$ rpki-client -vvf rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft File: BzaM6A3FfPVrYRMARLT6frnNai4.mft (raw, json) Hash identifier: kQjMcAnlb2Kg/ACdmjq0Zr7PKMbOXA+I3kjpOEmiQtc= Subject key identifier: B7:87:04:95:8C:4F:4C:FF:9A:6B:09:A9:93:2C:48:43:75:92:1F:33 Authority key identifier: 07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E Certificate issuer: /CN=A916C8EA/serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Certificate serial: 0462 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft Manifest number: 0458 Signing time: Thu 03 Jul 2025 00:32:13 +0000 Manifest this update: Thu 03 Jul 2025 00:32:12 +0000 Manifest next update: Thu 10 Jul 2025 00:32:12 +0000 Files and hashes: 1: BzaM6A3FfPVrYRMARLT6frnNai4.crl (hash: 3uv7E5WCbLzK10pfXQRwLl2pn6SZiDIYZLAQV17SGRc=) 2: C6D2655A58CE11ECB7F30755C4F9AE02.roa (hash: kZjcKzBGqSINobGtIV728vc2/z8+SbRwdVQQn+JVTTU=) 3: C755EF1058CE11ECB7F30755C4F9AE02.roa (hash: uuh45EQpfeL2lsbAeT2+gUwqmhTYsY8UsTGJi5buq44=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 00:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1122 (0x462) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C8EA, serialNumber=07368CE80DC57CF56B61130044B4FA7EB9CD6A2E Validity Not Before: Jul 3 00:32:12 2025 GMT Not After : Jul 10 00:32:12 2025 GMT Subject: CN=6865cf8c-6620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:67:4a:42:8d:43:9c:f7:52:ae:4a:02:9f:5e: e6:8e:fa:7a:95:4f:35:6b:59:1c:23:81:71:75:88: 38:4d:70:70:10:f7:a1:ac:ac:fc:00:ab:b1:60:68: 2f:db:41:5d:fc:f9:05:ea:99:9d:b4:eb:4a:ad:1a: 18:0c:cb:9e:20:e1:41:f3:fc:85:4e:0d:f1:a5:3b: 39:d0:fc:f8:71:02:6e:18:12:e1:67:23:a1:3f:65: 3b:3a:59:38:b8:e6:3e:9f:9c:c9:02:0f:40:dd:71: bc:1b:62:74:81:e7:e3:7b:1b:3c:ff:3c:0f:04:c8: 30:11:7c:ab:8f:74:df:20:84:75:1e:67:90:42:92: 02:9a:2b:59:31:16:01:30:e8:59:15:22:13:a2:c4: 5b:9b:68:c9:11:33:b8:a9:37:ca:2a:75:5f:1a:30: 5d:a5:57:2f:92:bd:7b:37:e7:a2:18:b0:12:73:ad: 26:9c:61:db:de:e0:ef:ea:20:23:4a:e9:64:a3:f4: 69:0d:a4:bd:a1:4a:4c:28:c7:cc:4f:c6:00:52:e1: 75:8a:66:55:de:31:21:d4:52:ed:75:90:f1:52:a8: 15:80:78:d9:25:82:28:8d:81:fa:2a:1a:bc:27:73: da:a2:9a:c0:d1:06:60:b7:b2:fd:f3:a7:7c:b4:5c: fa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:87:04:95:8C:4F:4C:FF:9A:6B:09:A9:93:2C:48:43:75:92:1F:33 X509v3 Authority Key Identifier: keyid:07:36:8C:E8:0D:C5:7C:F5:6B:61:13:00:44:B4:FA:7E:B9:CD:6A:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BzaM6A3FfPVrYRMARLT6frnNai4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C8EA/0E31D2E858CD11EC89FA3055C4F9AE02/BzaM6A3FfPVrYRMARLT6frnNai4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1d:90:4f:8a:ec:2c:31:2f:8e:17:a4:09:df:f5:62:ba:56: 21:a9:6e:77:2d:d9:2b:02:f1:2d:29:f3:b4:e5:2a:c2:fe:50: df:5c:17:ef:f2:ea:1b:bf:e2:eb:e1:21:86:7b:e9:99:95:43: ff:cc:10:bf:6b:6d:7c:58:08:4b:4b:e9:51:61:2e:79:eb:2c: b3:ad:92:3a:25:04:aa:19:7e:8d:14:6d:0d:4c:5d:2b:7c:31: ca:47:11:b7:c1:aa:75:0a:80:0c:c8:f0:8a:65:30:71:68:5a: a1:e5:dc:8f:bb:e5:f6:2f:45:d6:01:2a:40:77:24:35:71:58: 1e:4f:26:55:12:64:18:bf:df:d0:26:02:a0:20:88:a0:04:0f: d7:7e:a3:8d:fe:8b:07:35:dd:f4:6d:58:93:2d:5c:ca:c7:76: ea:07:eb:74:71:81:42:e5:5c:81:5a:78:6a:8b:0b:01:57:34: bc:20:30:28:fa:71:10:28:03:65:ac:95:6a:d2:a4:ae:9f:97: 6d:72:91:aa:8e:a7:59:16:b7:05:e8:15:94:20:ac:95:0a:c2: ff:2c:54:33:1a:8b:57:c7:03:82:1c:d1:61:c8:9d:10:97:fc: e9:95:a7:9d:d4:38:78:2d:70:13:b2:e1:c3:df:96:59:2c:47: 5d:e1:81:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM4RUExMTAvBgNVBAUTKDA3MzY4Q0U4MERDNTdDRjU2QjYxMTMwMDQ0QjRGQTdF QjlDRDZBMkUwHhcNMjUwNzAzMDAzMjEyWhcNMjUwNzEwMDAzMjEyWjAYMRYwFAYD VQQDEw02ODY1Y2Y4Yy02NjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxmdKQo1DnPdSrkoCn17mjvp6lU81a1kcI4FxdYg4TXBwEPehrKz8AKuxYGgv 20Fd/PkF6pmdtOtKrRoYDMueIOFB8/yFTg3xpTs50Pz4cQJuGBLhZyOhP2U7Olk4 uOY+n5zJAg9A3XG8G2J0gefjexs8/zwPBMgwEXyrj3TfIIR1HmeQQpICmitZMRYB MOhZFSITosRbm2jJETO4qTfKKnVfGjBdpVcvkr17N+eiGLASc60mnGHb3uDv6iAj Sulko/RpDaS9oUpMKMfMT8YAUuF1imZV3jEh1FLtdZDxUqgVgHjZJYIojYH6Khq8 J3PaoprA0QZgt7L986d8tFz62QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeHBJWM T0z/mmsJqZMsSEN1kh8zMB8GA1UdIwQYMBaAFAc2jOgNxXz1a2ETAES0+n65zWou MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzhFQS8wRTMxRDJFODU4 Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQVnJZUk1BUkxUNmZybk5h aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6YU02QTNGZlBWcllSTUFSTFQ2ZnJuTmFpNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzhFQS8wRTMxRDJFODU4Q0QxMUVDODlGQTMwNTVDNEY5QUUwMi9CemFNNkEzRmZQ VnJZUk1BUkxUNmZybk5haTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCaHZBPiuwsMS+OF6QJ3/ViulYhqW53LdkrAvEtKfO05SrC/lDfXBfv 8uobv+Lr4SGGe+mZlUP/zBC/a218WAhLS+lRYS556yyzrZI6JQSqGX6NFG0NTF0r fDHKRxG3wap1CoAMyPCKZTBxaFqh5dyPu+X2L0XWASpAdyQ1cVgeTyZVEmQYv9/Q JgKgIIigBA/XfqON/osHNd30bViTLVzKx3bqB+t0cYFC5VyBWnhqiwsBVzS8IDAo +nEQKANlrJVq0qSun5dtcpGqjqdZFrcF6BWUIKyVCsL/LFQzGotXxwOCHNFhyJ0Q l/zplaed1Dh4LXATsuHD35ZZLEdd4YEL -----END CERTIFICATE-----Generated at Thu Jul 3 20:54:48 2025 by rpki-client