$ rpki-client -vvf rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft File: Bzzm268iYrP6YRXW_6ezNCFe-g0.mft (raw, json) Hash identifier: Ox1MDyFTvvYAgPiVro2MHiaEH4ayLcszjddQOoDz/bA= Subject key identifier: B8:19:0A:7E:AF:E6:BB:46:2A:4D:64:0B:1A:2A:76:E8:3F:11:6A:81 Authority key identifier: 07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D Certificate issuer: /CN=A91859C2/serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D Certificate serial: 0649 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft Manifest number: 0644 Signing time: Fri 22 Aug 2025 22:51:16 +0000 Manifest this update: Fri 22 Aug 2025 22:51:15 +0000 Manifest next update: Fri 29 Aug 2025 22:51:15 +0000 Files and hashes: 1: Bzzm268iYrP6YRXW_6ezNCFe-g0.crl (hash: zZTGQthZkIG7Cp1s6oHMBm9J05T+gXOUNmxv858Hv6U=) 2: A80223709F4411EB92132051C4F9AE02.roa (hash: ZURzq5MNTYtgjtpZ673W988Pjm4b5QiAz5gyz+eygEs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:51:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1609 (0x649) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91859C2, serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D Validity Not Before: Aug 22 22:51:15 2025 GMT Not After : Aug 29 22:51:15 2025 GMT Subject: CN=68a8f464-2370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2f:8d:56:ce:be:8d:e9:99:af:77:1b:5b:c7: 8f:28:97:68:e3:63:dc:be:37:3b:a7:e5:bb:33:0b: ba:ec:ad:f6:e1:83:a2:99:fa:2e:0a:c4:cc:da:c4: a0:31:1f:67:c8:f9:e1:35:e5:01:72:cd:97:08:30: 86:20:ac:6c:2c:44:d9:28:57:d9:f6:d7:4d:e4:c2: 44:8b:89:00:b4:f0:b3:c3:fe:4e:96:dd:b1:5c:ba: 58:a1:2c:d8:13:bd:48:e4:d5:99:ea:ee:1f:81:84: 0d:a6:c8:7c:56:90:fa:e1:02:4f:eb:01:cf:37:e6: 6e:3f:8f:3a:f5:4f:40:07:83:f1:cf:a1:cb:54:64: 81:1f:ab:39:2d:79:7e:72:0b:b0:2c:d5:00:ec:de: 99:1b:4f:56:9a:9f:e3:47:01:9f:96:ab:2d:68:c4: d5:54:be:35:49:82:6c:60:f1:8a:56:79:4b:af:c4: a3:10:66:8c:94:14:15:24:e1:38:ac:d3:6d:68:c2: f5:4b:ef:c1:1a:b7:1c:d5:a7:8f:ec:47:a5:2a:16: 8b:44:d8:4e:a8:66:f5:1c:18:be:cd:e5:d1:be:03: cf:13:1b:92:6d:99:fc:ec:6e:86:31:46:9f:1b:78: c7:85:ae:52:18:54:3c:6d:87:a9:b0:08:65:22:f0: 19:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:19:0A:7E:AF:E6:BB:46:2A:4D:64:0B:1A:2A:76:E8:3F:11:6A:81 X509v3 Authority Key Identifier: keyid:07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:75:ef:8b:33:07:82:a5:04:3f:93:eb:d1:18:08:d3:ae:52: b3:2a:d0:08:d4:6f:e3:a3:62:b7:15:13:46:2d:8e:d7:1c:0f: ba:1f:5f:39:08:33:e6:d1:bc:a6:e3:50:b3:fb:01:10:d6:33: 16:c6:ad:04:eb:e7:cf:a7:38:36:af:95:44:6e:36:4d:73:6e: 37:59:c1:4c:24:bd:e3:30:9b:9a:b1:b6:49:22:b0:d9:61:ae: 2a:85:d8:2f:f2:7c:e6:38:7a:e4:6a:99:15:27:8e:5e:04:4b: 2d:dc:6e:be:09:cf:84:02:e1:0c:87:17:24:a0:31:e6:2e:79: bb:33:3d:94:b2:12:6c:89:ab:52:f6:99:25:c8:6a:bf:d7:c6: 91:4f:17:11:ef:e7:94:95:04:d6:34:28:3b:50:ba:b3:2b:1e: d3:b8:41:07:38:d0:40:cf:46:1f:c3:2f:3d:14:b7:a7:9c:a5: 6c:67:6b:51:0a:82:97:7b:f7:c3:b3:cc:b9:cb:27:65:80:fb: c0:51:95:28:e4:01:e8:d6:3f:69:81:dc:79:90:b3:d2:76:0d: e7:1e:55:b0:9c:7a:2e:48:18:fb:40:ae:9e:7c:7c:93:b6:ed: 26:d9:81:de:06:36:41:d4:5f:6e:cf:31:c8:27:03:62:ca:8c: 5b:d0:ae:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU5QzIxMTAvBgNVBAUTKDA3M0NFNkRCQUYyMjYyQjNGQTYxMTVENkZGQTdCMzM0 MjE1RUZBMEQwHhcNMjUwODIyMjI1MTE1WhcNMjUwODI5MjI1MTE1WjAYMRYwFAYD VQQDEw02OGE4ZjQ2NC0yMzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsC+NVs6+jemZr3cbW8ePKJdo42Pcvjc7p+W7Mwu67K324YOimfouCsTM2sSg MR9nyPnhNeUBcs2XCDCGIKxsLETZKFfZ9tdN5MJEi4kAtPCzw/5Olt2xXLpYoSzY E71I5NWZ6u4fgYQNpsh8VpD64QJP6wHPN+ZuP4869U9AB4Pxz6HLVGSBH6s5LXl+ cguwLNUA7N6ZG09Wmp/jRwGflqstaMTVVL41SYJsYPGKVnlLr8SjEGaMlBQVJOE4 rNNtaML1S+/BGrcc1aeP7EelKhaLRNhOqGb1HBi+zeXRvgPPExuSbZn87G6GMUaf G3jHha5SGFQ8bYepsAhlIvAZRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLgZCn6v 5rtGKk1kCxoqdug/EWqBMB8GA1UdIwQYMBaAFAc85tuvImKz+mEV1v+nszQhXvoN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTlDMi9FN0MwMjIzRTlG NDIxMUVCOTIyRDM1NEZDNEY5QUUwMi9CenptMjY4aVlyUDZZUlhXXzZlek5DRmUt ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0J6em0yNjhpWXJQNllSWFdfNmV6TkNGZS1nMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTlDMi9FN0MwMjIzRTlGNDIxMUVCOTIyRDM1NEZDNEY5QUUwMi9CenptMjY4aVly UDZZUlhXXzZlek5DRmUtZzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjde+LMweCpQQ/k+vRGAjTrlKzKtAI1G/jo2K3FRNGLY7XHA+6H185 CDPm0bym41Cz+wEQ1jMWxq0E6+fPpzg2r5VEbjZNc243WcFMJL3jMJuasbZJIrDZ Ya4qhdgv8nzmOHrkapkVJ45eBEst3G6+Cc+EAuEMhxckoDHmLnm7Mz2UshJsiatS 9pklyGq/18aRTxcR7+eUlQTWNCg7ULqzKx7TuEEHONBAz0Yfwy89FLennKVsZ2tR CoKXe/fDs8y5yydlgPvAUZUo5AHo1j9pgdx5kLPSdg3nHlWwnHouSBj7QK6efHyT tu0m2YHeBjZB1F9uzzHIJwNiyoxb0K7m -----END CERTIFICATE-----Generated at Sat Aug 23 16:43:13 2025 by rpki-client