$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json) Hash identifier: ucH/7VHSe2WqUuCBKMXzZvCpyLoW93bxK0HJlwpy2vc= Subject key identifier: EA:CC:47:E4:FE:31:25:0D:71:DC:AE:BD:38:D1:8D:10:A3:B0:B1:8B Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Certificate serial: 62 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft Manifest number: 61 Signing time: Sat 17 May 2025 06:33:17 +0000 Manifest this update: Sat 17 May 2025 06:33:17 +0000 Manifest next update: Sat 24 May 2025 06:33:17 +0000 Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: foPiK/jmHMrFKk0KmM44bRJOv6+0nRDR8qiqCVGuHkQ=) 2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: dlLY0c4zcx4nsoESDYqmPB7RubZLl/a17nHw+0+FjyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 May 2025 06:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Validity Not Before: May 17 06:33:17 2025 GMT Not After : May 24 06:33:17 2025 GMT Subject: CN=68282dad-9d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:34:23:b0:b9:31:35:77:12:15:65:47:83:a5: 3a:0f:72:57:1f:f1:ee:34:00:3b:95:7b:b9:77:a7: ce:f4:cb:69:da:29:2c:5c:2e:eb:c1:72:04:72:66: bf:ad:31:fc:c7:26:54:22:a5:b5:a2:7a:1b:31:19: fd:fa:88:a2:d2:0b:fc:77:a2:ad:ae:83:5f:b1:ce: 22:78:4d:6a:8c:41:86:16:6d:84:9a:76:3f:1a:62: 25:15:7b:ae:2d:40:ab:f6:94:48:23:ba:03:cc:72: ca:e4:99:f9:53:28:c0:34:ed:b7:bc:b6:8d:24:b9: 8d:01:80:5a:bc:7f:04:f1:77:c7:f3:02:69:ac:9d: 4d:8a:8b:a9:54:b3:fe:af:5a:a9:19:e5:5b:79:56: 86:13:b5:fd:5f:a0:a2:96:8d:ed:d9:81:cb:0f:30: c2:a7:03:a2:94:35:1a:a7:0a:d1:70:62:08:d4:f4: f4:31:47:f0:d9:a2:8f:97:f2:3c:91:d0:9d:35:7a: e0:d4:fd:c8:97:a6:03:4c:e8:31:fa:26:17:6d:57: 9b:6d:2f:9e:27:c4:73:ef:57:68:a3:a6:37:17:9b: 43:93:00:0b:a5:30:2c:57:2e:24:c1:5e:6b:44:8f: 51:a0:21:3d:77:95:36:56:14:32:f2:63:3c:00:f3: 80:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CC:47:E4:FE:31:25:0D:71:DC:AE:BD:38:D1:8D:10:A3:B0:B1:8B X509v3 Authority Key Identifier: keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:e3:eb:13:d7:f8:4a:5f:b3:44:dd:d0:a9:c1:73:a6:30:a2: 20:fc:99:bd:80:33:50:90:95:e0:2f:26:d6:d2:f5:58:56:c0: ce:9e:44:aa:3e:4f:aa:db:0e:f8:d8:4f:77:9f:9f:77:ae:b4: 77:64:59:ee:ce:51:39:bc:0f:cf:d1:0b:73:0a:ae:db:2a:e1: 2f:d1:20:d5:cd:78:46:3e:84:0a:7b:bf:6b:9a:36:e6:ef:6b: c3:68:3a:1a:01:b5:61:2b:aa:8c:b2:88:cf:23:f4:ec:a0:79: f6:52:9d:09:fb:7a:86:77:33:2d:74:20:54:ea:5f:08:8b:25: 5c:70:1a:4b:70:df:1b:37:c2:e5:ad:38:8f:1d:71:5d:5c:c9: 82:45:09:10:67:9b:24:a0:af:32:be:d8:e4:4b:cf:8b:e6:d1: ac:e1:56:7b:2e:87:e1:18:3b:96:62:e5:b7:cc:ce:5a:d9:b2: 44:1c:b5:39:12:66:18:28:f3:64:c6:7d:08:d4:24:d2:ac:bf: 36:44:f7:59:b7:31:ba:6f:72:0f:c1:87:57:60:a9:9d:56:33: c4:95:f8:06:dd:b4:9c:2d:09:7f:dc:fd:f1:9a:d1:33:cd:5a: b6:47:2e:20:f1:d4:d7:53:1c:39:1a:2a:e7:c0:35:c5:72:ac: 75:e7:7f:3b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzRBNTExMC8GA1UEBRMoQ0ZFMDcxQTk3MkZENzhBNjdGNkQzRUQ1NkE2MTg0MzQw QUIzRTNBNjAeFw0yNTA1MTcwNjMzMTdaFw0yNTA1MjQwNjMzMTdaMBgxFjAUBgNV BAMTDTY4MjgyZGFkLTlkMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJNCOwuTE1dxIVZUeDpToPclcf8e40ADuVe7l3p870y2naKSxcLuvBcgRyZr+t MfzHJlQipbWiehsxGf36iKLSC/x3oq2ug1+xziJ4TWqMQYYWbYSadj8aYiUVe64t QKv2lEgjugPMcsrkmflTKMA07be8to0kuY0BgFq8fwTxd8fzAmmsnU2Ki6lUs/6v WqkZ5Vt5VoYTtf1foKKWje3ZgcsPMMKnA6KUNRqnCtFwYgjU9PQxR/DZoo+X8jyR 0J01euDU/ciXpgNM6DH6JhdtV5ttL54nxHPvV2ijpjcXm0OTAAulMCxXLiTBXmtE j1GgIT13lTZWFDLyYzwA84AnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6sxH5P4x JQ1x3K69ONGNEKOwsYswHwYDVR0jBBgwFoAUz+BxqXL9eKZ/bT7VamGENAqz46Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNEE1L0JGNTBFODYyQTIz NDExRUY5NzhDOEQ2REM0RjlBRTAyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvei1CeHFYTDllS1pfYlQ3VmFtR0VOQXF6NDZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NEE1L0JGNTBFODYyQTIzNDExRUY5NzhDOEQ2REM0RjlBRTAyL3otQnhxWEw5ZUta X2JUN1ZhbUdFTkFxejQ2WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACjj6xPX+Epfs0Td0KnBc6YwoiD8mb2AM1CQleAvJtbS9VhWwM6eRKo+ T6rbDvjYT3efn3eutHdkWe7OUTm8D8/RC3MKrtsq4S/RINXNeEY+hAp7v2uaNubv a8NoOhoBtWErqoyyiM8j9OygefZSnQn7eoZ3My10IFTqXwiLJVxwGktw3xs3wuWt OI8dcV1cyYJFCRBnmySgrzK+2ORLz4vm0azhVnsuh+EYO5Zi5bfMzlrZskQctTkS Zhgo82TGfQjUJNKsvzZE91m3Mbpvcg/Bh1dgqZ1WM8SV+AbdtJwtCX/c/fGa0TPN WrZHLiDx1NdTHDkaKufANcVyrHXnfzs= -----END CERTIFICATE-----Generated at Sat May 17 12:41:24 2025 by rpki-client