$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: RztwpC2/RIr8CNljQ1tMT33F2ca/uWvKXu3SEKsg47Y= Subject key identifier: 46:3C:3B:34:2C:F2:DF:43:26:87:23:8A:59:95:E3:18:05:B5:CB:66 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 047C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 0472 Signing time: Sat 23 Aug 2025 00:20:25 +0000 Manifest this update: Sat 23 Aug 2025 00:20:24 +0000 Manifest next update: Sat 30 Aug 2025 00:20:24 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: ioy/Nr8Mrq5xwf0kjJHR6jxigw0MUFCtUHO/41unHk0=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: kZjcKzBGqSINobGtIV728vc2/z8+SbRwdVQQn+JVTTU=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: uuh45EQpfeL2lsbAeT2+gUwqmhTYsY8UsTGJi5buq44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1148 (0x47c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Aug 23 00:20:24 2025 GMT Not After : Aug 30 00:20:24 2025 GMT Subject: CN=68a90949-0bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6b:23:63:4d:74:ff:ad:d1:c0:35:83:4f:5c: 7a:2c:44:55:7e:7e:e1:b9:c1:e8:d9:c3:09:63:ba: 7c:1a:88:c7:ea:d3:be:63:1e:18:af:c8:2f:10:5c: a9:5e:44:53:56:f7:f3:26:06:9b:c1:70:54:8b:78: 67:d7:e6:00:79:d6:f1:75:92:1e:3f:bf:38:fe:c9: 99:c4:c4:a4:eb:47:c1:f7:33:65:d6:f1:ca:b2:0d: 5d:d3:36:51:d7:a1:74:62:db:8a:ef:d5:06:0f:c2: fd:98:1b:11:96:c4:7b:05:f7:31:90:e8:0f:30:49: c5:ef:d3:f6:11:57:f1:b6:f2:f0:5e:c8:7e:91:1d: 0d:17:c4:66:16:65:77:53:a3:33:48:3c:20:bc:c2: 10:21:67:e0:95:98:7f:92:51:0b:39:59:8a:35:68: 71:4b:a9:e0:5d:ae:3f:14:cf:30:8a:44:0b:84:7a: 43:11:b2:5b:bf:af:fb:4d:c3:a2:4d:aa:a4:ab:75: ee:e7:78:db:58:9d:34:89:5e:6f:78:6a:44:23:bb: a9:40:36:bc:b7:24:54:d4:39:bf:a1:3e:d7:fe:a6: b3:0b:39:13:e9:47:2b:ba:39:64:1f:7e:4b:2b:0f: 01:39:28:1e:8e:bb:65:2f:ef:06:ca:58:12:73:a2: b3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:3C:3B:34:2C:F2:DF:43:26:87:23:8A:59:95:E3:18:05:B5:CB:66 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 31:29:99:aa:ea:93:f4:c5:98:b3:4d:df:95:a3:cd:4e:b7:bb: 39:6d:eb:88:96:1d:10:bf:b6:3d:3f:41:2a:7d:4b:78:b6:dd: 00:d6:35:9c:93:f8:ff:ee:22:9e:a1:85:1a:9b:6a:24:5a:ea: c3:2f:6a:09:8e:45:6e:24:b2:2c:a2:12:92:f7:04:9d:9c:27: 6e:b1:ed:ee:c9:98:ad:b4:ad:c8:c7:de:a5:f4:c9:e2:0e:0c: e1:51:8b:f4:85:e3:18:09:3d:93:a1:a1:f0:05:ec:9d:71:ab: 3b:1f:19:71:a1:da:98:5b:69:fb:cd:4b:65:0a:bb:66:a1:4b: e9:f3:99:9e:d3:d5:5c:8c:02:96:dc:85:f5:9c:cc:9e:d2:02: 34:d4:75:f4:2d:4e:d2:81:d8:a1:60:43:87:b7:d4:9c:4f:32: 6d:1f:26:3f:e2:1d:87:92:25:52:74:ba:6c:23:29:17:6f:d4: 59:87:43:e8:39:ae:2f:04:cc:bd:ec:74:7f:bc:21:51:b4:8d: 34:7c:0c:33:52:19:b9:12:cf:3c:f0:2b:76:67:e5:60:84:26: de:64:06:65:d6:dc:58:6d:f7:f8:17:95:9e:dc:d8:a1:31:45: 83:8a:b0:86:0f:01:92:66:86:54:10:8e:fe:46:57:18:85:e8: 6b:fd:13:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjUwODIzMDAyMDI0WhcNMjUwODMwMDAyMDI0WjAYMRYwFAYD VQQDEw02OGE5MDk0OS0wYmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWsjY010/63RwDWDT1x6LERVfn7hucHo2cMJY7p8GojH6tO+Yx4Yr8gvEFyp XkRTVvfzJgabwXBUi3hn1+YAedbxdZIeP784/smZxMSk60fB9zNl1vHKsg1d0zZR 16F0YtuK79UGD8L9mBsRlsR7BfcxkOgPMEnF79P2EVfxtvLwXsh+kR0NF8RmFmV3 U6MzSDwgvMIQIWfglZh/klELOVmKNWhxS6ngXa4/FM8wikQLhHpDEbJbv6/7TcOi Taqkq3Xu53jbWJ00iV5veGpEI7upQDa8tyRU1Dm/oT7X/qazCzkT6UcrujlkH35L Kw8BOSgejrtlL+8GylgSc6Kz+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEY8OzQs 8t9DJocjilmV4xgFtctmMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAxKZmq6pP0xZizTd+Vo81Ot7s5beuIlh0Qv7Y9P0EqfUt4tt0A1jWc k/j/7iKeoYUam2okWurDL2oJjkVuJLIsohKS9wSdnCduse3uyZittK3Ix96l9Mni DgzhUYv0heMYCT2ToaHwBeydcas7HxlxodqYW2n7zUtlCrtmoUvp85me09VcjAKW 3IX1nMye0gI01HX0LU7SgdihYEOHt9ScTzJtHyY/4h2HkiVSdLpsIykXb9RZh0Po Oa4vBMy97HR/vCFRtI00fAwzUhm5Es888Ct2Z+VghCbeZAZl1txYbff4F5We3Nih MUWDirCGDwGSZoZUEI7+RlcYhehr/RMH -----END CERTIFICATE-----Generated at Sun Aug 24 00:40:03 2025 by rpki-client