$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft File: 9bzqkIXorbqorCGgTlPb_sMgvOI.mft (raw, json) Hash identifier: w3bjDDzl/L9GjFD7ENrtmTZThsu/ZUAK4TQqum3+lrA= Subject key identifier: 45:9B:78:D7:40:C1:2C:6A:C6:6F:FB:C3:11:B4:FB:70:FD:EC:46:61 Authority key identifier: F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2 Certificate issuer: /CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2 Certificate serial: 017D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft Manifest number: 017D Signing time: Fri 22 Aug 2025 15:50:08 +0000 Manifest this update: Fri 22 Aug 2025 15:50:08 +0000 Manifest next update: Fri 29 Aug 2025 15:50:08 +0000 Files and hashes: 1: 9bzqkIXorbqorCGgTlPb_sMgvOI.crl (hash: CJgI+BN1cESoizq9pPeq8H342YT7HFsP+J0F0mciJ+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 381 (0x17d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2 Validity Not Before: Aug 22 15:50:08 2025 GMT Not After : Aug 29 15:50:08 2025 GMT Subject: CN=68a891b0-025a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e3:03:cd:c4:cd:20:0a:b1:ee:24:27:ef:48: c6:a5:55:0e:d2:e2:4c:ef:16:c0:bc:55:f6:83:74: 9c:67:37:50:a3:dc:75:6a:d1:d6:96:92:a7:3e:8a: 56:d9:9d:26:ba:0c:6a:00:3d:13:43:19:ad:f0:9e: 16:68:2a:14:7a:c5:89:4b:e7:3e:f4:11:ef:e1:e3: 94:75:8f:5f:0e:4f:ad:55:77:8b:79:02:d7:ad:cc: 9b:9e:64:bd:45:38:d3:6e:c8:3c:c6:2f:2f:6f:c8: bf:76:8c:a1:31:4e:7b:ed:d4:9f:a7:4a:f5:58:e2: 7e:08:49:0a:f2:4d:4a:6c:34:40:99:68:01:e9:fa: 3a:06:71:6f:00:ec:33:1e:cc:27:cb:e0:03:66:ac: a4:4e:e7:2c:78:56:eb:a4:23:6b:aa:b1:38:d1:a1: a9:c2:b8:ed:d2:e3:3c:84:f9:2e:ee:19:7b:43:92: ca:60:43:b1:cd:f6:06:3b:da:0a:1c:ed:ba:0b:b6: d7:0d:10:6a:72:c9:81:a9:f1:49:e3:b9:88:1a:3e: ee:ae:44:77:fe:b8:2a:43:fb:45:e2:75:04:e4:fe: ac:b6:71:a7:c8:aa:06:ca:c7:29:10:a9:92:2c:ab: 92:2e:97:97:55:33:48:b4:14:e9:47:89:56:ff:1b: d0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9B:78:D7:40:C1:2C:6A:C6:6F:FB:C3:11:B4:FB:70:FD:EC:46:61 X509v3 Authority Key Identifier: keyid:F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:ea:8e:ec:74:ec:33:ca:61:43:f4:ff:3a:cf:d6:4a:99:98: 17:74:e9:a3:a3:76:06:f2:4f:a9:c4:95:02:20:82:66:69:71: a2:1d:4e:86:d1:21:14:ca:5f:b3:30:77:8e:f2:8f:e8:1d:8a: 23:8a:da:c7:98:7f:c7:f4:dd:8f:69:6f:eb:50:9c:a4:79:60: 9d:82:9b:bf:e4:8c:a2:ae:f5:da:06:98:54:a4:7e:5e:6a:7f: 3c:b5:d7:a6:0d:a5:e4:18:09:16:ea:bd:22:53:9f:81:c2:d1: 21:18:45:2f:2b:d2:b5:69:d5:4b:5a:84:b4:9b:2e:e4:79:12: a4:b8:d4:70:c3:40:bb:f8:f6:93:db:d7:ad:bc:fd:3b:34:8e: 29:eb:15:33:ac:b8:ce:68:82:3c:65:32:22:93:f3:94:fd:87: 38:df:f1:e3:29:22:a8:b5:8a:c8:8c:2b:6b:1f:e8:ac:9b:96: cf:5e:22:7f:28:1d:df:ef:ce:1c:e0:44:3d:08:b2:9b:42:1c: 4b:41:23:50:c2:41:a8:0f:08:51:42:eb:13:c5:cf:1c:1f:c8: 6e:b3:64:03:cd:3d:04:f1:e5:18:48:0c:53:4a:94:58:dc:4b: 0e:a5:0a:c4:72:41:e4:57:e3:13:68:96:bf:9a:14:e0:5d:3f: 5e:bb:0f:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKEY1QkNFQTkwODVFOEFEQkFBOEFDMjFBMDRFNTNEQkZF QzMyMEJDRTIwHhcNMjUwODIyMTU1MDA4WhcNMjUwODI5MTU1MDA4WjAYMRYwFAYD VQQDEw02OGE4OTFiMC0wMjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzuMDzcTNIAqx7iQn70jGpVUO0uJM7xbAvFX2g3ScZzdQo9x1atHWlpKnPopW 2Z0mugxqAD0TQxmt8J4WaCoUesWJS+c+9BHv4eOUdY9fDk+tVXeLeQLXrcybnmS9 RTjTbsg8xi8vb8i/doyhMU577dSfp0r1WOJ+CEkK8k1KbDRAmWgB6fo6BnFvAOwz Hswny+ADZqykTucseFbrpCNrqrE40aGpwrjt0uM8hPku7hl7Q5LKYEOxzfYGO9oK HO26C7bXDRBqcsmBqfFJ47mIGj7urkR3/rgqQ/tF4nUE5P6stnGnyKoGyscpEKmS LKuSLpeXVTNItBTpR4lW/xvQFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWbeNdA wSxqxm/7wxG0+3D97EZhMB8GA1UdIwQYMBaAFPW86pCF6K26qKwhoE5T2/7DILzi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS9BMjk4OEYzODQw QUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3JicW9yQ0dnVGxQYl9zTWd2 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlienFrSVhvcmJxb3JDR2dUbFBiX3NNZ3ZPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS9BMjk4OEYzODQwQUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3Ji cW9yQ0dnVGxQYl9zTWd2T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA56o7sdOwzymFD9P86z9ZKmZgXdOmjo3YG8k+pxJUCIIJmaXGiHU6G 0SEUyl+zMHeO8o/oHYojitrHmH/H9N2PaW/rUJykeWCdgpu/5IyirvXaBphUpH5e an88tdemDaXkGAkW6r0iU5+BwtEhGEUvK9K1adVLWoS0my7keRKkuNRww0C7+PaT 29etvP07NI4p6xUzrLjOaII8ZTIik/OU/Yc43/HjKSKotYrIjCtrH+ism5bPXiJ/ KB3f784c4EQ9CLKbQhxLQSNQwkGoDwhRQusTxc8cH8hus2QDzT0E8eUYSAxTSpRY 3EsOpQrEckHkV+MTaJa/mhTgXT9euw/t -----END CERTIFICATE-----Generated at Sun Aug 24 00:45:35 2025 by rpki-client