$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft File: 9bzqkIXorbqorCGgTlPb_sMgvOI.mft (raw, json) Hash identifier: 7uYuJj3Z3pGcUIwQ0hvRXybcJRnG9FNDMUIZstA4tuk= Subject key identifier: BD:E9:6F:DF:58:11:A1:B7:D4:16:9F:10:BC:49:FF:2F:BC:10:91:F9 Authority key identifier: F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2 Certificate issuer: /CN=A916B6AA/serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2 Certificate serial: 014A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft Manifest number: 014A Signing time: Wed 14 May 2025 15:52:38 +0000 Manifest this update: Wed 14 May 2025 15:52:38 +0000 Manifest next update: Wed 21 May 2025 15:52:38 +0000 Files and hashes: 1: 9bzqkIXorbqorCGgTlPb_sMgvOI.crl (hash: uIjHWLyPYqEiJY2G3Ur7BT6FAQGpj+46Cqd1i0GbbG8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 15:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B6AA, serialNumber=F5BCEA9085E8ADBAA8AC21A04E53DBFEC320BCE2 Validity Not Before: May 14 15:52:38 2025 GMT Not After : May 21 15:52:38 2025 GMT Subject: CN=6824bc46-b0aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:28:ef:14:a0:37:64:cc:2b:aa:1c:a1:aa: 1d:5a:a6:1a:bb:32:ee:10:2d:b2:67:f4:da:54:99: b0:21:42:71:86:7d:61:16:4b:5d:fc:07:18:a1:29: b2:88:e1:0b:86:c6:c0:09:f7:dd:73:31:6a:d5:64: 04:e8:93:e2:d9:ae:29:f7:07:a9:47:d6:99:df:a1: fd:07:26:dd:f4:98:c6:a5:f5:33:ff:27:c8:b3:7d: 87:64:d1:de:74:80:5a:ab:36:3a:5b:48:3a:fd:17: 00:72:74:75:5c:16:39:4a:27:bb:79:34:a6:28:87: 2b:f9:f4:28:d2:a5:41:c6:61:be:fc:15:1d:30:e5: 27:46:fc:66:1b:6e:ae:d5:c6:39:45:ec:d1:33:c5: 62:3c:72:cd:cb:87:4f:d6:c9:47:24:9a:b8:4e:aa: c8:9b:75:c9:2f:90:97:57:d8:b4:4e:7d:37:70:a8: ba:aa:ed:d9:62:d5:1e:c6:86:6f:55:a0:7b:4f:3a: 9f:af:bc:62:d0:46:1b:42:17:22:cc:ea:14:cf:1e: 45:bc:46:cf:e2:ce:84:2e:ff:7f:13:a3:73:59:a6: db:5b:e6:08:1c:2b:04:97:21:40:e7:0c:f9:89:b5: 19:eb:42:d4:14:a8:6e:bf:68:5c:de:58:ce:6b:54: 56:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E9:6F:DF:58:11:A1:B7:D4:16:9F:10:BC:49:FF:2F:BC:10:91:F9 X509v3 Authority Key Identifier: keyid:F5:BC:EA:90:85:E8:AD:BA:A8:AC:21:A0:4E:53:DB:FE:C3:20:BC:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9bzqkIXorbqorCGgTlPb_sMgvOI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/A2988F3840AE11EE9850A263C4F9AE02/9bzqkIXorbqorCGgTlPb_sMgvOI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:fb:3f:cb:7e:d9:6d:cc:1e:96:4c:e9:c2:21:e9:ea:a6:ee: 8a:15:2e:99:9f:64:ed:a5:d9:b3:6d:7f:73:89:e9:3d:89:a2: 60:16:1c:69:90:36:2a:30:5d:e7:59:1e:87:b3:54:2c:e9:d6: 69:d1:7b:6a:14:98:14:5b:c8:32:9b:92:00:4f:f7:21:12:b6: d7:80:c4:f7:31:1e:e8:0b:34:d7:e8:06:bd:17:88:ae:de:c1: 6d:e8:c0:29:c9:c0:6a:af:ff:38:e7:56:8a:64:20:dd:15:f3: b3:ad:0a:88:4f:ab:49:b2:92:c5:88:20:fd:95:8a:2f:ce:9a: 00:6a:75:fa:2a:19:8a:2a:e8:09:87:28:cf:3d:af:c1:16:da: 3d:0c:0e:37:89:45:ec:47:7c:45:11:28:0f:a2:c1:05:2c:74: 95:73:53:a8:d0:cc:c9:bd:e5:ef:b4:1d:1e:4f:81:58:42:82: 93:ce:d1:f0:83:ff:64:aa:bc:4a:2f:b0:5e:0c:c0:6f:41:99: ba:e2:2e:8b:21:0d:3e:fe:e9:07:69:ca:b5:6d:eb:1d:fe:6e: 42:a4:c1:71:8e:c0:d3:c1:51:04:20:33:d6:c3:9a:84:b8:c8: c6:94:6b:74:2d:4b:b3:1f:d5:54:44:ed:52:88:3b:f3:66:25: 94:e2:e4:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI2QUExMTAvBgNVBAUTKEY1QkNFQTkwODVFOEFEQkFBOEFDMjFBMDRFNTNEQkZF QzMyMEJDRTIwHhcNMjUwNTE0MTU1MjM4WhcNMjUwNTIxMTU1MjM4WjAYMRYwFAYD VQQDEw02ODI0YmM0Ni1iMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApm4o7xSgN2TMK6ocoaodWqYauzLuEC2yZ/TaVJmwIUJxhn1hFktd/AcYoSmy iOELhsbACffdczFq1WQE6JPi2a4p9wepR9aZ36H9Bybd9JjGpfUz/yfIs32HZNHe dIBaqzY6W0g6/RcAcnR1XBY5Sie7eTSmKIcr+fQo0qVBxmG+/BUdMOUnRvxmG26u 1cY5RezRM8ViPHLNy4dP1slHJJq4TqrIm3XJL5CXV9i0Tn03cKi6qu3ZYtUexoZv VaB7Tzqfr7xi0EYbQhcizOoUzx5FvEbP4s6ELv9/E6NzWabbW+YIHCsElyFA5wz5 ibUZ60LUFKhuv2hc3ljOa1RWswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3pb99Y EaG31BafELxJ/y+8EJH5MB8GA1UdIwQYMBaAFPW86pCF6K26qKwhoE5T2/7DILzi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjZBQS9BMjk4OEYzODQw QUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3JicW9yQ0dnVGxQYl9zTWd2 T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzlienFrSVhvcmJxb3JDR2dUbFBiX3NNZ3ZPSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QjZBQS9BMjk4OEYzODQwQUUxMUVFOTg1MEEyNjNDNEY5QUUwMi85Ynpxa0lYb3Ji cW9yQ0dnVGxQYl9zTWd2T0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7+z/LftltzB6WTOnCIenqpu6KFS6Zn2TtpdmzbX9ziek9iaJgFhxp kDYqMF3nWR6Hs1Qs6dZp0XtqFJgUW8gym5IAT/chErbXgMT3MR7oCzTX6Aa9F4iu 3sFt6MApycBqr/8451aKZCDdFfOzrQqIT6tJspLFiCD9lYovzpoAanX6KhmKKugJ hyjPPa/BFto9DA43iUXsR3xFESgPosEFLHSVc1Oo0MzJveXvtB0eT4FYQoKTztHw g/9kqrxKL7BeDMBvQZm64i6LIQ0+/ukHacq1besd/m5CpMFxjsDTwVEEIDPWw5qE uMjGlGt0LUuzH9VURO1SiDvzZiWU4uRJ -----END CERTIFICATE-----Generated at Fri May 16 06:53:46 2025 by rpki-client