d:a7:ea:07:b6:57:dc:0f:a9:6d:6f:c2: 64:a9:e3:13:3b:c4:6e:c7:71:5d:9b:e9:d1:56:37: fc:90:b9:ec:82:8f:a6:d1:81:88:bb:30:77:70:95: 6c:07:26:6b:20:58:13:fa:4e:53:e8:d4:6d:ea:d5: a3:25:91:e3:c6:d6:da:63:f4:cf:72:a9:29:8a:46: 3c:0e:57:06:07:2a:11:81:be:31:ce:8d:6b:89:82: 77:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F7:D5:B5:BE:61:34:92:AA:02:5E:C4:95:A6:C7:17:1A:93:91:36 X509v3 Authority Key Identifier: keyid:F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:4d:84:0f:1d:b0:20:10:e4:76:53:f5:f9:4a:0c:d7:51:ed: 39:9a:07:2b:b5:36:bb:20:37:09:5b:d2:72:85:c3:a1:da:eb: bb:72:07:ff:96:43:63:2f:a0:33:cf:c1:52:22:04:47:b6:9a: b8:b4:c6:98:d8:68:44:a1:1d:62:74:fa:1f:bd:5f:74:16:69: fd:ff:f7:bd:d5:cc:e1:46:fa:aa:77:e9:bd:7b:48:0c:a9:41: e7:80:5c:4e:70:f7:58:f7:9f:c6:93:69:01:fb:e3:0f:20:21: e4:68:d2:44:7d:cc:90:3c:b0:61:c6:c0:c9:e2:0e:ca:bb:fb: 3e:35:94:9d:c7:fb:86:fa:93:9d:d7:98:56:f0:43:49:ae:21: 00:e8:27:06:b3:d4:6a:8d:30:54:23:e0:35:61:1d:18:87:37: 52:b7:e1:d6:f2:8c:f4:97:53:29:e0:d4:3f:3c:94:4f:de:8b: f0:b1:b1:15:d6:ba:63:35:62:55:8a:31:23:cd:83:56:4d:7e: 9b:32:67:ed:2d:8c:c0:09:fb:8b:16:cb:a7:bc:f5:98:66:35: 4c:4a:e3:2c:fe:55:4d:49:6f:68:5a:16:da:7a:10:af:eb:b0: 7d:ea:a0:27:21:d4:e1:4e:da:39:9d:ff:73:e9:c9:3b:c9:eb: c5:a8:b3:84 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKEY1QkNFQTkwODVFOEFEQkFBOEFDMjFBMDRFNTNEQkZF QzMyMEJDRTIwHhcNMjUwNzAyMTU1NDEzWhcNMjUwNzA5MTU1NDEzWjAYMRYwFAYD VQQDEw02ODY1NTYyNi1lYmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAta+xOayHi0Wyanfzzt0/LRg8LnCF69jJu5KwNRWnRgvIen0Fg7d0UesfepT6 vCjllXr8qU6sLQrCMYYNua/NkFYCp87HTz+VjSR4EN+rwmlrBHacIXlMDktYSvNp QNr01gZbgvvGR5+bLDvEm1d2nWwHdjrTfdnvV2XrsEFo+1YzrkfQa839Sr9FIHn4 CByaVGzO7ROQONV21YOpyVMWhZE/ia74w6QNp+oHtlfcD6ltb8JkqeMTO8Rux3Fd m+nRVjf8kLnsgo+m0YGIuzB3cJVsByZrIFgT+k5T6NRt6tWjJZHjxtbaY/TPcqkp ikY8DlcGByoRgb4xzo1riYJ32QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK/31bW+ YTSSqgJexJWmxxcak5E2MB8GA1UdIwQYMBaAFPW86pCF6K26qKwhoE5T2/7DILzi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS9BMjk4OEYzODQw QUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3JicW9yQ0dnVGxQYl9zTWd2 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlienFrSVhvcmJxb3JDR2dUbFBiX3NNZ3ZPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS9BMjk4OEYzODQwQUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3Ji cW9yQ0dnVGxQYl9zTWd2T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWTYQPHbAgEOR2U/X5SgzXUe05mgcrtTa7IDcJW9JyhcOh2uu7cgf/ lkNjL6Azz8FSIgRHtpq4tMaY2GhEoR1idPofvV90Fmn9//e91czhRvqqd+m9e0gM qUHngFxOcPdY95/Gk2kB++MPICHkaNJEfcyQPLBhxsDJ4g7Ku/s+NZSdx/uG+pOd 15hW8ENJriEA6CcGs9RqjTBUI+A1YR0YhzdSt+HW8oz0l1Mp4NQ/PJRP3ovwsbEV 1rpjNWJVijEjzYNWTX6bMmftLYzACfuLFsunvPWYZjVMSuMs/lVNSW9oWhbaehCv 67B96qAnIdThTto5nf9z6ck7yevFqLOE -----END CERTIFICATE-----Generated at Fri Jul 4 15:07:46 2025 by rpki-client