$ rpki-client -vvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json) Hash identifier: z1NJIyJFRnFUZKZAEI7QSoOmRN0V5xmhHkpavu9po7s= Subject key identifier: AB:CF:8C:5E:0E:D8:A0:9D:9B:8B:C0:83:85:F4:07:B1:72:94:18:E3 Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft Manifest number: 78 Signing time: Thu 03 Jul 2025 07:00:21 +0000 Manifest this update: Thu 03 Jul 2025 07:00:21 +0000 Manifest next update: Thu 10 Jul 2025 07:00:21 +0000 Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: 4pR35Hw57BcUe+EDkUxrVY4BRvfH+JTkoIHt5mLEsqQ=) 2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: dlLY0c4zcx4nsoESDYqmPB7RubZLl/a17nHw+0+FjyA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Validity Not Before: Jul 3 07:00:21 2025 GMT Not After : Jul 10 07:00:21 2025 GMT Subject: CN=68662a85-ab16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e3:43:28:bf:c9:e3:40:f5:c7:fd:33:95:4d: 56:1b:3a:dc:54:e0:d9:91:e7:cc:6c:72:06:7e:f9: fd:07:2d:36:04:a3:2b:33:cb:40:6f:93:65:24:a6: bb:d8:18:67:a3:28:de:7c:30:ff:28:f5:be:cb:a5: 30:8c:41:d2:37:c6:62:60:8a:f1:35:d3:c3:c7:c8: bb:43:11:48:4c:89:fa:58:47:a1:1c:a6:db:26:73: cc:56:af:71:fd:0c:42:b9:1d:3c:a9:98:5c:64:3a: e3:65:c9:bf:e3:74:99:74:60:62:a4:b6:9b:94:e9: 54:66:21:39:d1:d9:0b:f5:27:d8:56:b5:6d:72:08: a6:a9:3b:42:ac:46:9c:80:a5:1b:10:60:b7:44:38: 71:5d:39:d0:34:87:cb:f9:65:54:c4:ab:e4:7f:ac: 3d:bc:51:b6:de:09:13:ff:bd:8c:7a:4b:f5:e3:c8: 29:a2:04:f4:55:b8:7d:2f:a1:77:6e:77:08:e1:8c: 2d:c7:02:ec:0e:f6:b5:eb:9c:3d:a0:57:00:09:07: 8d:ad:c5:05:13:b1:d7:db:7d:d4:41:7d:a5:1c:fb: 2e:6b:b8:58:6e:22:e1:ed:52:00:e4:22:29:14:92: 1d:58:98:77:95:3c:46:ea:8e:02:f6:28:26:44:58: c1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:CF:8C:5E:0E:D8:A0:9D:9B:8B:C0:83:85:F4:07:B1:72:94:18:E3 X509v3 Authority Key Identifier: keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c6:6a:61:e3:a3:f2:94:44:12:63:40:2e:13:ef:78:f8:fd:80: ec:06:d1:f8:80:74:33:b8:1e:96:34:8c:a8:ed:d1:3d:8f:2a: ff:b4:f1:83:b3:f4:28:dc:38:f5:0b:2b:46:3e:f9:b5:39:95: 44:22:cf:37:e3:97:f1:db:f9:55:da:80:6e:2a:14:61:39:4f: 73:81:a5:ae:42:5c:af:de:31:ec:83:1f:4f:3c:06:21:4c:2d: 18:7a:3d:de:53:17:82:9a:0a:36:45:6e:5d:e8:b5:92:6d:0f: 95:86:c6:92:e3:c8:49:c5:df:bd:bd:3f:cf:46:ab:c2:44:d2: 5d:02:f5:82:15:6e:99:0e:b6:12:55:2d:f1:49:d3:e1:02:3e: 10:4c:7a:06:da:29:ca:75:7d:40:c8:68:55:bc:28:82:cb:dd: 4d:05:79:ff:1d:7b:8c:fd:cb:e8:f2:8c:de:2b:77:bd:3f:a3: 35:65:a5:e1:d9:85:f2:73:1d:f2:cc:58:e0:63:b1:58:49:71: 33:ca:f9:ad:36:98:19:44:82:30:e8:5f:02:38:27:1a:6a:93: fb:45:63:d4:f5:48:53:bd:f1:ef:7f:9b:e5:0e:b0:7f:b7:19: 9d:07:3b:23:5b:3a:85:fc:fe:37:53:78:bb:a2:c1:58:55:89: 1f:46:09:bd -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QzRBNTExMC8GA1UEBRMoQ0ZFMDcxQTk3MkZENzhBNjdGNkQzRUQ1NkE2MTg0MzQw QUIzRTNBNjAeFw0yNTA3MDMwNzAwMjFaFw0yNTA3MTAwNzAwMjFaMBgxFjAUBgNV BAMTDTY4NjYyYTg1LWFiMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDM40Mov8njQPXH/TOVTVYbOtxU4NmR58xscgZ++f0HLTYEoyszy0Bvk2UkprvY GGejKN58MP8o9b7LpTCMQdI3xmJgivE108PHyLtDEUhMifpYR6Ecptsmc8xWr3H9 DEK5HTypmFxkOuNlyb/jdJl0YGKktpuU6VRmITnR2Qv1J9hWtW1yCKapO0KsRpyA pRsQYLdEOHFdOdA0h8v5ZVTEq+R/rD28UbbeCRP/vYx6S/XjyCmiBPRVuH0voXdu dwjhjC3HAuwO9rXrnD2gVwAJB42txQUTsdfbfdRBfaUc+y5ruFhuIuHtUgDkIikU kh1YmHeVPEbqjgL2KCZEWMGHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq8+MXg7Y oJ2bi8CDhfQHsXKUGOMwHwYDVR0jBBgwFoAUz+BxqXL9eKZ/bT7VamGENAqz46Yw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZDNEE1L0JGNTBFODYyQTIz NDExRUY5NzhDOEQ2REM0RjlBRTAyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvei1CeHFYTDllS1pfYlQ3VmFtR0VOQXF6NDZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZD NEE1L0JGNTBFODYyQTIzNDExRUY5NzhDOEQ2REM0RjlBRTAyL3otQnhxWEw5ZUta X2JUN1ZhbUdFTkFxejQ2WS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMZqYeOj8pREEmNALhPvePj9gOwG0fiAdDO4HpY0jKjt0T2PKv+08YOz 9CjcOPULK0Y++bU5lUQizzfjl/Hb+VXagG4qFGE5T3OBpa5CXK/eMeyDH088BiFM LRh6Pd5TF4KaCjZFbl3otZJtD5WGxpLjyEnF3729P89Gq8JE0l0C9YIVbpkOthJV LfFJ0+ECPhBMegbaKcp1fUDIaFW8KILL3U0Fef8de4z9y+jyjN4rd70/ozVlpeHZ hfJzHfLMWOBjsVhJcTPK+a02mBlEgjDoXwI4Jxpqk/tFY9T1SFO98e9/m+UOsH+3 GZ0HOyNbOoX8/jdTeLuiwVhViR9GCb0= -----END CERTIFICATE-----Generated at Fri Jul 4 16:12:23 2025 by rpki-client